$ rpki-client -vvf repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft File: 91982855FD8C4C119B32F9D536B640804091001C.mft (raw, json) Hash identifier: znpIgvm0N6ioVEy0N1zfIASx8G3+5I5y2pa290MFGW0= Subject key identifier: 74:80:E9:AC:67:C5:B2:4C:DD:F6:46:0F:8F:45:EC:A7:8B:D6:47:FF Authority key identifier: 91:98:28:55:FD:8C:4C:11:9B:32:F9:D5:36:B6:40:80:40:91:00:1C Certificate issuer: /CN=91982855FD8C4C119B32F9D536B640804091001C Certificate serial: 7DA9B661337675CCB4CBC95E8F2877C8C0F3F5FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91982855FD8C4C119B32F9D536B640804091001C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft Manifest number: 0504 Signing time: Wed 03 Sep 2025 10:32:05 +0000 Manifest this update: Wed 03 Sep 2025 10:27:05 +0000 Manifest next update: Sat 06 Sep 2025 21:20:05 +0000 Files and hashes: 1: 3130332e35322e36342e302f32322d3234203d3e20313331373335.roa (hash: svxXfJ7ypnOi0ZD+Lr+tu4BVUww3l9AMvmS2fynY310=) 2: 91982855FD8C4C119B32F9D536B640804091001C.crl (hash: G3dJRq8W23BTVv7tfa4aBYps6MWpzUbAgvS/GqN5Snw=) 3: 3130332e31352e3234302e302f32322d3234203d3e20313331373335.roa (hash: XKkTGgDl7AJdyrktq8gvl18OiQMp7I8a2RgU5SEEXyk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.crl rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91982855FD8C4C119B32F9D536B640804091001C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 21:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:a9:b6:61:33:76:75:cc:b4:cb:c9:5e:8f:28:77:c8:c0:f3:f5:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91982855FD8C4C119B32F9D536B640804091001C Validity Not Before: Sep 3 10:27:05 2025 GMT Not After : Sep 6 21:20:05 2025 GMT Subject: CN=7480E9AC67C5B24CDDF6460F8F45ECA78BD647FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3e:b0:35:05:8b:6f:08:16:29:4b:fa:b1:32: d6:97:75:fe:a5:16:46:e3:d9:be:df:d3:8b:96:cc: aa:fb:79:cf:d9:05:be:95:80:d6:94:2a:b7:1b:66: 8e:87:14:82:68:92:40:89:e2:29:02:b9:42:7e:d0: 13:6d:37:ce:64:ef:7d:3c:96:e0:f1:5e:79:55:da: f2:45:72:16:ca:85:ac:91:c3:6e:6c:66:1a:12:d8: 1c:c5:89:ba:2b:a7:1c:bf:fb:7d:e2:7c:fe:fb:ed: 4c:95:8e:0b:24:1f:61:87:8b:20:c5:cf:cd:ef:cf: 51:0e:cd:1c:42:09:ff:a2:fe:21:80:3d:79:49:3a: aa:33:8f:f0:a6:97:d7:de:e4:b3:d8:53:0e:d2:50: ec:bc:7a:88:e9:6d:a2:e9:ab:f4:e5:4e:3d:cf:e6: 89:54:da:fe:f6:05:a4:2e:65:3c:db:37:8a:d8:9f: b2:49:09:e6:da:89:56:4e:df:45:a3:ad:a1:e7:e3: 0f:cb:5d:7e:ac:14:d7:23:87:46:8a:d7:94:42:8d: 9e:8a:6a:ab:b0:a7:62:dd:73:d7:de:cb:b7:21:1c: 66:f2:97:1c:3f:b3:db:66:6a:05:16:dd:06:78:8c: e5:91:05:59:20:60:5c:01:f4:f0:f7:f1:99:87:2a: 32:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:80:E9:AC:67:C5:B2:4C:DD:F6:46:0F:8F:45:EC:A7:8B:D6:47:FF X509v3 Authority Key Identifier: