$ rpki-client -vvf repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft File: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft (raw, json) Hash identifier: omPV0JnSG0N4+ymZcWOzavpEXY7q9eUfVR29EAd3/R4= Subject key identifier: E0:61:47:9D:F1:39:58:4D:CC:B0:C7:8D:D2:BE:12:16:EB:E5:99:79 Authority key identifier: 0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 Certificate issuer: /CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Certificate serial: 2E8936D46E03FF4C27E8919BBA6DC75BFDA37F81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft Manifest number: 8C Signing time: Tue 17 Jun 2025 03:16:41 +0000 Manifest this update: Tue 17 Jun 2025 03:11:41 +0000 Manifest next update: Fri 20 Jun 2025 05:15:41 +0000 Files and hashes: 1: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl (hash: 1Nm0JBK+1SslSZMY8tKa1b5UF9WMJ16zqXNGRGyDF5E=) 2: 3136302e32322e3230352e302f32342d3234203d3e20313337333136.roa (hash: 8dognkJ+3KqI8Zy3SbY9osu6X0L9/9P5xv+FtLtMt+4=) 3: 3136302e32322e3230342e302f32342d3234203d3e20313337333136.roa (hash: Zh8n/dPr3gHP9KgajNV0z2AsOCpEwb2affZu8V5L6qs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:89:36:d4:6e:03:ff:4c:27:e8:91:9b:ba:6d:c7:5b:fd:a3:7f:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Validity Not Before: Jun 17 03:11:41 2025 GMT Not After : Jun 20 05:15:41 2025 GMT Subject: CN=E061479DF139584DCCB0C78DD2BE1216EBE59979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f3:63:c2:cd:79:4f:9f:64:95:df:59:c1:28: 8d:a6:ac:38:88:a4:75:13:22:a5:d5:6f:8d:fb:e7: ae:92:bb:bd:ab:4a:13:3a:15:64:d6:8a:5c:8a:59: 76:a8:26:5f:08:10:52:56:c7:de:85:e4:cf:a3:a0: bb:3c:82:c2:42:83:3d:df:75:6e:59:d8:18:03:c5: df:17:e2:6e:cb:44:98:ac:9d:ac:40:0b:6b:cb:44: b3:19:e8:91:96:48:3a:7b:99:82:1c:c0:54:e4:69: 69:0c:63:8e:d5:53:d4:98:b6:58:cd:6e:1d:e5:e1: 94:77:59:f5:eb:7e:c1:e9:5d:5f:6a:f7:27:f2:ad: a5:0c:95:49:14:1a:3f:ca:d5:d0:ba:09:33:08:92: 4a:e9:96:ab:ba:28:dc:47:34:49:69:89:8e:86:14: ed:75:72:08:50:5a:d7:d8:58:de:00:31:c1:a4:54: 3f:9c:02:91:b2:1a:a4:bd:f4:a0:92:3e:2c:b8:97: f0:40:20:8c:8c:d9:f8:d3:08:c5:89:bc:cd:06:32: 9b:b0:5e:d8:92:40:cb:3f:4e:de:ba:f0:d0:42:c0: 74:c3:06:23:f1:c0:8f:99:7e:88:20:86:b5:a1:03: 2b:4c:54:e0:49:b1:73:65:76:45:ad:5d:40:66:51: e5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:61:47:9D:F1:39:58:4D:CC:B0:C7:8D:D2:BE:12:16:EB:E5:99:79 X509v3 Authority Key Identifier: keyid:0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:92:79:e9:61:d7:2e:60:e7:3b:1b:c7:4b:31:8c:a7:d8:e4: a7:c5:ba:e7:fc:e2:09:01:d8:f6:87:71:e9:4f:b9:5a:fd:70: ac:f1:c2:15:e9:80:31:9c:92:1d:f7:d1:e5:d9:88:80:a9:eb: 9d:e2:c7:29:d0:ce:18:a4:b9:66:48:d9:7b:a1:a4:30:f7:5e: 38:a7:5c:9f:5e:91:d8:58:63:f6:b2:3b:f2:d1:84:5f:08:89: 3d:ce:e3:4e:7c:16:c6:8e:33:01:fb:4b:98:3b:74:1d:66:0c: 8b:a7:c2:af:4a:46:1d:8a:21:ed:06:c1:e2:19:a8:74:d8:29: 67:98:43:cb:15:03:e6:55:7e:36:ca:d1:bf:a7:42:6f:c1:1e: 37:b8:be:c2:79:b7:d5:19:a1:51:88:ac:d3:31:f4:50:df:2b: a3:12:f4:45:c9:92:8a:8b:82:3d:58:5c:f2:87:4c:d9:77:3d: 60:36:ec:9a:06:19:b3:06:82:50:e6:83:51:1c:30:01:8e:ab: 47:43:ea:ae:97:4e:b6:9f:4d:67:73:ee:e2:56:62:13:cd:44: 6d:01:71:92:98:32:ff:75:63:6b:18:2d:83:64:f7:05:1f:49: 5e:fe:03:42:70:c8:5c:b0:e9:84:1f:f5:31:82:af:3d:6d:b9: f2:14:a8:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULok21G4D/0wn6JGbum3HW/2jf4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFG MDYwMzYxMjAeFw0yNTA2MTcwMzExNDFaFw0yNTA2MjAwNTE1NDFaMDMxMTAvBgNV BAMTKEUwNjE0NzlERjEzOTU4NERDQ0IwQzc4REQyQkUxMjE2RUJFNTk5NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF82PCzXlPn2SV31nBKI2mrDiI pHUTIqXVb437566Su72rShM6FWTWilyKWXaoJl8IEFJWx96F5M+joLs8gsJCgz3f dW5Z2BgDxd8X4m7LRJisnaxAC2vLRLMZ6JGWSDp7mYIcwFTkaWkMY47VU9SYtljN bh3l4ZR3WfXrfsHpXV9q9yfyraUMlUkUGj/K1dC6CTMIkkrplqu6KNxHNElpiY6G FO11cghQWtfYWN4AMcGkVD+cApGyGqS99KCSPiy4l/BAIIyM2fjTCMWJvM0GMpuw XtiSQMs/Tt668NBCwHTDBiPxwI+ZfogghrWhAytMVOBJsXNldkWtXUBmUeUTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4GFHnfE5WE3MsMeN0r4SFuvlmXkwHwYDVR0j BBgwFoAUChv85nYdi3+yCffPntGz2vBgNhIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzFiNGMzOC03NzQ3LTQ1ZmMtYTU5MC1jYWM1MjE2M2Q1MzgvMC8wQTFCRkNFNjc2 MUQ4QjdGQjIwOUY3Q0Y5RUQxQjNEQUYwNjAzNjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFGMDYw MzYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMxYjRjMzgtNzc0Ny00NWZjLWE1 OTAtY2FjNTIxNjNkNTM4LzAvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIz REFGMDYwMzYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+Seelh1y5g5zsbx0sxjKfY5KfFuuf84gkB 2PaHcelPuVr9cKzxwhXpgDGckh330eXZiICp653ixynQzhikuWZI2XuhpDD3Xjin XJ9ekdhYY/ayO/LRhF8IiT3O4058FsaOMwH7S5g7dB1mDIunwq9KRh2KIe0GweIZ qHTYKWeYQ8sVA+ZVfjbK0b+nQm/BHje4vsJ5t9UZoVGIrNMx9FDfK6MS9EXJkoqL gj1YXPKHTNl3PWA27JoGGbMGglDmg1EcMAGOq0dD6q6XTrafTWdz7uJWYhPNRG0B cZKYMv91Y2sYLYNk9wUfSV7+A0JwyFyw6YQf9TGCrz1tufIUqLw= -----END CERTIFICATE-----Generated at Tue Jun 17 09:51:39 2025 by rpki-client