$ rpki-client -vvf repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft File: 091F7323435A889C466D811B73B98389C1E084DD.mft (raw, json) Hash identifier: ayHN6H/iGbXQUOTHAp+7KSz2op3EKa1b6TJCfQh1LMk= Subject key identifier: 59:79:40:3E:DD:52:99:51:8B:03:48:0F:87:5E:E2:DF:6B:BD:63:F5 Authority key identifier: 09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD Certificate issuer: /CN=091F7323435A889C466D811B73B98389C1E084DD Certificate serial: 1F167D0B5F864263A3056171E10FD19A85836407 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft Manifest number: 021A Signing time: Sat 05 Apr 2025 06:11:44 +0000 Manifest this update: Sat 05 Apr 2025 06:06:44 +0000 Manifest next update: Tue 08 Apr 2025 07:17:44 +0000 Files and hashes: 1: 091F7323435A889C466D811B73B98389C1E084DD.crl (hash: UtclBAF0a98rqWjkh2+G8utLznOR8TNzFXz0Cp49PUA=) 2: 3130332e3137382e31362e302f32342d3234203d3e2039333431.roa (hash: Y1e1P9Lfp6j2uN41yXsuTRVgN8tFe5HoW++JbHObZeY=) 3: 3130332e3137382e31362e302f32332d3233203d3e2039333431.roa (hash: uiUSxANoNODzFIewLGALThH13uAn6LXmm2UK715WT+g=) 4: 3130332e3137382e31372e302f32342d3234203d3e2039333431.roa (hash: XeFzp7e3uJ/XW0SCT6+L3eC2Ka1QVpzvs90ESVm5heI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 07:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:16:7d:0b:5f:86:42:63:a3:05:61:71:e1:0f:d1:9a:85:83:64:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091F7323435A889C466D811B73B98389C1E084DD Validity Not Before: Apr 5 06:06:44 2025 GMT Not After : Apr 8 07:17:44 2025 GMT Subject: CN=5979403EDD5299518B03480F875EE2DF6BBD63F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a1:52:c4:8f:b2:f1:94:9c:cd:cb:3f:c0:31: 11:f6:56:0d:23:ed:dd:1f:07:a9:6e:04:f4:52:f1: 9f:ee:28:b5:e5:c5:6f:47:06:1e:db:e3:e1:a7:f6: a4:c5:06:2a:e6:3b:13:45:ad:e5:cc:59:47:13:99: 76:e5:eb:ab:f5:c7:d7:47:62:e7:88:ec:58:3e:b0: 29:f4:57:ea:32:71:31:14:1a:1e:a5:33:c6:ff:b1: e8:1a:a3:c7:4f:84:48:20:3a:db:ec:4e:d7:df:71: 49:92:8d:f8:f9:a2:7e:63:07:c8:e3:aa:08:45:b8: 25:cc:dd:17:73:bc:28:c4:bc:9e:29:b4:06:7a:c6: 57:e6:be:79:b4:cb:bf:49:de:cc:41:fb:30:af:8f: cb:91:f0:7d:a4:4f:2a:50:37:80:42:98:13:86:c9: cb:c6:cb:25:3a:56:da:93:28:1d:b8:b9:6b:cd:3c: a3:0a:2b:4b:7d:9a:20:3c:78:1e:ee:b1:e8:87:62: 3d:67:03:18:55:78:28:59:5a:d8:a4:de:fa:71:bc: c5:60:5d:9f:e4:e2:bd:70:ee:24:d6:60:d8:58:96: 95:d5:64:40:5e:a1:ba:a7:82:5f:04:87:8b:5f:af: 94:57:67:6b:92:c5:eb:e1:f2:05:9f:4c:10:c8:1f: b7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:79:40:3E:DD:52:99:51:8B:03:48:0F:87:5E:E2:DF:6B:BD:63:F5 X509v3 