$ rpki-client -vvf repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft File: 91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft (raw, json) Hash identifier: EGYhhDKqby6CDXSNFmHI2V7+1N9sWwiyYzOf8JXN3UM= Subject key identifier: 86:A9:8C:A2:DD:7C:45:C9:35:83:73:C1:7C:07:3E:5D:C1:A9:29:78 Authority key identifier: 91:E7:E2:83:42:2E:38:A6:A6:ED:B3:85:93:EE:07:4D:F8:FA:29:C6 Certificate issuer: /CN=91E7E283422E38A6A6EDB38593EE074DF8FA29C6 Certificate serial: 7E54EEC2D29EDFEDD81198316E1999B10C3F868D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft Manifest number: 04D9 Signing time: Fri 06 Jun 2025 11:11:15 +0000 Manifest this update: Fri 06 Jun 2025 11:06:15 +0000 Manifest next update: Mon 09 Jun 2025 17:08:15 +0000 Files and hashes: 1: 3130332e3134322e31342e302f32332d3234203d3e20313339333735.roa (hash: Grgdt8iRUAIyZ2qFHWZrH4g5ALyIzB9vEqddBLCgUpI=) 2: 91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl (hash: F03CSPf/qAA/n/Qm6FvVo1KQeucH0tkPJNx52QwiED0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 17:08:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:54:ee:c2:d2:9e:df:ed:d8:11:98:31:6e:19:99:b1:0c:3f:86:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91E7E283422E38A6A6EDB38593EE074DF8FA29C6 Validity Not Before: Jun 6 11:06:15 2025 GMT Not After : Jun 9 17:08:15 2025 GMT Subject: CN=86A98CA2DD7C45C9358373C17C073E5DC1A92978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e7:75:76:e5:d1:e2:39:a9:d9:83:3b:4c:53: 25:4a:a7:4b:1f:05:51:24:e5:f3:77:4e:e8:a3:db: 3d:aa:bf:44:22:c2:1f:10:d8:31:5c:fb:00:a4:29: ec:b0:8d:a0:99:55:38:9c:ee:4f:32:dd:4a:18:05: 3c:65:ca:e5:3c:9d:f4:23:ca:a2:05:92:9d:12:c1: 84:2d:e6:b7:1d:7a:0c:bb:83:73:06:e1:c9:7d:a2: 75:22:b2:43:30:43:aa:b1:b6:fa:f6:c3:1e:51:ce: 38:16:ae:41:46:4b:e2:fe:16:b5:9f:56:d5:af:6d: 7e:e7:dd:74:74:d2:0f:1f:6a:14:36:54:20:1b:90: f8:51:59:c8:f0:d1:79:81:0f:2c:45:f6:c2:7d:34: 73:00:2f:c2:72:70:da:05:d4:87:3d:ee:6d:5c:e2: 49:25:66:bf:31:32:08:4d:82:0e:14:f6:d3:41:88: c0:27:0a:6d:aa:b8:5d:8b:10:ee:e2:fa:a2:a9:08: 97:b1:2d:d2:9b:32:bb:0c:68:a2:06:93:b3:2d:67: 59:91:34:69:c7:a6:4f:05:5b:d9:fb:51:24:b0:3c: 49:ad:11:2d:53:b4:11:ab:f9:0c:07:33:75:45:a4: ba:68:f7:35:8c:cf:d6:2f:02:b9:e0:16:cd:48:93: 95:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A9:8C:A2:DD:7C:45:C9:35:83:73:C1:7C:07:3E:5D:C1:A9:29:78 X509v3 Authority Key Identifier: keyid:91:E7:E2:83:42:2E:38:A6:A6:ED:B3:85:93:EE:07:4D:F8:FA:29:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:96:d7:ac:10:93:25:4a:0b:21:5b:b1:6f:2d:6c:1e:97:cf: 