$ rpki-client -vvf repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft File: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft (raw, json) Hash identifier: 7a1HKziEGC41ocAAsEd0m5yatPbsuKtn1gWXWdqUBS0= Subject key identifier: 88:8C:17:C1:A3:C1:92:58:8A:D2:A3:FF:48:CC:51:E0:96:AD:53:2D Authority key identifier: 91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 Certificate issuer: /CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Certificate serial: 692A827556EE8894D18CF99CD21E9A9AECE2073E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft Manifest number: 0363 Signing time: Sun 15 Jun 2025 06:01:01 +0000 Manifest this update: Sun 15 Jun 2025 05:56:01 +0000 Manifest next update: Wed 18 Jun 2025 06:31:01 +0000 Files and hashes: 1: 3130332e3136392e3132382e302f32332d3234203d3e20313432333432.roa (hash: ygNFYmxoQz15pEcPBE3fhpYvFfYuF7aoX+ohmkLX02U=) 2: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl (hash: woJT9qOHambN3kOeNqOg0VQF1zrAuypzdZvbn3R3c50=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 06:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:2a:82:75:56:ee:88:94:d1:8c:f9:9c:d2:1e:9a:9a:ec:e2:07:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Validity Not Before: Jun 15 05:56:01 2025 GMT Not After : Jun 18 06:31:01 2025 GMT Subject: CN=888C17C1A3C192588AD2A3FF48CC51E096AD532D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:61:d9:a6:56:75:32:ad:54:b6:08:75:4c:b9: d4:a4:ef:e4:af:db:05:96:1b:e2:a6:fb:73:7d:8e: 3a:30:79:44:65:79:68:8f:00:3a:29:a6:8c:db:9b: bd:07:6a:56:9b:dc:7b:a1:d8:12:08:ee:e8:17:63: 36:dc:ef:5a:f7:04:d1:00:9d:54:23:86:0c:e9:42: c0:ec:0b:43:b6:4c:ae:80:ba:9a:67:11:9f:c2:76: b2:83:b6:56:4f:ca:d4:89:a9:57:88:d3:53:fe:7e: 0a:44:e0:4e:8f:01:22:80:4b:30:de:41:d6:c6:a8: 80:80:53:73:15:82:fe:e4:ac:00:59:da:bc:38:b4: a8:21:57:15:36:e9:35:d2:59:85:09:85:2e:97:de: 9a:93:66:30:f8:3d:57:8c:ec:ca:79:25:43:a4:e0: 53:da:cf:e8:28:bf:f9:3c:ea:3e:fd:c4:c4:75:58: cf:de:79:a8:c8:a5:a3:39:b7:55:ac:89:18:8b:04: 45:a4:79:22:8b:fc:42:70:53:52:d6:dc:48:96:d0: e9:63:ac:ea:8d:f6:ca:1d:9f:38:d5:7c:ac:2e:e0: c8:15:6d:60:fe:9b:b8:d0:a9:44:52:6c:0b:7e:9f: 2d:cc:ed:bb:9c:11:ae:59:fe:eb:e8:d9:0b:cd:6a: a0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:8C:17:C1:A3:C1:92:58:8A:D2:A3:FF:48:CC:51:E0:96:AD:53:2D X509v3 Authority Key Identifier: keyid:91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:68:60:5b:46:05:ba:52:50:2f:4e:51:28:c0:5c:a5:17:70: 19:41:54:db:c2:1a:81:ac:da:d3:c3:f1:60:cb:fb:ea:4d:36: 84:bd:ba:e8:01:00:9a:b1:ef:12:d0:0d:44:31:73:c0:47:17: 20:e1:c5:7e:bb:bb:ee:81:f5:9a:77:65:d8:b7:6e:a4:c2:3d: ca:f6:f6:6c:33:13:e3:60:29:b3:12:b5:4d:19:5c:5c:04:05: 3b:f8:92:a5:5a:b0:23:6a:6e:32:97:13:b3:80:7f:1f:34:7c: 80:3e:d5:c6:0e:a8:e6:68:40:eb:c2:48:36:5d:56:c6:92:42: 36:01:d8:5f:a9:71:ed:40:28:11:98:0c:c8:a9:ed:34:1b:ab: bc:43:78:91:37:b8:ee:7b:5e:1a:da:da:e9:d6:13:ed:1f:c6: dd:73:44:c6:fe:23:9b:10:96:b0:65:7f:3d:1d:94:83:f7:9f: d1:73:88:fb:01:35:ad:1f:ac:02:76:7b:bd:af:a4:52:1c:54: 11:49:b4:49:71:6e:84:91:02:ec:7d:14:6d:ed:a7:82:1f:1a: 6b:6c:5a:8a:4c:e2:1b:e6:5b:cc:65:75:d4:fe:7e:71:9d:66: 70:26:18:4a:a8:2b:86:40:28:73:b5:81:a4:3d:03:a7:72:12: 66:73:e1:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaSqCdVbuiJTRjPmc0h6amuziBz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMy NjI2NEY1MDAeFw0yNTA2MTUwNTU2MDFaFw0yNTA2MTgwNjMxMDFaMDMxMTAvBgNV BAMTKDg4OEMxN0MxQTNDMTkyNTg4QUQyQTNGRjQ4Q0M1MUUwOTZBRDUzMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXYdmmVnUyrVS2CHVMudSk7+Sv 2wWWG+Km+3N9jjoweURleWiPADoppozbm70Halab3Huh2BII7ugXYzbc71r3BNEA nVQjhgzpQsDsC0O2TK6AuppnEZ/CdrKDtlZPytSJqVeI01P+fgpE4E6PASKASzDe QdbGqICAU3MVgv7krABZ2rw4tKghVxU26TXSWYUJhS6X3pqTZjD4PVeM7Mp5JUOk 4FPaz+gov/k86j79xMR1WM/eeajIpaM5t1WsiRiLBEWkeSKL/EJwU1LW3EiW0Olj rOqN9sodnzjVfKwu4MgVbWD+m7jQqURSbAt+ny3M7bucEa5Z/uvo2QvNaqBVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiIwXwaPBkliK0qP/SMxR4JatUy0wHwYDVR0j BBgwFoAUkd8FjWrG9WPcrobbr7SKwyYmT1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjBlMzY0Yi03NzllLTQwZDUtYWQwZS1kOTE3ODc3OGQ2YjEvMC85MURGMDU4RDZB QzZGNTYzRENBRTg2REJBRkI0OEFDMzI2MjY0RjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMyNjI2 NEY1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmIwZTM2NGItNzc5ZS00MGQ1LWFk MGUtZDkxNzg3NzhkNmIxLzAvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhB QzMyNjI2NEY1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9oYFtGBbpSUC9OUSjAXKUXcBlBVNvCGoGs 2tPD8WDL++pNNoS9uugBAJqx7xLQDUQxc8BHFyDhxX67u+6B9Zp3Zdi3bqTCPcr2 9mwzE+NgKbMStU0ZXFwEBTv4kqVasCNqbjKXE7OAfx80fIA+1cYOqOZoQOvCSDZd VsaSQjYB2F+pce1AKBGYDMip7TQbq7xDeJE3uO57Xhra2unWE+0fxt1zRMb+I5sQ lrBlfz0dlIP3n9FziPsBNa0frAJ2e72vpFIcVBFJtElxboSRAux9FG3tp4IfGmts WopM4hvmW8xlddT+fnGdZnAmGEqoK4ZAKHO1gaQ9A6dyEmZz4UQ= -----END CERTIFICATE-----Generated at Tue Jun 17 00:16:21 2025 by rpki-client