keyid:91:98:28:55:FD:8C:4C:11:9B:32:F9:D5:36:B6:40:80:40:91:00:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91982855FD8C4C119B32F9D536B640804091001C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:9a:41:e5:10:fd:eb:93:79:7f:58:fa:86:fc:ca:8a:74:82: 9c:2a:bf:94:79:46:4e:7b:10:cd:87:c0:3c:f0:52:0b:6c:ee: 6e:1a:0e:72:a6:5f:08:8c:39:a5:35:2f:7c:a6:0e:2b:3c:28: e1:9f:30:4d:2d:9c:18:68:89:e8:36:b4:21:e3:24:5f:7f:ca: 7e:32:08:5b:b8:b3:71:0c:b4:62:df:c1:b2:0d:94:17:bb:7f: 7e:3d:19:8f:4f:41:f1:bc:93:6b:e5:09:c8:71:0b:9f:fb:e6: 5c:ab:8f:bb:88:2a:1f:16:7d:9f:70:33:10:f6:5c:9b:85:1d: 5b:ab:3a:25:89:58:5c:9d:ff:8f:bb:19:ea:18:3d:30:fc:7c: 80:6b:50:51:c3:80:d9:35:99:a8:dd:76:45:48:f4:84:ce:34: c8:22:8a:33:be:8b:42:55:b0:46:c9:c8:a1:4f:46:f2:f3:bf: 6b:65:9b:9c:3a:4f:8a:01:1c:ae:6c:65:20:a7:a5:5c:69:ac: 7d:1a:ee:ac:3e:1e:dc:b0:01:6d:1a:26:ac:ba:59:e0:72:d1: 4b:ea:85:5b:97:a6:a1:aa:18:68:e8:70:33:a4:92:00:aa:95: ad:b9:b5:ed:29:56:92:94:55:c2:1e:57:57:e7:3c:ce:cb:aa: 4e:93:42:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfam2YTN2dcy0y8lejyh3yMDz9f4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE5ODI4NTVGRDhDNEMxMTlCMzJGOUQ1MzZCNjQwODA0 MDkxMDAxQzAeFw0yNTA5MDMxMDI3MDVaFw0yNTA5MDYyMTIwMDVaMDMxMTAvBgNV BAMTKDc0ODBFOUFDNjdDNUIyNENEREY2NDYwRjhGNDVFQ0E3OEJENjQ3RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWPrA1BYtvCBYpS/qxMtaXdf6l Fkbj2b7f04uWzKr7ec/ZBb6VgNaUKrcbZo6HFIJokkCJ4ikCuUJ+0BNtN85k7308 luDxXnlV2vJFchbKhayRw25sZhoS2BzFiborpxy/+33ifP777UyVjgskH2GHiyDF z83vz1EOzRxCCf+i/iGAPXlJOqozj/Cml9fe5LPYUw7SUOy8eojpbaLpq/TlTj3P 5olU2v72BaQuZTzbN4rYn7JJCebaiVZO30WjraHn4w/LXX6sFNcjh0aK15RCjZ6K aquwp2Ldc9fey7chHGbylxw/s9tmagUW3QZ4jOWRBVkgYFwB9PD38ZmHKjJLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdIDprGfFskzd9kYPj0Xsp4vWR/8wHwYDVR0j BBgwFoAUkZgoVf2MTBGbMvnVNrZAgECRABwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzJjNDk0OC02ODdiLTQwMjAtODdmNC0yOGVlNGI2M2FhNDcvMC85MTk4Mjg1NUZE OEM0QzExOUIzMkY5RDUzNkI2NDA4MDQwOTEwMDFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE5ODI4NTVGRDhDNEMxMTlCMzJGOUQ1MzZCNjQwODA0MDkx MDAxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMyYzQ5NDgtNjg3Yi00MDIwLTg3 ZjQtMjhlZTRiNjNhYTQ3LzAvOTE5ODI4NTVGRDhDNEMxMTlCMzJGOUQ1MzZCNjQw ODA0MDkxMDAxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ6aQeUQ/euTeX9Y+ob8yop0gpwqv5R5Rk57 EM2HwDzwUgts7m4aDnKmXwiMOaU1L3ymDis8KOGfME0tnBhoieg2tCHjJF9/yn4y CFu4s3EMtGLfwbINlBe7f349GY9PQfG8k2vlCchxC5/75lyrj7uIKh8WfZ9wMxD2 XJuFHVurOiWJWFyd/4+7GeoYPTD8fIBrUFHDgNk1majddkVI9ITONMgiijO+i0JV sEbJyKFPRvLzv2tlm5w6T4oBHK5sZSCnpVxprH0a7qw+HtywAW0aJqy6WeBy0Uvq hVuXpqGqGGjocDOkkgCqla25te0pVpKUVcIeV1fnPM7Lqk6TQmE= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:41 2025 by rpki-client