$ rpki-client -vvf repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft File: 91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft (raw, json) Hash identifier: fVgLQlPhCD8ETFQSS72tOSUhJQyJxvxI1TDPOXZUVIU= Subject key identifier: 7E:B8:05:5A:54:8C:EA:FD:BA:1B:A3:AB:23:08:36:79:97:D3:F0:B5 Authority key identifier: 91:E7:E2:83:42:2E:38:A6:A6:ED:B3:85:93:EE:07:4D:F8:FA:29:C6 Certificate issuer: /CN=91E7E283422E38A6A6EDB38593EE074DF8FA29C6 Certificate serial: 72FF9E5A3951683DD1D010C6421509C893482A6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft Manifest number: 04CA Signing time: Mon 05 May 2025 01:01:16 +0000 Manifest this update: Mon 05 May 2025 00:56:16 +0000 Manifest next update: Thu 08 May 2025 05:35:16 +0000 Files and hashes: 1: 91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl (hash: gs0vVCrh06oHsZqIwYN3EPi/oQxXeVXIhFj6CLLWdnA=) 2: 3130332e3134322e31342e302f32332d3234203d3e20313339333735.roa (hash: 3EhYP5MSs4/lH/1jgs15OsXzjJMrCIK1YXQ3U8OD8SQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 05:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:ff:9e:5a:39:51:68:3d:d1:d0:10:c6:42:15:09:c8:93:48:2a:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91E7E283422E38A6A6EDB38593EE074DF8FA29C6 Validity Not Before: May 5 00:56:16 2025 GMT Not After : May 8 05:35:16 2025 GMT Subject: CN=7EB8055A548CEAFDBA1BA3AB2308367997D3F0B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:b4:d6:74:3e:62:52:91:ab:77:b7:70:7e: 0d:84:eb:ec:e2:17:fb:5f:66:d4:e4:6a:cc:4a:05: 66:31:88:98:c0:29:0a:be:26:e4:a5:55:ac:89:cd: 81:19:51:f3:b8:e2:05:cc:ce:d1:30:a3:73:2e:ee: 01:50:c9:47:ff:eb:4b:32:2d:d4:57:e9:55:50:8a: 40:03:a7:c3:9c:01:71:9f:82:42:6a:7e:9b:db:d8: e8:f6:09:f7:eb:9e:61:29:13:df:12:50:d4:4c:e8: 81:62:03:cc:04:ae:dc:7d:50:ed:36:7d:18:3a:e4: cd:1b:94:43:10:43:9b:1d:e4:78:d9:b2:69:e0:7c: 95:0d:c7:d1:63:3c:15:97:7d:39:ba:ab:c6:11:53: e4:d2:cb:1d:20:ee:29:91:2f:eb:0f:b0:c7:71:ad: bb:62:5e:ba:95:00:f2:46:fa:6a:d5:c1:b7:a8:c0: 51:96:a3:b0:0e:20:3d:5a:6c:4b:a0:2f:63:f1:42: 10:dd:70:49:f5:2f:2d:48:01:f3:6a:45:46:4e:ff: fb:6f:d1:a8:38:22:1d:5a:78:bf:0c:e2:8f:6f:a6: 4e:79:ba:86:b8:a5:0d:63:d8:c9:96:9e:0d:3b:cf: 86:ed:be:3e:30:0f:0a:80:d3:78:22:7d:1e:f8:33: db:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B8:05:5A:54:8C:EA:FD:BA:1B:A3:AB:23:08:36:79:97:D3:F0:B5 X509v3 Authority Key Identifier: keyid:91:E7:E2:83:42:2E:38:A6:A6:ED:B3:85:93:EE:07:4D:F8:FA:29:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:42:34:a5:ff:47:57:e0:80:e9:7c:19:2d:f4:3b:1e:58:02: 