$ rpki-client -vvf repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft File: 91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft (raw, json) Hash identifier: DuMsK23P+ATQnoGAmVLXEdg72Jxubrr/JaZnruNdqbo= Subject key identifier: 8F:EA:47:C4:AF:C4:14:E7:9C:E0:2B:6E:14:73:42:10:19:6C:6F:D1 Authority key identifier: 91:E7:E2:83:42:2E:38:A6:A6:ED:B3:85:93:EE:07:4D:F8:FA:29:C6 Certificate issuer: /CN=91E7E283422E38A6A6EDB38593EE074DF8FA29C6 Certificate serial: 21B8A42228F3974C32DFCA45207BD809B55EDF2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft Manifest number: 0502 Signing time: Sun 07 Sep 2025 03:01:16 +0000 Manifest this update: Sun 07 Sep 2025 02:56:16 +0000 Manifest next update: Wed 10 Sep 2025 12:53:16 +0000 Files and hashes: 1: 91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl (hash: 2vhveBH54m78FKo6tlOaFd8C99iWvfIQ8zGYjdYP598=) 2: 3130332e3134322e31342e302f32332d3234203d3e20313339333735.roa (hash: Grgdt8iRUAIyZ2qFHWZrH4g5ALyIzB9vEqddBLCgUpI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:b8:a4:22:28:f3:97:4c:32:df:ca:45:20:7b:d8:09:b5:5e:df:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91E7E283422E38A6A6EDB38593EE074DF8FA29C6 Validity Not Before: Sep 7 02:56:16 2025 GMT Not After : Sep 10 12:53:16 2025 GMT Subject: CN=8FEA47C4AFC414E79CE02B6E14734210196C6FD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:14:13:cf:da:87:43:ff:e0:3c:81:32:4d:d8: 75:2f:9a:bb:c8:98:75:5c:df:c9:4b:ee:0e:a7:6d: 4a:45:3d:49:b4:e2:70:b9:02:d6:4b:44:97:6d:1d: 26:9a:ac:5b:4b:08:10:3f:5e:b6:8f:68:57:aa:bc: d7:c7:34:dc:e0:15:2c:5d:f9:0e:71:38:8c:bd:6c: 33:fc:d9:ad:89:31:ea:80:ec:b7:fb:ee:21:7d:73: eb:10:cb:64:fc:36:a6:5f:50:56:1d:66:31:d9:f4: fd:f0:fb:2a:14:dc:e9:bd:a1:d7:f1:16:c9:b6:84: dd:de:67:e8:b2:0c:3a:bb:44:0f:36:f5:71:e7:cd: b7:63:c0:1b:5d:c9:f2:82:7a:cb:ba:50:4c:da:3d: ef:d0:36:09:76:42:6a:1d:f0:13:ca:8c:37:d1:71: 52:ef:e6:64:8f:80:dc:f5:99:15:b4:0d:25:7a:3d: ba:b0:ca:4c:8d:9f:92:43:c9:73:bf:3b:9b:c5:88: 82:76:55:63:e9:c6:aa:87:2e:c6:f0:8f:64:3f:81: 1f:1e:12:bf:70:82:a0:20:e8:1d:d0:78:8a:bc:ee: 29:46:86:29:86:26:17:ab:0a:ea:2c:39:f6:9b:98: 91:54:c8:3c:87:14:bc:f7:58:40:e9:19:e3:22:f7: 52:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:EA:47:C4:AF:C4:14:E7:9C:E0:2B:6E:14:73:42:10:19:6C:6F:D1 X509v3 Authority Key Identifier: keyid:91:E7:E2:83:42:2E:38:A6:A6:ED:B3:85:93:EE:07:4D:F8:FA:29:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:91:96:c5:19:ba:c0:73:bf:e7:73:d4:49:ef:ab:28:14:f5: 