$ rpki-client -vvf repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft File: 091F7323435A889C466D811B73B98389C1E084DD.mft (raw, json) Hash identifier: a/g1G5nNQ8TYTqrCs9STJ5/Ncalp+PV7ulaSwUUZRuw= Subject key identifier: 5C:6E:1B:5C:33:A7:0A:47:AF:B0:4F:AA:7B:99:5C:E0:CF:3E:68:6F Authority key identifier: 09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD Certificate issuer: /CN=091F7323435A889C466D811B73B98389C1E084DD Certificate serial: 39C8C456C6F657CC18EBCA85B6AB41071531EA5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft Manifest number: 0250 Signing time: Wed 06 Aug 2025 11:11:51 +0000 Manifest this update: Wed 06 Aug 2025 11:06:51 +0000 Manifest next update: Sat 09 Aug 2025 19:09:51 +0000 Files and hashes: 1: 3130332e3137382e31372e302f32342d3234203d3e2039333431.roa (hash: XeFzp7e3uJ/XW0SCT6+L3eC2Ka1QVpzvs90ESVm5heI=) 2: 091F7323435A889C466D811B73B98389C1E084DD.crl (hash: J+oLa0ZkVBB+0Qy21zG2yjkzmILx8ThU0KnOZtU6nyc=) 3: 3130332e3137382e31362e302f32332d3233203d3e2039333431.roa (hash: uiUSxANoNODzFIewLGALThH13uAn6LXmm2UK715WT+g=) 4: 3130332e3137382e31362e302f32342d3234203d3e2039333431.roa (hash: Y1e1P9Lfp6j2uN41yXsuTRVgN8tFe5HoW++JbHObZeY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 19:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:c8:c4:56:c6:f6:57:cc:18:eb:ca:85:b6:ab:41:07:15:31:ea:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091F7323435A889C466D811B73B98389C1E084DD Validity Not Before: Aug 6 11:06:51 2025 GMT Not After : Aug 9 19:09:51 2025 GMT Subject: CN=5C6E1B5C33A70A47AFB04FAA7B995CE0CF3E686F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:96:ab:a6:71:00:da:62:08:07:f9:66:6a:b5: d8:bb:0b:43:f4:8a:5d:58:7f:9a:cc:34:7f:6c:c9: 5d:e1:29:fd:38:5a:39:f2:35:d1:b9:b4:bd:29:7d: cc:c3:ad:0d:d5:0c:64:b9:06:13:92:e4:15:97:3e: b5:b3:c9:41:a2:45:c8:f6:ee:91:fe:8a:4b:e7:b6: c1:d5:ca:b6:a0:9b:4e:64:e1:94:05:da:fc:75:f8: 9e:74:45:93:b7:d9:bb:cd:af:c9:ec:07:d8:45:bf: 08:36:5a:52:1e:e0:5d:de:f4:f7:49:7b:1b:dd:f4: 05:f1:09:a7:b4:57:ef:cb:dd:d6:cf:e8:c2:e2:11: 5a:da:06:23:9b:6a:3b:7f:bf:fc:64:1a:7d:35:32: 99:b2:66:46:52:b1:5e:70:54:44:46:56:f9:b0:7f: 71:d4:0b:e3:64:76:7a:c8:c6:eb:75:3a:79:75:09: ba:f6:1a:9e:ef:3d:04:66:1f:a8:d5:49:58:cb:8c: 18:95:71:c5:00:4b:a1:1c:d0:a9:da:51:4e:a6:ec: 39:ad:6d:17:1c:88:fb:33:e5:cf:77:bc:6f:34:e6: e8:b4:8b:58:84:12:b7:4c:81:e0:37:fe:b0:75:9f: 78:7f:dd:e4:2b:48:9c:45:5c:66:48:db:12:09:ca: e9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:6E:1B:5C:33:A7:0A:47:AF:B0:4F:AA:7B:99:5C:E0:CF:3E:68:6F X509v3 