$ rpki-client -vvf repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft File: 91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft (raw, json) Hash identifier: +1hD0bdaCYD/fgPUeTEDmekeeu1rtFnkIMYNAczBkd8= Subject key identifier: 28:98:D8:DB:AE:87:A8:A3:49:CD:41:0D:50:B2:04:F4:0F:93:FF:B0 Authority key identifier: 91:E7:E2:83:42:2E:38:A6:A6:ED:B3:85:93:EE:07:4D:F8:FA:29:C6 Certificate issuer: /CN=91E7E283422E38A6A6EDB38593EE074DF8FA29C6 Certificate serial: 145CC0284B239748AE8416386FB9A4D24BA1C6A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft Manifest number: 04DC Signing time: Fri 13 Jun 2025 09:51:14 +0000 Manifest this update: Fri 13 Jun 2025 09:46:14 +0000 Manifest next update: Mon 16 Jun 2025 17:37:14 +0000 Files and hashes: 1: 3130332e3134322e31342e302f32332d3234203d3e20313339333735.roa (hash: Grgdt8iRUAIyZ2qFHWZrH4g5ALyIzB9vEqddBLCgUpI=) 2: 91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl (hash: PEK8RTxTqg6Uld66zDFzC9jQIpdQvrQnjwLHveSJImY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 17:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:5c:c0:28:4b:23:97:48:ae:84:16:38:6f:b9:a4:d2:4b:a1:c6:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91E7E283422E38A6A6EDB38593EE074DF8FA29C6 Validity Not Before: Jun 13 09:46:14 2025 GMT Not After : Jun 16 17:37:14 2025 GMT Subject: CN=2898D8DBAE87A8A349CD410D50B204F40F93FFB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a0:10:ae:65:58:f1:1b:ca:c6:c4:17:9b:ff: 44:1f:a7:5f:25:22:ae:a8:d2:d3:0b:e7:e7:59:e0: 85:97:4d:2a:95:0b:1d:3c:fc:ac:85:53:cf:b6:2c: 0d:ee:98:ab:9d:0e:a3:b0:5a:ec:27:8a:7e:a5:a4: e5:f1:90:3b:fb:94:82:d6:00:2f:de:eb:5f:f2:61: a2:30:ba:58:51:4c:6c:86:87:7d:d5:ac:4d:21:7f: 8f:93:ba:35:de:51:ea:0e:88:be:5e:74:f8:42:39: e5:15:b6:3f:53:e5:79:e1:3a:f6:ee:97:22:95:ac: b1:1f:33:e1:30:1d:8f:52:a0:15:bf:c6:d2:82:a8: cb:1a:f3:d2:aa:91:4b:0e:0e:ce:7a:8e:10:e4:03: df:ba:94:6f:de:16:68:18:e4:c9:6b:bf:83:1c:08: a6:e6:30:d1:fb:68:1f:79:a5:89:26:38:82:ba:f1: 4b:31:aa:a7:41:2c:64:5a:39:c7:a9:83:0c:d7:2f: 3a:65:e8:87:db:ac:83:1c:03:8d:d0:33:83:d0:6e: 93:ad:e8:5e:b8:d9:85:fd:29:e1:f9:61:4f:2f:72: bd:55:ec:cd:bd:40:36:f9:e3:95:3c:c6:52:f4:9a: 0d:c1:d8:ea:b1:9d:16:f5:30:1b:bd:b0:93:a1:81: 3a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:98:D8:DB:AE:87:A8:A3:49:CD:41:0D:50:B2:04:F4:0F:93:FF:B0 X509v3 Authority Key Identifier: keyid:91:E7:E2:83:42:2E:38:A6:A6:ED:B3:85:93:EE:07:4D:F8:FA:29:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:a2:4b:49:50:e8:a8:74:17:c2:32:7d:a4:c6:c4:39:1c:b6: 