43:73:74:ab:87:62:48:0a:ef:73:a4:a7:e7:b8:0c:7d:29:28: 92:93:6a:05:54:dc:8b:57:62:06:be:f6:f6:2c:1f:1a:60:f4: 56:16:b2:3c:ff:9a:69:0f:85:4a:b6:7a:b3:80:ed:f8:19:3e: 2d:ac:b4:6f:06:61:90:bc:5d:a0:01:62:ff:a9:82:55:d1:5a: a4:d5:28:16:7d:f8:f5:3a:fc:83:00:22:a8:03:df:e0:dc:b6: 94:4e:43:5a:a6:3c:c5:f3:d1:ad:f8:53:f2:27:bf:af:b4:d4: 0d:5e:28:3c:34:c8:99:65:2e:0b:36:b0:ce:40:32:7e:5c:ad: c2:17:2f:66:b0:a3:97:40:57:72:1e:20:87:73:f5:37:10:5d: 54:65:bd:d2:6e:4d:85:04:a9:74:dd:f7:ce:cb:13:0c:ba:ea: d0:49:eb:ca:32:b7:a7:fc:ce:0b:da:e6:63:f1:5f:df:ae:0b: 0b:12:58:98:8e:ab:c5:65:1b:fe:ee:5a:f0:08:50:c7:dc:b5: cf:aa:35:45:41:85:57:fa:71:6b:95:2a:c1:16:13:73:04:b6: 70:91:1d:b9:b8:95:75:f8:a9:39:91:7d:3d:7d:3e:be:a6:f6: c4:46:e7:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIbikIijzl0wy38pFIHvYCbVe3y0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFFN0UyODM0MjJFMzhBNkE2RURCMzg1OTNFRTA3NERG OEZBMjlDNjAeFw0yNTA5MDcwMjU2MTZaFw0yNTA5MTAxMjUzMTZaMDMxMTAvBgNV BAMTKDhGRUE0N0M0QUZDNDE0RTc5Q0UwMkI2RTE0NzM0MjEwMTk2QzZGRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnFBPP2odD/+A8gTJN2HUvmrvI mHVc38lL7g6nbUpFPUm04nC5AtZLRJdtHSaarFtLCBA/XraPaFeqvNfHNNzgFSxd +Q5xOIy9bDP82a2JMeqA7Lf77iF9c+sQy2T8NqZfUFYdZjHZ9P3w+yoU3Om9odfx Fsm2hN3eZ+iyDDq7RA829XHnzbdjwBtdyfKCesu6UEzaPe/QNgl2Qmod8BPKjDfR cVLv5mSPgNz1mRW0DSV6PbqwykyNn5JDyXO/O5vFiIJ2VWPpxqqHLsbwj2Q/gR8e Er9wgqAg6B3QeIq87ilGhimGJherCuosOfabmJFUyDyHFLz3WEDpGeMi91KjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj+pHxK/EFOec4CtuFHNCEBlsb9EwHwYDVR0j BBgwFoAUkefig0IuOKam7bOFk+4HTfj6KcYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWNiYzkyNy1mNGUyLTQxNTMtYjY2Yi1jZTFlYzAyZDc0MTAvMC85MUU3RTI4MzQy MkUzOEE2QTZFREIzODU5M0VFMDc0REY4RkEyOUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTFFN0UyODM0MjJFMzhBNkE2RURCMzg1OTNFRTA3NERGOEZB MjlDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFjYmM5MjctZjRlMi00MTUzLWI2 NmItY2UxZWMwMmQ3NDEwLzAvOTFFN0UyODM0MjJFMzhBNkE2RURCMzg1OTNFRTA3 NERGOEZBMjlDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmRlsUZusBzv+dz1EnvqygU9UNzdKuHYkgK 73Okp+e4DH0pKJKTagVU3ItXYga+9vYsHxpg9FYWsjz/mmkPhUq2erOA7fgZPi2s tG8GYZC8XaABYv+pglXRWqTVKBZ9+PU6/IMAIqgD3+DctpROQ1qmPMXz0a34U/In v6+01A1eKDw0yJllLgs2sM5AMn5crcIXL2awo5dAV3IeIIdz9TcQXVRlvdJuTYUE qXTd987LEwy66tBJ68oyt6f8zgva5mPxX9+uCwsSWJiOq8VlG/7uWvAIUMfctc+q NUVBhVf6cWuVKsEWE3MEtnCRHbm4lXX4qTmRfT19Pr6m9sRG51o= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:48 2025 by rpki-client