52:be:08:61:10:1a:88:5d:79:f0:3b:69:3e:92:78:95:f5:ad: d0:c5:78:2e:dc:c4:93:70:d9:ce:24:dd:59:31:f4:28:8e:8a: 44:4c:56:21:0d:7f:fe:58:d3:e6:07:15:88:6a:0d:35:83:c6: c9:5c:2b:ec:d8:ba:74:dd:71:9e:7a:79:1d:c4:9c:d6:9d:17: a3:fa:e4:fd:71:bd:1e:fd:59:73:44:ef:78:52:44:9b:ef:89: 2e:f8:d1:f5:11:09:4e:9d:7e:c8:56:8f:1c:bd:89:e6:8f:31: b5:4c:c3:dd:b1:e5:ee:86:60:5b:42:74:d4:b3:38:78:40:5f: 24:31:26:5a:99:5e:53:b1:b0:62:54:78:a7:97:64:2e:0b:6b: a4:58:66:9d:58:a6:a7:97:fa:6f:d6:0b:c9:a2:71:b9:e2:94: 85:fe:03:36:35:40:45:f9:c7:35:40:d9:3d:11:39:27:3e:47: 1a:69:8e:42:4c:08:e6:b7:e0:53:95:a3:07:0c:09:39:70:62: ab:da:cb:b4:03:5f:ac:52:4a:db:b1:90:d8:59:ac:3a:1d:cd: 9d:73:a2:72:2f:3e:36:5e:14:c7:c1:6a:74:09:b7:64:fb:cc: 4f:51:44:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcv+eWjlRaD3R0BDGQhUJyJNIKm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFFN0UyODM0MjJFMzhBNkE2RURCMzg1OTNFRTA3NERG OEZBMjlDNjAeFw0yNTA1MDUwMDU2MTZaFw0yNTA1MDgwNTM1MTZaMDMxMTAvBgNV BAMTKDdFQjgwNTVBNTQ4Q0VBRkRCQTFCQTNBQjIzMDgzNjc5OTdEM0YwQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9HbTWdD5iUpGrd7dwfg2E6+zi F/tfZtTkasxKBWYxiJjAKQq+JuSlVayJzYEZUfO44gXMztEwo3Mu7gFQyUf/60sy LdRX6VVQikADp8OcAXGfgkJqfpvb2Oj2CffrnmEpE98SUNRM6IFiA8wErtx9UO02 fRg65M0blEMQQ5sd5HjZsmngfJUNx9FjPBWXfTm6q8YRU+TSyx0g7imRL+sPsMdx rbtiXrqVAPJG+mrVwbeowFGWo7AOID1abEugL2PxQhDdcEn1Ly1IAfNqRUZO//tv 0ag4Ih1aeL8M4o9vpk55uoa4pQ1j2MmWng07z4btvj4wDwqA03gifR74M9vNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfrgFWlSM6v26G6OrIwg2eZfT8LUwHwYDVR0j BBgwFoAUkefig0IuOKam7bOFk+4HTfj6KcYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWNiYzkyNy1mNGUyLTQxNTMtYjY2Yi1jZTFlYzAyZDc0MTAvMC85MUU3RTI4MzQy MkUzOEE2QTZFREIzODU5M0VFMDc0REY4RkEyOUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTFFN0UyODM0MjJFMzhBNkE2RURCMzg1OTNFRTA3NERGOEZB MjlDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFjYmM5MjctZjRlMi00MTUzLWI2 NmItY2UxZWMwMmQ3NDEwLzAvOTFFN0UyODM0MjJFMzhBNkE2RURCMzg1OTNFRTA3 NERGOEZBMjlDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxCNKX/R1fggOl8GS30Ox5YAlK+CGEQGohd efA7aT6SeJX1rdDFeC7cxJNw2c4k3Vkx9CiOikRMViENf/5Y0+YHFYhqDTWDxslc K+zYunTdcZ56eR3EnNadF6P65P1xvR79WXNE73hSRJvviS740fURCU6dfshWjxy9 ieaPMbVMw92x5e6GYFtCdNSzOHhAXyQxJlqZXlOxsGJUeKeXZC4La6RYZp1YpqeX +m/WC8micbnilIX+AzY1QEX5xzVA2T0ROSc+RxppjkJMCOa34FOVowcMCTlwYqva y7QDX6xSStuxkNhZrDodzZ1zonIvPjZeFMfBanQJt2T7zE9RRBs= -----END CERTIFICATE-----Generated at Wed May 7 05:50:21 2025 by rpki-client