$ rpki-client -vvf repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft File: 091F7323435A889C466D811B73B98389C1E084DD.mft (raw, json) Hash identifier: bZ/P5OuV5gIHpYTsxWRRUKExtrKyGgPDALxnXRSchFQ= Subject key identifier: 86:FB:32:B3:9F:38:87:E7:4E:20:DA:AF:11:45:73:76:B1:89:13:A7 Authority key identifier: 09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD Certificate issuer: /CN=091F7323435A889C466D811B73B98389C1E084DD Certificate serial: 4492539A5754AEEACD02F937BE4BABF1EA802D09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft Manifest number: 0210 Signing time: Thu 13 Mar 2025 18:21:45 +0000 Manifest this update: Thu 13 Mar 2025 18:16:45 +0000 Manifest next update: Sun 16 Mar 2025 20:12:45 +0000 Files and hashes: 1: 091F7323435A889C466D811B73B98389C1E084DD.crl (hash: 7Z7XcFmBFMHdz7jo8LY3fYOt+2KU3RKX6Mvi9asXDas=) 2: 3130332e3137382e31362e302f32332d3233203d3e2039333431.roa (hash: uiUSxANoNODzFIewLGALThH13uAn6LXmm2UK715WT+g=) 3: 3130332e3137382e31362e302f32342d3234203d3e2039333431.roa (hash: Y1e1P9Lfp6j2uN41yXsuTRVgN8tFe5HoW++JbHObZeY=) 4: 3130332e3137382e31372e302f32342d3234203d3e2039333431.roa (hash: XeFzp7e3uJ/XW0SCT6+L3eC2Ka1QVpzvs90ESVm5heI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Mar 2025 20:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:92:53:9a:57:54:ae:ea:cd:02:f9:37:be:4b:ab:f1:ea:80:2d:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091F7323435A889C466D811B73B98389C1E084DD Validity Not Before: Mar 13 18:16:45 2025 GMT Not After : Mar 16 20:12:45 2025 GMT Subject: CN=86FB32B39F3887E74E20DAAF11457376B18913A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4b:23:06:88:b8:d5:3d:1d:68:98:0e:b9:31: 0f:d6:89:8e:6a:c8:34:49:f1:73:0c:58:3d:04:51: d1:e3:0b:7d:3b:f2:14:5e:9d:45:78:d3:44:61:f8: 7a:a6:7c:a3:47:51:2a:cb:4e:ab:ed:cd:4f:a0:38: ad:61:4a:6e:44:ad:f2:eb:d1:62:d1:96:60:a7:b0: bb:11:a0:b8:7c:b4:9b:e5:aa:d4:58:ef:b1:70:f1: 94:c6:dd:42:62:4f:c5:70:a3:2c:9a:5d:9a:ee:86: 05:ca:b4:7c:71:0e:b0:6a:65:df:b4:50:c6:58:88: be:f9:ab:a8:ea:ca:57:62:89:83:2f:a9:9f:e6:28: 2f:06:95:71:a8:68:a2:1b:4b:4a:bc:a0:d9:49:b6: 8b:2b:53:ca:64:84:a4:b4:aa:c3:7a:57:a4:80:de: 2e:d0:31:20:38:9d:e6:76:e9:06:cb:c6:b8:53:9d: a5:2a:a8:cf:3d:d7:63:8c:85:e4:95:3e:bc:f4:20: b8:26:f1:64:56:21:34:34:eb:ca:f4:9d:3d:91:b8: 83:7a:d4:c4:9d:f1:dd:40:fc:df:50:d5:b3:fa:65: de:56:3a:77:aa:3a:ae:53:cc:ad:56:fb:18:cc:a0: 17:aa:c7:30:4f:19:2a:c5:65:9e:a5:c2:2a:03:9d: 87:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FB:32:B3:9F:38:87:E7:4E:20:DA:AF:11:45:73:76:B1:89:13:A7 X509v3 