$ rpki-client -vvf repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft File: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft (raw, json) Hash identifier: BWsQAt8Yw+/6BxC5xzf6i1gZ6tcmzbgSZnoPtrEtrIw= Subject key identifier: C5:15:9A:CF:96:15:EE:C8:91:60:BA:AD:2C:A9:40:70:9C:58:28:89 Authority key identifier: 91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 Certificate issuer: /CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Certificate serial: 164649E7BAC70EA67C517473C6FA2D6D8F83E2C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft Manifest number: 0381 Signing time: Fri 22 Aug 2025 19:31:05 +0000 Manifest this update: Fri 22 Aug 2025 19:26:05 +0000 Manifest next update: Tue 26 Aug 2025 05:55:05 +0000 Files and hashes: 1: 3130332e3136392e3132382e302f32332d3234203d3e20313432333432.roa (hash: ygNFYmxoQz15pEcPBE3fhpYvFfYuF7aoX+ohmkLX02U=) 2: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl (hash: 7YC2PimAlrnNMz0tbJfZaF6h9iTo+cAqQK1rsKH1PGY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:46:49:e7:ba:c7:0e:a6:7c:51:74:73:c6:fa:2d:6d:8f:83:e2:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Validity Not Before: Aug 22 19:26:05 2025 GMT Not After : Aug 26 05:55:05 2025 GMT Subject: CN=C5159ACF9615EEC89160BAAD2CA940709C582889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:80:d6:7b:d7:16:d5:f9:7e:b9:0c:52:7d:61: fd:23:e2:c3:cf:3d:e8:9e:c3:e8:0f:e1:51:2d:27: 97:05:aa:80:ee:c2:ce:b0:53:39:71:64:ec:2c:e5: 5d:c5:1a:ca:d4:3f:b5:4a:4f:28:ff:90:8e:97:3f: ef:d0:af:c6:cd:ce:30:2f:9a:14:0c:4d:ba:fb:8b: f9:c4:ce:ef:b8:45:60:99:c8:65:a2:6a:71:db:90: a7:5c:9d:95:1c:0b:e8:a9:aa:fa:9e:8e:c9:d7:be: 31:49:f2:42:0f:68:32:cb:67:5e:a4:fa:81:2a:5e: a5:ea:1c:fb:55:76:ad:bc:b1:b9:a9:6f:85:d2:b1: 42:44:ca:c1:1d:d6:f8:6b:b3:33:52:81:b4:82:04: 7d:ee:e9:1a:5e:d6:1b:13:2c:17:ef:74:ff:ed:fa: ef:ef:9a:89:0b:bb:68:23:d6:19:5a:35:de:79:26: 9e:b0:ac:cd:6e:a8:45:28:32:2c:ea:1f:16:f6:2f: f9:fe:3c:07:13:0a:20:4a:c0:c7:89:3d:ca:c2:f1: be:35:8f:f5:c1:30:b1:d9:27:03:ca:4d:43:8a:5a: 0c:f2:ce:14:db:27:bc:2d:fc:67:43:f5:f2:96:0c: 60:08:fd:11:1b:c8:0c:53:8e:6e:46:28:08:e1:2c: 05:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:15:9A:CF:96:15:EE:C8:91:60:BA:AD:2C:A9:40:70:9C:58:28:89 X509v3 Authority Key Identifier: keyid:91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:ca:7a:e2:1d:4e:14:cf:79:ae:cc:c8:d3:40:71:4b:7d:e8: a8:6c:e3:85:73:2d:90:b7:7b:8e:38:24:aa:ac:b8:f1:ee:f6: c2:d7:4d:3e:4d:46:ed:04:57:2c:08:66:3a:df:be:f4:f4:c7: 13:5f:2d:26:56:3c:37:be:91:3e:17:98:09:20:a8:1e:23:15: 65:22:86:d7:ff:89:e5:fa:7f:97:22:c8:46:93:ff:18:af:69: c2:51:0f:37:c2:3c:0c:c8:b3:e8:38:a0:9e:86:8d:bb:cc:ae: 1f:4c:13:35:32:39:0d:b7:02:0a:01:2d:dd:a4:33:1e:7a:5a: c3:21:19:cc:1a:4e:76:8d:42:4d:96:21:44:90:e0:38:f5:59: f6:79:60:d0:f6:ea:6c:e7:d4:b4:06:74:85:8c:66:10:d0:5d: f3:29:e6:98:47:d3:62:37:31:a1:69:d0:9f:d0:b8:ef:23:ce: 90:58:8c:20:71:f0:4c:3d:85:0e:a5:d0:ae:66:b9:2f:f6:80: 28:6b:5c:79:3c:bd:c3:b9:9f:74:0b:d9:9d:7b:4e:c6:fe:2d: d5:ee:5f:86:b9:5f:6d:11:a5:d8:65:ef:f0:52:65:68:b7:75: 8e:ca:b3:63:93:7a:84:18:e8:89:78:a3:0c:43:f4:18:7f:d5: 6f:1d:68:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFkZJ57rHDqZ8UXRzxvotbY+D4sUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMy NjI2NEY1MDAeFw0yNTA4MjIxOTI2MDVaFw0yNTA4MjYwNTU1MDVaMDMxMTAvBgNV BAMTKEM1MTU5QUNGOTYxNUVFQzg5MTYwQkFBRDJDQTk0MDcwOUM1ODI4ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWgNZ71xbV+X65DFJ9Yf0j4sPP Peiew+gP4VEtJ5cFqoDuws6wUzlxZOws5V3FGsrUP7VKTyj/kI6XP+/Qr8bNzjAv mhQMTbr7i/nEzu+4RWCZyGWianHbkKdcnZUcC+ipqvqejsnXvjFJ8kIPaDLLZ16k +oEqXqXqHPtVdq28sbmpb4XSsUJEysEd1vhrszNSgbSCBH3u6Rpe1hsTLBfvdP/t +u/vmokLu2gj1hlaNd55Jp6wrM1uqEUoMizqHxb2L/n+PAcTCiBKwMeJPcrC8b41 j/XBMLHZJwPKTUOKWgzyzhTbJ7wt/GdD9fKWDGAI/REbyAxTjm5GKAjhLAVFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxRWaz5YV7siRYLqtLKlAcJxYKIkwHwYDVR0j BBgwFoAUkd8FjWrG9WPcrobbr7SKwyYmT1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjBlMzY0Yi03NzllLTQwZDUtYWQwZS1kOTE3ODc3OGQ2YjEvMC85MURGMDU4RDZB QzZGNTYzRENBRTg2REJBRkI0OEFDMzI2MjY0RjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMyNjI2 NEY1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmIwZTM2NGItNzc5ZS00MGQ1LWFk MGUtZDkxNzg3NzhkNmIxLzAvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhB QzMyNjI2NEY1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABnKeuIdThTPea7MyNNAcUt96Khs44VzLZC3 e444JKqsuPHu9sLXTT5NRu0EVywIZjrfvvT0xxNfLSZWPDe+kT4XmAkgqB4jFWUi htf/ieX6f5ciyEaT/xivacJRDzfCPAzIs+g4oJ6GjbvMrh9MEzUyOQ23AgoBLd2k Mx56WsMhGcwaTnaNQk2WIUSQ4Dj1WfZ5YND26mzn1LQGdIWMZhDQXfMp5phH02I3 MaFp0J/QuO8jzpBYjCBx8Ew9hQ6l0K5muS/2gChrXHk8vcO5n3QL2Z17Tsb+LdXu X4a5X20Rpdhl7/BSZWi3dY7Ks2OTeoQY6Il4owxD9Bh/1W8daFc= -----END CERTIFICATE-----Generated at Sat Aug 23 12:07:43 2025 by rpki-client