$ rpki-client -vvf repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft File: 961C97EF8E7664408011D05E6A81CF905A1336B1.mft (raw, json) Hash identifier: byyx5RihbwONrBTHCvC/bUfAekEBpOlOxZYI8LspRYo= Subject key identifier: 8D:D3:64:82:2B:95:B3:9D:B8:BB:E8:95:80:4B:CF:82:3B:04:FB:2B Authority key identifier: 96:1C:97:EF:8E:76:64:40:80:11:D0:5E:6A:81:CF:90:5A:13:36:B1 Certificate issuer: /CN=961C97EF8E7664408011D05E6A81CF905A1336B1 Certificate serial: 1FE8E6F3CBF3040D953B21D0896E7A05EB80D31D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft Manifest number: 0154 Signing time: Sun 04 May 2025 23:11:32 +0000 Manifest this update: Sun 04 May 2025 23:06:32 +0000 Manifest next update: Thu 08 May 2025 01:19:32 +0000 Files and hashes: 1: 3130332e3133302e38302e302f32332d3234203d3e20313339393737.roa (hash: bPoKAtFpVmlvxxXnV223Oyctgi/gxMHoISI94OwfY5Q=) 2: 961C97EF8E7664408011D05E6A81CF905A1336B1.crl (hash: rnTr5H3DsABwXmLVuaRbpo5SThG+bcONtuCepgI9Lxs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.crl rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 01:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:e8:e6:f3:cb:f3:04:0d:95:3b:21:d0:89:6e:7a:05:eb:80:d3:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961C97EF8E7664408011D05E6A81CF905A1336B1 Validity Not Before: May 4 23:06:32 2025 GMT Not After : May 8 01:19:32 2025 GMT Subject: CN=8DD364822B95B39DB8BBE895804BCF823B04FB2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f7:88:f1:e5:a5:d0:5f:8a:96:5d:50:b0:8d: 12:40:a3:70:6e:ba:52:be:13:f4:a8:d8:67:2e:8a: 74:25:d1:c3:c9:a3:27:c0:65:79:08:8f:0e:c8:bc: ce:0d:5a:b9:49:cb:17:35:78:ef:ce:14:8d:46:c8: 5f:dd:d5:7e:79:16:14:db:a5:7a:af:13:44:65:fa: f0:38:1c:c1:84:86:ab:64:a6:d9:53:72:48:ce:f8: a0:ff:7f:31:db:c8:d1:8b:b4:0d:ec:02:da:c2:3f: 13:bc:2b:f1:f2:23:bb:ed:40:d0:e0:3b:79:61:f2: c2:f9:ca:b7:13:d0:f7:75:62:f3:53:71:60:ec:79: 45:8a:d6:31:25:ae:b8:5e:c4:94:a1:6f:06:7f:11: 41:26:aa:ba:3f:f2:c6:db:43:d6:55:ed:18:b1:ad: 0c:b1:d7:09:c1:f2:a6:29:98:f1:aa:06:39:ba:e5: 9b:54:09:53:87:e6:3a:0d:4f:f9:f8:a1:df:e1:e1: 9a:2a:92:90:b6:2f:7b:d1:4b:bd:e6:41:55:30:df: 98:41:bd:2d:5b:e8:19:db:d2:20:ec:62:56:96:58: ef:e2:d6:20:be:14:95:7f:b6:d7:b1:fb:e4:a7:a1: a1:ac:21:89:70:d7:c0:d2:23:51:f9:46:20:46:15: 9f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D3:64:82:2B:95:B3:9D:B8:BB:E8:95:80:4B:CF:82:3B:04:FB:2B X509v3 Authority Key Identifier: keyid:96:1C:97:EF:8E:76:64:40:80:11:D0:5E:6A:81:CF:90:5A:13:36:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:8d:5a:4f:8c:41:2b:d5:23:a6:43:59:b9:ef:0c:c0:e0:31: 