$ rpki-client -vvf repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft File: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft (raw, json) Hash identifier: KcakscrUP7QhSVQEkgSMW1s2qCRI06jfHk1fHAIfhcg= Subject key identifier: 1E:E0:DD:4B:32:F4:0D:ED:D2:75:28:BE:AF:C9:D0:1D:64:40:A6:B5 Authority key identifier: 91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 Certificate issuer: /CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Certificate serial: 339BFF5910E73BB71F5379A3CFCEB035E9F0A363 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft Manifest number: 037A Signing time: Wed 06 Aug 2025 23:31:02 +0000 Manifest this update: Wed 06 Aug 2025 23:26:02 +0000 Manifest next update: Sun 10 Aug 2025 03:45:02 +0000 Files and hashes: 1: 3130332e3136392e3132382e302f32332d3234203d3e20313432333432.roa (hash: ygNFYmxoQz15pEcPBE3fhpYvFfYuF7aoX+ohmkLX02U=) 2: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl (hash: z6WrNnzbkCLl+hlpesfaZUah3Umqe5W7cOx0rIPFrOA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:9b:ff:59:10:e7:3b:b7:1f:53:79:a3:cf:ce:b0:35:e9:f0:a3:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Validity Not Before: Aug 6 23:26:02 2025 GMT Not After : Aug 10 03:45:02 2025 GMT Subject: CN=1EE0DD4B32F40DEDD27528BEAFC9D01D6440A6B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:45:21:f0:a3:d7:04:2d:23:a6:76:87:61:a1: a1:72:e0:16:41:c2:d1:5c:8b:a3:d8:93:93:a4:23: 09:2c:a4:42:2b:1c:44:b3:73:ba:68:3f:fc:be:2c: 0b:20:57:5a:e4:15:4c:57:e3:3e:2a:1b:77:fc:91: 75:31:23:92:41:34:03:1a:b8:63:98:5f:b5:35:2b: 96:65:d1:19:60:ab:b0:dd:96:73:5c:86:f5:22:f2: 19:e3:36:03:bb:a9:48:6c:20:98:e2:53:8e:6c:2c: 03:e6:0b:b0:d2:3a:c1:b2:21:99:ed:32:a8:69:72: 17:0c:30:d6:f9:dd:39:fb:93:04:a0:ef:ce:20:b3: 64:a1:6a:c1:ee:08:35:9d:84:d5:7f:35:c0:3a:5a: 11:f9:2f:88:f3:fc:22:87:b1:9f:c9:8d:7a:54:7f: ee:1c:77:fb:cc:d7:a0:fb:55:77:f7:01:d7:fd:c0: 3f:44:ce:0a:f6:ba:cb:81:a3:25:e6:72:95:bc:ba: a5:10:44:cc:cf:3e:6d:04:df:92:65:2b:0c:20:7d: 0a:39:05:a2:08:e1:48:3c:69:ad:f8:9c:3f:d4:b4: de:1a:26:5d:5c:9b:3c:69:21:0f:e6:bd:8f:cf:e8: 9d:0b:21:e6:48:9f:22:a5:04:e8:84:19:7e:e2:c8: 59:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E0:DD:4B:32:F4:0D:ED:D2:75:28:BE:AF:C9:D0:1D:64:40:A6:B5 X509v3 Authority Key Identifier: keyid:91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:80:69:1a:f4:e0:5d:9a:ab:0d:2f:02:27:40:93:fe:dd:30: