$ rpki-client -vvf repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft File: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft (raw, json) Hash identifier: TFl2FehfdaL7ivyTeqwenxVWauhoWY6XtaNgpNWFvDg= Subject key identifier: F0:DA:8E:94:6E:B9:88:55:CA:06:0B:A3:EE:89:0A:41:4E:41:C4:7F Authority key identifier: 91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 Certificate issuer: /CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Certificate serial: 1AAA328326BB940276F5977D07432EE64A2E5B01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft Manifest number: 03E1 Signing time: Tue 24 Mar 2026 15:21:11 +0000 Manifest this update: Tue 24 Mar 2026 15:16:11 +0000 Manifest next update: Fri 27 Mar 2026 19:05:11 +0000 Files and hashes: 1: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl (hash: HfQwzSMrQp9o74hDkV4w+dNOOTlC7TDeRbHXc2ShOtw=) 2: 3130332e3136392e3132382e302f32332d3234203d3e20313432333432.roa (hash: QFVEqtesaTrmTJQnAhXdEFMlhzgCjQGVydaTISBOk4I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:aa:32:83:26:bb:94:02:76:f5:97:7d:07:43:2e:e6:4a:2e:5b:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Validity Not Before: Mar 24 15:16:11 2026 GMT Not After : Mar 27 19:05:11 2026 GMT Subject: CN=F0DA8E946EB98855CA060BA3EE890A414E41C47F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d7:de:e8:af:c5:ca:22:b2:14:cf:29:ca:ad: f4:0a:f9:01:9e:40:15:be:1a:26:b8:75:49:ac:ac: 7b:5a:9d:b7:23:21:be:7b:a2:c8:c5:e7:b4:78:b2: d2:da:10:f0:aa:be:dd:34:59:b8:b2:a5:14:3b:b0: 6c:4c:42:c1:50:41:14:31:25:c2:3e:9f:94:91:e9: 8e:c9:1c:ec:6e:21:81:9e:c9:81:40:a4:5c:3e:b9: 2f:6c:c8:21:ad:90:39:4a:96:f7:35:71:2c:22:42: 97:e0:da:5f:da:cf:4f:88:1f:b9:53:a9:62:2e:5b: 6b:83:d4:4e:ad:2f:4a:15:c5:47:5a:58:c5:d8:43: ae:e9:a2:67:5a:2d:10:85:8d:b3:39:1b:b1:55:b9: 80:a0:75:9f:6f:67:15:3e:a7:be:d6:13:40:f0:15: 6f:60:d9:f9:d8:71:6b:91:12:fa:d7:38:ae:2d:0c: b3:63:9b:3b:78:c3:36:67:78:2a:ef:b7:e7:fb:8d: 0e:8a:64:0e:b7:c6:26:7d:96:04:52:3d:99:a2:0f: 97:3f:03:17:99:b9:d8:29:03:d1:16:d8:5f:c0:f3: 1f:a0:1c:0e:ea:a5:5f:3a:63:a1:d3:a2:d9:6e:90: 07:d4:47:d3:17:20:67:cc:aa:d6:27:fa:a8:5e:2c: ea:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DA:8E:94:6E:B9:88:55:CA:06:0B:A3:EE:89:0A:41:4E:41:C4:7F X509v3 Authority Key Identifier: keyid:91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:63:2d:d5:61:b5:d2:6c:c0:ba:22:55:3b:29:96:cf:e4:36: 88:38:9c:15:53:9d:dc:8c:e6:1f:5c:fd:38:d2:db:94:88:09: 3b:ac:69:e5:fa:ca:8b:45:f6:2e:fc:5d:91:69:29:90:62:62: 9b:ed:6d:b9:6f:0a:36:6c:4a:15:f6:cd:59:3a:32:36:af:6e: eb:f8:fe:e3:9e:02:89:c4:ac:3d:4d:70:28:82:de:89:51:7d: 66:00:20:35:94:cb:4c:3e:8a:ea:ed:6d:23:c0:c5:21:5f:b9: 8b:98:bd:22:e5:a5:c6:b0:95:c8:c2:62:49:4e:07:d8:c5:aa: 71:4b:44:82:5b:6c:69:11:6c:d6:1e:eb:8c:b7:92:e8:f8:6a: d7:6a:20:70:80:68:87:7d:bb:44:24:77:80:e6:9c:36:67:4c: 50:d8:fa:25:ee:4d:4c:a2:ba:e3:7c:1c:5d:96:1d:ea:f6:cf: 33:1b:9b:c5:3a:82:41:8a:e1:ec:d7:b2:9c:18:79:47:d9:5e: 0c:63:4c:38:f9:21:9d:35:e1:ae:16:a2:77:a9:00:ea:3c:8a: 6a:66:2a:8a:c3:b8:22:9d:7e:b8:57:2f:5c:12:83:f3:f0:7d: 09:ba:ca:20:d8:06:ef:c0:18:b1:a0:04:aa:08:30:36:12:13: fe:99:e6:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGqoygya7lAJ29Zd9B0Mu5kouWwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMy NjI2NEY1MDAeFw0yNjAzMjQxNTE2MTFaFw0yNjAzMjcxOTA1MTFaMDMxMTAvBgNV BAMTKEYwREE4RTk0NkVCOTg4NTVDQTA2MEJBM0VFODkwQTQxNEU0MUM0N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE197or8XKIrIUzynKrfQK+QGe QBW+Gia4dUmsrHtanbcjIb57osjF57R4stLaEPCqvt00WbiypRQ7sGxMQsFQQRQx JcI+n5SR6Y7JHOxuIYGeyYFApFw+uS9syCGtkDlKlvc1cSwiQpfg2l/az0+IH7lT qWIuW2uD1E6tL0oVxUdaWMXYQ67pomdaLRCFjbM5G7FVuYCgdZ9vZxU+p77WE0Dw FW9g2fnYcWuREvrXOK4tDLNjmzt4wzZneCrvt+f7jQ6KZA63xiZ9lgRSPZmiD5c/ AxeZudgpA9EW2F/A8x+gHA7qpV86Y6HTotlukAfUR9MXIGfMqtYn+qheLOphAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8NqOlG65iFXKBguj7okKQU5BxH8wHwYDVR0j BBgwFoAUkd8FjWrG9WPcrobbr7SKwyYmT1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjBlMzY0Yi03NzllLTQwZDUtYWQwZS1kOTE3ODc3OGQ2YjEvMC85MURGMDU4RDZB QzZGNTYzRENBRTg2REJBRkI0OEFDMzI2MjY0RjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMyNjI2 NEY1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmIwZTM2NGItNzc5ZS00MGQ1LWFk MGUtZDkxNzg3NzhkNmIxLzAvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhB QzMyNjI2NEY1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1jLdVhtdJswLoiVTspls/kNog4nBVTndyM 5h9c/TjS25SICTusaeX6yotF9i78XZFpKZBiYpvtbblvCjZsShX2zVk6Mjavbuv4 /uOeAonErD1NcCiC3olRfWYAIDWUy0w+iurtbSPAxSFfuYuYvSLlpcawlcjCYklO B9jFqnFLRIJbbGkRbNYe64y3kuj4atdqIHCAaId9u0Qkd4DmnDZnTFDY+iXuTUyi uuN8HF2WHer2zzMbm8U6gkGK4ezXspwYeUfZXgxjTDj5IZ014a4WonepAOo8impm KorDuCKdfrhXL1wSg/PwfQm6yiDYBu/AGLGgBKoIMDYSE/6Z5qs= -----END CERTIFICATE-----Generated at Thu Mar 26 10:10:35 2026 by rpki-client