Authority Key Identifier: keyid:09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:3b:0e:dd:22:79:0b:98:d7:0f:2c:de:3e:52:75:3a:33:c6: 3d:5b:a2:ab:42:a2:af:63:f3:18:7e:c9:ed:54:b4:9d:f2:5d: de:aa:6a:db:1f:00:1f:fb:66:c4:e3:61:5e:66:8d:a3:d2:7e: 33:a8:7a:f8:1a:ac:18:28:42:19:00:cb:d9:bd:39:d6:21:1b: c9:6d:64:fc:53:0a:00:a1:24:98:42:f7:23:3b:ea:b2:47:f8: a7:c9:97:bb:48:8c:63:08:bc:12:69:48:d0:3e:81:f2:f7:ce: a8:e1:07:3a:4e:89:1f:d1:34:72:4d:e1:69:bd:72:5c:cd:b1: 69:85:d6:1c:df:77:ad:32:bb:15:a4:59:c5:97:a2:8b:81:ab: df:e4:09:27:78:0c:94:2d:d5:b7:e4:85:46:79:03:4f:48:e1: a8:e1:5c:96:09:d2:a3:9c:b8:98:bf:60:c8:75:23:74:1d:41: 36:16:ac:58:68:a7:be:9e:86:ab:00:82:df:37:49:88:aa:bc: e4:c9:42:9f:4f:aa:95:d1:ec:ad:66:e9:45:4a:56:8e:17:c0: 40:8a:09:fb:94:b8:40:ae:04:17:3f:2c:8a:d1:57:4d:67:80: 8f:07:cc:6e:6e:59:a0:db:12:9f:6d:30:6c:38:98:5d:5f:86: d2:c3:b9:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOcjEVsb2V8wY68qFtqtBBxUx6l4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgzODlD MUUwODRERDAeFw0yNTA4MDYxMTA2NTFaFw0yNTA4MDkxOTA5NTFaMDMxMTAvBgNV BAMTKDVDNkUxQjVDMzNBNzBBNDdBRkIwNEZBQTdCOTk1Q0UwQ0YzRTY4NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIlqumcQDaYggH+WZqtdi7C0P0 il1Yf5rMNH9syV3hKf04WjnyNdG5tL0pfczDrQ3VDGS5BhOS5BWXPrWzyUGiRcj2 7pH+ikvntsHVyragm05k4ZQF2vx1+J50RZO32bvNr8nsB9hFvwg2WlIe4F3e9PdJ exvd9AXxCae0V+/L3dbP6MLiEVraBiObajt/v/xkGn01MpmyZkZSsV5wVERGVvmw f3HUC+NkdnrIxut1Onl1Cbr2Gp7vPQRmH6jVSVjLjBiVccUAS6Ec0KnaUU6m7Dmt bRcciPsz5c93vG805ui0i1iEErdMgeA3/rB1n3h/3eQrSJxFXGZI2xIJyunRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXG4bXDOnCkevsE+qe5lc4M8+aG8wHwYDVR0j BBgwFoAUCR9zI0NaiJxGbYEbc7mDicHghN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YzFlODBkNC02ZWJlLTQ5MmMtYTBjNS1kNzU5ODI3NTMzYjMvMC8wOTFGNzMyMzQz NUE4ODlDNDY2RDgxMUI3M0I5ODM4OUMxRTA4NERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgzODlDMUUw ODRERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGMxZTgwZDQtNmViZS00OTJjLWEw YzUtZDc1OTgyNzUzM2IzLzAvMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgz ODlDMUUwODRERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGE7Dt0ieQuY1w8s3j5SdTozxj1boqtCoq9j 8xh+ye1UtJ3yXd6qatsfAB/7ZsTjYV5mjaPSfjOoevgarBgoQhkAy9m9OdYhG8lt ZPxTCgChJJhC9yM76rJH+KfJl7tIjGMIvBJpSNA+gfL3zqjhBzpOiR/RNHJN4Wm9 clzNsWmF1hzfd60yuxWkWcWXoouBq9/kCSd4DJQt1bfkhUZ5A09I4ajhXJYJ0qOc uJi/YMh1I3QdQTYWrFhop76ehqsAgt83SYiqvOTJQp9PqpXR7K1m6UVKVo4XwECK CfuUuECuBBc/LIrRV01ngI8HzG5uWaDbEp9tMGw4mF1fhtLDuR4= -----END CERTIFICATE-----Generated at Thu Aug 7 11:10:33 2025 by rpki-client