$ rpki-client -vvf repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft File: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft (raw, json) Hash identifier: Bj54G1uOHpZyq0yl0K8CakWsr3wANTjk9zMBzPKXK/k= Subject key identifier: 72:F1:AC:3A:16:18:45:A7:65:06:EB:66:17:76:A6:BA:4C:7C:16:32 Authority key identifier: 61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 Certificate issuer: /CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Certificate serial: 43A67147C791F79789E9FD8919A693EE5AE4E1B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft Manifest number: 8B Signing time: Tue 29 Apr 2025 23:21:50 +0000 Manifest this update: Tue 29 Apr 2025 23:16:50 +0000 Manifest next update: Sat 03 May 2025 02:27:50 +0000 Files and hashes: 1: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl (hash: 2fLmHFLVPLuTdbGKTLVUTZjDfIHeA9BRPkhfpEnlxO4=) 2: 3136302e32322e3132362e302f32332d3234203d3e20313532383230.roa (hash: gC4KxUANFsMrdBu7MfFut/AO90Ufo3+gZIW4ZqyH1XY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 20:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a6:71:47:c7:91:f7:97:89:e9:fd:89:19:a6:93:ee:5a:e4:e1:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Validity Not Before: Apr 29 23:16:50 2025 GMT Not After : May 3 02:27:50 2025 GMT Subject: CN=72F1AC3A161845A76506EB661776A6BA4C7C1632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3b:a5:7b:41:fb:7e:38:94:c7:0c:08:06:ce: dd:a9:90:d5:03:97:fa:44:36:be:50:c0:54:e8:b7: 1b:3c:1f:67:56:35:3a:ff:17:f4:20:ce:f0:1a:3a: 94:d9:f3:d6:91:aa:aa:52:07:fb:4b:60:74:b0:6e: 65:63:cb:52:1c:5d:74:a1:7a:d5:82:06:2f:80:84: fe:84:4b:87:2f:29:dd:35:ab:1e:8c:32:fe:86:41: 70:8b:97:64:30:8a:89:02:6b:da:b7:1b:d2:6c:82: d8:ed:38:98:30:a3:d7:cd:a6:db:68:3b:dc:81:c7: a8:77:48:9c:89:cc:f7:ab:fa:90:d3:fc:41:96:ea: 71:a6:a1:21:53:89:6f:d7:ee:32:3c:3a:25:d6:61: fd:a9:37:68:25:35:0e:43:dc:13:6f:41:65:c7:46: 0f:4f:f3:49:05:b0:78:75:8d:7d:2b:27:c1:08:55: 91:f7:66:a5:c4:49:f8:34:da:55:89:38:18:c8:22: 3e:18:33:95:c8:5d:72:0f:a1:4e:40:6d:45:11:2c: 94:87:83:05:15:fa:52:da:95:a1:c4:f1:4b:fa:0c: 26:0e:c6:43:cc:ad:1d:a7:02:0b:52:b5:c1:a6:7d: 87:73:96:dd:02:1b:4f:8a:bd:04:83:43:b4:84:8a: 96:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F1:AC:3A:16:18:45:A7:65:06:EB:66:17:76:A6:BA:4C:7C:16:32 X509v3 Authority Key Identifier: keyid:61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:f8:02:b9:d6:22:9c:f0:1b:a4:e4:27:56:e1:12:f2:41:50: 0b:bf:32:1c:a3:1a:c7:ee:df:c4:4e:07:9c:5d:c6:21:4f:e0: ea:61:76:bc:7d:84:8b:25:50:d6:88:f5:70:e6:a0:4f:d0:7b: 3f:23:2a:53:22:7f:0a:b8:12:84:bf:c5:1d:e5:a2:c8:d9:ba: f0:64:5c:be:d6:b0:85:2a:4e:55:cd:17:d0:09:ae:73:8f:e3: 69:6a:51:3e:24:ed:14:06:37:45:c5:8e:af:1b:26:9e:26:f8: bc:b0:0c:0a:68:16:3a:9c:77:8e:48:c8:61:55:45:1e:08:2e: ec:4e:4a:e9:6d:59:5a:63:8f:ac:f0:bb:ec:99:e7:a0:0b:7e: 41:8b:88:dd:f4:09:e5:39:41:da:ae:88:86:f1:30:26:41:20: b3:6d:87:8c:30:4f:3e:0a:c6:08:1f:cf:10:f2:71:3c:f6:99: b0:f1:65:46:a3:92:69:73:c2:6f:13:38:56:d4:28:66:ae:50: 62:34:cd:80:c3:79:7e:29:da:7c:e4:5d:0c:b8:27:2c:53:b4: 71:aa:62:f0:13:67:92:f5:39:bd:a1:d8:03:0c:a2:81:4e:27: 7a:13:8b:0c:e1:d6:0f:b1:01:5e:11:86:69:fe:51:69:39:cb: d9:f3:d8:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ6ZxR8eR95eJ6f2JGaaT7lrk4bUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VD RDJBMDA2MzAeFw0yNTA0MjkyMzE2NTBaFw0yNTA1MDMwMjI3NTBaMDMxMTAvBgNV BAMTKDcyRjFBQzNBMTYxODQ1QTc2NTA2RUI2NjE3NzZBNkJBNEM3QzE2MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVO6V7Qft+OJTHDAgGzt2pkNUD l/pENr5QwFTotxs8H2dWNTr/F/QgzvAaOpTZ89aRqqpSB/tLYHSwbmVjy1IcXXSh etWCBi+AhP6ES4cvKd01qx6MMv6GQXCLl2QwiokCa9q3G9JsgtjtOJgwo9fNptto O9yBx6h3SJyJzPer+pDT/EGW6nGmoSFTiW/X7jI8OiXWYf2pN2glNQ5D3BNvQWXH Rg9P80kFsHh1jX0rJ8EIVZH3ZqXESfg02lWJOBjIIj4YM5XIXXIPoU5AbUURLJSH gwUV+lLalaHE8Uv6DCYOxkPMrR2nAgtStcGmfYdzlt0CG0+KvQSDQ7SEipa7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcvGsOhYYRadlButmF3amukx8FjIwHwYDVR0j BBgwFoAUYem2eM1C2iobPvPYh57ffs0qAGMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTQ2ZTA5YS1jMDA3LTRiMGMtOTQ2MC03YzQwMzQxY2EyZjcvMC82MUU5QjY3OENE NDJEQTJBMUIzRUYzRDg4NzlFREY3RUNEMkEwMDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VDRDJB MDA2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU0NmUwOWEtYzAwNy00YjBjLTk0 NjAtN2M0MDM0MWNhMmY3LzAvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURG N0VDRDJBMDA2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADn4ArnWIpzwG6TkJ1bhEvJBUAu/MhyjGsfu 38ROB5xdxiFP4Ophdrx9hIslUNaI9XDmoE/Qez8jKlMifwq4EoS/xR3losjZuvBk XL7WsIUqTlXNF9AJrnOP42lqUT4k7RQGN0XFjq8bJp4m+LywDApoFjqcd45IyGFV RR4ILuxOSultWVpjj6zwu+yZ56ALfkGLiN30CeU5QdquiIbxMCZBILNth4wwTz4K xggfzxDycTz2mbDxZUajkmlzwm8TOFbUKGauUGI0zYDDeX4p2nzkXQy4JyxTtHGq YvATZ5L1Ob2h2AMMooFOJ3oTiwzh1g+xAV4Rhmn+UWk5y9nz2Bo= -----END CERTIFICATE-----Generated at Wed Apr 30 05:29:10 2025 by rpki-client