d1:e1:17:61:45:79:83:5d:b9:51:0c:e7:1c:32:d6:c8:99:9a: d1:96:2d:d8:31:14:89:c9:61:44:a4:f6:8c:b0:04:66:2c:13: 3f:a5:7f:c0:16:7d:0f:8e:bd:6d:8d:d1:33:c8:00:ad:f2:1d: fc:93:8f:74:37:23:ff:4d:41:e5:86:73:cb:92:48:46:1a:b6: 04:68:67:e2:25:a6:c3:e4:21:38:1a:bd:6d:00:d7:4e:2b:5c: 8d:cc:32:80:1b:6d:b0:da:ce:0a:4a:10:a0:de:07:5f:05:2c: 65:84:2b:2f:25:23:0f:3a:be:fb:37:8a:87:98:6c:b2:2b:49: 60:02:e8:95:69:be:4b:d6:65:37:32:92:67:ad:bb:f7:49:7e: d7:3a:a5:e9:0a:16:d8:02:7a:3b:4a:ff:ce:b5:57:a2:34:7e: 98:f9:1f:5c:a6:a0:2e:7b:58:e0:e6:d5:62:91:36:0d:08:43: 4a:24:dc:c6:aa:81:e7:4c:2c:15:32:7a:0f:b1:16:f2:dc:29: 2c:f0:1b:03:c7:98:e2:ac:b7:6e:ce:46:81:66:7c:b2:5e:be: 96:4b:1d:0e:a8:39:41:f6:63:39:38:ca:06:da:9e:0f:89:0a: cf:ae:73:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM5v/WRDnO7cfU3mjz86wNenwo2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMy NjI2NEY1MDAeFw0yNTA4MDYyMzI2MDJaFw0yNTA4MTAwMzQ1MDJaMDMxMTAvBgNV BAMTKDFFRTBERDRCMzJGNDBERUREMjc1MjhCRUFGQzlEMDFENjQ0MEE2QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjRSHwo9cELSOmdodhoaFy4BZB wtFci6PYk5OkIwkspEIrHESzc7poP/y+LAsgV1rkFUxX4z4qG3f8kXUxI5JBNAMa uGOYX7U1K5Zl0Rlgq7DdlnNchvUi8hnjNgO7qUhsIJjiU45sLAPmC7DSOsGyIZnt MqhpchcMMNb53Tn7kwSg784gs2ShasHuCDWdhNV/NcA6WhH5L4jz/CKHsZ/JjXpU f+4cd/vM16D7VXf3Adf9wD9Ezgr2usuBoyXmcpW8uqUQRMzPPm0E35JlKwwgfQo5 BaII4Ug8aa34nD/UtN4aJl1cmzxpIQ/mvY/P6J0LIeZInyKlBOiEGX7iyFm9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHuDdSzL0De3SdSi+r8nQHWRAprUwHwYDVR0j BBgwFoAUkd8FjWrG9WPcrobbr7SKwyYmT1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjBlMzY0Yi03NzllLTQwZDUtYWQwZS1kOTE3ODc3OGQ2YjEvMC85MURGMDU4RDZB QzZGNTYzRENBRTg2REJBRkI0OEFDMzI2MjY0RjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMyNjI2 NEY1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmIwZTM2NGItNzc5ZS00MGQ1LWFk MGUtZDkxNzg3NzhkNmIxLzAvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhB QzMyNjI2NEY1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2AaRr04F2aqw0vAidAk/7dMNHhF2FFeYNd uVEM5xwy1siZmtGWLdgxFInJYUSk9oywBGYsEz+lf8AWfQ+OvW2N0TPIAK3yHfyT j3Q3I/9NQeWGc8uSSEYatgRoZ+IlpsPkITgavW0A104rXI3MMoAbbbDazgpKEKDe B18FLGWEKy8lIw86vvs3ioeYbLIrSWAC6JVpvkvWZTcykmetu/dJftc6pekKFtgC ejtK/861V6I0fpj5H1ymoC57WODm1WKRNg0IQ0ok3MaqgedMLBUyeg+xFvLcKSzw GwPHmOKst27ORoFmfLJevpZLHQ6oOUH2Yzk4ygbang+JCs+uc/M= -----END CERTIFICATE-----Generated at Thu Aug 7 03:16:08 2025 by rpki-client