$ rpki-client -vvf repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft File: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft (raw, json) Hash identifier: Sr9B+NU8iwRZ+qOXIgNZerAqTa1CRoJ/UhP7eHkqTWY= Subject key identifier: 87:AE:A6:AA:CE:BE:79:56:EE:7D:A3:68:EC:9E:EF:D4:AB:5C:DA:C2 Authority key identifier: 91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 Certificate issuer: /CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Certificate serial: 0F455111C1559D073F9B08C9B0E82129A4DA2E7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft Manifest number: 035D Signing time: Sun 01 Jun 2025 20:51:01 +0000 Manifest this update: Sun 01 Jun 2025 20:46:01 +0000 Manifest next update: Thu 05 Jun 2025 04:10:01 +0000 Files and hashes: 1: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl (hash: OR+ylVX0FWrKpCdnOo2D8FxAaLzWBpjZ/iwns9IXuOI=) 2: 3130332e3136392e3132382e302f32332d3234203d3e20313432333432.roa (hash: ygNFYmxoQz15pEcPBE3fhpYvFfYuF7aoX+ohmkLX02U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 04:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:45:51:11:c1:55:9d:07:3f:9b:08:c9:b0:e8:21:29:a4:da:2e:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Validity Not Before: Jun 1 20:46:01 2025 GMT Not After : Jun 5 04:10:01 2025 GMT Subject: CN=87AEA6AACEBE7956EE7DA368EC9EEFD4AB5CDAC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:42:4c:0f:ad:ef:43:b7:59:90:5f:fe:7f:93: 2e:72:d0:9d:46:24:77:94:7f:84:13:e6:94:ee:ee: 54:e3:de:32:b1:2f:a9:7b:2e:6e:01:10:09:82:a9: 5d:cd:1a:74:30:97:c9:24:20:1b:f8:c8:a7:3d:ba: e0:5b:2e:b8:63:da:47:cd:26:f1:45:7d:1e:2d:1f: 34:af:c1:8c:23:fa:0c:58:26:bd:a9:03:aa:fb:94: a8:5c:53:9f:e9:51:8a:3c:6c:f0:bf:6b:fa:99:b8: 48:b5:80:0f:fb:94:3f:d9:25:fb:88:61:1c:e8:9e: 3c:30:1f:73:16:5a:8a:8f:67:dc:da:93:a8:18:50: 75:25:be:31:f1:6d:6a:8a:d9:0c:39:a2:ed:8c:42: 89:b9:72:64:8e:b7:08:c1:e3:32:97:1b:68:f4:b5: da:ac:20:b2:68:23:81:5f:ab:3d:57:f0:92:ab:76: 30:db:44:d0:2a:8e:ec:f0:2a:bf:00:fe:55:83:f0: d6:bd:f0:80:88:37:c4:7e:52:67:89:ac:fe:65:20: 86:d8:1d:87:a7:81:13:08:d7:06:b3:dd:0b:e3:8f: ba:c6:80:bd:fd:95:78:e4:0e:8b:02:fa:43:13:a7: 22:95:41:27:c4:32:c7:c3:92:83:bb:78:72:6e:02: 5e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AE:A6:AA:CE:BE:79:56:EE:7D:A3:68:EC:9E:EF:D4:AB:5C:DA:C2 X509v3 Authority Key Identifier: keyid:91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:fd:8b:78:cf:b6:29:9b:e4:da:9e:6d:fb:1c:32:63:29:76: