$ rpki-client -vvf repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft File: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft (raw, json) Hash identifier: 4w+wCCHIHTxIopuaI/yaK48WDzLHUheO+F4pZreo37E= Subject key identifier: 66:21:5B:0D:F4:31:10:DD:6E:D3:CC:10:41:6C:56:04:0E:1D:3D:96 Authority key identifier: 91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 Certificate issuer: /CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Certificate serial: 4510D61451C5B60A49A70F29DFD37C57C69338C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft Manifest number: 0343 Signing time: Sat 05 Apr 2025 08:50:59 +0000 Manifest this update: Sat 05 Apr 2025 08:45:59 +0000 Manifest next update: Tue 08 Apr 2025 09:38:59 +0000 Files and hashes: 1: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl (hash: 9+iZXZuLwiBN6XCPcwhfZa9S21mhgqOU18IWKor12/g=) 2: 3130332e3136392e3132382e302f32332d3234203d3e20313432333432.roa (hash: /+6rFR/CtKXLMWpUolSLlOIypFPDbHoqQJ6CX1X4V1s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:10:d6:14:51:c5:b6:0a:49:a7:0f:29:df:d3:7c:57:c6:93:38:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Validity Not Before: Apr 5 08:45:59 2025 GMT Not After : Apr 8 09:38:59 2025 GMT Subject: CN=66215B0DF43110DD6ED3CC10416C56040E1D3D96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:95:d1:5c:08:b8:af:9e:6c:74:c3:90:cf:37: 29:b8:44:a7:6c:82:bb:26:c1:14:62:97:f6:7d:ad: 73:4e:23:63:e4:17:79:4c:3e:9d:07:76:45:50:e5: 34:43:9e:fb:58:61:76:e6:9d:fe:91:7c:60:51:ad: e0:20:23:4c:d7:4c:95:bf:66:73:2e:a9:9c:e2:6f: 72:fa:78:9c:37:9a:4c:ee:04:e6:9e:c4:5d:4d:2a: 9a:1d:2c:ed:44:dc:e7:cd:24:71:8c:38:d9:b6:e9: 92:98:e6:20:f0:6b:a2:98:59:e8:7f:46:4a:c9:d9: 95:21:39:50:21:20:12:91:a0:d1:bf:93:1f:63:53: d9:b9:db:33:7c:99:fc:41:71:e2:e4:e6:bd:d0:dc: d7:4b:6e:9a:1b:6c:5a:60:c5:92:60:da:bc:89:86: d3:fa:63:f0:21:69:a0:b5:3e:7d:55:9f:cd:56:91: 2d:87:23:a0:4d:3e:9f:99:0c:cb:f5:44:ac:be:9e: cd:d4:e5:2a:f5:f3:88:b7:47:4c:0c:47:a4:a2:95: 56:0c:f2:b6:f7:15:19:15:a5:34:ec:7b:c9:7d:dd: 95:a4:97:8b:a3:18:27:fc:f3:41:69:6f:d8:6d:65: 8b:41:48:e6:73:82:26:44:d4:4e:7f:60:22:b8:ac: 66:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:21:5B:0D:F4:31:10:DD:6E:D3:CC:10:41:6C:56:04:0E:1D:3D:96 X509v3 Authority Key Identifier: keyid:91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:b9:44:9d:14:ff:15:ff:fa:ad:5b:b4:c2:58:b4:7b:58:01: a8:97:35:87:73:12:49:1f:60:d1:de:64:25:cd:41:d5:cd:5d: c8:55:20:c1:cd:c8:67:ad:6e:c9:e2:07:aa:1c:fe:ae:b7:24: c3:20:7e:bd:a7:2f:1c:e2:37:5d:bb:50:1f:8f:35:f1:5f:51: 5d:e3:94:67:9a:5a:a9:4e:f6:d7:37:83:0c:ee:29:ab:19:8a: 41:8c:6a:32:01:02:f1:c1:b7:e0:85:e7:71:41:3f:f4:8b:36: 54:bb:e5:ec:fe:27:59:ed:73:82:b5:88:03:2f:ef:c0:e8:c0: d2:73:6f:bc:92:a9:b2:2b:6a:fd:a6:8d:a2:cc:58:e5:23:a3: b0:0a:c6:26:0a:2e:30:64:89:ab:d5:62:8a:d0:0d:bc:45:f5: 1a:6b:a2:a2:92:43:e2:56:23:03:b6:8d:89:26:4e:29:57:25: 26:f1:4e:5a:e9:fc:9f:b2:f3:24:41:2d:b0:63:eb:93:1c:23: 36:8a:59:33:52:31:1c:06:aa:43:bf:cd:43:ec:5d:17:28:d0: f2:f5:fe:d1:4f:c9:9a:53:cb:df:06:7a:ae:cd:15:5c:bf:e6: da:bf:ed:5e:9d:d1:e9:1a:50:ba:7f:74:92:f3:dd:8d:5d:75: 09:a2:39:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURRDWFFHFtgpJpw8p39N8V8aTOMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMy NjI2NEY1MDAeFw0yNTA0MDUwODQ1NTlaFw0yNTA0MDgwOTM4NTlaMDMxMTAvBgNV BAMTKDY2MjE1QjBERjQzMTEwREQ2RUQzQ0MxMDQxNkM1NjA0MEUxRDNEOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQldFcCLivnmx0w5DPNym4RKds grsmwRRil/Z9rXNOI2PkF3lMPp0HdkVQ5TRDnvtYYXbmnf6RfGBRreAgI0zXTJW/ ZnMuqZzib3L6eJw3mkzuBOaexF1NKpodLO1E3OfNJHGMONm26ZKY5iDwa6KYWeh/ RkrJ2ZUhOVAhIBKRoNG/kx9jU9m52zN8mfxBceLk5r3Q3NdLbpobbFpgxZJg2ryJ htP6Y/AhaaC1Pn1Vn81WkS2HI6BNPp+ZDMv1RKy+ns3U5Sr184i3R0wMR6SilVYM 8rb3FRkVpTTse8l93ZWkl4ujGCf880Fpb9htZYtBSOZzgiZE1E5/YCK4rGY9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZiFbDfQxEN1u08wQQWxWBA4dPZYwHwYDVR0j BBgwFoAUkd8FjWrG9WPcrobbr7SKwyYmT1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjBlMzY0Yi03NzllLTQwZDUtYWQwZS1kOTE3ODc3OGQ2YjEvMC85MURGMDU4RDZB QzZGNTYzRENBRTg2REJBRkI0OEFDMzI2MjY0RjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMyNjI2 NEY1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmIwZTM2NGItNzc5ZS00MGQ1LWFk MGUtZDkxNzg3NzhkNmIxLzAvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhB QzMyNjI2NEY1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMa5RJ0U/xX/+q1btMJYtHtYAaiXNYdzEkkf YNHeZCXNQdXNXchVIMHNyGetbsniB6oc/q63JMMgfr2nLxziN127UB+PNfFfUV3j lGeaWqlO9tc3gwzuKasZikGMajIBAvHBt+CF53FBP/SLNlS75ez+J1ntc4K1iAMv 78DowNJzb7ySqbIrav2mjaLMWOUjo7AKxiYKLjBkiavVYorQDbxF9RproqKSQ+JW IwO2jYkmTilXJSbxTlrp/J+y8yRBLbBj65McIzaKWTNSMRwGqkO/zUPsXRco0PL1 /tFPyZpTy98Geq7NFVy/5tq/7V6d0ekaULp/dJLz3Y1ddQmiOQ8= -----END CERTIFICATE-----Generated at Sat Apr 5 23:15:21 2025 by rpki-client