$ rpki-client -vvf repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft File: 091F7323435A889C466D811B73B98389C1E084DD.mft (raw, json) Hash identifier: XAIBf9/ND1Pi9U6/lo5LBauwsJDlYY7PHk/+TKTLWA8= Subject key identifier: DE:9A:C8:51:73:5C:30:B3:56:73:2E:85:8E:E6:9D:60:C4:A6:6E:AE Authority key identifier: 09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD Certificate issuer: /CN=091F7323435A889C466D811B73B98389C1E084DD Certificate serial: 70CB8BF082ED2BA62670B9EE1B8D28ABEE918526 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft Manifest number: 023F Signing time: Sat 28 Jun 2025 22:01:47 +0000 Manifest this update: Sat 28 Jun 2025 21:56:47 +0000 Manifest next update: Wed 02 Jul 2025 04:12:47 +0000 Files and hashes: 1: 091F7323435A889C466D811B73B98389C1E084DD.crl (hash: jiHSXSzcWeeum2BgYVhEJXlGJwEeHCdFURlnzDjEN8U=) 2: 3130332e3137382e31362e302f32342d3234203d3e2039333431.roa (hash: Y1e1P9Lfp6j2uN41yXsuTRVgN8tFe5HoW++JbHObZeY=) 3: 3130332e3137382e31362e302f32332d3233203d3e2039333431.roa (hash: uiUSxANoNODzFIewLGALThH13uAn6LXmm2UK715WT+g=) 4: 3130332e3137382e31372e302f32342d3234203d3e2039333431.roa (hash: XeFzp7e3uJ/XW0SCT6+L3eC2Ka1QVpzvs90ESVm5heI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 04:12:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:cb:8b:f0:82:ed:2b:a6:26:70:b9:ee:1b:8d:28:ab:ee:91:85:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091F7323435A889C466D811B73B98389C1E084DD Validity Not Before: Jun 28 21:56:47 2025 GMT Not After : Jul 2 04:12:47 2025 GMT Subject: CN=DE9AC851735C30B356732E858EE69D60C4A66EAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:44:6b:39:bb:21:28:f0:e7:92:7f:00:e8:86: 02:aa:9a:01:18:52:33:99:bd:1e:32:6b:47:07:3a: 13:6a:a8:44:78:c1:0a:72:6c:ad:d6:ed:df:49:23: 1c:1d:82:c7:c1:a2:a7:f6:ae:55:b0:a4:45:91:b7: 09:c9:66:40:05:13:8f:78:b2:39:c4:70:df:2a:41: dd:12:92:6d:d4:fc:d3:0e:b2:82:24:25:c3:c5:70: 48:4b:9e:e6:92:cf:12:02:1c:cf:a5:35:99:61:b8: 05:7e:c3:54:8e:17:92:43:cc:55:2c:69:4a:c6:5b: 3c:b5:19:48:fc:78:0e:e8:57:82:6e:b2:b1:8e:e0: 39:05:3b:7b:1f:d5:ea:aa:13:0f:39:f0:b6:6d:51: 27:eb:de:8f:9e:a9:f6:7b:62:09:28:09:21:f7:fb: 27:d8:2d:52:c5:d3:c0:4e:c7:17:e3:55:26:a3:eb: 8e:02:4e:17:20:8e:1e:ca:3f:09:8d:b7:33:88:a7: 83:51:88:48:e9:a2:60:06:f4:7f:79:2e:9f:17:ab: b1:d0:92:f2:9d:d0:38:6e:b2:7c:da:01:af:ff:44: 15:93:d3:c5:2d:b7:99:1d:0e:27:37:86:1e:b2:61: 30:85:cc:07:39:70:20:72:27:2f:9c:0b:46:f9:b3: 53:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9A:C8:51:73:5C:30:B3:56:73:2E:85:8E:E6:9D:60:C4:A6:6E:AE X509v3 