Authority Key Identifier: keyid:09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:16:13:d9:92:63:9b:42:17:69:3f:ea:58:94:88:3d:9d:7d: b3:e9:ab:46:db:de:77:5f:cb:e9:85:e5:21:21:49:4f:8e:da: 3b:93:c5:61:91:61:78:48:7f:d0:26:18:74:11:c0:b8:bf:87: 0b:28:9e:60:3c:8c:2a:60:a4:85:6b:db:2a:5f:f6:e9:1f:79: 9a:b5:37:10:a6:2d:0e:da:43:1d:33:65:97:42:89:f3:d5:cb: ec:89:3c:eb:7c:b2:29:d8:4f:15:ea:1a:d5:d9:2d:cd:34:16: f3:05:95:f9:e0:10:dc:f2:e4:f2:22:4d:59:2c:59:b0:77:84: be:39:e8:ab:63:3f:38:82:1e:8e:34:46:d6:b7:59:5a:a0:17: fe:77:38:56:3e:6c:1b:ef:1b:c2:ff:48:51:06:3c:07:fd:5c: 6a:d4:84:11:f5:d7:9e:d2:dc:2c:95:4f:a1:33:2f:67:bf:65: 42:7a:42:9e:9e:02:fe:0a:d4:45:ad:ad:48:b9:43:03:db:d3: 16:1f:be:cd:13:c6:0a:4b:5e:0b:89:30:08:b2:16:2e:9a:0f: e0:32:fe:d7:f4:5e:10:f9:29:06:19:5c:7d:fe:eb:94:64:d3: 85:81:bf:40:fe:21:fe:3c:0a:de:f7:65:8d:ee:6c:f0:9a:6d: 82:f6:cf:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURJJTmldUrurNAvk3vkur8eqALQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgzODlD MUUwODRERDAeFw0yNTAzMTMxODE2NDVaFw0yNTAzMTYyMDEyNDVaMDMxMTAvBgNV BAMTKDg2RkIzMkIzOUYzODg3RTc0RTIwREFBRjExNDU3Mzc2QjE4OTEzQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9SyMGiLjVPR1omA65MQ/WiY5q yDRJ8XMMWD0EUdHjC3078hRenUV400Rh+HqmfKNHUSrLTqvtzU+gOK1hSm5ErfLr 0WLRlmCnsLsRoLh8tJvlqtRY77Fw8ZTG3UJiT8VwoyyaXZruhgXKtHxxDrBqZd+0 UMZYiL75q6jqyldiiYMvqZ/mKC8GlXGoaKIbS0q8oNlJtosrU8pkhKS0qsN6V6SA 3i7QMSA4neZ26QbLxrhTnaUqqM8912OMheSVPrz0ILgm8WRWITQ068r0nT2RuIN6 1MSd8d1A/N9Q1bP6Zd5WOneqOq5TzK1W+xjMoBeqxzBPGSrFZZ6lwioDnYfdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhvsys584h+dOINqvEUVzdrGJE6cwHwYDVR0j BBgwFoAUCR9zI0NaiJxGbYEbc7mDicHghN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YzFlODBkNC02ZWJlLTQ5MmMtYTBjNS1kNzU5ODI3NTMzYjMvMC8wOTFGNzMyMzQz NUE4ODlDNDY2RDgxMUI3M0I5ODM4OUMxRTA4NERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgzODlDMUUw ODRERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGMxZTgwZDQtNmViZS00OTJjLWEw YzUtZDc1OTgyNzUzM2IzLzAvMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgz ODlDMUUwODRERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8WE9mSY5tCF2k/6liUiD2dfbPpq0bb3ndf y+mF5SEhSU+O2juTxWGRYXhIf9AmGHQRwLi/hwsonmA8jCpgpIVr2ypf9ukfeZq1 NxCmLQ7aQx0zZZdCifPVy+yJPOt8sinYTxXqGtXZLc00FvMFlfngENzy5PIiTVks WbB3hL456KtjPziCHo40Rta3WVqgF/53OFY+bBvvG8L/SFEGPAf9XGrUhBH1157S 3CyVT6EzL2e/ZUJ6Qp6eAv4K1EWtrUi5QwPb0xYfvs0TxgpLXguJMAiyFi6aD+Ay /tf0XhD5KQYZXH3+65Rk04WBv0D+If48Ct73ZY3ubPCabYL2z/E= -----END CERTIFICATE-----Generated at Thu Mar 13 21:30:39 2025 by rpki-client