49:e1:01:a9:2b:5f:f4:a3:08:e2:09:ff:a3:e4:62:ab:88:be: f7:12:65:1b:3a:14:7f:51:b1:ee:b0:2a:67:8c:2c:7f:18:ef: 58:bd:7b:93:df:aa:77:d4:ef:eb:89:20:d4:d6:eb:bd:e3:f9: 66:eb:bd:6e:df:e7:fd:50:af:25:0f:df:08:db:8f:25:e2:b8: e6:b0:ea:70:b2:68:8a:c6:17:f6:0e:a5:47:e4:57:f1:56:85: 02:5a:c4:1a:9b:ad:fa:1e:81:67:60:6a:b0:6c:68:29:ac:1b: cf:9f:22:bd:3e:c1:8b:2b:d6:31:78:fb:82:e2:5c:d5:9a:f4: 07:66:70:7b:c8:5c:e1:b8:d2:6c:f5:ab:d4:4d:52:79:c9:84: cd:67:25:e1:9c:72:bb:ac:2f:29:5d:cb:41:25:ba:22:24:d6: 30:bf:2c:f2:23:5e:9b:5e:c0:db:20:c3:05:af:20:bb:5a:4f: 13:b5:d3:04:fb:d8:ef:59:23:5e:36:69:1f:b3:de:5d:3a:57: e5:ad:e4:e6:a3:65:78:dd:b8:c0:33:8c:74:3a:40:19:c6:6e: 57:f4:81:e9:b8:47:2b:c4:d4:71:9b:27:d4:2f:39:ab:52:a0: 6b:2a:23:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFFzAKEsjl0iuhBY4b7mk0kuhxqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFFN0UyODM0MjJFMzhBNkE2RURCMzg1OTNFRTA3NERG OEZBMjlDNjAeFw0yNTA2MTMwOTQ2MTRaFw0yNTA2MTYxNzM3MTRaMDMxMTAvBgNV BAMTKDI4OThEOERCQUU4N0E4QTM0OUNENDEwRDUwQjIwNEY0MEY5M0ZGQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRoBCuZVjxG8rGxBeb/0Qfp18l Iq6o0tML5+dZ4IWXTSqVCx08/KyFU8+2LA3umKudDqOwWuwnin6lpOXxkDv7lILW AC/e61/yYaIwulhRTGyGh33VrE0hf4+TujXeUeoOiL5edPhCOeUVtj9T5XnhOvbu lyKVrLEfM+EwHY9SoBW/xtKCqMsa89KqkUsODs56jhDkA9+6lG/eFmgY5Mlrv4Mc CKbmMNH7aB95pYkmOIK68UsxqqdBLGRaOcepgwzXLzpl6IfbrIMcA43QM4PQbpOt 6F642YX9KeH5YU8vcr1V7M29QDb545U8xlL0mg3B2OqxnRb1MBu9sJOhgTobAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKJjY266HqKNJzUENULIE9A+T/7AwHwYDVR0j BBgwFoAUkefig0IuOKam7bOFk+4HTfj6KcYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWNiYzkyNy1mNGUyLTQxNTMtYjY2Yi1jZTFlYzAyZDc0MTAvMC85MUU3RTI4MzQy MkUzOEE2QTZFREIzODU5M0VFMDc0REY4RkEyOUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTFFN0UyODM0MjJFMzhBNkE2RURCMzg1OTNFRTA3NERGOEZB MjlDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFjYmM5MjctZjRlMi00MTUzLWI2 NmItY2UxZWMwMmQ3NDEwLzAvOTFFN0UyODM0MjJFMzhBNkE2RURCMzg1OTNFRTA3 NERGOEZBMjlDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGiS0lQ6Kh0F8IyfaTGxDkctknhAakrX/Sj COIJ/6PkYquIvvcSZRs6FH9Rse6wKmeMLH8Y71i9e5PfqnfU7+uJINTW673j+Wbr vW7f5/1QryUP3wjbjyXiuOaw6nCyaIrGF/YOpUfkV/FWhQJaxBqbrfoegWdgarBs aCmsG8+fIr0+wYsr1jF4+4LiXNWa9AdmcHvIXOG40mz1q9RNUnnJhM1nJeGccrus Lyldy0EluiIk1jC/LPIjXptewNsgwwWvILtaTxO10wT72O9ZI142aR+z3l06V+Wt 5OajZXjduMAzjHQ6QBnGblf0gem4RyvE1HGbJ9QvOatSoGsqI78= -----END CERTIFICATE-----Generated at Sun Jun 15 17:04:01 2025 by rpki-client