99:ca:be:a9:bc:03:82:8e:1f:9c:c8:b5:0e:32:1b:b5:b2:f0: cc:3c:8b:60:b5:d3:84:7d:0c:2e:fb:ff:15:bf:45:4e:0a:19: 20:f7:67:85:4e:42:da:f0:4c:f5:91:16:bc:4c:08:ff:73:6e: 5e:86:91:0b:51:e7:3d:52:1b:09:9e:86:e4:92:da:f5:6a:db: 56:11:1d:a6:11:bd:71:86:e0:ff:e8:fc:30:57:bd:cd:33:2d: 87:f5:88:8f:d3:ac:65:b0:e1:c5:cf:58:62:46:ae:49:9a:98: df:3d:dc:4a:89:c5:6b:4b:96:b2:73:ce:4c:07:40:0c:d2:e9: f9:0d:d8:19:29:d5:ce:7e:76:2c:3c:2f:67:49:ec:dc:6c:4b: d6:0d:c2:91:cb:c2:4c:d3:b1:17:ff:f4:6d:32:d3:ae:06:45: 83:8b:08:0e:d4:0a:19:a3:1b:55:cb:51:84:6b:9c:25:c4:3d: fa:f5:95:2e:31:ab:de:71:2c:ca:96:8a:eb:9a:f5:8d:8b:53: be:2d:7f:6f:22:1a:67:c1:09:61:ae:2f:e5:65:a4:37:0c:ea: bf:f0:05:ad:56:df:f9:1a:49:b1:63:0d:19:9b:06:17:d8:45: 60:d1:da:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH+jm88vzBA2VOyHQiW56BeuA0x0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYxQzk3RUY4RTc2NjQ0MDgwMTFEMDVFNkE4MUNGOTA1 QTEzMzZCMTAeFw0yNTA1MDQyMzA2MzJaFw0yNTA1MDgwMTE5MzJaMDMxMTAvBgNV BAMTKDhERDM2NDgyMkI5NUIzOURCOEJCRTg5NTgwNEJDRjgyM0IwNEZCMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO94jx5aXQX4qWXVCwjRJAo3Bu ulK+E/So2GcuinQl0cPJoyfAZXkIjw7IvM4NWrlJyxc1eO/OFI1GyF/d1X55FhTb pXqvE0Rl+vA4HMGEhqtkptlTckjO+KD/fzHbyNGLtA3sAtrCPxO8K/HyI7vtQNDg O3lh8sL5yrcT0Pd1YvNTcWDseUWK1jElrrhexJShbwZ/EUEmqro/8sbbQ9ZV7Rix rQyx1wnB8qYpmPGqBjm65ZtUCVOH5joNT/n4od/h4ZoqkpC2L3vRS73mQVUw35hB vS1b6Bnb0iDsYlaWWO/i1iC+FJV/ttex++SnoaGsIYlw18DSI1H5RiBGFZ97AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjdNkgiuVs524u+iVgEvPgjsE+yswHwYDVR0j BBgwFoAUlhyX7452ZECAEdBeaoHPkFoTNrEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NGFlNTdiMy00NmEyLTQyM2QtYjI0NC0wM2ZmZWUxMDViNzcvMC85NjFDOTdFRjhF NzY2NDQwODAxMUQwNUU2QTgxQ0Y5MDVBMTMzNkIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTYxQzk3RUY4RTc2NjQ0MDgwMTFEMDVFNkE4MUNGOTA1QTEz MzZCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTRhZTU3YjMtNDZhMi00MjNkLWIy NDQtMDNmZmVlMTA1Yjc3LzAvOTYxQzk3RUY4RTc2NjQ0MDgwMTFEMDVFNkE4MUNG OTA1QTEzMzZCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABaNWk+MQSvVI6ZDWbnvDMDgMZnKvqm8A4KO H5zItQ4yG7Wy8Mw8i2C104R9DC77/xW/RU4KGSD3Z4VOQtrwTPWRFrxMCP9zbl6G kQtR5z1SGwmehuSS2vVq21YRHaYRvXGG4P/o/DBXvc0zLYf1iI/TrGWw4cXPWGJG rkmamN893EqJxWtLlrJzzkwHQAzS6fkN2Bkp1c5+diw8L2dJ7NxsS9YNwpHLwkzT sRf/9G0y064GRYOLCA7UChmjG1XLUYRrnCXEPfr1lS4xq95xLMqWiuua9Y2LU74t f28iGmfBCWGuL+VlpDcM6r/wBa1W3/kaSbFjDRmbBhfYRWDR2iA= -----END CERTIFICATE-----Generated at Mon May 5 11:44:35 2025 by rpki-client