$ rpki-client -vvf repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft File: 961A52A522DEB902D9CBDDE98AF82B424422F566.mft (raw, json) Hash identifier: gNjbQBGgUwTDOYfUvKf3w3nllVbNZIndJXG/1kl4ZUE= Subject key identifier: 43:27:D8:F9:2C:A8:92:48:DF:96:5C:95:4D:F2:41:FD:0C:AB:46:7D Authority key identifier: 96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 Certificate issuer: /CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Certificate serial: 7F9A41FC79F14A731C27E9157F0186B124B3C344 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft Manifest number: 73 Signing time: Sun 15 Jun 2025 01:01:49 +0000 Manifest this update: Sun 15 Jun 2025 00:56:49 +0000 Manifest next update: Wed 18 Jun 2025 09:00:49 +0000 Files and hashes: 1: 961A52A522DEB902D9CBDDE98AF82B424422F566.crl (hash: bQk79d7lNVFs/SSiBaq/G54dov1KEtgg7uFccW/z/VQ=) 2: 3136302e32352e3132302e302f32342d3234203d3e20313533303632.roa (hash: /2/aGmGUHvyKK7WNmuKzAj0cNzsdhjisomKkikn2mP8=) 3: 3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa (hash: JTzBC/tUY4YKAC/+r+uXmWAv3T2JRL+s5BpODc7IPU4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 09:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:9a:41:fc:79:f1:4a:73:1c:27:e9:15:7f:01:86:b1:24:b3:c3:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Validity Not Before: Jun 15 00:56:49 2025 GMT Not After : Jun 18 09:00:49 2025 GMT Subject: CN=4327D8F92CA89248DF965C954DF241FD0CAB467D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:87:c9:5c:2b:91:76:38:69:3d:74:d7:3e:88: 8a:ac:93:ec:43:e5:e1:33:ae:5b:c7:89:37:cd:01: b2:02:5c:2c:93:65:bb:1d:45:42:2f:00:af:fe:fd: 4a:85:0e:ca:fc:ed:d6:46:2f:1f:ea:46:fa:3b:df: b9:07:e7:31:22:e1:1d:ea:46:c2:d9:54:4f:fe:d0: 35:0e:24:ca:b1:d8:55:fc:54:3f:70:28:40:bb:3d: 3b:77:61:52:32:ec:51:9a:a3:8f:5a:d7:2d:60:68: fc:1b:18:f3:94:06:60:f1:61:a3:05:00:49:c7:b3: 63:4f:da:5c:77:f1:22:c2:45:c4:57:ce:e9:80:8c: fc:19:03:38:ed:d1:90:b7:a3:5b:d1:7d:88:ad:94: f7:b0:27:28:53:c3:49:cf:34:22:76:10:76:2c:34: 8a:d4:53:93:31:ff:b6:81:23:23:b6:0e:46:3b:5a: a9:d3:5a:27:8d:9a:18:30:28:46:f0:c0:c1:fe:78: 48:5d:9d:ce:0e:c8:39:e7:3b:95:aa:27:7e:f5:e2: 05:67:a2:74:08:88:e3:cd:e3:00:71:b9:c3:aa:40: 9d:08:3f:c5:8f:35:b1:cb:55:49:90:35:5b:52:56: 0a:31:a1:4d:ec:d2:e0:04:03:1c:68:6d:f8:92:80: 37:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:27:D8:F9:2C:A8:92:48:DF:96:5C:95:4D:F2:41:FD:0C:AB:46:7D X509v3 Authority Key Identifier: