$ rpki-client -vvf repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft File: 91982855FD8C4C119B32F9D536B640804091001C.mft (raw, json) Hash identifier: GvXvQQfYMQUcCoSkOswL4R7VEdb/4AsGy3dVVzYDohE= Subject key identifier: D3:23:73:91:C5:D9:5F:E0:31:55:BC:FE:9E:10:2A:E0:C8:9B:D6:85 Authority key identifier: 91:98:28:55:FD:8C:4C:11:9B:32:F9:D5:36:B6:40:80:40:91:00:1C Certificate issuer: /CN=91982855FD8C4C119B32F9D536B640804091001C Certificate serial: 6F2A0045BBEBCC5E62652AB35BA3E588D85B66D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91982855FD8C4C119B32F9D536B640804091001C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft Manifest number: 04CB Signing time: Mon 28 Apr 2025 23:32:03 +0000 Manifest this update: Mon 28 Apr 2025 23:27:03 +0000 Manifest next update: Fri 02 May 2025 03:23:03 +0000 Files and hashes: 1: 91982855FD8C4C119B32F9D536B640804091001C.crl (hash: 90jeAD3WTTKN2Jwi+pQJ0Zth7eJpsvZoe/xO2ILnf5o=) 2: 3130332e31352e3234302e302f32322d3234203d3e20313331373335.roa (hash: g8Rl7U0nFpYFffBSEHjQWDN6y2OZG0rsmTeflyqrLBo=) 3: 3130332e35322e36342e302f32322d3234203d3e20313331373335.roa (hash: svxXfJ7ypnOi0ZD+Lr+tu4BVUww3l9AMvmS2fynY310=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.crl rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91982855FD8C4C119B32F9D536B640804091001C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:2a:00:45:bb:eb:cc:5e:62:65:2a:b3:5b:a3:e5:88:d8:5b:66:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91982855FD8C4C119B32F9D536B640804091001C Validity Not Before: Apr 28 23:27:03 2025 GMT Not After : May 2 03:23:03 2025 GMT Subject: CN=D3237391C5D95FE03155BCFE9E102AE0C89BD685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:da:e2:19:d3:23:86:0f:32:d9:a8:26:23:97: 94:b3:b6:da:c6:2b:a4:9f:cd:71:67:ed:fd:ef:7a: d2:f6:0f:87:58:8f:e1:e9:73:65:0b:85:83:f3:71: c3:ed:54:9c:f9:66:b5:29:da:df:26:79:25:ff:f6: 5b:8b:6a:fc:ec:76:57:07:f6:16:05:58:b6:e9:39: 0f:4b:39:6f:43:b5:ef:7c:e1:99:de:95:66:96:cf: 77:9a:68:18:a8:72:d3:79:78:7e:a6:ad:e9:7c:1b: 84:57:c2:a0:fa:37:f4:15:c7:5f:b4:a0:43:0e:20: 4a:31:38:36:d0:ed:d7:f4:1a:0d:05:ef:8a:a9:1d: 33:79:86:05:5a:90:4b:1f:2b:6b:ec:43:6f:68:75: dd:92:33:a4:2c:ff:56:ca:72:99:ea:e8:d7:7e:99: 1c:63:ab:73:15:26:d3:a2:b4:74:53:d8:8b:c3:24: f3:3e:f1:27:05:1c:76:74:5f:63:c5:e8:ef:73:5a: 46:a3:8f:dc:80:94:b9:4b:ab:8c:53:82:fe:be:ef: f5:48:a2:58:d4:7a:58:80:27:2d:a5:9d:98:50:a7: 1b:83:76:88:12:e4:b6:60:82:9b:a0:bc:81:e7:fd: 84:42:84:8f:ba:59:75:42:26:db:12:9f:f1:8f:06: ee:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:23:73:91:C5:D9:5F:E0:31:55:BC:FE:9E:10:2A:E0:C8:9B:D6:85 X509v3 Authority Key Identifier: keyid:91:98:28:55:FD:8C:4C:11:9B:32:F9:D5:36:B6:40:80:40:91:00:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91982855FD8C4C119B32F9D536B640804091001C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:aa:82:c3:c6:fa:ad:65:70:62:5d:e4:40:7c:69:0c:35:46: 3f:32:eb:65:3c:7c:6f:f2:90:cf:90:97:6f:a1:52:68:1b:1e: 96:d0:d9:25:53:91:39:18:3e:0b:82:d1:bc:73:41:3f:af:3c: 66:02:ff:07:98:aa:82:00:d0:a1:1e:e0:b5:e1:6b:03:f4:3b: 98:93:81:5f:4f:24:00:1b:11:2a:d4:ef:84:cc:0a:b7:90:2e: a2:8b:e0:2e:9f:5c:a3:49:7b:b2:3b:89:79:24:3a:a6:dc:0c: 36:70:6e:b0:19:e9:6a:77:27:d9:5f:b6:d4:75:dc:a7:a5:5e: 0e:81:79:f9:0e:40:20:40:2d:74:06:38:fd:6d:d9:03:bb:15: e1:df:76:c3:cf:18:33:4e:55:88:95:91:1c:9e:79:af:20:fa: e1:a4:16:5b:05:59:a9:5b:1b:28:6a:1e:e3:4a:30:b4:bc:b7: fc:41:b5:f3:21:74:58:ac:de:54:64:0a:6f:b2:de:67:93:3e: 3a:a7:db:65:4b:46:ae:65:2b:79:29:e2:97:34:ce:81:55:50: 69:c2:1f:58:c5:cf:4b:52:c1:68:8b:02:b9:5e:ff:a6:d5:3b: 18:51:16:ac:09:57:19:a8:3f:7a:f0:e2:cd:33:24:76:a8:78: 9b:2c:ce:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbyoARbvrzF5iZSqzW6PliNhbZtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE5ODI4NTVGRDhDNEMxMTlCMzJGOUQ1MzZCNjQwODA0 MDkxMDAxQzAeFw0yNTA0MjgyMzI3MDNaFw0yNTA1MDIwMzIzMDNaMDMxMTAvBgNV BAMTKEQzMjM3MzkxQzVEOTVGRTAzMTU1QkNGRTlFMTAyQUUwQzg5QkQ2ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC62uIZ0yOGDzLZqCYjl5SzttrG K6SfzXFn7f3vetL2D4dYj+Hpc2ULhYPzccPtVJz5ZrUp2t8meSX/9luLavzsdlcH 9hYFWLbpOQ9LOW9Dte984ZnelWaWz3eaaBioctN5eH6mrel8G4RXwqD6N/QVx1+0 oEMOIEoxODbQ7df0Gg0F74qpHTN5hgVakEsfK2vsQ29odd2SM6Qs/1bKcpnq6Nd+ mRxjq3MVJtOitHRT2IvDJPM+8ScFHHZ0X2PF6O9zWkajj9yAlLlLq4xTgv6+7/VI oljUeliAJy2lnZhQpxuDdogS5LZggpugvIHn/YRChI+6WXVCJtsSn/GPBu6nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0yNzkcXZX+AxVbz+nhAq4Mib1oUwHwYDVR0j BBgwFoAUkZgoVf2MTBGbMvnVNrZAgECRABwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzJjNDk0OC02ODdiLTQwMjAtODdmNC0yOGVlNGI2M2FhNDcvMC85MTk4Mjg1NUZE OEM0QzExOUIzMkY5RDUzNkI2NDA4MDQwOTEwMDFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE5ODI4NTVGRDhDNEMxMTlCMzJGOUQ1MzZCNjQwODA0MDkx MDAxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMyYzQ5NDgtNjg3Yi00MDIwLTg3 ZjQtMjhlZTRiNjNhYTQ3LzAvOTE5ODI4NTVGRDhDNEMxMTlCMzJGOUQ1MzZCNjQw ODA0MDkxMDAxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+qgsPG+q1lcGJd5EB8aQw1Rj8y62U8fG/y kM+Ql2+hUmgbHpbQ2SVTkTkYPguC0bxzQT+vPGYC/weYqoIA0KEe4LXhawP0O5iT gV9PJAAbESrU74TMCreQLqKL4C6fXKNJe7I7iXkkOqbcDDZwbrAZ6Wp3J9lfttR1 3KelXg6BefkOQCBALXQGOP1t2QO7FeHfdsPPGDNOVYiVkRyeea8g+uGkFlsFWalb GyhqHuNKMLS8t/xBtfMhdFis3lRkCm+y3meTPjqn22VLRq5lK3kp4pc0zoFVUGnC H1jFz0tSwWiLArle/6bVOxhRFqwJVxmoP3rw4s0zJHaoeJsszqU= -----END CERTIFICATE-----Generated at Wed Apr 30 05:46:38 2025 by rpki-client