$ rpki-client -vvf repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft File: 91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft (raw, json) Hash identifier: j+cEPZgC1VVcelHCkCe8pTp0ivruNB+Y9PzElBhTAws= Subject key identifier: FC:9F:D3:1B:23:6C:81:0B:53:DA:C8:D0:C9:47:26:14:36:35:AC:A5 Authority key identifier: 91:E7:E2:83:42:2E:38:A6:A6:ED:B3:85:93:EE:07:4D:F8:FA:29:C6 Certificate issuer: /CN=91E7E283422E38A6A6EDB38593EE074DF8FA29C6 Certificate serial: 70B2B32F2EA6B674622B62604A5B3B0AA0B532CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft Manifest number: 04FB Signing time: Fri 22 Aug 2025 09:31:15 +0000 Manifest this update: Fri 22 Aug 2025 09:26:15 +0000 Manifest next update: Mon 25 Aug 2025 16:02:15 +0000 Files and hashes: 1: 91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl (hash: zr9Yilx5w34YMUQm0QKt1yUGeP9WPDOi+9d0dWtDAuo=) 2: 3130332e3134322e31342e302f32332d3234203d3e20313339333735.roa (hash: Grgdt8iRUAIyZ2qFHWZrH4g5ALyIzB9vEqddBLCgUpI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 16:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b2:b3:2f:2e:a6:b6:74:62:2b:62:60:4a:5b:3b:0a:a0:b5:32:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91E7E283422E38A6A6EDB38593EE074DF8FA29C6 Validity Not Before: Aug 22 09:26:15 2025 GMT Not After : Aug 25 16:02:15 2025 GMT Subject: CN=FC9FD31B236C810B53DAC8D0C94726143635ACA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:64:2e:e8:68:a5:7b:cd:81:c6:4b:2f:65:60: 3c:56:5a:f5:79:ed:71:1b:2e:0a:55:a2:9f:3a:06: aa:b0:8d:d5:26:87:4d:e8:eb:06:48:f9:b1:fe:24: 70:6c:68:08:80:69:44:00:f7:af:30:a9:25:cd:fc: a5:e7:86:22:68:5e:05:46:3a:8b:dd:c5:ba:91:00: ed:2d:49:14:7a:64:30:ba:eb:eb:21:7a:84:5a:7e: 25:47:fc:72:96:4e:d8:ef:2c:9a:9c:3d:8e:00:d8: a6:69:b7:00:21:25:5f:57:88:3b:c6:dd:5a:13:b5: 2c:83:ed:a0:ae:46:b4:43:7f:08:3c:42:19:12:c4: 2b:a8:13:25:18:48:eb:d7:68:80:f5:a0:fb:e6:4f: 74:43:ae:23:2b:a0:7c:db:bb:50:4f:91:08:df:92: fa:85:f4:79:a8:0e:42:2f:e2:49:d0:f4:a7:d5:61: 8e:3a:4f:1a:ba:dc:37:d6:0d:d6:e5:4a:61:24:42: f0:88:a3:f9:85:1a:a7:ac:29:e6:16:f7:0d:1b:9e: 50:27:05:89:e3:71:b2:c2:ea:1f:e3:e6:f3:7f:ba: a6:c8:16:4f:cc:39:0f:f5:58:55:97:0b:18:d7:4e: cc:e0:b1:e5:e4:6e:25:6a:e1:93:da:b7:1e:02:73: 5d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:9F:D3:1B:23:6C:81:0B:53:DA:C8:D0:C9:47:26:14:36:35:AC:A5 X509v3 Authority Key Identifier: keyid:91:E7:E2:83:42:2E:38:A6:A6:ED:B3:85:93:EE:07:4D:F8:FA:29:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:47:7d:ad:23:e9:35:fe:10:8a:69:52:26:4c:47:7a:6e:a8: 