$ rpki-client -vvf repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft File: 091F7323435A889C466D811B73B98389C1E084DD.mft (raw, json) Hash identifier: LYOPQQUevb1BwVp8CihKQm9iB5DTAdlPZAEsO/iPdqM= Subject key identifier: 5D:23:C0:DC:39:1E:90:EE:E2:A0:D3:0E:ED:04:A8:50:F5:E7:34:51 Authority key identifier: 09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD Certificate issuer: /CN=091F7323435A889C466D811B73B98389C1E084DD Certificate serial: 2B9DA8A37E1018FE17880F7D6DE6BB502022D6F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft Manifest number: 0235 Signing time: Thu 05 Jun 2025 13:51:46 +0000 Manifest this update: Thu 05 Jun 2025 13:46:46 +0000 Manifest next update: Sun 08 Jun 2025 15:01:46 +0000 Files and hashes: 1: 3130332e3137382e31362e302f32332d3233203d3e2039333431.roa (hash: uiUSxANoNODzFIewLGALThH13uAn6LXmm2UK715WT+g=) 2: 3130332e3137382e31372e302f32342d3234203d3e2039333431.roa (hash: XeFzp7e3uJ/XW0SCT6+L3eC2Ka1QVpzvs90ESVm5heI=) 3: 091F7323435A889C466D811B73B98389C1E084DD.crl (hash: 0IMBvZ+pA5Gu9h9s1R905Jzl7BZZsecX3fP0ZaUvcos=) 4: 3130332e3137382e31362e302f32342d3234203d3e2039333431.roa (hash: Y1e1P9Lfp6j2uN41yXsuTRVgN8tFe5HoW++JbHObZeY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 15:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:9d:a8:a3:7e:10:18:fe:17:88:0f:7d:6d:e6:bb:50:20:22:d6:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091F7323435A889C466D811B73B98389C1E084DD Validity Not Before: Jun 5 13:46:46 2025 GMT Not After : Jun 8 15:01:46 2025 GMT Subject: CN=5D23C0DC391E90EEE2A0D30EED04A850F5E73451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e1:34:dc:10:91:11:de:2c:64:eb:4d:0f:82: 19:81:47:59:ef:0c:fe:08:64:d2:53:39:d7:d9:b4: fd:1d:0d:22:60:be:fc:90:6a:e2:e5:fd:49:a1:a7: f8:6c:cb:2b:88:8f:9e:4b:77:71:0b:25:c0:44:f8: bd:f8:b5:30:6c:16:16:2b:f9:e2:4a:7b:30:88:e4: b9:0b:89:4b:d1:d7:da:45:b5:2a:76:13:95:a0:21: 18:5e:47:04:84:41:77:23:06:be:4f:12:9d:e8:75: 33:b8:36:64:e0:c1:64:5d:7d:c2:13:76:7f:48:ca: e9:0d:df:e5:d0:5d:ea:c9:e9:0c:77:51:7b:0f:a7: 61:9c:1f:79:72:b0:7b:56:1f:d4:59:ac:9f:b2:a3: f1:e9:96:ee:ef:39:0f:93:a9:65:d4:4c:fb:37:5e: b6:47:ff:e5:e1:3b:4f:9b:3d:f9:0a:fd:a6:13:0e: 2a:91:3e:00:ab:b3:7a:b0:11:4e:d5:bb:4d:ad:04: cd:72:a7:e4:ad:c4:08:58:10:d9:ae:bc:6c:85:df: b7:70:a4:0f:bd:f1:87:ba:12:35:60:cd:57:45:62: 95:ef:0b:bf:a1:0d:8c:4c:23:29:c0:97:2b:cd:12: 27:81:00:75:10:5a:22:18:ff:0b:34:97:9f:c9:0f: db:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:23:C0:DC:39:1E:90:EE:E2:A0:D3:0E:ED:04:A8:50:F5:E7:34:51 X509v3 