$ rpki-client -vvf repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft File: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft (raw, json) Hash identifier: wBKpvGuzH3Tt9vI457D13Ydu4otj1Um0QYc8vqZUKJg= Subject key identifier: 9E:05:FD:2A:BC:B2:F1:5E:6A:29:BE:E1:A1:28:B1:9F:1D:98:6B:D8 Authority key identifier: 91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 Certificate issuer: /CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Certificate serial: 7018AA2AE481C2F165736921B058854FC9C0F4A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft Manifest number: 039B Signing time: Sun 19 Oct 2025 15:01:02 +0000 Manifest this update: Sun 19 Oct 2025 14:56:02 +0000 Manifest next update: Wed 22 Oct 2025 19:13:02 +0000 Files and hashes: 1: 3130332e3136392e3132382e302f32332d3234203d3e20313432333432.roa (hash: ygNFYmxoQz15pEcPBE3fhpYvFfYuF7aoX+ohmkLX02U=) 2: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl (hash: lC9OXkbwkOkzmwuNh+SNXHBXJaqOgeZD6Fdax5Gd+Q8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:18:aa:2a:e4:81:c2:f1:65:73:69:21:b0:58:85:4f:c9:c0:f4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Validity Not Before: Oct 19 14:56:02 2025 GMT Not After : Oct 22 19:13:02 2025 GMT Subject: CN=9E05FD2ABCB2F15E6A29BEE1A128B19F1D986BD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a4:f2:44:0d:be:9b:e2:54:7a:5b:fe:80:bc: 0b:9a:6b:83:0d:18:e0:ca:24:a8:a7:0c:41:c6:e1: 6b:28:f4:94:ae:6e:e9:e4:78:d8:96:0b:48:62:5d: bb:06:6b:23:7c:cf:7a:f3:20:03:36:8c:15:ff:f2: 22:8b:55:ac:01:04:b1:5e:97:ee:65:8b:98:64:c6: 56:c5:fb:2d:4a:3c:e6:f0:58:aa:b1:8d:3f:84:05: bf:21:e1:96:13:1a:03:19:0e:09:4f:c1:5e:98:e5: 4f:3e:0c:08:70:70:6c:bf:ec:44:2d:45:dd:97:cd: aa:54:30:bd:1e:98:b3:22:04:34:48:01:6a:40:0b: ba:9b:1c:34:6c:39:b6:c8:c8:46:c2:bd:3e:c8:e7: f1:f1:8a:65:0a:db:39:ad:f7:5c:ec:d1:2b:1c:a9: 6f:e5:82:48:08:24:20:bc:4c:15:83:2e:f1:5d:9a: 9f:df:a4:ab:e2:5c:98:c3:31:ed:e0:c9:d9:11:9a: 5f:a8:95:59:1b:08:e7:88:a9:2c:0e:d3:28:8d:67: dc:ae:0c:43:ea:5f:41:60:25:e8:92:da:22:0e:2a: 62:0f:24:1c:f6:01:92:94:6a:74:6c:56:af:4f:c9: a4:9d:be:18:fa:a6:77:48:a5:52:a2:0a:93:c7:54: e9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:05:FD:2A:BC:B2:F1:5E:6A:29:BE:E1:A1:28:B1:9F:1D:98:6B:D8 X509v3 Authority Key Identifier: keyid:91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:24:a1:cc:7a:a7:47:98:3e:fa:32:b3:86:0f:43:df:c9:83: 