$ rpki-client -vvf repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft File: 91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft (raw, json) Hash identifier: BG5Uvp5ZN3Eggi4pdqZDDvcY57Qo875aj2CPyGn7YHI= Subject key identifier: 90:C8:B2:B5:A4:A2:9F:FC:AE:B4:25:89:47:81:C3:34:EA:C0:80:83 Authority key identifier: 91:E7:E2:83:42:2E:38:A6:A6:ED:B3:85:93:EE:07:4D:F8:FA:29:C6 Certificate issuer: /CN=91E7E283422E38A6A6EDB38593EE074DF8FA29C6 Certificate serial: 4B0B2896188E6EDFC535932918541E27A2F8FFE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft Manifest number: 055C Signing time: Thu 26 Mar 2026 09:01:27 +0000 Manifest this update: Thu 26 Mar 2026 08:56:27 +0000 Manifest next update: Sun 29 Mar 2026 17:03:27 +0000 Files and hashes: 1: 91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl (hash: qhCSZz5jd+7yfOdfjJJCU5wSCNjcPxtyU8QfE5XE3Ac=) 2: 3130332e3134322e31342e302f32332d3234203d3e20313339333735.roa (hash: Grgdt8iRUAIyZ2qFHWZrH4g5ALyIzB9vEqddBLCgUpI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:0b:28:96:18:8e:6e:df:c5:35:93:29:18:54:1e:27:a2:f8:ff:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91E7E283422E38A6A6EDB38593EE074DF8FA29C6 Validity Not Before: Mar 26 08:56:27 2026 GMT Not After : Mar 29 17:03:27 2026 GMT Subject: CN=90C8B2B5A4A29FFCAEB425894781C334EAC08083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cc:86:83:cf:67:6d:25:0c:b6:09:00:38:d9: 8a:3d:d8:12:7a:46:10:25:6a:76:33:aa:42:ce:de: f9:63:b7:74:20:0f:ec:89:e5:50:49:9a:a1:0e:93: cc:3b:2a:c2:6e:b1:63:f7:a5:dd:56:d2:f5:78:5e: 7f:d8:e4:ad:8f:f5:45:d7:db:9c:77:8e:ca:8e:06: de:47:d1:48:af:dd:8f:46:3d:5b:2e:27:fe:ec:9c: f3:02:af:84:7e:a4:57:92:fc:99:78:97:00:af:75: d1:e0:24:0f:7c:dd:b1:2a:e8:85:76:79:ef:33:b6: fe:99:7f:26:c7:a0:49:9f:09:a7:57:e8:5f:a2:bc: d4:44:01:ad:b7:03:12:8c:66:4e:ea:c0:62:b0:8e: 47:65:3d:aa:3d:0d:d6:be:14:e1:0f:19:9e:74:db: 5e:38:cc:02:5c:ce:15:08:90:5e:ae:c7:5c:bf:79: 93:21:64:b9:f5:af:cd:9d:7e:d8:6e:1a:f7:20:a4: 57:67:a0:70:f2:27:80:1f:64:a1:36:ec:8a:00:50: a3:b1:ee:32:5a:9e:c4:e5:c8:22:33:0f:de:74:85: 6c:eb:ee:37:56:6f:f9:fd:41:3e:0d:e7:06:d8:b4: c1:f9:48:28:77:0b:9a:2a:6a:5e:95:40:54:af:7c: 29:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C8:B2:B5:A4:A2:9F:FC:AE:B4:25:89:47:81:C3:34:EA:C0:80:83 X509v3 Authority Key Identifier: keyid:91:E7:E2:83:42:2E:38:A6:A6:ED:B3:85:93:EE:07:4D:F8:FA:29:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:8c:ec:e8:e9:2f:71:79:c0:2f:7c:55:bc:72:0e:01:a7:24: 