41:c0:a2:fe:9d:0f:9a:ef:f4:6e:f7:cc:57:5a:93:8b:50:db: bb:aa:a3:0c:c4:33:fa:8c:a2:c2:c2:04:b5:d6:27:3f:15:f8: 20:93:aa:a1:26:d0:34:69:ec:f9:43:4c:b4:53:69:01:85:56: 45:7c:e2:e0:78:c4:a8:dd:e6:fd:89:ad:89:b6:30:af:95:83: d1:5e:3b:48:16:38:4a:05:fa:d8:50:66:70:e7:64:3e:33:57: 10:63:8a:37:d3:c7:3a:51:9f:15:f8:23:df:9b:46:db:4b:bf: a4:26:5e:f3:d0:c9:bd:b6:56:f9:a8:89:6c:af:9e:25:b5:a3: 5f:61:ff:5b:63:c9:f9:92:9f:d8:bf:96:83:39:56:2b:a7:98: eb:3b:70:42:39:12:2b:67:5c:72:dd:83:9f:e3:62:c9:61:a4: 8f:f7:7c:f0:66:83:e7:f6:6a:9f:25:e9:e0:14:6c:34:63:d2: e3:2f:c6:a8:1e:79:d4:d8:a9:01:32:93:c2:bf:d5:b7:40:d7: 55:89:61:8f:98:92:80:11:f2:96:d7:db:cb:94:4a:8a:be:83: b2:34:23:47:d8:2f:fb:d2:37:0f:4e:94:20:dc:34:a4:df:c3: 59:a9:e2:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUflTuwtKe3+3YEZgxbhmZsQw/ho0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFFN0UyODM0MjJFMzhBNkE2RURCMzg1OTNFRTA3NERG OEZBMjlDNjAeFw0yNTA2MDYxMTA2MTVaFw0yNTA2MDkxNzA4MTVaMDMxMTAvBgNV BAMTKDg2QTk4Q0EyREQ3QzQ1QzkzNTgzNzNDMTdDMDczRTVEQzFBOTI5NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS53V25dHiOanZgztMUyVKp0sf BVEk5fN3Tuij2z2qv0Qiwh8Q2DFc+wCkKeywjaCZVTic7k8y3UoYBTxlyuU8nfQj yqIFkp0SwYQt5rcdegy7g3MG4cl9onUiskMwQ6qxtvr2wx5RzjgWrkFGS+L+FrWf VtWvbX7n3XR00g8fahQ2VCAbkPhRWcjw0XmBDyxF9sJ9NHMAL8JycNoF1Ic97m1c 4kklZr8xMghNgg4U9tNBiMAnCm2quF2LEO7i+qKpCJexLdKbMrsMaKIGk7MtZ1mR NGnHpk8FW9n7USSwPEmtES1TtBGr+QwHM3VFpLpo9zWMz9YvArngFs1Ik5VpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhqmMot18Rck1g3PBfAc+XcGpKXgwHwYDVR0j BBgwFoAUkefig0IuOKam7bOFk+4HTfj6KcYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWNiYzkyNy1mNGUyLTQxNTMtYjY2Yi1jZTFlYzAyZDc0MTAvMC85MUU3RTI4MzQy MkUzOEE2QTZFREIzODU5M0VFMDc0REY4RkEyOUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTFFN0UyODM0MjJFMzhBNkE2RURCMzg1OTNFRTA3NERGOEZB MjlDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFjYmM5MjctZjRlMi00MTUzLWI2 NmItY2UxZWMwMmQ3NDEwLzAvOTFFN0UyODM0MjJFMzhBNkE2RURCMzg1OTNFRTA3 NERGOEZBMjlDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANCW16wQkyVKCyFbsW8tbB6Xz0HAov6dD5rv 9G73zFdak4tQ27uqowzEM/qMosLCBLXWJz8V+CCTqqEm0DRp7PlDTLRTaQGFVkV8 4uB4xKjd5v2JrYm2MK+Vg9FeO0gWOEoF+thQZnDnZD4zVxBjijfTxzpRnxX4I9+b RttLv6QmXvPQyb22VvmoiWyvniW1o19h/1tjyfmSn9i/loM5ViunmOs7cEI5Eitn XHLdg5/jYslhpI/3fPBmg+f2ap8l6eAUbDRj0uMvxqgeedTYqQEyk8K/1bdA11WJ YY+YkoAR8pbX28uUSoq+g7I0I0fYL/vSNw9OlCDcNKTfw1mp4hE= -----END CERTIFICATE-----Generated at Sun Jun 8 00:16:50 2025 by rpki-client