Authority Key Identifier: keyid:09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:69:34:0e:2b:42:af:a4:9f:b4:91:a2:56:65:2a:5a:0f:1e: d5:72:40:fb:f3:19:50:a0:fc:6d:0a:6c:b7:72:44:c2:d5:d4: cf:09:93:bc:87:fa:a4:6f:2a:bd:ba:ef:b5:56:45:57:d6:14: b3:c1:03:56:09:a0:43:b2:91:d6:37:0e:c1:65:c2:1e:3a:78: 3a:13:92:e0:a6:a7:88:13:49:34:13:21:db:5f:cc:e2:cb:8c: bc:b3:e1:44:10:22:18:84:b4:7d:32:60:0c:c2:22:ab:11:74: f5:02:c5:8c:f6:c6:92:06:ed:1b:f1:9f:14:71:5f:8f:22:ee: 6e:51:75:db:b9:9e:94:42:75:2e:89:90:e0:fa:6c:58:bb:b5: af:a5:2a:0a:8d:fd:ba:d4:09:ae:75:40:e3:83:0f:d9:05:b6: 15:14:2b:d1:28:2d:6f:a8:50:03:d0:8c:29:e4:28:30:ef:fc: d3:e8:fa:ce:69:6c:b6:77:ce:36:48:55:07:19:09:55:d0:aa: a3:7c:3d:79:c6:04:17:97:c8:70:84:d2:cd:6e:18:ff:7b:2d: 2f:69:d8:46:cc:63:82:4c:83:fa:8f:5a:30:9d:2e:a9:13:a8: c1:71:96:8d:62:58:79:4e:ea:da:62:04:f9:ac:2b:ce:d4:d6: 70:d7:7a:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcMuL8ILtK6YmcLnuG40oq+6RhSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgzODlD MUUwODRERDAeFw0yNTA2MjgyMTU2NDdaFw0yNTA3MDIwNDEyNDdaMDMxMTAvBgNV BAMTKERFOUFDODUxNzM1QzMwQjM1NjczMkU4NThFRTY5RDYwQzRBNjZFQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4RGs5uyEo8OeSfwDohgKqmgEY UjOZvR4ya0cHOhNqqER4wQpybK3W7d9JIxwdgsfBoqf2rlWwpEWRtwnJZkAFE494 sjnEcN8qQd0Skm3U/NMOsoIkJcPFcEhLnuaSzxICHM+lNZlhuAV+w1SOF5JDzFUs aUrGWzy1GUj8eA7oV4JusrGO4DkFO3sf1eqqEw858LZtUSfr3o+eqfZ7YgkoCSH3 +yfYLVLF08BOxxfjVSaj644CThcgjh7KPwmNtzOIp4NRiEjpomAG9H95Lp8Xq7HQ kvKd0DhusnzaAa//RBWT08Utt5kdDic3hh6yYTCFzAc5cCByJy+cC0b5s1MRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3prIUXNcMLNWcy6FjuadYMSmbq4wHwYDVR0j BBgwFoAUCR9zI0NaiJxGbYEbc7mDicHghN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YzFlODBkNC02ZWJlLTQ5MmMtYTBjNS1kNzU5ODI3NTMzYjMvMC8wOTFGNzMyMzQz NUE4ODlDNDY2RDgxMUI3M0I5ODM4OUMxRTA4NERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgzODlDMUUw ODRERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGMxZTgwZDQtNmViZS00OTJjLWEw YzUtZDc1OTgyNzUzM2IzLzAvMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgz ODlDMUUwODRERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFpNA4rQq+kn7SRolZlKloPHtVyQPvzGVCg /G0KbLdyRMLV1M8Jk7yH+qRvKr2677VWRVfWFLPBA1YJoEOykdY3DsFlwh46eDoT kuCmp4gTSTQTIdtfzOLLjLyz4UQQIhiEtH0yYAzCIqsRdPUCxYz2xpIG7RvxnxRx X48i7m5Rddu5npRCdS6JkOD6bFi7ta+lKgqN/brUCa51QOODD9kFthUUK9EoLW+o UAPQjCnkKDDv/NPo+s5pbLZ3zjZIVQcZCVXQqqN8PXnGBBeXyHCE0s1uGP97LS9p 2EbMY4JMg/qPWjCdLqkTqMFxlo1iWHlO6tpiBPmsK87U1nDXeic= -----END CERTIFICATE-----Generated at Mon Jun 30 10:24:18 2025 by rpki-client