$ rpki-client -vvf repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft File: 91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft (raw, json) Hash identifier: 7qh7mChgOzG+Aywwrbv0Pe4g7V/pu/3JQ0+n4VWLPPA= Subject key identifier: CF:7F:4E:42:59:33:3D:37:71:E0:74:42:82:B6:A5:59:6E:D7:B4:36 Authority key identifier: 91:E7:E2:83:42:2E:38:A6:A6:ED:B3:85:93:EE:07:4D:F8:FA:29:C6 Certificate issuer: /CN=91E7E283422E38A6A6EDB38593EE074DF8FA29C6 Certificate serial: 38C830C8C5572DBE02A0C8E231740C6AFCE02B88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft Manifest number: 04E3 Signing time: Sun 29 Jun 2025 04:21:15 +0000 Manifest this update: Sun 29 Jun 2025 04:16:15 +0000 Manifest next update: Wed 02 Jul 2025 11:20:15 +0000 Files and hashes: 1: 91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl (hash: 0SCDjP2cW7pClYG1bLscNAdiNNxEtrpyZpYWmHMHp6o=) 2: 3130332e3134322e31342e302f32332d3234203d3e20313339333735.roa (hash: Grgdt8iRUAIyZ2qFHWZrH4g5ALyIzB9vEqddBLCgUpI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c8:30:c8:c5:57:2d:be:02:a0:c8:e2:31:74:0c:6a:fc:e0:2b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91E7E283422E38A6A6EDB38593EE074DF8FA29C6 Validity Not Before: Jun 29 04:16:15 2025 GMT Not After : Jul 2 11:20:15 2025 GMT Subject: CN=CF7F4E4259333D3771E0744282B6A5596ED7B436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8c:7f:49:c2:98:64:e1:94:42:d1:a1:60:63: da:3d:b7:b4:3d:58:c5:b6:98:bd:98:6a:c7:cb:30: 53:14:1d:2d:55:c0:22:e3:a4:3b:8d:e7:2b:b8:1b: 13:07:75:2e:7c:dd:70:89:a5:3e:68:9b:94:0f:9c: 9b:ca:a3:19:c8:fd:cb:a6:11:76:6d:9c:1d:b8:8f: 95:bd:45:f8:4f:86:9b:5a:3f:5f:ac:15:3e:93:f3: ee:a4:6d:c9:04:b3:10:cb:b6:0f:55:46:0c:8f:9f: 7e:53:96:13:f4:bb:f5:76:d4:9d:4a:3c:d2:0b:bf: 7e:f5:6c:66:cb:c3:cb:06:eb:26:73:e6:86:95:8d: 8f:bc:1c:39:e6:f5:80:ef:a1:99:1b:9c:84:f3:cc: 31:05:74:80:e8:c2:be:60:10:70:32:21:c4:96:d4: eb:e0:65:0c:dd:8e:42:df:f2:9a:3d:12:77:1d:ad: 48:47:96:b3:2c:b6:00:10:3b:8e:4d:87:ff:e7:eb: 93:28:b2:53:95:a9:70:50:fc:32:8d:f9:c4:08:26: 39:1a:3d:09:b1:9d:f1:1b:a2:73:fa:91:c0:d5:6b: 3d:05:73:c8:2b:5a:89:e5:64:1b:15:0d:31:02:cd: f1:1a:b9:66:6d:81:34:ca:8a:dd:1a:7f:95:94:35: 98:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7F:4E:42:59:33:3D:37:71:E0:74:42:82:B6:A5:59:6E:D7:B4:36 X509v3 Authority Key Identifier: keyid:91:E7:E2:83:42:2E:38:A6:A6:ED:B3:85:93:EE:07:4D:F8:FA:29:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:8f:2d:94:af:ef:e6:b7:cf:4f:44:1a:dc:3e:cd:db:55:8e: 