$ rpki-client -vvf repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft File: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft (raw, json) Hash identifier: PQr6hqo/u8vh7+JjGnharqSBPgB5iAHoNXC/aBapMAE= Subject key identifier: D2:38:F5:DC:25:5C:31:99:43:45:3D:E7:80:43:80:68:A8:D1:94:8D Authority key identifier: 91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 Certificate issuer: /CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Certificate serial: 6EDAF76AF54326585E9D0C64CDB0E14D575DE78C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft Manifest number: 0350 Signing time: Sun 04 May 2025 03:01:01 +0000 Manifest this update: Sun 04 May 2025 02:56:01 +0000 Manifest next update: Wed 07 May 2025 05:11:01 +0000 Files and hashes: 1: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl (hash: 3ah/avnBcoR16V1LkXJgJmSmnCAqJ4SWjwFmv827lEc=) 2: 3130332e3136392e3132382e302f32332d3234203d3e20313432333432.roa (hash: ygNFYmxoQz15pEcPBE3fhpYvFfYuF7aoX+ohmkLX02U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 05:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:da:f7:6a:f5:43:26:58:5e:9d:0c:64:cd:b0:e1:4d:57:5d:e7:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Validity Not Before: May 4 02:56:01 2025 GMT Not After : May 7 05:11:01 2025 GMT Subject: CN=D238F5DC255C319943453DE780438068A8D1948D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2f:cf:2d:ea:01:fd:79:8f:7d:a5:b6:49:79: b1:c6:47:dd:ac:54:1b:c9:5d:1a:c3:6b:28:31:51: cc:24:ac:cd:d0:2b:9b:df:b5:63:9c:50:42:2b:c4: f7:77:4a:8e:bc:ed:f1:fc:0a:0f:a2:cc:c4:bd:19: 5a:bc:83:27:a4:08:df:8e:c8:57:ad:01:63:45:52: a8:6d:7a:c4:3a:50:b4:15:bf:e7:aa:0d:62:9b:f4: 02:ce:f3:e0:e7:55:04:95:41:f4:31:47:71:40:f4: 34:0c:1c:8c:2e:5f:36:de:fb:c0:e0:2a:90:70:b4: 3b:4b:93:d9:d4:34:05:f8:f0:d2:ba:0e:be:6a:72: 75:80:26:22:b5:4b:b1:4f:e6:23:bc:c8:f2:35:93: eb:08:d9:ec:5e:9c:44:f0:81:44:81:08:69:b9:f6: 0d:88:98:ed:9a:35:01:f6:f1:04:43:51:c0:69:af: d5:68:eb:10:7d:16:d9:d7:ff:58:b5:03:03:43:a2: 30:95:d3:e3:3d:5e:b7:ca:26:a8:86:52:ef:5a:43: fc:63:64:f7:1e:66:cc:7c:bf:3f:08:7a:6f:36:73: bc:c5:90:c2:97:ef:3d:56:55:3b:5e:42:a4:28:7f: 3f:94:2b:32:64:df:fb:7a:00:ab:bc:60:24:a9:d2: 51:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:38:F5:DC:25:5C:31:99:43:45:3D:E7:80:43:80:68:A8:D1:94:8D X509v3 Authority Key Identifier: keyid:91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b2:ba:0e:49:6e:bf:ce:4f:52:78:59:14:b6:c1:9d:97:d5: 11:77:a3:5b:a0:1a:19:a8:bb:0f:9b:14:ee:72:b6:cd:26:65: 7d:30:6e:c6:3c:bd:99:a5:36:cd:15:63:29:bd:81:bd:0e:f2: 5c:b8:ab:29:da:84:4c:64:c1:c1:77:29:49:36:82:86:63:4c: b7:54:95:18:47:71:69:b9:ed:bd:18:99:97:93:fb:5a:f1:29: dd:89:c5:0f:51:83:c8:e4:f0:2e:18:7d:88:a2:71:71:25:0b: 5c:8d:1d:9f:87:af:e6:b4:05:55:bb:74:f1:dd:8f:69:13:4d: f4:97:78:85:7a:9b:08:45:e0:31:7d:ec:25:60:4a:95:62:29: 2d:13:e8:57:80:22:4c:79:0f:3b:b6:9e:58:27:ee:e0:59:cb: 97:7e:91:73:e0:a8:2e:2c:13:58:10:9f:8a:41:ba:4e:a6:dc: bc:2a:de:29:85:cc:a3:f9:82:fd:b2:71:3a:b7:54:67:0e:41: fa:1f:d0:4b:53:ab:d8:1e:52:19:38:74:93:e3:cb:94:44:76: 71:03:6e:02:e6:0e:6f:36:2f:68:08:b9:02:3d:5a:12:50:e7: 16:9b:e8:c3:f5:1f:c5:03:aa:ed:13:93:33:95:68:ed:57:88: 2e:89:9f:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbtr3avVDJlhenQxkzbDhTVdd54wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMy NjI2NEY1MDAeFw0yNTA1MDQwMjU2MDFaFw0yNTA1MDcwNTExMDFaMDMxMTAvBgNV BAMTKEQyMzhGNURDMjU1QzMxOTk0MzQ1M0RFNzgwNDM4MDY4QThEMTk0OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZL88t6gH9eY99pbZJebHGR92s VBvJXRrDaygxUcwkrM3QK5vftWOcUEIrxPd3So687fH8Cg+izMS9GVq8gyekCN+O yFetAWNFUqhtesQ6ULQVv+eqDWKb9ALO8+DnVQSVQfQxR3FA9DQMHIwuXzbe+8Dg KpBwtDtLk9nUNAX48NK6Dr5qcnWAJiK1S7FP5iO8yPI1k+sI2exenETwgUSBCGm5 9g2ImO2aNQH28QRDUcBpr9Vo6xB9FtnX/1i1AwNDojCV0+M9XrfKJqiGUu9aQ/xj ZPceZsx8vz8Iem82c7zFkMKX7z1WVTteQqQofz+UKzJk3/t6AKu8YCSp0lG5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0jj13CVcMZlDRT3ngEOAaKjRlI0wHwYDVR0j BBgwFoAUkd8FjWrG9WPcrobbr7SKwyYmT1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjBlMzY0Yi03NzllLTQwZDUtYWQwZS1kOTE3ODc3OGQ2YjEvMC85MURGMDU4RDZB QzZGNTYzRENBRTg2REJBRkI0OEFDMzI2MjY0RjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMyNjI2 NEY1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmIwZTM2NGItNzc5ZS00MGQ1LWFk MGUtZDkxNzg3NzhkNmIxLzAvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhB QzMyNjI2NEY1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6yug5Jbr/OT1J4WRS2wZ2X1RF3o1ugGhmo uw+bFO5yts0mZX0wbsY8vZmlNs0VYym9gb0O8ly4qynahExkwcF3KUk2goZjTLdU lRhHcWm57b0YmZeT+1rxKd2JxQ9Rg8jk8C4YfYiicXElC1yNHZ+Hr+a0BVW7dPHd j2kTTfSXeIV6mwhF4DF97CVgSpViKS0T6FeAIkx5Dzu2nlgn7uBZy5d+kXPgqC4s E1gQn4pBuk6m3Lwq3imFzKP5gv2ycTq3VGcOQfof0EtTq9geUhk4dJPjy5REdnED bgLmDm82L2gIuQI9WhJQ5xab6MP1H8UDqu0TkzOVaO1XiC6Jnzc= -----END CERTIFICATE-----Generated at Tue May 6 20:10:05 2025 by rpki-client