$ rpki-client -vvf repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft File: A603F8DE41A0C254133C531FFB98C664160BB962.mft (raw, json) Hash identifier: YPWbkmV8k8jJkf2somabcz8+9bxGQtNZ0wbqjZnihc0= Subject key identifier: 3D:B8:49:1C:B1:72:54:C3:43:F5:51:CD:B7:4A:35:68:E0:12:00:79 Authority key identifier: A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 Certificate issuer: /CN=A603F8DE41A0C254133C531FFB98C664160BB962 Certificate serial: 525B72327A6D12A549A034F4790511FDB240B838 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft Manifest number: 8A Signing time: Fri 25 Apr 2025 17:41:31 +0000 Manifest this update: Fri 25 Apr 2025 17:36:31 +0000 Manifest next update: Mon 28 Apr 2025 22:34:31 +0000 Files and hashes: 1: 3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa (hash: thcrqGuYAGyt3mKNgShgWyqLoLYzUIjX7Ch0ut3CYH8=) 2: A603F8DE41A0C254133C531FFB98C664160BB962.crl (hash: UHVjNKIML14Chyi3sGHC+Zf2lo/cB7ameuM3CVfHW/A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:34:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:5b:72:32:7a:6d:12:a5:49:a0:34:f4:79:05:11:fd:b2:40:b8:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A603F8DE41A0C254133C531FFB98C664160BB962 Validity Not Before: Apr 25 17:36:31 2025 GMT Not After : Apr 28 22:34:31 2025 GMT Subject: CN=3DB8491CB17254C343F551CDB74A3568E0120079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:54:c0:e6:0b:e9:c7:22:fe:79:d6:f7:bd:e4: c4:ed:09:94:0a:d6:4c:7e:f4:0e:13:df:d4:43:0a: 72:d6:97:45:77:c3:89:72:a7:6b:c4:af:11:33:39: 91:91:94:c3:54:9b:ae:de:7d:1c:50:2b:4c:3a:1c: 9c:06:29:e7:2c:ba:30:b5:cb:ff:98:0a:2e:1e:51: 63:16:aa:cc:27:a1:d2:32:94:04:f6:b2:4c:aa:28: a1:14:d0:d7:29:57:68:39:31:43:3e:6a:e3:5b:c2: 7f:56:5f:ec:95:1f:09:04:be:89:69:ed:d1:9b:4f: 69:8e:42:57:5a:ac:81:d3:42:c8:f2:63:0d:f9:e2: b2:95:0f:23:3d:e3:11:91:36:d7:d3:2d:32:e2:ce: 4c:74:10:5a:5e:98:7b:c2:38:2b:62:63:2a:b9:26: a2:74:ca:86:e0:53:5a:f1:28:cc:a4:c4:f4:76:30: eb:26:c6:38:0a:71:01:ad:49:41:a0:9a:d4:85:c1: 45:08:38:d6:58:ba:f1:b7:65:b9:c5:b2:74:df:87: c1:f5:1e:58:3b:c6:57:0d:05:ec:85:97:0c:dd:6e: 58:7d:6b:88:64:27:09:e5:16:d8:3c:4c:5f:b0:0f: 92:16:dc:58:8b:89:83:90:52:79:fd:5d:d0:d1:41: d6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B8:49:1C:B1:72:54:C3:43:F5:51:CD:B7:4A:35:68:E0:12:00:79 X509v3 Authority Key Identifier: keyid:A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:95:a6:af:67:22:05:e9:9a:09:d8:73:a2:8b:44:f1:29:ca: ce:50:11:a7:47:11:c7:e2:90:86:66:e6:49:f1:cf:18:2e:ab: 21:77:5a:17:73:f9:8a:11:8f:20:6e:75:16:2d:b7:56:09:ab: 2b:22:9c:f8:6f:81:45:ca:61:da:39:ab:94:3a:e6:5d:b1:bb: 8a:77:b1:49:a5:e0:74:62:c6:28:dc:4f:5e:53:83:25:29:e2: 6a:ac:97:92:12:fe:b3:d5:08:03:7e:3f:37:3e:6a:99:07:d5: 0a:65:f5:0b:f0:16:3a:9d:66:8c:ba:e5:1c:8d:34:f8:b0:71: f8:ae:1b:38:66:3e:9a:74:6a:af:6f:5e:6c:1e:49:b0:9a:8f: ca:02:33:41:b2:76:e7:be:9e:cc:f5:16:32:0b:16:ba:18:f1: e1:13:05:c3:28:7c:79:72:06:82:aa:85:bd:47:01:0e:6b:3d: c8:8b:89:d3:d6:fe:8a:77:00:a7:09:de:ca:f5:b6:6e:a2:be: eb:ea:13:0f:ed:fd:a6:8e:de:6d:0c:4a:a5:c2:22:0f:f6:5a: 36:d7:29:a9:4c:eb:bb:33:c5:6b:b3:94:3e:6d:2e:21:12:03: 57:d9:07:05:09:e1:83:ab:37:f8:8c:79:0b:c0:be:81:c2:f4: 38:97:49:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUltyMnptEqVJoDT0eQUR/bJAuDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2NjQx NjBCQjk2MjAeFw0yNTA0MjUxNzM2MzFaFw0yNTA0MjgyMjM0MzFaMDMxMTAvBgNV BAMTKDNEQjg0OTFDQjE3MjU0QzM0M0Y1NTFDREI3NEEzNTY4RTAxMjAwNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpVMDmC+nHIv551ve95MTtCZQK 1kx+9A4T39RDCnLWl0V3w4lyp2vErxEzOZGRlMNUm67efRxQK0w6HJwGKecsujC1 y/+YCi4eUWMWqswnodIylAT2skyqKKEU0NcpV2g5MUM+auNbwn9WX+yVHwkEvolp 7dGbT2mOQldarIHTQsjyYw354rKVDyM94xGRNtfTLTLizkx0EFpemHvCOCtiYyq5 JqJ0yobgU1rxKMykxPR2MOsmxjgKcQGtSUGgmtSFwUUIONZYuvG3ZbnFsnTfh8H1 Hlg7xlcNBeyFlwzdblh9a4hkJwnlFtg8TF+wD5IW3FiLiYOQUnn9XdDRQdbfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPbhJHLFyVMND9VHNt0o1aOASAHkwHwYDVR0j BBgwFoAUpgP43kGgwlQTPFMf+5jGZBYLuWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OWI4MTUyZS1hYTg2LTRkOGEtODFkYS1lNzEwODZiMjk1NmMvMC9BNjAzRjhERTQx QTBDMjU0MTMzQzUzMUZGQjk4QzY2NDE2MEJCOTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2NjQxNjBC Qjk2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzAvQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2 NjQxNjBCQjk2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6Vpq9nIgXpmgnYc6KLRPEpys5QEadHEcfi kIZm5knxzxguqyF3Whdz+YoRjyBudRYtt1YJqysinPhvgUXKYdo5q5Q65l2xu4p3 sUml4HRixijcT15TgyUp4mqsl5IS/rPVCAN+Pzc+apkH1Qpl9QvwFjqdZoy65RyN NPiwcfiuGzhmPpp0aq9vXmweSbCaj8oCM0Gydue+nsz1FjILFroY8eETBcMofHly BoKqhb1HAQ5rPciLidPW/op3AKcJ3sr1tm6ivuvqEw/t/aaO3m0MSqXCIg/2WjbX KalM67szxWuzlD5tLiESA1fZBwUJ4YOrN/iMeQvAvoHC9DiXSSg= -----END CERTIFICATE-----Generated at Sun Apr 27 12:56:55 2025 by rpki-client