81:18:e5:03:32:e5:33:a7:be:f3:91:18:af:4c:80:e8:83:bc: 45:0c:46:58:83:fb:fd:de:09:d5:22:e4:f3:1b:fd:15:ca:01: 5c:77:45:4f:7f:e4:49:ab:91:f3:0c:20:5a:aa:92:33:73:ae: a4:f0:59:c8:53:f5:7b:fc:bd:c6:8d:12:87:2a:43:57:6c:d9: e3:23:50:5f:72:85:62:bd:c5:e8:45:fc:b6:65:33:15:bd:6e: 49:c4:0b:5a:74:27:56:67:d0:3a:4d:8b:9c:d2:64:03:92:dc: 05:99:87:36:2e:5c:3d:a0:0e:93:fe:23:3a:0c:42:9a:35:e2: 81:15:73:a5:02:2d:de:93:6b:9f:62:3a:46:da:47:4c:a7:de: a3:8f:c9:7b:61:bc:2b:1a:58:ff:36:43:c4:06:49:f6:62:25: 99:a6:da:00:82:04:17:4d:ca:d6:b5:ef:97:85:12:9c:6a:ac: ee:f7:6a:f2:0e:ac:e2:d3:80:3c:ae:20:26:4b:bb:81:5a:0b: 40:ef:d5:d8:19:ab:24:db:14:d7:f8:12:cb:60:57:6e:53:8c: de:b0:fe:91:82:f0:9f:bc:c3:9a:d2:f6:7a:c5:7d:2d:cc:52: e5:8c:61:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOMgwyMVXLb4CoMjiMXQMavzgK4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFFN0UyODM0MjJFMzhBNkE2RURCMzg1OTNFRTA3NERG OEZBMjlDNjAeFw0yNTA2MjkwNDE2MTVaFw0yNTA3MDIxMTIwMTVaMDMxMTAvBgNV BAMTKENGN0Y0RTQyNTkzMzNEMzc3MUUwNzQ0MjgyQjZBNTU5NkVEN0I0MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/jH9Jwphk4ZRC0aFgY9o9t7Q9 WMW2mL2YasfLMFMUHS1VwCLjpDuN5yu4GxMHdS583XCJpT5om5QPnJvKoxnI/cum EXZtnB24j5W9RfhPhptaP1+sFT6T8+6kbckEsxDLtg9VRgyPn35TlhP0u/V21J1K PNILv371bGbLw8sG6yZz5oaVjY+8HDnm9YDvoZkbnITzzDEFdIDowr5gEHAyIcSW 1OvgZQzdjkLf8po9EncdrUhHlrMstgAQO45Nh//n65MoslOVqXBQ/DKN+cQIJjka PQmxnfEbonP6kcDVaz0Fc8grWonlZBsVDTECzfEauWZtgTTKit0af5WUNZibAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz39OQlkzPTdx4HRCgralWW7XtDYwHwYDVR0j BBgwFoAUkefig0IuOKam7bOFk+4HTfj6KcYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWNiYzkyNy1mNGUyLTQxNTMtYjY2Yi1jZTFlYzAyZDc0MTAvMC85MUU3RTI4MzQy MkUzOEE2QTZFREIzODU5M0VFMDc0REY4RkEyOUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTFFN0UyODM0MjJFMzhBNkE2RURCMzg1OTNFRTA3NERGOEZB MjlDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFjYmM5MjctZjRlMi00MTUzLWI2 NmItY2UxZWMwMmQ3NDEwLzAvOTFFN0UyODM0MjJFMzhBNkE2RURCMzg1OTNFRTA3 NERGOEZBMjlDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKqPLZSv7+a3z09EGtw+zdtVjoEY5QMy5TOn vvORGK9MgOiDvEUMRliD+/3eCdUi5PMb/RXKAVx3RU9/5EmrkfMMIFqqkjNzrqTw WchT9Xv8vcaNEocqQ1ds2eMjUF9yhWK9xehF/LZlMxW9bknEC1p0J1Zn0DpNi5zS ZAOS3AWZhzYuXD2gDpP+IzoMQpo14oEVc6UCLd6Ta59iOkbaR0yn3qOPyXthvCsa WP82Q8QGSfZiJZmm2gCCBBdNyta175eFEpxqrO73avIOrOLTgDyuICZLu4FaC0Dv 1dgZqyTbFNf4EstgV25TjN6w/pGC8J+8w5rS9nrFfS3MUuWMYSI= -----END CERTIFICATE-----Generated at Sun Jun 29 23:04:53 2025 by rpki-client