$ rpki-client -vvf repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft File: 091F7323435A889C466D811B73B98389C1E084DD.mft (raw, json) Hash identifier: yDgw6Mz5xsNcXrFkXky8bn3Iti+xxnEI8T9u0BXsBh4= Subject key identifier: 7A:5F:36:01:0B:54:A3:7E:15:3E:5B:C3:14:23:5E:00:23:5E:73:B8 Authority key identifier: 09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD Certificate issuer: /CN=091F7323435A889C466D811B73B98389C1E084DD Certificate serial: 21B4A1CB8DEB5CBBB10D80F72E21884D1A0D8EB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft Manifest number: 0278 Signing time: Mon 03 Nov 2025 15:01:48 +0000 Manifest this update: Mon 03 Nov 2025 14:56:48 +0000 Manifest next update: Fri 07 Nov 2025 00:32:48 +0000 Files and hashes: 1: 3130332e3137382e31362e302f32332d3233203d3e2039333431.roa (hash: MsT3Z49E42KS28/Nv+cFIfYRhlxroO4eKBgAGaRI40k=) 2: 3130332e3137382e31372e302f32342d3234203d3e2039333431.roa (hash: FTuvZoxWRZeBaRmh1oYghVc20okVB2lggjbmWmFC6gw=) 3: 3130332e3137382e31362e302f32342d3234203d3e2039333431.roa (hash: HWtlgeL3MiIhlDvuL8DrSz4LAVxkX8H7joJ9R29LLYc=) 4: 091F7323435A889C466D811B73B98389C1E084DD.crl (hash: gi3XgtB4Yj+m9v1RmrZY1FD/7XkK6JnBE0xpht7qRw8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:b4:a1:cb:8d:eb:5c:bb:b1:0d:80:f7:2e:21:88:4d:1a:0d:8e:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091F7323435A889C466D811B73B98389C1E084DD Validity Not Before: Nov 3 14:56:48 2025 GMT Not After : Nov 7 00:32:48 2025 GMT Subject: CN=7A5F36010B54A37E153E5BC314235E00235E73B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:86:19:43:de:86:a0:9b:c1:33:71:13:22:72: 98:9f:da:61:11:34:03:bf:98:7c:46:5c:d0:d8:14: 94:eb:43:b9:89:2a:7f:bf:42:b7:90:e8:2d:25:8f: 91:f5:e0:f3:ca:d0:ab:e7:75:0c:e2:fe:61:0d:78: 6c:0d:cf:be:27:90:03:03:39:61:24:38:f6:a6:0f: 9d:e2:f1:99:f9:10:e7:df:77:9a:73:37:84:82:ac: f0:cd:ce:f8:c6:e8:fa:85:1e:10:84:c8:48:1a:d4: 41:63:4d:b3:d6:ee:31:6e:32:6d:76:94:92:93:69: 3b:51:a7:41:71:b8:87:22:e4:db:e5:ca:82:56:30: 66:d3:06:94:86:b2:f8:5a:c2:79:b6:92:5f:7f:52: 25:9c:b5:27:c5:ca:53:bf:7b:a9:2a:79:a8:4c:94: 38:64:9c:65:21:83:00:51:9f:a9:a0:e3:dd:b7:15: 14:c3:15:27:f0:09:c6:8c:af:3b:d8:7f:44:f4:56: 2e:18:31:1c:43:69:7c:f6:66:46:26:b8:cb:f5:85: cc:e3:57:56:fb:ba:26:44:c3:ae:63:62:98:6b:3d: e9:c5:e3:07:ad:d6:d0:06:c4:19:0c:1c:05:53:83: 65:92:c5:fc:27:71:06:8b:e0:8c:ed:81:bb:33:e8: 87:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5F:36:01:0B:54:A3:7E:15:3E:5B:C3:14:23:5E:00:23:5E:73:B8 X509v3 Authority Key Identifier: keyid:09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:62:72:43:35:27:e1:12:c6:fe:01:4c:bd:a3:16:af:c3:65: db:76:6d:37:e7:87:09:9c:69:ea:b9:9f:1e:0e:c4:02:9b:35: f9:42:6b:f9:08:36:05:43:b4:37:2f:65:d4:a9:f9:e8:8a:39: 7f:e9:36:4c:0c:aa:35:ba:32:e5:09:75:17:85:f6:45:bf:79: ae:d0:84:ed:62:cb:c2:b9:8b:66:e8:66:07:c3:ea:32:b1:e0: 65:61:ca:79:75:c4:5a:f7:3f:44:fd:96:5f:9c:a4:69:f2:3d: 15:2a:1d:cb:4d:c7:70:3a:c7:b0:21:e4:bf:4a:ab:ed:62:f9: b9:67:78:fb:2f:62:aa:71:0b:05:a3:a8:d5:13:b4:f0:3f:f8: 11:99:fa:3e:1b:26:68:f4:6c:42:eb:80:35:e1:ad:10:d9:05: f5:a3:a5:b9:36:c9:a4:3b:0a:00:cd:65:a4:10:69:6b:0e:9c: e3:b8:5f:a7:9c:ae:ed:ae:53:04:ec:b7:9f:77:d5:8b:c9:97: d0:1d:03:2e:61:bb:87:9a:7e:da:7d:20:e3:73:80:8c:1c:5f: 6f:07:3a:df:f0:2d:e3:44:ed:b8:63:f3:39:46:ee:1b:6e:26: 4d:98:90:39:7a:1e:ee:44:65:a1:49:70:ec:26:ae:23:fe:eb: 36:13:15:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIbShy43rXLuxDYD3LiGITRoNjrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgzODlD MUUwODRERDAeFw0yNTExMDMxNDU2NDhaFw0yNTExMDcwMDMyNDhaMDMxMTAvBgNV BAMTKDdBNUYzNjAxMEI1NEEzN0UxNTNFNUJDMzE0MjM1RTAwMjM1RTczQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbhhlD3oagm8EzcRMicpif2mER NAO/mHxGXNDYFJTrQ7mJKn+/QreQ6C0lj5H14PPK0KvndQzi/mENeGwNz74nkAMD OWEkOPamD53i8Zn5EOffd5pzN4SCrPDNzvjG6PqFHhCEyEga1EFjTbPW7jFuMm12 lJKTaTtRp0FxuIci5NvlyoJWMGbTBpSGsvhawnm2kl9/UiWctSfFylO/e6kqeahM lDhknGUhgwBRn6mg4923FRTDFSfwCcaMrzvYf0T0Vi4YMRxDaXz2ZkYmuMv1hczj V1b7uiZEw65jYphrPenF4wet1tAGxBkMHAVTg2WSxfwncQaL4Iztgbsz6IeJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUel82AQtUo34VPlvDFCNeACNec7gwHwYDVR0j BBgwFoAUCR9zI0NaiJxGbYEbc7mDicHghN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YzFlODBkNC02ZWJlLTQ5MmMtYTBjNS1kNzU5ODI3NTMzYjMvMC8wOTFGNzMyMzQz NUE4ODlDNDY2RDgxMUI3M0I5ODM4OUMxRTA4NERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgzODlDMUUw ODRERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGMxZTgwZDQtNmViZS00OTJjLWEw YzUtZDc1OTgyNzUzM2IzLzAvMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgz ODlDMUUwODRERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAARickM1J+ESxv4BTL2jFq/DZdt2bTfnhwmc aeq5nx4OxAKbNflCa/kINgVDtDcvZdSp+eiKOX/pNkwMqjW6MuUJdReF9kW/ea7Q hO1iy8K5i2boZgfD6jKx4GVhynl1xFr3P0T9ll+cpGnyPRUqHctNx3A6x7Ah5L9K q+1i+blnePsvYqpxCwWjqNUTtPA/+BGZ+j4bJmj0bELrgDXhrRDZBfWjpbk2yaQ7 CgDNZaQQaWsOnOO4X6ecru2uUwTst5931YvJl9AdAy5hu4eaftp9IONzgIwcX28H Ot/wLeNE7bhj8zlG7htuJk2YkDl6Hu5EZaFJcOwmriP+6zYTFQE= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:06 2025 by rpki-client