Authority Key Identifier: keyid:09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:14:dc:f4:46:0b:47:40:e3:26:be:6e:44:41:34:95:4c:4a: 33:35:e8:6d:67:1b:fd:37:55:0e:08:4e:60:63:3d:49:a6:48: 7f:87:46:ae:c7:14:75:32:02:11:a0:6e:d4:b2:5f:58:4e:16: 10:7c:c2:d8:a5:23:c6:52:97:22:2e:a6:44:3c:22:f0:12:36: ae:b4:54:7f:51:31:18:1f:34:1a:0f:1c:85:fd:db:d6:20:67: 97:9d:ce:44:f1:90:ee:c1:98:a7:46:99:88:60:99:bf:d0:46: 00:6b:ff:23:b6:f2:51:aa:e4:a1:d7:fe:80:84:b7:5f:7a:18: 93:45:a8:e8:01:7b:95:eb:af:18:7f:29:8b:3e:5f:d2:21:5e: 9a:de:b0:b0:52:ca:4e:1a:01:48:4d:6e:61:9f:9c:13:fb:7d: 3f:4b:12:5a:39:fd:cf:cf:ff:98:8c:46:7d:54:2e:55:4a:b7: 1c:ac:5e:e5:4e:ad:74:b3:e0:97:26:95:5b:37:cb:3b:d0:d6: 8e:d9:d7:0f:97:5f:df:7c:78:02:4a:65:c5:33:a0:a5:cc:7c: 7b:37:f8:00:fd:13:cd:e3:d3:e6:e2:e5:c6:fb:5e:c8:c0:ee: 0a:44:4f:f2:cc:7b:b3:92:66:5c:d2:93:36:18:8d:96:98:61: c5:98:4b:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHxZ9C1+GQmOjBWFx4Q/RmoWDZAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgzODlD MUUwODRERDAeFw0yNTA0MDUwNjA2NDRaFw0yNTA0MDgwNzE3NDRaMDMxMTAvBgNV BAMTKDU5Nzk0MDNFREQ1Mjk5NTE4QjAzNDgwRjg3NUVFMkRGNkJCRDYzRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnoVLEj7LxlJzNyz/AMRH2Vg0j 7d0fB6luBPRS8Z/uKLXlxW9HBh7b4+Gn9qTFBirmOxNFreXMWUcTmXbl66v1x9dH YueI7Fg+sCn0V+oycTEUGh6lM8b/segao8dPhEggOtvsTtffcUmSjfj5on5jB8jj qghFuCXM3RdzvCjEvJ4ptAZ6xlfmvnm0y79J3sxB+zCvj8uR8H2kTypQN4BCmBOG ycvGyyU6VtqTKB24uWvNPKMKK0t9miA8eB7useiHYj1nAxhVeChZWtik3vpxvMVg XZ/k4r1w7iTWYNhYlpXVZEBeobqngl8Eh4tfr5RXZ2uSxevh8gWfTBDIH7c1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWXlAPt1SmVGLA0gPh17i32u9Y/UwHwYDVR0j BBgwFoAUCR9zI0NaiJxGbYEbc7mDicHghN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YzFlODBkNC02ZWJlLTQ5MmMtYTBjNS1kNzU5ODI3NTMzYjMvMC8wOTFGNzMyMzQz NUE4ODlDNDY2RDgxMUI3M0I5ODM4OUMxRTA4NERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgzODlDMUUw ODRERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGMxZTgwZDQtNmViZS00OTJjLWEw YzUtZDc1OTgyNzUzM2IzLzAvMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgz ODlDMUUwODRERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUU3PRGC0dA4ya+bkRBNJVMSjM16G1nG/03 VQ4ITmBjPUmmSH+HRq7HFHUyAhGgbtSyX1hOFhB8wtilI8ZSlyIupkQ8IvASNq60 VH9RMRgfNBoPHIX929YgZ5edzkTxkO7BmKdGmYhgmb/QRgBr/yO28lGq5KHX/oCE t196GJNFqOgBe5Xrrxh/KYs+X9IhXpresLBSyk4aAUhNbmGfnBP7fT9LElo5/c/P /5iMRn1ULlVKtxysXuVOrXSz4JcmlVs3yzvQ1o7Z1w+XX998eAJKZcUzoKXMfHs3 +AD9E83j0+bi5cb7XsjA7gpET/LMe7OSZlzSkzYYjZaYYcWYS4Q= -----END CERTIFICATE-----Generated at Sun Apr 6 08:22:59 2025 by rpki-client