$ rpki-client -vvf repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft File: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft (raw, json) Hash identifier: oN31MBjjEmYaiMqJDc/T/x0EVzW+7XAOFRcjtmQPVi4= Subject key identifier: 2E:4F:66:65:4A:DB:B6:28:40:AF:B7:33:E3:DE:43:0B:6F:62:0D:38 Authority key identifier: 91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 Certificate issuer: /CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Certificate serial: 737D0510F4E06E88C19DDCB7B6477FCE2E784393 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft Manifest number: 0387 Signing time: Fri 05 Sep 2025 20:41:09 +0000 Manifest this update: Fri 05 Sep 2025 20:36:09 +0000 Manifest next update: Tue 09 Sep 2025 06:10:09 +0000 Files and hashes: 1: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl (hash: AByYPfrisfAtBbDkYcJBLlMRgE6u5x00pjcdWge5T3U=) 2: 3130332e3136392e3132382e302f32332d3234203d3e20313432333432.roa (hash: ygNFYmxoQz15pEcPBE3fhpYvFfYuF7aoX+ohmkLX02U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 06:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:7d:05:10:f4:e0:6e:88:c1:9d:dc:b7:b6:47:7f:ce:2e:78:43:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Validity Not Before: Sep 5 20:36:09 2025 GMT Not After : Sep 9 06:10:09 2025 GMT Subject: CN=2E4F66654ADBB62840AFB733E3DE430B6F620D38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4b:c7:72:8b:1b:57:d3:e8:57:c9:b8:d0:5c: d4:4d:46:11:48:c1:d5:de:d7:df:38:e4:5a:8d:79: ab:54:f3:c6:b0:aa:44:2f:1e:36:67:ae:22:a7:69: 2d:2b:e2:f9:c1:87:e5:c6:6e:cc:f0:cb:eb:49:31: 4a:49:b8:c9:70:c2:cf:0c:63:dd:38:39:07:b6:b4: 2f:5c:8a:dc:6c:24:3e:a5:f0:8f:77:d0:5b:a9:50: 3c:3f:a8:ce:cc:95:ce:ac:8e:b7:12:a2:c6:3d:f0: b7:0a:6d:4b:35:fc:81:bb:89:69:bf:48:93:32:26: 43:07:d6:73:09:09:c0:b9:0a:65:6d:4f:65:32:7d: b7:68:05:9b:d7:0f:4f:1c:d5:9a:bd:67:d2:cb:9c: 44:bf:ab:02:c2:36:29:b2:bc:3a:43:68:86:9d:a5: c6:16:4e:bb:64:9f:eb:fa:05:66:5e:88:e4:50:c0: 47:1f:fb:db:a5:e5:06:bc:34:f6:f6:7b:19:d6:3d: f3:31:80:05:d2:e3:cc:07:0d:6c:ec:8d:ca:fb:d1: fd:d9:52:cf:4f:f6:76:dc:23:64:0a:ff:7e:16:74: cd:97:48:2d:48:d4:01:28:44:1d:d7:07:7b:ec:37: 3f:a7:55:4f:10:12:a4:85:be:ca:13:ad:8e:25:24: 76:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4F:66:65:4A:DB:B6:28:40:AF:B7:33:E3:DE:43:0B:6F:62:0D:38 X509v3 Authority Key Identifier: keyid:91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:2b:8b:2e:c9:8f:24:c8:9b:68:ad:9a:1e:d5:57:c4:3b:85: d8:ce:cb:b6:f6:b6:a3:27:40:4a:65:5f:a4:bd:76:32:d2:c0: 95:67:22:a6:cd:f3:aa:1a:0a:34:52:3c:6d:56:3e:1a:6b:02: 42:0a:22:4b:b4:71:ea:ff:d9:0e:56:de:2f:e0:1f:9d:26:b8: e9:21:59:e7:bb:a7:8e:02:1d:34:d0:8b:8b:22:ea:24:ac:3e: b9:14:ff:37:f0:e9:2f:31:03:a7:e3:11:4f:74:ca:63:df:89: 25:ca:5d:34:ea:39:ac:2c:d0:e2:0c:4d:aa:60:f0:cb:b2:60: 92:cd:09:f6:1f:25:18:d8:1b:f9:8c:01:7b:18:b2:63:ec:c7: f7:4f:7e:9f:cc:cd:52:ee:20:87:62:56:03:5c:32:43:3b:57: 1a:88:33:1c:dd:ae:94:45:9e:8a:a4:d1:94:97:ca:60:0d:99: 40:cd:92:87:86:2f:13:8e:c8:f7:72:08:42:6d:7d:ef:cb:4a: 30:fe:b4:2f:b1:27:d5:f9:1b:0c:b4:fc:02:99:63:ca:af:71: 55:dd:16:ee:e8:e2:a8:79:d6:18:7a:f3:34:6e:35:1e:f4:29: 60:5d:9c:61:1f:0c:5c:93:ee:08:42:63:3b:ab:e3:27:72:14: 97:81:a1:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc30FEPTgbojBndy3tkd/zi54Q5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMy NjI2NEY1MDAeFw0yNTA5MDUyMDM2MDlaFw0yNTA5MDkwNjEwMDlaMDMxMTAvBgNV BAMTKDJFNEY2NjY1NEFEQkI2Mjg0MEFGQjczM0UzREU0MzBCNkY2MjBEMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcS8dyixtX0+hXybjQXNRNRhFI wdXe19845FqNeatU88awqkQvHjZnriKnaS0r4vnBh+XGbszwy+tJMUpJuMlwws8M Y904OQe2tC9citxsJD6l8I930FupUDw/qM7Mlc6sjrcSosY98LcKbUs1/IG7iWm/ SJMyJkMH1nMJCcC5CmVtT2UyfbdoBZvXD08c1Zq9Z9LLnES/qwLCNimyvDpDaIad pcYWTrtkn+v6BWZeiORQwEcf+9ul5Qa8NPb2exnWPfMxgAXS48wHDWzsjcr70f3Z Us9P9nbcI2QK/34WdM2XSC1I1AEoRB3XB3vsNz+nVU8QEqSFvsoTrY4lJHYFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULk9mZUrbtihAr7cz495DC29iDTgwHwYDVR0j BBgwFoAUkd8FjWrG9WPcrobbr7SKwyYmT1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjBlMzY0Yi03NzllLTQwZDUtYWQwZS1kOTE3ODc3OGQ2YjEvMC85MURGMDU4RDZB QzZGNTYzRENBRTg2REJBRkI0OEFDMzI2MjY0RjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMyNjI2 NEY1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmIwZTM2NGItNzc5ZS00MGQ1LWFk MGUtZDkxNzg3NzhkNmIxLzAvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhB QzMyNjI2NEY1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAriy7JjyTIm2itmh7VV8Q7hdjOy7b2tqMn QEplX6S9djLSwJVnIqbN86oaCjRSPG1WPhprAkIKIku0cer/2Q5W3i/gH50muOkh Wee7p44CHTTQi4si6iSsPrkU/zfw6S8xA6fjEU90ymPfiSXKXTTqOaws0OIMTapg 8MuyYJLNCfYfJRjYG/mMAXsYsmPsx/dPfp/MzVLuIIdiVgNcMkM7VxqIMxzdrpRF noqk0ZSXymANmUDNkoeGLxOOyPdyCEJtfe/LSjD+tC+xJ9X5Gwy0/AKZY8qvcVXd Fu7o4qh51hh68zRuNR70KWBdnGEfDFyT7ghCYzur4ydyFJeBof8= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:13 2025 by rpki-client