$ rpki-client -vvf repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft File: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft (raw, json) Hash identifier: ixDNaOK9P5mzH13ZadWD38/fBZsvytm4lgDllffsp6w= Subject key identifier: 82:F3:6B:6F:88:70:B3:79:19:37:31:3A:60:24:98:34:20:C7:A4:48 Authority key identifier: 91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 Certificate issuer: /CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Certificate serial: 404724BD0FD72D8AB1E1D18FDB39621DEB766790 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft Manifest number: 034C Signing time: Thu 24 Apr 2025 23:40:59 +0000 Manifest this update: Thu 24 Apr 2025 23:35:59 +0000 Manifest next update: Mon 28 Apr 2025 01:39:59 +0000 Files and hashes: 1: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl (hash: Mkh60IimLxUIhevKoSCkBCnraL9eKj2arxHtH+3C35I=) 2: 3130332e3136392e3132382e302f32332d3234203d3e20313432333432.roa (hash: ygNFYmxoQz15pEcPBE3fhpYvFfYuF7aoX+ohmkLX02U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:47:24:bd:0f:d7:2d:8a:b1:e1:d1:8f:db:39:62:1d:eb:76:67:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Validity Not Before: Apr 24 23:35:59 2025 GMT Not After : Apr 28 01:39:59 2025 GMT Subject: CN=82F36B6F8870B3791937313A6024983420C7A448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ff:64:48:df:15:05:a1:a3:b7:0c:cf:4f:fb: d0:23:ff:68:82:fb:0a:79:6c:67:80:87:15:92:9b: ee:15:3e:f3:09:e2:9c:2e:3c:13:56:27:25:cd:75: 04:39:a1:a0:5e:13:7e:79:ec:f1:0c:96:0f:43:9f: 53:80:5d:ac:1f:f0:05:ab:bf:63:9b:66:45:ed:54: 2a:93:58:85:ff:eb:f0:a1:94:d9:cb:59:05:d8:42: e6:96:ee:b9:a1:41:44:11:ab:00:96:f4:c7:61:5f: 8b:c7:bd:d2:2a:8f:ea:db:97:f1:11:7c:ae:f1:df: bf:3c:46:b6:bf:97:fd:a9:69:c3:de:7c:e2:4c:52: 4c:60:9e:fc:65:45:50:f9:e8:43:ed:60:78:cd:70: 53:e7:4c:f8:8b:cc:3e:dc:0d:21:ec:8c:ef:16:40: 33:64:32:4f:eb:9d:be:da:29:a9:25:92:17:e3:15: ba:47:c4:5b:7a:3c:34:18:00:50:5b:09:5c:ed:f3: e6:b0:74:57:ea:f3:aa:6e:c8:00:6e:6d:04:a0:87: aa:e4:b4:ee:1e:e5:58:00:b1:46:5f:61:b4:95:c6: d7:0e:61:15:98:2a:42:70:c7:09:f7:09:64:5d:b6: 81:ee:3e:79:eb:97:0b:46:10:8a:04:cc:2f:50:79: 26:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F3:6B:6F:88:70:B3:79:19:37:31:3A:60:24:98:34:20:C7:A4:48 X509v3 Authority Key Identifier: keyid:91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:7f:a6:af:6a:07:11:57:67:f4:d6:f4:22:59:4b:2d:fa:85: 8e:21:41:c2:f3:b9:03:f5:47:9a:d1:85:22:d9:cf:cb:9e:07: 64:00:76:d8:9d:86:b4:19:45:e6:bd:c7:5f:23:d2:a6:41:a9: 92:9c:40:e0:89:8c:82:2e:ab:58:f0:ad:dc:33:9f:af:00:48: fd:a1:08:0c:e0:dc:6c:cb:66:6e:2d:cd:ce:cd:c9:f0:02:7b: 1f:69:63:15:23:4c:5d:39:a1:52:7b:06:42:d9:09:88:24:b5: 16:d2:07:99:6a:e5:e3:42:8b:44:dd:88:b8:71:87:f0:bf:04: 93:ab:82:4b:a5:20:87:0b:d9:20:7c:83:d6:79:f6:d7:9d:4e: 10:53:e5:91:11:e6:68:99:35:3c:34:67:65:52:8a:a5:06:f0: 6e:7e:e1:9e:68:38:48:b5:23:dd:d1:a1:3f:7a:b1:f2:c2:ac: be:1c:94:6b:41:b0:98:48:ce:95:50:60:c9:cc:84:15:1f:c4: 66:29:c1:3a:f2:65:1a:d6:fc:ef:3b:72:62:c9:51:7e:29:63: 7b:d8:2c:fa:2f:25:6e:f9:7d:0c:c7:ea:6d:0f:1e:44:47:04: 5f:a9:26:3b:b9:6a:a8:de:f4:db:f3:c5:ca:e9:c4:3f:e1:b4: 37:a0:fc:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQEckvQ/XLYqx4dGP2zliHet2Z5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMy NjI2NEY1MDAeFw0yNTA0MjQyMzM1NTlaFw0yNTA0MjgwMTM5NTlaMDMxMTAvBgNV BAMTKDgyRjM2QjZGODg3MEIzNzkxOTM3MzEzQTYwMjQ5ODM0MjBDN0E0NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ/2RI3xUFoaO3DM9P+9Aj/2iC +wp5bGeAhxWSm+4VPvMJ4pwuPBNWJyXNdQQ5oaBeE3557PEMlg9Dn1OAXawf8AWr v2ObZkXtVCqTWIX/6/ChlNnLWQXYQuaW7rmhQUQRqwCW9MdhX4vHvdIqj+rbl/ER fK7x3788Rra/l/2pacPefOJMUkxgnvxlRVD56EPtYHjNcFPnTPiLzD7cDSHsjO8W QDNkMk/rnb7aKaklkhfjFbpHxFt6PDQYAFBbCVzt8+awdFfq86puyABubQSgh6rk tO4e5VgAsUZfYbSVxtcOYRWYKkJwxwn3CWRdtoHuPnnrlwtGEIoEzC9QeSb/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgvNrb4hws3kZNzE6YCSYNCDHpEgwHwYDVR0j BBgwFoAUkd8FjWrG9WPcrobbr7SKwyYmT1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjBlMzY0Yi03NzllLTQwZDUtYWQwZS1kOTE3ODc3OGQ2YjEvMC85MURGMDU4RDZB QzZGNTYzRENBRTg2REJBRkI0OEFDMzI2MjY0RjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMyNjI2 NEY1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmIwZTM2NGItNzc5ZS00MGQ1LWFk MGUtZDkxNzg3NzhkNmIxLzAvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhB QzMyNjI2NEY1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9/pq9qBxFXZ/TW9CJZSy36hY4hQcLzuQP1 R5rRhSLZz8ueB2QAdtidhrQZRea9x18j0qZBqZKcQOCJjIIuq1jwrdwzn68ASP2h CAzg3GzLZm4tzc7NyfACex9pYxUjTF05oVJ7BkLZCYgktRbSB5lq5eNCi0TdiLhx h/C/BJOrgkulIIcL2SB8g9Z59tedThBT5ZER5miZNTw0Z2VSiqUG8G5+4Z5oOEi1 I93RoT96sfLCrL4clGtBsJhIzpVQYMnMhBUfxGYpwTryZRrW/O87cmLJUX4pY3vY LPovJW75fQzH6m0PHkRHBF+pJju5aqje9NvzxcrpxD/htDeg/NM= -----END CERTIFICATE-----Generated at Fri Apr 25 03:46:16 2025 by rpki-client on console.sobornost.net