$ rpki-client -vvf repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft File: A61585874729C58BB62740692BA8FA6ED286FDC9.mft (raw, json) Hash identifier: HVvQl0uyj1uJNY0T29tifnNjm8oU5SVQ1B29vw2rmec= Subject key identifier: 38:7D:B9:29:D4:35:3D:6C:36:E0:1B:D3:1D:F6:FB:D4:2B:2D:85:7A Authority key identifier: A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9 Certificate issuer: /CN=A61585874729C58BB62740692BA8FA6ED286FDC9 Certificate serial: 6DD13202D329FBA7B7FB9E3BC788A3FD95E24EDF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft Manifest number: 01C3 Signing time: Mon 16 Jun 2025 21:01:59 +0000 Manifest this update: Mon 16 Jun 2025 20:56:59 +0000 Manifest next update: Fri 20 Jun 2025 08:20:59 +0000 Files and hashes: 1: 3130332e3234352e3137392e302f32342d3234203d3e2039333431.roa (hash: dJLGbPNETK4Ljwpxmc7fr7zDeLYDSeJTvSKzUm9sVu4=) 2: 3130332e3234352e3137382e302f32332d3233203d3e2039333431.roa (hash: JQ2sbHxQyDFZhgbZypy5jZxgy9AwBRkpTank5bXdFdU=) 3: 3130332e3234352e3137382e302f32342d3234203d3e2039333431.roa (hash: VHj+BrkZ6iMwd6Ih4uLfhywh2RJ8HhOVFUyFHjtmvfI=) 4: A61585874729C58BB62740692BA8FA6ED286FDC9.crl (hash: S27A7C4JRMeGk2Iz4RSpKcwOb2K3S3fogcriojbpaIE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 08:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:d1:32:02:d3:29:fb:a7:b7:fb:9e:3b:c7:88:a3:fd:95:e2:4e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A61585874729C58BB62740692BA8FA6ED286FDC9 Validity Not Before: Jun 16 20:56:59 2025 GMT Not After : Jun 20 08:20:59 2025 GMT Subject: CN=387DB929D4353D6C36E01BD31DF6FBD42B2D857A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1b:97:df:d1:f5:5c:98:c1:09:3e:28:24:12: e5:7b:4a:d4:0b:b4:00:24:94:ba:08:58:8d:19:c9: a9:6d:ae:bd:5b:35:b7:d1:dd:ad:0b:fa:a5:ff:1c: 6c:94:ae:af:c4:2f:a7:e4:74:e4:3c:bf:74:67:8a: a4:8b:d6:4b:75:9c:8b:be:40:b0:1c:2f:82:b6:ed: 94:8e:e3:0f:35:fc:29:e5:59:48:e3:d8:44:71:df: 9e:0d:6f:ee:3f:09:c6:e6:da:68:7c:e6:71:d2:01: e1:a7:15:cc:24:c8:6c:a2:72:54:84:d5:82:f0:99: 64:a0:a8:d3:fd:52:e0:e6:d6:24:13:32:53:42:da: 51:5e:0c:34:68:7d:fc:6c:83:ca:d1:4a:8c:a3:ec: b4:39:91:fd:2f:7f:8e:37:88:c6:7d:f3:13:c5:10: 25:26:dd:61:48:13:a9:ee:fd:95:42:ec:43:31:0a: 51:51:c0:36:8a:c8:29:6d:8d:cd:3d:03:74:21:f4: a8:f0:fd:86:28:c2:0d:65:40:97:37:e1:9c:e6:65: 22:57:92:d3:c8:a6:3f:a3:df:25:fa:4b:e6:e8:b3: 45:8c:1e:c5:7a:1a:58:25:29:9b:08:9a:5c:64:92: 67:4e:a0:92:00:ae:24:96:8a:5a:82:ea:43:88:88: b8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7D:B9:29:D4:35:3D:6C:36:E0:1B:D3:1D:F6:FB:D4:2B:2D:85:7A X509v3 