$ rpki-client -vvf repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft File: 90508FF980097E19CEF65ED72A856616A6F690AB.mft (raw, json) Hash identifier: mfA79UjzjPoK0pIZEUb01Ghebd+zmR5ak/Of84cv7rY= Subject key identifier: C5:38:39:8E:6A:7A:66:F0:C1:1F:5B:E8:6C:5C:07:BA:F2:8D:2E:CC Authority key identifier: 90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB Certificate issuer: /CN=90508FF980097E19CEF65ED72A856616A6F690AB Certificate serial: 25AF0ACCC496683A5431BFF7266F6073229D03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft Manifest number: 0506 Signing time: Sun 07 Sep 2025 07:02:01 +0000 Manifest this update: Sun 07 Sep 2025 06:57:01 +0000 Manifest next update: Wed 10 Sep 2025 11:41:01 +0000 Files and hashes: 1: 3130332e3131392e3233312e302f32342d3234203d3e203634333135.roa (hash: Yz5xkZY0xzo/trvfbAdTc4aF9ack7BIeyFzB+WOAYgQ=) 2: 90508FF980097E19CEF65ED72A856616A6F690AB.crl (hash: fufFJMUa3Ab5o36BRm5nxpFyv4kx50lf6Nst1xtUmio=) 3: 3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa (hash: JNjDlAZZhJPbXz9QnoPN2kXEdVorueRNiZ3y4BzRO+s=) 4: 3130332e3131392e3233302e302f32342d3234203d3e203634333135.roa (hash: NUlokuFe9GARtT8KTw9qoKUuu+MeiOKu86jOn++3TJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 11:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:af:0a:cc:c4:96:68:3a:54:31:bf:f7:26:6f:60:73:22:9d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90508FF980097E19CEF65ED72A856616A6F690AB Validity Not Before: Sep 7 06:57:01 2025 GMT Not After : Sep 10 11:41:01 2025 GMT Subject: CN=C538398E6A7A66F0C11F5BE86C5C07BAF28D2ECC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f0:fd:84:e8:c8:44:1e:02:f2:56:61:29:ad: b5:aa:9d:4f:62:53:f8:e8:f2:f8:b6:7a:f6:44:8c: 88:d9:61:8b:cb:3b:10:da:4e:22:94:44:6a:38:ea: c9:c7:10:38:83:ef:81:90:3d:7e:ae:2c:ef:54:6a: af:d7:34:20:b6:f6:a0:7c:de:98:84:49:a5:66:91: f0:5e:96:dc:95:3d:15:d8:8a:13:99:26:5f:8b:55: 58:6d:59:0f:5b:91:27:33:dd:43:2b:50:ab:80:6a: 42:fa:a4:85:28:e9:8a:58:46:00:8d:b6:72:18:24: 44:00:cf:f7:0a:82:f3:e0:d3:6e:f4:94:ab:d7:41: 48:92:7b:cc:4f:ec:8c:76:86:0b:d0:6b:0a:71:1c: e7:fc:a3:65:40:a4:eb:1c:9f:9f:4f:fb:69:07:9d: 96:7f:f6:22:71:7a:1b:af:cc:ed:04:ec:37:44:3d: c4:69:c1:34:41:cd:4d:7b:31:11:16:47:79:99:9f: a8:ee:45:90:1c:d6:8f:bc:60:f4:02:85:d9:3f:2a: 77:85:9e:1f:45:9f:8c:62:ba:3e:c5:ec:72:47:b1: db:19:78:ac:2f:e8:aa:e5:24:f2:dd:0d:38:b1:56: 5a:40:2a:ea:4f:30:36:e9:01:d2:c5:16:40:60:2a: 25:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:38:39:8E:6A:7A:66:F0:C1:1F:5B:E8:6C:5C:07:BA:F2:8D:2E:CC X509v3 Authority Key Identifier: keyid:90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:e8:5c:48:dd:3d:06:7c:39:37:c4:2e:e1:e9:32:ff:69:ca: 11:a6:f9:e9:00:ea:ae:c0:5f:c6:56:f3:99:05:c5:4e:ad:6f: 5c:a7:33:75:d6:11:46:13:84:6a:05:d5:b7:fc:98:54:9c:17: ea:17:17:8f:c0:00:48:78:50:25:ee:81:57:db:48:6a:85:4f: 58:bf:22:b3:d1:42:a3:6b:ee:b9:5e:ab:34:8c:28:86:df:2a: ac:fe:59:a1:e2:2c:f6:1f:a4:e8:66:52:1a:6d:31:b8:06:c5: 84:18:9b:80:07:de:7f:40:6f:ad:30:30:66:36:53:cd:48:da: b7:a3:34:50:88:51:3a:34:4c:22:01:3c:63:62:0a:ce:65:a6: 67:a0:f3:3e:db:2f:6b:f4:21:55:a3:39:b2:cd:80:d3:d1:70: 3b:21:02:3e:ec:18:26:dc:1c:1a:51:ba:0b:cb:ca:ca:3d:56: b0:b7:6e:34:2f:81:67:8d:9c:d7:67:94:25:06:d8:b8:3d:62: 79:c3:ca:fc:c7:cc:bc:9e:bc:2f:37:71:7b:d4:68:ba:e5:f4: d8:39:7a:01:d2:da:28:80:81:d6:e8:64:8f:7d:2a:37:99:a7: 2b:72:b5:04:52:5b:ab:71:d7:a8:67:45:3f:32:a2:24:36:75: b2:40:b5:67 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITJa8KzMSWaDpUMb/3Jm9gcyKdAzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg5MDUwOEZGOTgwMDk3RTE5Q0VGNjVFRDcyQTg1NjYxNkE2 RjY5MEFCMB4XDTI1MDkwNzA2NTcwMVoXDTI1MDkxMDExNDEwMVowMzExMC8GA1UE AxMoQzUzODM5OEU2QTdBNjZGMEMxMUY1QkU4NkM1QzA3QkFGMjhEMkVDQzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKvw/YToyEQeAvJWYSmttaqdT2JT +Ojy+LZ69kSMiNlhi8s7ENpOIpREajjqyccQOIPvgZA9fq4s71Rqr9c0ILb2oHze mIRJpWaR8F6W3JU9FdiKE5kmX4tVWG1ZD1uRJzPdQytQq4BqQvqkhSjpilhGAI22 chgkRADP9wqC8+DTbvSUq9dBSJJ7zE/sjHaGC9BrCnEc5/yjZUCk6xyfn0/7aQed ln/2InF6G6/M7QTsN0Q9xGnBNEHNTXsxERZHeZmfqO5FkBzWj7xg9AKF2T8qd4We H0WfjGK6PsXsckex2xl4rC/oquUk8t0NOLFWWkAq6k8wNukB0sUWQGAqJScCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBTFODmOanpm8MEfW+hsXAe68o0uzDAfBgNVHSME GDAWgBSQUI/5gAl+Gc72XtcqhWYWpvaQqzAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I4 ODNlM2JlLTU3ZTItNDEyNS1hMGM1LTlhOWVhNTAxYmYwNS8wLzkwNTA4RkY5ODAw OTdFMTlDRUY2NUVENzJBODU2NjE2QTZGNjkwQUIuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi85MDUwOEZGOTgwMDk3RTE5Q0VGNjVFRDcyQTg1NjYxNkE2RjY5 MEFCLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9iODgzZTNiZS01N2UyLTQxMjUtYTBj NS05YTllYTUwMWJmMDUvMC85MDUwOEZGOTgwMDk3RTE5Q0VGNjVFRDcyQTg1NjYx NkE2RjY5MEFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAK+hcSN09Bnw5N8Qu4eky/2nKEab56QDqrsBf xlbzmQXFTq1vXKczddYRRhOEagXVt/yYVJwX6hcXj8AASHhQJe6BV9tIaoVPWL8i s9FCo2vuuV6rNIwoht8qrP5ZoeIs9h+k6GZSGm0xuAbFhBibgAfef0BvrTAwZjZT zUjat6M0UIhROjRMIgE8Y2IKzmWmZ6DzPtsva/QhVaM5ss2A09FwOyECPuwYJtwc GlG6C8vKyj1WsLduNC+BZ42c12eUJQbYuD1iecPK/MfMvJ68Lzdxe9RouuX02Dl6 AdLaKICB1uhkj30qN5mnK3K1BFJbq3HXqGdFPzKiJDZ1skC1Zw== -----END CERTIFICATE-----Generated at Tue Sep 9 09:13:38 2025 by rpki-client