$ rpki-client -vvf repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft File: A61585874729C58BB62740692BA8FA6ED286FDC9.mft (raw, json) Hash identifier: ZVNsSkbGlfTGhoyGZlccfEIvCSw/dckdB8RKSiKpeGw= Subject key identifier: 36:98:F2:1E:1F:D0:62:5D:F5:C2:B8:47:CB:3D:4F:DF:ED:3C:F9:E7 Authority key identifier: A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9 Certificate issuer: /CN=A61585874729C58BB62740692BA8FA6ED286FDC9 Certificate serial: 7C41B6C6970C0052CAB6141B9CEEE6A3892114E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft Manifest number: 01AC Signing time: Sat 26 Apr 2025 11:01:55 +0000 Manifest this update: Sat 26 Apr 2025 10:56:55 +0000 Manifest next update: Tue 29 Apr 2025 15:00:55 +0000 Files and hashes: 1: A61585874729C58BB62740692BA8FA6ED286FDC9.crl (hash: lsIpYN0/19KsRQC+fU4LNpS/oillfeRkJCejcKVax/M=) 2: 3130332e3234352e3137392e302f32342d3234203d3e2039333431.roa (hash: dJLGbPNETK4Ljwpxmc7fr7zDeLYDSeJTvSKzUm9sVu4=) 3: 3130332e3234352e3137382e302f32342d3234203d3e2039333431.roa (hash: VHj+BrkZ6iMwd6Ih4uLfhywh2RJ8HhOVFUyFHjtmvfI=) 4: 3130332e3234352e3137382e302f32332d3233203d3e2039333431.roa (hash: JQ2sbHxQyDFZhgbZypy5jZxgy9AwBRkpTank5bXdFdU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 15:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:41:b6:c6:97:0c:00:52:ca:b6:14:1b:9c:ee:e6:a3:89:21:14:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A61585874729C58BB62740692BA8FA6ED286FDC9 Validity Not Before: Apr 26 10:56:55 2025 GMT Not After : Apr 29 15:00:55 2025 GMT Subject: CN=3698F21E1FD0625DF5C2B847CB3D4FDFED3CF9E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:77:2d:a4:7f:68:4c:a2:75:97:5d:11:ed:c2: be:e4:09:1f:ea:17:ac:38:f7:04:e7:8c:21:77:a7: 84:29:7b:aa:c5:27:2b:72:c6:1b:42:e0:0d:d4:4f: c3:a2:ff:a7:c2:7e:7f:d8:c8:4e:37:6d:bf:c8:3a: 18:3f:05:c6:09:b2:39:16:b4:72:00:3b:b7:b3:60: 22:67:4f:69:1e:d3:9b:bb:41:38:81:3b:09:34:42: 9f:65:11:2b:e8:99:55:4e:6e:9b:66:8e:70:0d:fb: 21:96:1b:86:a1:7e:9c:60:66:fe:b1:1f:26:4a:3e: c7:84:4e:5e:ec:6a:4f:be:c1:20:87:6c:3f:d2:a4: bf:7e:cc:eb:de:ab:e7:eb:02:16:ce:0a:6f:07:fc: cd:59:80:f0:f2:af:70:61:7e:e5:57:19:ee:b4:29: 4a:27:b6:c5:9d:37:c6:e4:31:d2:b5:d7:63:2d:5a: 67:f8:f1:5d:91:36:88:fe:b4:8d:69:66:b3:37:de: 43:aa:6c:b3:03:b8:14:52:fc:e3:47:65:4c:da:5d: 5e:f1:11:96:84:b0:f4:b4:95:ed:bc:2b:a0:3d:fc: 4e:44:95:9c:fe:3e:14:db:f4:7f:9e:42:88:08:13: a0:51:6a:f4:2a:0a:ea:32:e5:9b:ad:9e:17:06:ac: a6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:98:F2:1E:1F:D0:62:5D:F5:C2:B8:47:CB:3D:4F:DF:ED:3C:F9:E7 X509v3 