$ rpki-client -vvf repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft File: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft (raw, json) Hash identifier: DexgqfBfdsLkpKkqjlBcCXDIsxzK3qf7iTfb8N5MlDA= Subject key identifier: 90:30:A5:7D:EA:93:EE:7D:AC:35:F8:95:DC:B5:76:D9:49:14:56:B3 Authority key identifier: 91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 Certificate issuer: /CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Certificate serial: 03E1E6E1982B6CC0D26C49A43AC3CF7A427CCE5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft Manifest number: 0372 Signing time: Sat 19 Jul 2025 07:11:02 +0000 Manifest this update: Sat 19 Jul 2025 07:06:02 +0000 Manifest next update: Tue 22 Jul 2025 15:29:02 +0000 Files and hashes: 1: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl (hash: wWR3xNnI0HoxVY3OiZfE4T6djLc3kR8V31KW6LMe02o=) 2: 3130332e3136392e3132382e302f32332d3234203d3e20313432333432.roa (hash: ygNFYmxoQz15pEcPBE3fhpYvFfYuF7aoX+ohmkLX02U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 15:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:e1:e6:e1:98:2b:6c:c0:d2:6c:49:a4:3a:c3:cf:7a:42:7c:ce:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Validity Not Before: Jul 19 07:06:02 2025 GMT Not After : Jul 22 15:29:02 2025 GMT Subject: CN=9030A57DEA93EE7DAC35F895DCB576D9491456B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:10:a9:4e:b2:be:d9:f9:22:32:78:39:7b:a5: 49:ab:2b:6a:e7:ee:e4:2a:40:7a:83:88:c0:f1:30: 71:6e:02:f5:a4:40:40:7d:ea:e4:08:ad:fb:1a:f8: 05:c2:0c:85:35:1a:9b:72:ea:15:32:c4:7e:d5:d6: 1c:ed:f9:a5:cd:75:5a:a4:11:47:ca:54:37:87:fd: 03:a0:ca:2e:a6:a3:15:c6:96:48:95:fb:7c:cd:af: 02:85:18:f8:c2:e4:14:82:0a:0a:03:4f:00:d8:9e: 15:84:c2:f4:e8:91:af:b9:fc:49:72:51:29:d4:bb: d4:30:42:9b:58:66:f1:d3:1b:ab:9b:fb:a4:72:8d: b0:92:c3:70:ad:dc:b2:d6:c3:3d:24:c1:2a:65:ca: 57:c5:cf:c1:22:70:02:94:9a:aa:3b:5a:c2:cd:c2: 40:09:21:9b:f6:04:55:cd:7e:aa:3c:fd:fa:d8:e5: d8:11:f7:a7:9f:b0:81:da:11:79:69:de:f4:66:c7: 3c:c0:a5:95:dc:90:97:74:21:d1:5f:44:53:44:45: aa:b5:c7:32:48:41:8f:f7:91:68:ad:4c:3d:3b:47: 50:4d:c4:18:0c:47:ed:31:dc:ff:0e:1b:4f:48:cb: 4e:bc:cd:db:18:d5:52:99:23:4b:66:d2:fa:b7:4c: 30:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:30:A5:7D:EA:93:EE:7D:AC:35:F8:95:DC:B5:76:D9:49:14:56:B3 X509v3 Authority Key Identifier: keyid:91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:50:fd:24:b9:ca:88:7d:68:bf:3f:cb:f3:62:a0:38:36:fa: 43:2c:66:08:46:24:49:b4:60:08:18:3a:2f:93:0e:fe:f5:0b: a0:82:bf:3b:31:f1:af:83:30:1f:6c:2c:2c:3c:c9:b6:29:57: 26:f1:8b:af:4d:50:ad:ea:ba:a8:fc:08:aa:88:e5:c4:ba:ea: 8a:c2:e7:9e:39:32:b5:91:c3:80:9b:d0:bc:cb:f6:df:d9:f3: c0:77:cf:2a:71:f0:93:a9:6d:74:c6:40:5e:0d:c4:10:be:ed: d3:1b:5a:8c:c6:81:a0:98:69:76:b6:f8:07:71:b0:06:89:99: b7:35:4a:69:c9:c6:b2:c6:22:6b:95:5e:46:66:a6:2f:27:5f: 9c:93:9c:dc:53:f8:d3:49:e0:f1:65:1b:30:00:fe:37:b5:2f: ee:69:42:85:17:6b:6d:e5:b0:00:9d:d0:dc:40:dd:c0:89:4d: 12:f9:35:36:da:bb:62:93:f4:b6:e1:bd:5c:c7:bf:d2:b0:f5: 35:18:6f:fb:06:bc:41:87:01:b7:99:78:28:c9:d4:43:db:59: bb:04:f0:3e:45:7f:08:f1:3f:2a:0c:0b:9b:d3:5b:5e:23:a6: ac:a1:42:24:7e:03:b0:a4:90:ca:98:ec:1d:8c:17:83:b9:fe: 35:96:4e:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA+Hm4ZgrbMDSbEmkOsPPekJ8zl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMy NjI2NEY1MDAeFw0yNTA3MTkwNzA2MDJaFw0yNTA3MjIxNTI5MDJaMDMxMTAvBgNV BAMTKDkwMzBBNTdERUE5M0VFN0RBQzM1Rjg5NURDQjU3NkQ5NDkxNDU2QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsEKlOsr7Z+SIyeDl7pUmrK2rn 7uQqQHqDiMDxMHFuAvWkQEB96uQIrfsa+AXCDIU1Gpty6hUyxH7V1hzt+aXNdVqk EUfKVDeH/QOgyi6moxXGlkiV+3zNrwKFGPjC5BSCCgoDTwDYnhWEwvToka+5/Ely USnUu9QwQptYZvHTG6ub+6RyjbCSw3Ct3LLWwz0kwSplylfFz8EicAKUmqo7WsLN wkAJIZv2BFXNfqo8/frY5dgR96efsIHaEXlp3vRmxzzApZXckJd0IdFfRFNERaq1 xzJIQY/3kWitTD07R1BNxBgMR+0x3P8OG09Iy068zdsY1VKZI0tm0vq3TDBDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkDClfeqT7n2sNfiV3LV22UkUVrMwHwYDVR0j BBgwFoAUkd8FjWrG9WPcrobbr7SKwyYmT1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjBlMzY0Yi03NzllLTQwZDUtYWQwZS1kOTE3ODc3OGQ2YjEvMC85MURGMDU4RDZB QzZGNTYzRENBRTg2REJBRkI0OEFDMzI2MjY0RjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMyNjI2 NEY1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmIwZTM2NGItNzc5ZS00MGQ1LWFk MGUtZDkxNzg3NzhkNmIxLzAvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhB QzMyNjI2NEY1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFQ/SS5yoh9aL8/y/NioDg2+kMsZghGJEm0 YAgYOi+TDv71C6CCvzsx8a+DMB9sLCw8ybYpVybxi69NUK3quqj8CKqI5cS66orC 5545MrWRw4Cb0LzL9t/Z88B3zypx8JOpbXTGQF4NxBC+7dMbWozGgaCYaXa2+Adx sAaJmbc1SmnJxrLGImuVXkZmpi8nX5yTnNxT+NNJ4PFlGzAA/je1L+5pQoUXa23l sACd0NxA3cCJTRL5NTbau2KT9LbhvVzHv9Kw9TUYb/sGvEGHAbeZeCjJ1EPbWbsE 8D5FfwjxPyoMC5vTW14jpqyhQiR+A7CkkMqY7B2MF4O5/jWWTsk= -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:33 2025 by rpki-client