$ rpki-client -vvf repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft File: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft (raw, json) Hash identifier: BMiuTnza1Aw5/swnqQcGex5LZIKG5QyPsSKZCadnBys= Subject key identifier: B5:37:31:D8:3E:80:8D:5D:1C:BB:14:43:CE:B9:A4:64:82:49:F2:E5 Authority key identifier: 61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 Certificate issuer: /CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Certificate serial: 489F91620A73DF8B42762FF34C73AF5DA25ECDC4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft Manifest number: 8F Signing time: Thu 08 May 2025 16:41:50 +0000 Manifest this update: Thu 08 May 2025 16:36:50 +0000 Manifest next update: Mon 12 May 2025 02:22:50 +0000 Files and hashes: 1: 3136302e32322e3132362e302f32332d3234203d3e20313532383230.roa (hash: gC4KxUANFsMrdBu7MfFut/AO90Ufo3+gZIW4ZqyH1XY=) 2: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl (hash: M/AD3Xbz/cOgeYaRCBobNWe1WMBNX2ZVi/4zT2n0k84=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 02:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:9f:91:62:0a:73:df:8b:42:76:2f:f3:4c:73:af:5d:a2:5e:cd:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Validity Not Before: May 8 16:36:50 2025 GMT Not After : May 12 02:22:50 2025 GMT Subject: CN=B53731D83E808D5D1CBB1443CEB9A4648249F2E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e2:d9:11:35:e5:10:cd:31:a9:bb:30:81:20: 52:44:58:5d:79:2c:c2:bb:61:41:df:fa:0e:52:0f: 7b:c4:18:c6:76:a1:2f:67:b4:72:a9:02:45:a9:93: 9c:87:69:df:47:80:9b:88:d3:bf:2f:78:b5:50:c2: 95:7b:9e:1f:11:84:98:60:f8:a8:6c:6a:5e:89:f5: 64:0b:85:b9:f9:8b:b1:e7:db:d5:49:72:55:79:e0: bb:bb:8d:4e:b9:61:ab:6f:77:c8:94:8b:ac:c9:f3: 04:00:a2:bd:a9:51:a7:2b:78:df:4b:db:10:07:56: a0:8d:c2:6a:0b:ae:a6:1f:7e:87:3e:ea:f5:5e:3c: 11:90:ae:62:f9:5c:a5:28:34:50:1c:b0:d3:0d:f1: 82:53:72:17:b5:11:32:3b:12:e6:e3:15:dd:71:9f: fd:a5:62:9f:3d:5d:e5:8d:21:41:3c:67:7d:f8:c6: 3b:1d:bd:50:97:a5:f1:80:10:f6:14:21:68:31:4d: 13:7d:ff:69:e9:ff:c7:ea:9d:79:25:2d:2f:da:c2: 13:0f:cd:e1:da:fb:2a:00:61:3b:b2:ec:bd:d0:a1: aa:d3:7e:b9:9c:a5:72:4c:44:8a:b6:11:61:3a:19: af:4f:67:e8:84:e6:69:43:a1:61:53:89:76:8d:b5: 47:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:37:31:D8:3E:80:8D:5D:1C:BB:14:43:CE:B9:A4:64:82:49:F2:E5 X509v3 Authority Key Identifier: keyid:61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:df:e1:df:e6:66:29:ca:24:81:2e:96:c8:22:d1:b0:f7:eb: 6b:46:77:5f:91:ec:b2:d0:79:2d:2c:37:7d:ed:89:8c:1c:8b: 5d:f9:e2:4d:c4:9c:0d:60:f3:88:da:41:c8:57:e1:17:82:f8: 07:b2:41:5c:2b:5c:05:33:da:f1:33:c7:92:8c:b8:5f:29:c9: e5:97:8c:ed:78:92:a7:99:e0:83:6b:67:82:7d:8e:63:15:3e: 81:ca:32:c1:bb:b7:56:8c:e4:29:19:49:67:b5:c6:0d:5c:1b: e6:5d:d0:e4:c8:61:39:47:c3:53:64:91:e8:35:2b:c3:c3:09: aa:db:85:c9:b1:15:19:16:82:ee:a2:b3:05:34:97:b2:36:bd: e3:1e:ee:51:ef:a6:0c:27:00:5d:b9:ad:ab:b8:aa:4e:53:fa: 08:40:42:64:ef:2f:47:92:32:72:47:37:e0:ee:2f:23:f7:33: 90:cb:e7:b0:1b:42:cd:cf:1c:0e:c7:ea:49:02:49:b9:4c:34: cd:97:ca:2e:86:27:ea:22:90:2e:10:79:f1:b6:a9:22:56:8b: b3:db:eb:65:b9:30:50:89:6f:3d:45:d9:5a:1e:ab:eb:4d:23: ea:71:dc:48:a9:97:bf:9f:81:88:59:27:76:6c:99:32:e4:81: 30:06:95:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSJ+RYgpz34tCdi/zTHOvXaJezcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VD RDJBMDA2MzAeFw0yNTA1MDgxNjM2NTBaFw0yNTA1MTIwMjIyNTBaMDMxMTAvBgNV BAMTKEI1MzczMUQ4M0U4MDhENUQxQ0JCMTQ0M0NFQjlBNDY0ODI0OUYyRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW4tkRNeUQzTGpuzCBIFJEWF15 LMK7YUHf+g5SD3vEGMZ2oS9ntHKpAkWpk5yHad9HgJuI078veLVQwpV7nh8RhJhg +Khsal6J9WQLhbn5i7Hn29VJclV54Lu7jU65Yatvd8iUi6zJ8wQAor2pUacreN9L 2xAHVqCNwmoLrqYffoc+6vVePBGQrmL5XKUoNFAcsNMN8YJTche1ETI7EubjFd1x n/2lYp89XeWNIUE8Z334xjsdvVCXpfGAEPYUIWgxTRN9/2np/8fqnXklLS/awhMP zeHa+yoAYTuy7L3QoarTfrmcpXJMRIq2EWE6Ga9PZ+iE5mlDoWFTiXaNtUeLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtTcx2D6AjV0cuxRDzrmkZIJJ8uUwHwYDVR0j BBgwFoAUYem2eM1C2iobPvPYh57ffs0qAGMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTQ2ZTA5YS1jMDA3LTRiMGMtOTQ2MC03YzQwMzQxY2EyZjcvMC82MUU5QjY3OENE NDJEQTJBMUIzRUYzRDg4NzlFREY3RUNEMkEwMDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VDRDJB MDA2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU0NmUwOWEtYzAwNy00YjBjLTk0 NjAtN2M0MDM0MWNhMmY3LzAvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURG N0VDRDJBMDA2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjf4d/mZinKJIEulsgi0bD362tGd1+R7LLQ eS0sN33tiYwci1354k3EnA1g84jaQchX4ReC+AeyQVwrXAUz2vEzx5KMuF8pyeWX jO14kqeZ4INrZ4J9jmMVPoHKMsG7t1aM5CkZSWe1xg1cG+Zd0OTIYTlHw1Nkkeg1 K8PDCarbhcmxFRkWgu6iswU0l7I2veMe7lHvpgwnAF25rau4qk5T+ghAQmTvL0eS MnJHN+DuLyP3M5DL57AbQs3PHA7H6kkCSblMNM2Xyi6GJ+oikC4QefG2qSJWi7Pb 62W5MFCJbz1F2Voeq+tNI+px3Eipl7+fgYhZJ3ZsmTLkgTAGldo= -----END CERTIFICATE-----Generated at Sat May 10 05:37:44 2025 by rpki-client