Authority Key Identifier: keyid:09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:74:c6:78:86:b1:a4:bf:19:07:94:dd:8e:e5:39:8f:fc:b2: 40:e9:96:f5:3d:76:03:6e:8b:ca:86:3c:a7:65:50:3c:b6:44: 90:19:18:9c:b2:ee:92:7a:1b:c4:9b:20:70:09:d0:21:15:8e: 3a:e0:18:db:ff:50:67:18:98:6c:3c:22:d8:ea:f0:60:a9:21: 1e:c0:17:fa:b8:97:8e:b3:c1:19:99:35:de:59:ea:f5:24:13: ac:d3:98:60:22:33:de:02:ac:ce:46:f1:21:91:43:8f:21:e1: 60:d1:69:2a:89:90:6c:db:41:2d:95:19:7b:33:1b:df:3f:37: 08:88:70:0e:51:ce:b4:14:35:51:01:91:d4:42:67:db:2e:b2: c3:0b:7e:07:31:31:82:00:e7:f3:22:48:1e:0e:40:6b:ac:3b: 9a:bf:c3:de:d2:d1:64:89:d5:6f:40:5e:f1:d1:06:5f:c7:4e: 4a:c7:13:02:d9:af:5f:73:22:c8:37:51:c0:c0:5a:84:ff:7f: e8:7c:10:12:e6:6e:b6:d9:df:d7:c0:c5:96:6a:00:f2:9a:04: e6:43:2d:c1:7a:03:7d:ae:c1:89:72:b1:1c:df:5a:40:c3:d5: 51:5c:fa:59:27:0e:93:4d:6b:5a:3b:2a:9e:fb:7c:ee:6a:a1: 58:95:d6:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK52oo34QGP4XiA99bea7UCAi1vkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgzODlD MUUwODRERDAeFw0yNTA2MDUxMzQ2NDZaFw0yNTA2MDgxNTAxNDZaMDMxMTAvBgNV BAMTKDVEMjNDMERDMzkxRTkwRUVFMkEwRDMwRUVEMDRBODUwRjVFNzM0NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh4TTcEJER3ixk600PghmBR1nv DP4IZNJTOdfZtP0dDSJgvvyQauLl/Umhp/hsyyuIj55Ld3ELJcBE+L34tTBsFhYr +eJKezCI5LkLiUvR19pFtSp2E5WgIRheRwSEQXcjBr5PEp3odTO4NmTgwWRdfcIT dn9IyukN3+XQXerJ6Qx3UXsPp2GcH3lysHtWH9RZrJ+yo/Hplu7vOQ+TqWXUTPs3 XrZH/+XhO0+bPfkK/aYTDiqRPgCrs3qwEU7Vu02tBM1yp+StxAhYENmuvGyF37dw pA+98Ye6EjVgzVdFYpXvC7+hDYxMIynAlyvNEieBAHUQWiIY/ws0l5/JD9vbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXSPA3DkekO7ioNMO7QSoUPXnNFEwHwYDVR0j BBgwFoAUCR9zI0NaiJxGbYEbc7mDicHghN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YzFlODBkNC02ZWJlLTQ5MmMtYTBjNS1kNzU5ODI3NTMzYjMvMC8wOTFGNzMyMzQz NUE4ODlDNDY2RDgxMUI3M0I5ODM4OUMxRTA4NERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgzODlDMUUw ODRERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGMxZTgwZDQtNmViZS00OTJjLWEw YzUtZDc1OTgyNzUzM2IzLzAvMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgz ODlDMUUwODRERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAp0xniGsaS/GQeU3Y7lOY/8skDplvU9dgNu i8qGPKdlUDy2RJAZGJyy7pJ6G8SbIHAJ0CEVjjrgGNv/UGcYmGw8Itjq8GCpIR7A F/q4l46zwRmZNd5Z6vUkE6zTmGAiM94CrM5G8SGRQ48h4WDRaSqJkGzbQS2VGXsz G98/NwiIcA5RzrQUNVEBkdRCZ9sussMLfgcxMYIA5/MiSB4OQGusO5q/w97S0WSJ 1W9AXvHRBl/HTkrHEwLZr19zIsg3UcDAWoT/f+h8EBLmbrbZ39fAxZZqAPKaBOZD LcF6A32uwYlysRzfWkDD1VFc+lknDpNNa1o7Kp77fO5qoViV1h4= -----END CERTIFICATE-----Generated at Thu Jun 5 19:39:25 2025 by rpki-client