$ rpki-client -vvf repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft File: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft (raw, json) Hash identifier: 88D2RduDfbaROfksRYcz0GqRUCxMu/n3H4DXjm1yxiQ= Subject key identifier: 2B:64:2A:DE:F1:2F:72:48:FD:A7:4B:C8:72:41:B6:D2:C8:99:DE:B5 Authority key identifier: 61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98 Certificate issuer: /CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698 Certificate serial: 0A3D9339F4C1C6F3283792F70B3298BAB45E4C07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft Manifest number: 54 Signing time: Wed 30 Apr 2025 08:11:54 +0000 Manifest this update: Wed 30 Apr 2025 08:06:54 +0000 Manifest next update: Sat 03 May 2025 12:07:54 +0000 Files and hashes: 1: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl (hash: MNtTz+SKrPvUnJT7l9BTslQNGVDdwlX88Oi/MiZxkoU=) 2: 3130332e3230342e34362e302f32332d3233203d3e20313531353835.roa (hash: NvcYnOEp6TNwLUBjxvBXiVS/7BTrnJnJ+1wRwh9R1JM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 12:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:3d:93:39:f4:c1:c6:f3:28:37:92:f7:0b:32:98:ba:b4:5e:4c:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698 Validity Not Before: Apr 30 08:06:54 2025 GMT Not After : May 3 12:07:54 2025 GMT Subject: CN=2B642ADEF12F7248FDA74BC87241B6D2C899DEB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4c:4d:68:9d:28:6d:2a:30:ca:41:eb:7f:01: 12:53:c4:99:79:25:1f:b7:8a:9a:76:e8:d3:7d:5a: 33:58:ba:2c:e3:ca:e8:d1:03:f9:75:64:2a:48:b7: 06:a0:ee:be:9c:57:bf:26:1b:03:2b:7f:8a:ca:66: 28:c9:5c:8b:4e:7b:11:c6:c2:64:02:47:00:1a:30: 47:19:35:cf:a0:4f:85:10:35:90:98:f1:22:a7:f4: ae:78:7e:51:de:3a:3e:48:95:f4:40:25:a9:fe:cb: 66:22:28:b1:d3:26:1b:91:de:72:93:11:bd:fb:a4: 9a:0a:fe:a7:de:1e:13:b1:bc:6c:70:0f:92:4e:b4: 73:03:b3:fd:a6:b4:57:3d:86:53:a5:dc:b9:c2:fa: 5e:63:21:e9:b6:5c:43:ff:87:c7:ae:f7:74:45:5c: d7:0a:94:a3:ee:b9:29:20:1a:e0:94:09:93:db:6d: f8:b6:d0:a9:e2:5a:cf:03:45:37:cb:24:ff:39:9e: b5:48:31:bb:c6:0a:d4:c8:f0:d6:c4:bc:26:4b:3c: 51:9a:34:eb:b7:7b:4e:ba:ee:bc:54:36:f1:ed:eb: 72:10:da:03:69:d6:5e:27:01:47:e1:e6:54:78:6b: 58:99:34:26:8e:55:6b:79:e3:83:9d:14:b3:ec:8b: e5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:64:2A:DE:F1:2F:72:48:FD:A7:4B:C8:72:41:B6:D2:C8:99:DE:B5 X509v3 Authority Key Identifier: keyid:61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:e0:65:60:b8:86:52:c5:49:f7:29:c6:48:c3:cd:08:0a:80: d4:86:c3:c0:99:83:15:68:12:5f:c9:19:e6:66:f6:8f:fa:76: 30:f3:d3:3c:41:f8:b8:f1:ef:a9:5c:34:a6:46:5e:f8:de:bb: 82:98:01:e3:f2:2c:59:8c:dd:73:d9:29:85:4a:64:fb:33:8f: b9:44:c0:88:da:4d:d9:ef:67:96:cd:32:8f:cb:93:5f:1f:be: 63:66:1c:38:44:71:c4:2a:c3:98:2b:e2:f5:95:07:3b:3a:8b: 23:97:8a:1d:91:1b:32:a0:b2:59:bf:ff:a7:de:7f:cb:ed:91: 3a:42:f0:43:e0:55:a1:f0:93:37:63:0e:b8:7d:a7:9a:69:da: 25:d3:db:0f:95:46:ad:06:fe:32:0e:e0:ad:fb:7d:fb:76:4c: b8:34:7b:27:ea:1f:24:3a:8f:e1:59:52:fa:18:5d:a9:88:14: 7d:d2:94:83:24:93:99:ad:52:fa:b3:ce:12:2c:db:9f:db:c0: 67:66:a8:43:23:5d:ce:73:ab:e4:9e:11:b6:82:ce:3f:c5:06: ef:ad:f4:53:5e:09:f6:b8:a0:2b:44:3d:d9:e1:fb:87:92:32: 51:6b:48:4d:f6:ff:48:2d:14:14:ca:15:3c:22:15:f9:39:d9: 87:94:16:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCj2TOfTBxvMoN5L3CzKYurReTAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2N0JD QzYxQjY5ODAeFw0yNTA0MzAwODA2NTRaFw0yNTA1MDMxMjA3NTRaMDMxMTAvBgNV BAMTKDJCNjQyQURFRjEyRjcyNDhGREE3NEJDODcyNDFCNkQyQzg5OURFQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdTE1onShtKjDKQet/ARJTxJl5 JR+3ipp26NN9WjNYuizjyujRA/l1ZCpItwag7r6cV78mGwMrf4rKZijJXItOexHG wmQCRwAaMEcZNc+gT4UQNZCY8SKn9K54flHeOj5IlfRAJan+y2YiKLHTJhuR3nKT Eb37pJoK/qfeHhOxvGxwD5JOtHMDs/2mtFc9hlOl3LnC+l5jIem2XEP/h8eu93RF XNcKlKPuuSkgGuCUCZPbbfi20KniWs8DRTfLJP85nrVIMbvGCtTI8NbEvCZLPFGa NOu3e0667rxUNvHt63IQ2gNp1l4nAUfh5lR4a1iZNCaOVWt544OdFLPsi+VJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK2Qq3vEvckj9p0vIckG20siZ3rUwHwYDVR0j BBgwFoAUYU9cbgmx4Fp8AFTmKgzWe8xhtpgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjYwZTc1OC1mNjViLTQ2OWEtOGExYy1mYjAxOTg0MzQzYjEvMC82MTRGNUM2RTA5 QjFFMDVBN0MwMDU0RTYyQTBDRDY3QkNDNjFCNjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2N0JDQzYx QjY5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY2MGU3NTgtZjY1Yi00NjlhLThh MWMtZmIwMTk4NDM0M2IxLzAvNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2 N0JDQzYxQjY5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/gZWC4hlLFSfcpxkjDzQgKgNSGw8CZgxVo El/JGeZm9o/6djDz0zxB+Ljx76lcNKZGXvjeu4KYAePyLFmM3XPZKYVKZPszj7lE wIjaTdnvZ5bNMo/Lk18fvmNmHDhEccQqw5gr4vWVBzs6iyOXih2RGzKgslm//6fe f8vtkTpC8EPgVaHwkzdjDrh9p5pp2iXT2w+VRq0G/jIO4K37fft2TLg0eyfqHyQ6 j+FZUvoYXamIFH3SlIMkk5mtUvqzzhIs25/bwGdmqEMjXc5zq+SeEbaCzj/FBu+t 9FNeCfa4oCtEPdnh+4eSMlFrSE32/0gtFBTKFTwiFfk52YeUFmw= -----END CERTIFICATE-----Generated at Wed Apr 30 14:45:06 2025 by rpki-client