$ rpki-client -vvf repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft File: 91982855FD8C4C119B32F9D536B640804091001C.mft (raw, json) Hash identifier: 7zdz1eOT0dPYebXRwk0APihVDFO+tooAyVxl8M+yGqo= Subject key identifier: D1:A7:0C:CF:10:79:77:20:33:00:CF:A2:59:52:00:B8:60:5C:A2:6E Authority key identifier: 91:98:28:55:FD:8C:4C:11:9B:32:F9:D5:36:B6:40:80:40:91:00:1C Certificate issuer: /CN=91982855FD8C4C119B32F9D536B640804091001C Certificate serial: 1F36BB72AC93E0312C0F51EC1519C812C57E8A59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91982855FD8C4C119B32F9D536B640804091001C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft Manifest number: 04E7 Signing time: Sun 29 Jun 2025 21:52:06 +0000 Manifest this update: Sun 29 Jun 2025 21:47:06 +0000 Manifest next update: Wed 02 Jul 2025 22:09:06 +0000 Files and hashes: 1: 91982855FD8C4C119B32F9D536B640804091001C.crl (hash: zBt/KFTQEdtWzxXNcvIS3ZbOjGMRpgocAgBC+KWjkrk=) 2: 3130332e35322e36342e302f32322d3234203d3e20313331373335.roa (hash: svxXfJ7ypnOi0ZD+Lr+tu4BVUww3l9AMvmS2fynY310=) 3: 3130332e31352e3234302e302f32322d3234203d3e20313331373335.roa (hash: XKkTGgDl7AJdyrktq8gvl18OiQMp7I8a2RgU5SEEXyk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.crl rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91982855FD8C4C119B32F9D536B640804091001C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 22:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:36:bb:72:ac:93:e0:31:2c:0f:51:ec:15:19:c8:12:c5:7e:8a:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91982855FD8C4C119B32F9D536B640804091001C Validity Not Before: Jun 29 21:47:06 2025 GMT Not After : Jul 2 22:09:06 2025 GMT Subject: CN=D1A70CCF107977203300CFA2595200B8605CA26E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:40:2b:b1:a9:d3:ee:7b:b7:17:f7:cf:11:33: f6:e5:95:86:14:64:07:42:3b:1e:d1:a3:5a:c5:15: 86:2b:a1:e4:0e:6e:0b:1a:e5:a1:67:6a:69:b4:2f: e9:56:db:c7:82:84:22:36:3b:f7:1c:b4:c8:d2:f1: 8d:98:2e:4e:0c:a2:c9:c9:c2:2d:f9:c5:4c:f1:da: 94:3b:04:ee:06:e8:9f:19:85:a4:9f:98:df:7b:85: 3c:5e:fc:40:7c:45:e8:cf:4d:cc:e1:e8:46:61:2f: 30:84:4a:4f:b7:c9:7e:e6:9f:02:e6:32:ca:11:01: 1a:9d:fa:93:c3:f7:61:34:fc:06:3c:a4:f7:59:67: 5c:77:e6:53:c2:54:f3:2d:5b:a4:94:ae:5f:fc:56: b2:ec:5e:83:50:d7:cf:e4:17:c4:3b:c0:46:31:1f: 67:a8:5f:41:28:fb:66:3e:f3:09:5d:92:04:f2:18: 9b:56:9a:dc:c0:5a:51:4c:f9:1c:cd:0b:90:9a:fd: 03:ef:bf:5c:0a:0c:a7:2c:dd:34:f5:f6:98:11:66: 99:2c:bf:76:f8:5b:bd:8b:1d:e2:b2:ae:c3:45:bd: eb:56:65:28:62:07:0b:46:4e:e2:f2:e7:2c:51:b6: 54:7a:5e:45:11:5a:13:c3:00:64:26:b2:f9:6b:da: bf:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A7:0C:CF:10:79:77:20:33:00:CF:A2:59:52:00:B8:60:5C:A2:6E X509v3 Authority Key Identifier: keyid:91:98:28:55:FD:8C:4C:11:9B:32:F9:D5:36:B6:40:80:40:91:00:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91982855FD8C4C119B32F9D536B640804091001C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:8c:ce:2b:90:9c:23:b3:72:e7:2e:1e:48:65:54:e6:83:20: e8:1a:52:fd:2b:06:a6:34:ab:46:e0:6f:2f:6b:57:86:a9:e6: d7:6d:f3:82:5c:3f:e3:3e:d4:98:4b:0f:4d:b5:3c:06:1f:a5: 3a:43:92:44:e5:eb:fb:91:da:99:8c:5e:10:d8:2d:ff:29:99: 77:df:37:09:d6:fa:9f:e4:09:76:80:e1:4e:5b:9e:61:63:82: 1a:45:35:d3:4d:1c:4b:65:81:86:d1:6e:e9:0d:11:3b:1a:91: 4c:f4:a4:21:83:b0:3d:b8:0d:a6:ec:9a:ca:56:6c:d1:f3:f8: 0d:5b:d7:f6:57:71:3f:de:72:5f:9f:a6:0b:0d:8b:d6:b3:ac: bf:21:d0:a6:c5:1e:bb:d1:02:e2:fe:b8:39:1c:7e:31:90:d6: a8:bc:ab:09:23:44:87:2e:19:d4:3f:fd:a8:9b:35:d2:62:16: 6f:23:dc:90:58:25:ac:ca:3b:b1:cb:2e:9a:d5:66:94:44:a8: 6e:42:ff:42:3e:19:21:18:b4:ea:ba:57:1c:93:28:48:3d:7d: d5:da:c5:fb:83:02:75:bf:a8:64:3f:90:ba:84:20:78:ff:be: 31:aa:f7:16:8c:8c:fc:54:4b:b7:2a:42:2a:69:98:30:ff:d1: d3:0d:c4:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHza7cqyT4DEsD1HsFRnIEsV+ilkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE5ODI4NTVGRDhDNEMxMTlCMzJGOUQ1MzZCNjQwODA0 MDkxMDAxQzAeFw0yNTA2MjkyMTQ3MDZaFw0yNTA3MDIyMjA5MDZaMDMxMTAvBgNV BAMTKEQxQTcwQ0NGMTA3OTc3MjAzMzAwQ0ZBMjU5NTIwMEI4NjA1Q0EyNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlQCuxqdPue7cX988RM/bllYYU ZAdCOx7Ro1rFFYYroeQObgsa5aFnamm0L+lW28eChCI2O/cctMjS8Y2YLk4MosnJ wi35xUzx2pQ7BO4G6J8ZhaSfmN97hTxe/EB8RejPTczh6EZhLzCESk+3yX7mnwLm MsoRARqd+pPD92E0/AY8pPdZZ1x35lPCVPMtW6SUrl/8VrLsXoNQ18/kF8Q7wEYx H2eoX0Eo+2Y+8wldkgTyGJtWmtzAWlFM+RzNC5Ca/QPvv1wKDKcs3TT19pgRZpks v3b4W72LHeKyrsNFvetWZShiBwtGTuLy5yxRtlR6XkURWhPDAGQmsvlr2r8XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0acMzxB5dyAzAM+iWVIAuGBcom4wHwYDVR0j BBgwFoAUkZgoVf2MTBGbMvnVNrZAgECRABwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzJjNDk0OC02ODdiLTQwMjAtODdmNC0yOGVlNGI2M2FhNDcvMC85MTk4Mjg1NUZE OEM0QzExOUIzMkY5RDUzNkI2NDA4MDQwOTEwMDFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE5ODI4NTVGRDhDNEMxMTlCMzJGOUQ1MzZCNjQwODA0MDkx MDAxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMyYzQ5NDgtNjg3Yi00MDIwLTg3 ZjQtMjhlZTRiNjNhYTQ3LzAvOTE5ODI4NTVGRDhDNEMxMTlCMzJGOUQ1MzZCNjQw ODA0MDkxMDAxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqMziuQnCOzcucuHkhlVOaDIOgaUv0rBqY0 q0bgby9rV4ap5tdt84JcP+M+1JhLD021PAYfpTpDkkTl6/uR2pmMXhDYLf8pmXff NwnW+p/kCXaA4U5bnmFjghpFNdNNHEtlgYbRbukNETsakUz0pCGDsD24DabsmspW bNHz+A1b1/ZXcT/ecl+fpgsNi9azrL8h0KbFHrvRAuL+uDkcfjGQ1qi8qwkjRIcu GdQ//aibNdJiFm8j3JBYJazKO7HLLprVZpREqG5C/0I+GSEYtOq6VxyTKEg9fdXa xfuDAnW/qGQ/kLqEIHj/vjGq9xaMjPxUS7cqQippmDD/0dMNxOs= -----END CERTIFICATE-----Generated at Tue Jul 1 11:58:38 2025 by rpki-client