6b:ff:85:d5:e9:b1:ce:6c:5a:85:5b:e2:d2:27:28:20:d0:ca: 7c:f2:1f:7a:ba:88:ce:67:6d:8a:ef:60:ba:91:96:60:6d:7f: 36:a7:04:58:ba:ca:2e:6d:f2:20:00:52:42:9d:0e:0f:14:ba: 42:f7:3f:24:5a:21:fa:d1:c0:48:4a:51:92:ba:61:9b:f9:2b: 31:b4:55:63:f5:ab:c6:75:fd:8e:1e:16:dd:92:cf:6e:1f:b5: 3c:65:ac:21:14:7c:c5:03:e3:58:9f:53:c1:22:55:e4:0f:b6: 45:d3:36:63:61:c3:21:81:0f:3c:f9:8c:1d:7b:fe:55:3b:c3: de:02:fa:7f:f3:92:49:83:1a:b4:38:be:31:ba:a8:a0:25:b6: c5:7d:47:4e:76:7e:00:f3:e5:a8:24:d2:6f:25:a4:24:2b:b6: 04:3f:43:8e:6f:e4:74:1b:51:32:7b:6a:df:79:88:ac:39:4b: a5:69:eb:6a:b2:d3:8c:7f:ab:23:90:97:f9:76:69:9b:46:89: 8b:67:d5:9c:45:9d:4e:8a:94:ff:c4:4d:47:af:6a:51:de:ad: 5f:71:62:7d:fa:d9:35:d9:d0:9d:68:88:0a:bd:b2:80:85:13: 89:ab:52:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcLKzLy6mtnRiK2JgSls7CqC1MsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFFN0UyODM0MjJFMzhBNkE2RURCMzg1OTNFRTA3NERG OEZBMjlDNjAeFw0yNTA4MjIwOTI2MTVaFw0yNTA4MjUxNjAyMTVaMDMxMTAvBgNV BAMTKEZDOUZEMzFCMjM2QzgxMEI1M0RBQzhEMEM5NDcyNjE0MzYzNUFDQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ZC7oaKV7zYHGSy9lYDxWWvV5 7XEbLgpVop86BqqwjdUmh03o6wZI+bH+JHBsaAiAaUQA968wqSXN/KXnhiJoXgVG OovdxbqRAO0tSRR6ZDC66+sheoRafiVH/HKWTtjvLJqcPY4A2KZptwAhJV9XiDvG 3VoTtSyD7aCuRrRDfwg8QhkSxCuoEyUYSOvXaID1oPvmT3RDriMroHzbu1BPkQjf kvqF9HmoDkIv4knQ9KfVYY46Txq63DfWDdblSmEkQvCIo/mFGqesKeYW9w0bnlAn BYnjcbLC6h/j5vN/uqbIFk/MOQ/1WFWXCxjXTszgseXkbiVq4ZPatx4Cc13pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/J/TGyNsgQtT2sjQyUcmFDY1rKUwHwYDVR0j BBgwFoAUkefig0IuOKam7bOFk+4HTfj6KcYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWNiYzkyNy1mNGUyLTQxNTMtYjY2Yi1jZTFlYzAyZDc0MTAvMC85MUU3RTI4MzQy MkUzOEE2QTZFREIzODU5M0VFMDc0REY4RkEyOUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTFFN0UyODM0MjJFMzhBNkE2RURCMzg1OTNFRTA3NERGOEZB MjlDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFjYmM5MjctZjRlMi00MTUzLWI2 NmItY2UxZWMwMmQ3NDEwLzAvOTFFN0UyODM0MjJFMzhBNkE2RURCMzg1OTNFRTA3 NERGOEZBMjlDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFHfa0j6TX+EIppUiZMR3puqGv/hdXpsc5s WoVb4tInKCDQynzyH3q6iM5nbYrvYLqRlmBtfzanBFi6yi5t8iAAUkKdDg8UukL3 PyRaIfrRwEhKUZK6YZv5KzG0VWP1q8Z1/Y4eFt2Sz24ftTxlrCEUfMUD41ifU8Ei VeQPtkXTNmNhwyGBDzz5jB17/lU7w94C+n/zkkmDGrQ4vjG6qKAltsV9R052fgDz 5agk0m8lpCQrtgQ/Q45v5HQbUTJ7at95iKw5S6Vp62qy04x/qyOQl/l2aZtGiYtn 1ZxFnU6KlP/ETUevalHerV9xYn362TXZ0J1oiAq9soCFE4mrUnE= -----END CERTIFICATE-----Generated at Sat Aug 23 13:05:14 2025 by rpki-client