35:8c:fb:f5:23:e1:fb:4a:2c:ee:67:03:fb:f9:f0:28:4f:e0: fe:0b:3a:e8:c9:3e:12:b6:82:a2:ed:43:a9:9c:af:70:7e:2e: bd:76:a7:91:3d:22:03:c9:cf:0d:0d:34:38:4a:6a:6f:12:00: 94:2e:72:27:39:68:4b:3a:8c:53:53:1c:0b:41:bb:bf:ee:2f: 27:87:de:5c:f2:8c:b2:ea:62:6a:e8:7f:b7:60:89:11:71:f0: 84:0e:21:16:4f:22:dc:e3:b5:90:01:5c:0e:3a:1d:07:d1:26: 6e:78:78:88:b6:f0:35:67:be:ac:0f:6d:9c:53:57:6c:e4:60: ce:7d:0b:15:ae:9d:b5:91:a4:a5:a9:0c:b1:48:8f:11:1f:c3: 36:27:3f:03:02:20:6c:d3:26:28:c1:24:cd:55:e4:d4:ff:25: ae:92:a4:5c:cd:71:1f:48:82:ef:89:1f:72:9c:4f:41:67:c4: 7d:58:67:ea:23:59:39:f1:b3:c9:a5:3c:fe:36:5c:22:c2:a9: 5d:01:2f:4e:b7:8e:b1:c1:ce:c2:f2:af:a6:a7:15:87:68:9c: 21:1f:d4:22:07:ff:ec:ff:27:22:05:a0:2d:c5:f4:ca:43:2b: 83:f7:24:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcBiqKuSBwvFlc2khsFiFT8nA9KAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMy NjI2NEY1MDAeFw0yNTEwMTkxNDU2MDJaFw0yNTEwMjIxOTEzMDJaMDMxMTAvBgNV BAMTKDlFMDVGRDJBQkNCMkYxNUU2QTI5QkVFMUExMjhCMTlGMUQ5ODZCRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrpPJEDb6b4lR6W/6AvAuaa4MN GODKJKinDEHG4Wso9JSubunkeNiWC0hiXbsGayN8z3rzIAM2jBX/8iKLVawBBLFe l+5li5hkxlbF+y1KPObwWKqxjT+EBb8h4ZYTGgMZDglPwV6Y5U8+DAhwcGy/7EQt Rd2XzapUML0emLMiBDRIAWpAC7qbHDRsObbIyEbCvT7I5/HximUK2zmt91zs0Ssc qW/lgkgIJCC8TBWDLvFdmp/fpKviXJjDMe3gydkRml+olVkbCOeIqSwO0yiNZ9yu DEPqX0FgJeiS2iIOKmIPJBz2AZKUanRsVq9PyaSdvhj6pndIpVKiCpPHVOkzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUngX9Kryy8V5qKb7hoSixnx2Ya9gwHwYDVR0j BBgwFoAUkd8FjWrG9WPcrobbr7SKwyYmT1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjBlMzY0Yi03NzllLTQwZDUtYWQwZS1kOTE3ODc3OGQ2YjEvMC85MURGMDU4RDZB QzZGNTYzRENBRTg2REJBRkI0OEFDMzI2MjY0RjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMyNjI2 NEY1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmIwZTM2NGItNzc5ZS00MGQ1LWFk MGUtZDkxNzg3NzhkNmIxLzAvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhB QzMyNjI2NEY1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMkocx6p0eYPvoys4YPQ9/JgzWM+/Uj4ftK LO5nA/v58ChP4P4LOujJPhK2gqLtQ6mcr3B+Lr12p5E9IgPJzw0NNDhKam8SAJQu cic5aEs6jFNTHAtBu7/uLyeH3lzyjLLqYmrof7dgiRFx8IQOIRZPItzjtZABXA46 HQfRJm54eIi28DVnvqwPbZxTV2zkYM59CxWunbWRpKWpDLFIjxEfwzYnPwMCIGzT JijBJM1V5NT/Ja6SpFzNcR9Igu+JH3KcT0FnxH1YZ+ojWTnxs8mlPP42XCLCqV0B L063jrHBzsLyr6anFYdonCEf1CIH/+z/JyIFoC3F9MpDK4P3JNA= -----END CERTIFICATE-----Generated at Mon Oct 20 20:54:02 2025 by rpki-client