$ rpki-client -vvf repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft File: F61D0A85B56D8F824658A8287BE8D4F659680324.mft (raw, json) Hash identifier: t2h55QuEvH6CqM7OZ7AmgSU8PUw7GBgvSQMzMuI7xgk= Subject key identifier: 4B:A2:23:F5:9A:BF:09:F7:4A:16:36:68:02:CC:7C:AC:82:77:9F:02 Authority key identifier: F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24 Certificate issuer: /CN=F61D0A85B56D8F824658A8287BE8D4F659680324 Certificate serial: 6B693035EB636347AAA859C1ADD8953B597DD495 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft Manifest number: 01EC Signing time: Tue 29 Apr 2025 11:12:11 +0000 Manifest this update: Tue 29 Apr 2025 11:07:11 +0000 Manifest next update: Fri 02 May 2025 15:16:11 +0000 Files and hashes: 1: 3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa (hash: eoTBfzq8y4bEDLADbH3GXH2pd0CIGqJzNCdlfnqwOuA=) 2: 3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa (hash: XPciT66Xx06GRwXZ0ZEhgnmHRmTDySk8mHEntenab4o=) 3: F61D0A85B56D8F824658A8287BE8D4F659680324.crl (hash: YihU4/S0CNuRFr8dPhBywb4zPjQH98nRUEv+vBgd+V0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 15:16:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:69:30:35:eb:63:63:47:aa:a8:59:c1:ad:d8:95:3b:59:7d:d4:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F61D0A85B56D8F824658A8287BE8D4F659680324 Validity Not Before: Apr 29 11:07:11 2025 GMT Not After : May 2 15:16:11 2025 GMT Subject: CN=4BA223F59ABF09F74A16366802CC7CAC82779F02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:50:52:9d:8c:38:7a:30:0e:6c:b2:b8:53:42: 3d:64:b5:b7:67:cc:f2:02:17:71:fa:eb:e3:e2:17: 24:96:6e:db:33:70:fe:ad:91:36:cf:fa:3f:cc:79: 35:0d:dc:a1:7b:bd:00:e1:92:7c:5c:71:be:31:30: ae:04:ce:6e:1f:1e:fa:33:ef:51:ec:68:84:da:4e: 27:a0:53:f3:b6:5d:16:ec:75:c6:49:2e:5d:84:65: 73:2e:b5:72:ae:d8:b7:b2:fa:8e:86:29:16:d5:95: 7f:60:80:26:de:73:55:cb:2f:f9:5e:33:00:0a:4c: 93:bb:77:4a:60:b6:3a:33:2b:9c:da:e6:21:b2:1b: 78:a8:73:f3:b5:0f:df:71:36:61:ac:f1:fb:a0:14: d4:e6:7d:45:ca:fc:70:c4:61:c3:26:af:8b:85:96: a6:db:c5:bc:de:78:28:f7:89:01:fa:57:02:14:68: 58:65:6f:6b:41:f5:7c:ce:f7:81:13:6e:84:fa:e3: 6d:af:ec:9b:56:a8:57:e8:66:6e:5c:da:00:c0:a5: 00:e4:68:4a:2f:71:50:9c:82:d0:36:bb:0c:23:34: 3e:3b:1f:11:a0:7b:15:ef:2e:ab:f2:78:4d:a1:05: 85:ab:96:19:ba:88:c5:a7:8d:11:15:dd:ad:6f:9d: 00:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A2:23:F5:9A:BF:09:F7:4A:16:36:68:02:CC:7C:AC:82:77:9F:02 X509v3 Authority Key Identifier: keyid:F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:cb:4b:a9:70:b7:20:90:3d:e7:14:02:0b:82:2e:d9:c9:c6: 0c:77:5e:8b:4a:9b:7f:bb:ab:eb:5b:39:3d:83:c3:4c:3e:52: 62:6d:a1:bd:d4:7b:15:b8:57:fc:24:d6:c5:6c:c1:f7:1f:6a: 62:99:9e:f1:ed:ac:82:b2:9a:7b:b5:43:e5:fc:ee:2e:09:9b: cc:55:dd:02:d5:80:32:90:47:01:37:9e:24:35:eb:3e:3a:44: 7d:5b:9a:b2:0d:b0:eb:0e:f6:ec:49:01:84:69:37:69:36:63: c2:83:98:b1:2d:76:58:ba:f9:88:9e:8a:57:68:6c:a3:d4:0e: 81:c6:a7:58:e6:f8:7e:1b:60:39:f3:55:16:1f:e3:05:52:ae: bb:be:75:29:f6:77:10:fc:24:86:27:87:8e:68:e0:b6:d0:e6: 86:29:25:4f:e4:52:47:2f:44:2e:e4:4e:15:d6:25:1c:ca:f9: 11:cf:9a:68:1c:31:d7:99:f0:ba:c6:61:96:98:95:9b:c7:e3: 36:60:b1:21:65:9f:47:06:9a:57:6d:96:6d:49:2e:59:cc:61: b4:28:c4:0e:ac:d5:3c:1e:7d:24:a1:54:cc:43:20:ca:33:a6: 46:c1:b8:92:c0:d7:5a:8d:96:7f:78:b0:3f:d5:c4:c6:18:4e: 2b:fc:01:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa2kwNetjY0eqqFnBrdiVO1l91JUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0RjY1 OTY4MDMyNDAeFw0yNTA0MjkxMTA3MTFaFw0yNTA1MDIxNTE2MTFaMDMxMTAvBgNV BAMTKDRCQTIyM0Y1OUFCRjA5Rjc0QTE2MzY2ODAyQ0M3Q0FDODI3NzlGMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnUFKdjDh6MA5ssrhTQj1ktbdn zPICF3H66+PiFySWbtszcP6tkTbP+j/MeTUN3KF7vQDhknxccb4xMK4Ezm4fHvoz 71HsaITaTiegU/O2XRbsdcZJLl2EZXMutXKu2Ley+o6GKRbVlX9ggCbec1XLL/le MwAKTJO7d0pgtjozK5za5iGyG3ioc/O1D99xNmGs8fugFNTmfUXK/HDEYcMmr4uF lqbbxbzeeCj3iQH6VwIUaFhlb2tB9XzO94ETboT6422v7JtWqFfoZm5c2gDApQDk aEovcVCcgtA2uwwjND47HxGgexXvLqvyeE2hBYWrlhm6iMWnjREV3a1vnQArAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS6Ij9Zq/CfdKFjZoAsx8rIJ3nwIwHwYDVR0j BBgwFoAU9h0KhbVtj4JGWKgoe+jU9lloAyQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjFlOWRlMi1hNGVjLTQ3YTItOWJiOC0xMDgyMWRkYTY3ZjMvMC9GNjFEMEE4NUI1 NkQ4RjgyNDY1OEE4Mjg3QkU4RDRGNjU5NjgwMzI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0RjY1OTY4 MDMyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzYxZTlkZTItYTRlYy00N2EyLTli YjgtMTA4MjFkZGE2N2YzLzAvRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0 RjY1OTY4MDMyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/LS6lwtyCQPecUAguCLtnJxgx3XotKm3+7 q+tbOT2Dw0w+UmJtob3UexW4V/wk1sVswfcfamKZnvHtrIKymnu1Q+X87i4Jm8xV 3QLVgDKQRwE3niQ16z46RH1bmrINsOsO9uxJAYRpN2k2Y8KDmLEtdli6+Yieildo bKPUDoHGp1jm+H4bYDnzVRYf4wVSrru+dSn2dxD8JIYnh45o4LbQ5oYpJU/kUkcv RC7kThXWJRzK+RHPmmgcMdeZ8LrGYZaYlZvH4zZgsSFln0cGmldtlm1JLlnMYbQo xA6s1TwefSShVMxDIMozpkbBuJLA11qNln94sD/VxMYYTiv8AQw= -----END CERTIFICATE-----Generated at Wed Apr 30 03:34:09 2025 by rpki-client