Authority Key Identifier: keyid:A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:61:5d:88:95:19:d4:d1:c1:f8:ff:de:94:d8:e5:47:e5:90: 51:00:8a:9b:bc:2e:ff:77:df:59:18:d6:cc:04:f7:21:f7:c9: 3b:46:7d:94:f4:d1:6c:7a:3f:bc:22:95:68:65:56:11:c4:28: 6d:e0:68:ec:63:d9:a3:14:78:a6:a7:7e:4a:98:59:1b:c1:6d: ad:11:0f:9c:f5:40:e4:e2:59:47:2c:55:9a:97:72:26:7b:15: 04:34:24:89:04:ec:ae:e8:71:b0:81:cb:37:1f:55:78:59:ab: 8a:e7:18:87:6d:7a:c5:19:f9:09:97:4a:0a:55:1c:49:ba:bd: f2:c4:5e:c8:70:55:8c:97:25:96:62:ad:65:42:4a:8c:68:7e: 04:23:52:c0:0d:40:13:89:b8:c2:93:5e:23:a4:22:3a:54:a4: aa:94:de:af:dd:8d:48:50:7b:5d:5d:09:7a:04:11:ec:2b:3f: 2c:9c:c8:0b:12:8a:a5:f4:89:c6:df:98:b6:d1:ad:69:cc:0b: ec:ec:a6:09:81:b0:b6:7c:44:19:84:9d:62:e4:cf:21:34:83: 9f:7d:66:d8:2f:ee:ad:05:63:f9:5d:8f:ee:6a:ed:e1:94:73: 99:4c:49:3c:6a:1d:14:f3:87:97:f0:46:15:23:c2:f2:08:e0: 2e:dd:14:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfEG2xpcMAFLKthQbnO7mo4khFOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZBNkVE Mjg2RkRDOTAeFw0yNTA0MjYxMDU2NTVaFw0yNTA0MjkxNTAwNTVaMDMxMTAvBgNV BAMTKDM2OThGMjFFMUZEMDYyNURGNUMyQjg0N0NCM0Q0RkRGRUQzQ0Y5RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmdy2kf2hMonWXXRHtwr7kCR/q F6w49wTnjCF3p4Qpe6rFJytyxhtC4A3UT8Oi/6fCfn/YyE43bb/IOhg/BcYJsjkW tHIAO7ezYCJnT2ke05u7QTiBOwk0Qp9lESvomVVObptmjnAN+yGWG4ahfpxgZv6x HyZKPseETl7sak++wSCHbD/SpL9+zOveq+frAhbOCm8H/M1ZgPDyr3BhfuVXGe60 KUontsWdN8bkMdK112MtWmf48V2RNoj+tI1pZrM33kOqbLMDuBRS/ONHZUzaXV7x EZaEsPS0le28K6A9/E5ElZz+PhTb9H+eQogIE6BRavQqCuoy5ZutnhcGrKY5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNpjyHh/QYl31wrhHyz1P3+08+ecwHwYDVR0j BBgwFoAUphWFh0cpxYu2J0BpK6j6btKG/ckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzBjNDc1OS00M2I4LTRlODAtYmU4Yy04M2NiZTlmODIzMWIvMC9BNjE1ODU4NzQ3 MjlDNThCQjYyNzQwNjkyQkE4RkE2RUQyODZGREM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZBNkVEMjg2 RkRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzcwYzQ3NTktNDNiOC00ZTgwLWJl OGMtODNjYmU5ZjgyMzFiLzAvQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZB NkVEMjg2RkRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNhXYiVGdTRwfj/3pTY5UflkFEAipu8Lv93 31kY1swE9yH3yTtGfZT00Wx6P7wilWhlVhHEKG3gaOxj2aMUeKanfkqYWRvBba0R D5z1QOTiWUcsVZqXciZ7FQQ0JIkE7K7ocbCByzcfVXhZq4rnGIdtesUZ+QmXSgpV HEm6vfLEXshwVYyXJZZirWVCSoxofgQjUsANQBOJuMKTXiOkIjpUpKqU3q/djUhQ e11dCXoEEewrPyycyAsSiqX0icbfmLbRrWnMC+zspgmBsLZ8RBmEnWLkzyE0g599 Ztgv7q0FY/ldj+5q7eGUc5lMSTxqHRTzh5fwRhUjwvII4C7dFGA= -----END CERTIFICATE-----Generated at Sun Apr 27 17:13:37 2025 by rpki-client