e3:8f:e4:54:5e:0b:47:8e:36:34:5b:5c:e8:1a:1a:5e:3f:88: 2d:3c:6e:4a:e8:2c:6e:00:a1:d0:ed:09:09:ec:a8:7b:9d:76: 3b:45:49:ad:25:cc:31:b0:b4:c0:d7:fa:d8:6a:5b:ec:ba:ca: 24:89:44:2b:8c:51:54:7e:ab:68:20:2a:70:37:39:56:11:9d: 9a:34:2d:d2:bc:c2:fb:8a:14:04:1a:7f:38:4d:48:b2:7b:20: eb:8e:60:b7:0c:40:f5:73:ad:42:5f:1c:0b:6e:de:76:12:96: 44:41:4e:1a:5b:df:c1:e1:4e:02:53:07:d6:b0:15:a5:84:21: fc:2d:71:ed:88:e0:df:10:74:8d:80:18:d3:eb:83:bd:23:a9: ae:37:98:3d:1b:32:b2:c7:c4:e3:8f:f6:89:ba:53:25:15:23: 2b:6f:48:cd:77:ac:6b:4e:74:35:fb:e6:f8:f5:67:9e:eb:7f: d6:05:33:e6:ca:1e:11:56:47:bb:c5:a1:f0:c7:4c:ca:15:80: cf:a3:10:42:b2:c6:a8:29:6d:fb:f6:8c:bc:52:7d:5c:6b:36: 60:d5:e8:13:ef:c8:05:2d:76:7a:db:26:59:13:4d:cc:4a:67: 7a:79:fb:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD0VREcFVnQc/mwjJsOghKaTaLnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMy NjI2NEY1MDAeFw0yNTA2MDEyMDQ2MDFaFw0yNTA2MDUwNDEwMDFaMDMxMTAvBgNV BAMTKDg3QUVBNkFBQ0VCRTc5NTZFRTdEQTM2OEVDOUVFRkQ0QUI1Q0RBQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyQkwPre9Dt1mQX/5/ky5y0J1G JHeUf4QT5pTu7lTj3jKxL6l7Lm4BEAmCqV3NGnQwl8kkIBv4yKc9uuBbLrhj2kfN JvFFfR4tHzSvwYwj+gxYJr2pA6r7lKhcU5/pUYo8bPC/a/qZuEi1gA/7lD/ZJfuI YRzonjwwH3MWWoqPZ9zak6gYUHUlvjHxbWqK2Qw5ou2MQom5cmSOtwjB4zKXG2j0 tdqsILJoI4Ffqz1X8JKrdjDbRNAqjuzwKr8A/lWD8Na98ICIN8R+UmeJrP5lIIbY HYengRMI1waz3Qvjj7rGgL39lXjkDosC+kMTpyKVQSfEMsfDkoO7eHJuAl7RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh66mqs6+eVbufaNo7J7v1Ktc2sIwHwYDVR0j BBgwFoAUkd8FjWrG9WPcrobbr7SKwyYmT1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjBlMzY0Yi03NzllLTQwZDUtYWQwZS1kOTE3ODc3OGQ2YjEvMC85MURGMDU4RDZB QzZGNTYzRENBRTg2REJBRkI0OEFDMzI2MjY0RjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMyNjI2 NEY1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmIwZTM2NGItNzc5ZS00MGQ1LWFk MGUtZDkxNzg3NzhkNmIxLzAvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhB QzMyNjI2NEY1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHv9i3jPtimb5NqebfscMmMpduOP5FReC0eO NjRbXOgaGl4/iC08bkroLG4AodDtCQnsqHuddjtFSa0lzDGwtMDX+thqW+y6yiSJ RCuMUVR+q2ggKnA3OVYRnZo0LdK8wvuKFAQafzhNSLJ7IOuOYLcMQPVzrUJfHAtu 3nYSlkRBThpb38HhTgJTB9awFaWEIfwtce2I4N8QdI2AGNPrg70jqa43mD0bMrLH xOOP9om6UyUVIytvSM13rGtOdDX75vj1Z57rf9YFM+bKHhFWR7vFofDHTMoVgM+j EEKyxqgpbfv2jLxSfVxrNmDV6BPvyAUtdnrbJlkTTcxKZ3p5+yM= -----END CERTIFICATE-----Generated at Tue Jun 3 23:14:52 2025 by rpki-client