Authority Key Identifier: keyid:A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:b9:f7:d3:0b:b9:a4:c6:d3:50:5b:2a:5d:f2:2f:de:2b:0a: 63:fc:98:38:8c:80:a8:1b:b9:d4:69:42:4d:3f:4f:b5:f8:ff: 74:00:ca:05:15:0d:4f:53:0e:ad:61:11:6c:6d:cd:28:f6:34: 97:d3:50:c2:86:18:86:3c:12:23:6b:3b:d2:13:bf:6a:ec:ad: 47:bb:55:b1:69:cb:83:55:0c:af:e3:7c:7d:8f:e0:1e:fb:96: f0:99:6f:ca:af:5b:a6:2b:ff:9f:92:73:27:94:59:75:6f:7f: b7:0c:01:92:a4:88:f0:0b:62:59:d4:44:dc:ef:e6:d3:5e:e7: 54:e8:5f:af:e2:f6:9f:2d:2a:f4:e7:ac:5a:1e:05:d1:79:2e: 8e:89:77:c5:e4:89:05:5f:38:16:6a:d3:4b:0a:aa:26:34:d7: b2:f9:67:82:14:e6:32:3c:bc:66:68:41:b3:1c:98:55:b7:16: 23:43:a5:99:d8:c5:ba:5e:e7:fb:1e:40:38:d8:8b:ae:f0:f1: 80:79:67:09:3c:5d:7f:27:8f:86:be:aa:29:ca:67:73:96:9b: 04:96:40:3b:3a:96:e0:ec:09:fb:df:d0:ae:5a:29:d3:6d:9e: 6c:37:cf:88:6c:ac:43:bf:2f:cb:2b:0c:de:7a:b3:2c:01:78: fe:ce:49:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbdEyAtMp+6e3+547x4ij/ZXiTt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZBNkVE Mjg2RkRDOTAeFw0yNTA2MTYyMDU2NTlaFw0yNTA2MjAwODIwNTlaMDMxMTAvBgNV BAMTKDM4N0RCOTI5RDQzNTNENkMzNkUwMUJEMzFERjZGQkQ0MkIyRDg1N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIG5ff0fVcmMEJPigkEuV7StQL tAAklLoIWI0Zyaltrr1bNbfR3a0L+qX/HGyUrq/EL6fkdOQ8v3RniqSL1kt1nIu+ QLAcL4K27ZSO4w81/CnlWUjj2ERx354Nb+4/Ccbm2mh85nHSAeGnFcwkyGyiclSE 1YLwmWSgqNP9UuDm1iQTMlNC2lFeDDRoffxsg8rRSoyj7LQ5kf0vf443iMZ98xPF ECUm3WFIE6nu/ZVC7EMxClFRwDaKyCltjc09A3Qh9Kjw/YYowg1lQJc34ZzmZSJX ktPIpj+j3yX6S+bos0WMHsV6GlglKZsImlxkkmdOoJIAriSWilqC6kOIiLjDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOH25KdQ1PWw24BvTHfb71CsthXowHwYDVR0j BBgwFoAUphWFh0cpxYu2J0BpK6j6btKG/ckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzBjNDc1OS00M2I4LTRlODAtYmU4Yy04M2NiZTlmODIzMWIvMC9BNjE1ODU4NzQ3 MjlDNThCQjYyNzQwNjkyQkE4RkE2RUQyODZGREM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZBNkVEMjg2 RkRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzcwYzQ3NTktNDNiOC00ZTgwLWJl OGMtODNjYmU5ZjgyMzFiLzAvQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZB NkVEMjg2RkRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADi599MLuaTG01BbKl3yL94rCmP8mDiMgKgb udRpQk0/T7X4/3QAygUVDU9TDq1hEWxtzSj2NJfTUMKGGIY8EiNrO9ITv2rsrUe7 VbFpy4NVDK/jfH2P4B77lvCZb8qvW6Yr/5+ScyeUWXVvf7cMAZKkiPALYlnURNzv 5tNe51ToX6/i9p8tKvTnrFoeBdF5Lo6Jd8XkiQVfOBZq00sKqiY017L5Z4IU5jI8 vGZoQbMcmFW3FiNDpZnYxbpe5/seQDjYi67w8YB5Zwk8XX8nj4a+qinKZ3OWmwSW QDs6luDsCfvf0K5aKdNtnmw3z4hsrEO/L8srDN56sywBeP7OSVA= -----END CERTIFICATE-----Generated at Tue Jun 17 15:38:34 2025 by rpki-client