keyid:96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f7:f9:c8:00:db:47:9a:f1:ea:ab:ce:62:cb:2c:07:4a:b0: 2d:39:49:41:fb:43:fb:70:ad:24:4d:f5:a5:41:dc:67:cd:b1: 00:f2:26:c0:bb:5c:f0:24:10:b4:dd:76:b5:d6:92:79:39:ac: a1:2d:6f:89:c8:20:02:6d:18:f8:c3:c7:dc:47:6e:e3:33:9e: 16:b3:a5:e6:7f:5d:a0:ec:23:7e:e0:71:fc:25:56:3b:5d:66: f1:61:03:3a:a0:ca:eb:6d:2e:cd:70:95:fc:a9:87:95:a0:5e: 9c:72:ec:0b:2d:e8:37:97:78:e8:b1:96:de:cb:64:79:3d:a7: 89:1b:07:00:52:94:61:58:17:8e:28:58:1b:00:d1:f6:4e:de: 7a:a0:a1:a2:1d:40:6a:b4:b6:9a:98:38:9a:eb:fa:00:3f:12: 32:40:ab:55:1e:d2:70:6c:82:ff:d4:fd:8f:14:4b:23:04:c5: 89:2b:55:7a:1e:f1:12:d2:22:b2:b6:42:5e:36:51:81:67:51: e6:c4:43:d3:ab:80:7c:ea:5e:0a:af:84:85:0b:4b:5d:d5:4a: 76:a4:a7:4d:a8:9b:79:7b:54:5a:1a:b8:6a:79:8c:ee:82:32: 33:6d:9d:4d:cf:5f:b5:2a:02:87:26:c0:c5:f7:28:b2:22:91: 83:84:2c:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf5pB/HnxSnMcJ+kVfwGGsSSzw0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0 NDIyRjU2NjAeFw0yNTA2MTUwMDU2NDlaFw0yNTA2MTgwOTAwNDlaMDMxMTAvBgNV BAMTKDQzMjdEOEY5MkNBODkyNDhERjk2NUM5NTRERjI0MUZEMENBQjQ2N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOh8lcK5F2OGk9dNc+iIqsk+xD 5eEzrlvHiTfNAbICXCyTZbsdRUIvAK/+/UqFDsr87dZGLx/qRvo737kH5zEi4R3q RsLZVE/+0DUOJMqx2FX8VD9wKEC7PTt3YVIy7FGao49a1y1gaPwbGPOUBmDxYaMF AEnHs2NP2lx38SLCRcRXzumAjPwZAzjt0ZC3o1vRfYitlPewJyhTw0nPNCJ2EHYs NIrUU5Mx/7aBIyO2DkY7WqnTWieNmhgwKEbwwMH+eEhdnc4OyDnnO5WqJ3714gVn onQIiOPN4wBxucOqQJ0IP8WPNbHLVUmQNVtSVgoxoU3s0uAEAxxobfiSgDedAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQyfY+SyokkjfllyVTfJB/QyrRn0wHwYDVR0j BBgwFoAUlhpSpSLeuQLZy93pivgrQkQi9WYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjcyZjAxMi1hNDNhLTRmY2ItODZhOS1hYjNlOTU3M2E4ZDkvMC85NjFBNTJBNTIy REVCOTAyRDlDQkRERTk4QUY4MkI0MjQ0MjJGNTY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0NDIy RjU2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y3MmYwMTItYTQzYS00ZmNiLTg2 YTktYWIzZTk1NzNhOGQ5LzAvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJC NDI0NDIyRjU2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIb3+cgA20ea8eqrzmLLLAdKsC05SUH7Q/tw rSRN9aVB3GfNsQDyJsC7XPAkELTddrXWknk5rKEtb4nIIAJtGPjDx9xHbuMznhaz peZ/XaDsI37gcfwlVjtdZvFhAzqgyuttLs1wlfyph5WgXpxy7Ast6DeXeOixlt7L ZHk9p4kbBwBSlGFYF44oWBsA0fZO3nqgoaIdQGq0tpqYOJrr+gA/EjJAq1Ue0nBs gv/U/Y8USyMExYkrVXoe8RLSIrK2Ql42UYFnUebEQ9OrgHzqXgqvhIULS13VSnak p02om3l7VFoauGp5jO6CMjNtnU3PX7UqAocmwMX3KLIikYOELGo= -----END CERTIFICATE-----Generated at Tue Jun 17 08:27:29 2025 by rpki-client