55:83:67:0c:b4:58:c6:56:3b:49:8f:50:60:8d:80:c5:03:4f: d5:60:3c:d9:76:6a:13:37:0e:56:d2:75:b6:80:0d:c6:0e:97: 7f:89:c7:80:85:28:b1:53:a0:a8:ed:93:f2:3c:cd:7a:02:02: 15:04:e1:21:f6:3a:ab:4b:97:48:22:50:36:9d:9f:20:83:5d: 4d:ec:fd:34:63:d5:9f:d4:f2:fb:74:e1:94:b6:2d:7e:2e:7a: 86:99:e6:5c:0f:3b:8d:b7:b4:7d:61:fd:92:4f:35:59:fa:e2: a4:96:99:72:a5:8f:3c:69:cb:c9:5f:39:a3:a3:61:64:a6:46: a0:d5:8c:00:32:2e:ba:97:43:c0:1d:46:7f:d8:e0:05:c2:a6: 20:cf:d6:d2:eb:e4:02:f6:04:f9:a7:02:f6:95:37:3f:e0:e5: df:90:f7:de:f8:37:ad:d5:dc:d6:c2:cb:80:cc:90:47:e0:c9: 5d:b6:6e:78:4a:1e:bb:e7:34:5b:72:6b:f0:a8:56:d1:f2:39: f7:ac:96:09:41:9c:53:81:c7:ad:bb:d8:8e:53:73:8f:4e:e4: 7e:39:48:f1:5b:66:2e:61:4f:e5:b7:ad:e9:e8:30:e0:d6:c1: 41:09:1f:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSwsolhiObt/FNZMpGFQeJ6L4/+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFFN0UyODM0MjJFMzhBNkE2RURCMzg1OTNFRTA3NERG OEZBMjlDNjAeFw0yNjAzMjYwODU2MjdaFw0yNjAzMjkxNzAzMjdaMDMxMTAvBgNV BAMTKDkwQzhCMkI1QTRBMjlGRkNBRUI0MjU4OTQ3ODFDMzM0RUFDMDgwODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0zIaDz2dtJQy2CQA42Yo92BJ6 RhAlanYzqkLO3vljt3QgD+yJ5VBJmqEOk8w7KsJusWP3pd1W0vV4Xn/Y5K2P9UXX 25x3jsqOBt5H0Uiv3Y9GPVsuJ/7snPMCr4R+pFeS/Jl4lwCvddHgJA983bEq6IV2 ee8ztv6ZfybHoEmfCadX6F+ivNREAa23AxKMZk7qwGKwjkdlPao9Dda+FOEPGZ50 2144zAJczhUIkF6ux1y/eZMhZLn1r82dfthuGvcgpFdnoHDyJ4AfZKE27IoAUKOx 7jJansTlyCIzD950hWzr7jdWb/n9QT4N5wbYtMH5SCh3C5oqal6VQFSvfClNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkMiytaSin/yutCWJR4HDNOrAgIMwHwYDVR0j BBgwFoAUkefig0IuOKam7bOFk+4HTfj6KcYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWNiYzkyNy1mNGUyLTQxNTMtYjY2Yi1jZTFlYzAyZDc0MTAvMC85MUU3RTI4MzQy MkUzOEE2QTZFREIzODU5M0VFMDc0REY4RkEyOUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTFFN0UyODM0MjJFMzhBNkE2RURCMzg1OTNFRTA3NERGOEZB MjlDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFjYmM5MjctZjRlMi00MTUzLWI2 NmItY2UxZWMwMmQ3NDEwLzAvOTFFN0UyODM0MjJFMzhBNkE2RURCMzg1OTNFRTA3 NERGOEZBMjlDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFiM7OjpL3F5wC98VbxyDgGnJFWDZwy0WMZW O0mPUGCNgMUDT9VgPNl2ahM3DlbSdbaADcYOl3+Jx4CFKLFToKjtk/I8zXoCAhUE 4SH2OqtLl0giUDadnyCDXU3s/TRj1Z/U8vt04ZS2LX4ueoaZ5lwPO423tH1h/ZJP NVn64qSWmXKljzxpy8lfOaOjYWSmRqDVjAAyLrqXQ8AdRn/Y4AXCpiDP1tLr5AL2 BPmnAvaVNz/g5d+Q9974N63V3NbCy4DMkEfgyV22bnhKHrvnNFtya/CoVtHyOfes lglBnFOBx6272I5Tc49O5H45SPFbZi5hT+W3renoMODWwUEJH5I= -----END CERTIFICATE-----Generated at Thu Mar 26 16:26:22 2026 by rpki-client