$ rpki-client -vvf repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft File: A61585874729C58BB62740692BA8FA6ED286FDC9.mft (raw, json) Hash identifier: 6sWZh08K3z/4S70oDJHCYIurOI3piiGRuCTL6zQXwI0= Subject key identifier: 4C:4D:6F:C5:73:53:6D:36:30:2C:BC:BC:9B:95:5C:E4:41:31:35:65 Authority key identifier: A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9 Certificate issuer: /CN=A61585874729C58BB62740692BA8FA6ED286FDC9 Certificate serial: 0978B1318F18074AFF66EB34CA69E9004C47ED5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft Manifest number: 01E0 Signing time: Thu 21 Aug 2025 15:11:59 +0000 Manifest this update: Thu 21 Aug 2025 15:06:59 +0000 Manifest next update: Mon 25 Aug 2025 02:44:59 +0000 Files and hashes: 1: A61585874729C58BB62740692BA8FA6ED286FDC9.crl (hash: oVXHHAgOsR2Y/Sqn6cuC5dXWhR2ewHI6JAlE0hBk6Tk=) 2: 3130332e3234352e3137392e302f32342d3234203d3e2039333431.roa (hash: e1O7IFU9uCaYA+jMLBiE2GdFukypRRniAf+RRVQm+So=) 3: 3130332e3234352e3137382e302f32332d3233203d3e2039333431.roa (hash: 3t8POxW2mcQ/nvjJPU9gXim41a5qa0GKDf3HQqW/V6Y=) 4: 3130332e3234352e3137382e302f32342d3234203d3e2039333431.roa (hash: OVp41P8XiusORgDYjhyG3tIoN5ypPHdHjH6RGxbqADk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:44:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:78:b1:31:8f:18:07:4a:ff:66:eb:34:ca:69:e9:00:4c:47:ed:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A61585874729C58BB62740692BA8FA6ED286FDC9 Validity Not Before: Aug 21 15:06:59 2025 GMT Not After : Aug 25 02:44:59 2025 GMT Subject: CN=4C4D6FC573536D36302CBCBC9B955CE441313565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7a:9b:d7:d5:65:c8:74:e1:4f:a2:d0:27:27: 6a:dc:2f:a8:97:7c:4f:63:ac:cf:8b:04:fe:4f:ed: a6:c0:58:31:f9:dd:93:5d:81:56:72:76:bc:32:93: d8:3f:df:14:39:3b:30:20:a6:e4:ed:d6:e9:f7:08: 6f:99:31:93:58:30:6d:3e:09:02:50:30:90:e6:47: b6:d1:e7:6b:9d:a8:f2:fc:de:56:91:e9:78:b2:46: c9:a6:c0:83:e1:35:d7:e8:9a:26:25:5a:3c:16:a1: fa:1b:1a:50:c1:2a:e6:90:e2:6f:54:86:8d:79:20: 0f:11:9b:c8:f1:c1:13:dd:c1:5e:9b:92:6a:6a:40: 27:e5:b2:45:ad:2b:2a:91:be:92:8d:7e:53:b0:d4: a2:af:b5:03:af:dd:3c:95:5c:f0:dc:89:7e:f3:63: cb:46:4f:60:a5:1f:f1:f5:8c:50:ea:0a:80:6e:58: 66:58:f3:38:ff:7b:35:5d:f5:3d:5a:39:e7:68:c8: 0d:b5:0d:01:7e:ca:53:45:9c:c2:bf:54:0b:0f:af: e2:f6:c8:b8:21:ef:d4:6b:65:dc:ea:8f:2c:aa:86: 3b:61:b9:bc:6b:35:af:e5:6a:5e:c3:5d:46:ed:ca: b8:1f:0d:1d:fd:52:80:5d:4f:cb:3b:73:36:bb:62: 5e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4D:6F:C5:73:53:6D:36:30:2C:BC:BC:9B:95:5C:E4:41:31:35:65 X509v3 Authority Key Identifier: keyid:A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:1f:0b:db:ef:e8:25:5c:99:b4:da:35:10:67:c5:45:ae:50: e4:6c:14:54:43:98:94:ac:d8:44:4f:fb:8b:30:27:bd:72:39: 94:6f:11:e2:c5:7a:fc:5a:0b:3e:1a:05:3d:8a:f9:19:ee:8b: 94:4e:14:ff:14:ff:f9:c2:c6:9b:0a:ac:3b:5e:44:24:66:5b: 82:63:cd:a8:6a:18:dc:34:14:bd:ee:c1:46:62:9b:8b:79:e9: f7:8d:d4:a7:2d:bb:3c:29:c8:ed:a1:3f:37:f4:0a:3c:db:b6: 70:4e:cf:68:a6:4a:c5:ed:c8:de:96:48:1d:9f:66:8c:97:3e: d3:45:8f:51:28:64:1a:57:77:c8:bf:1a:b2:a5:b9:3d:05:48: 2b:8f:b1:61:17:8d:f8:af:49:af:a6:8e:10:2c:f3:4e:3a:d1: 30:5e:b2:14:45:b1:93:a6:0f:1d:16:f6:e3:59:dd:76:e3:a0: a0:d0:2c:4c:dc:8b:a2:44:bc:f9:f7:41:8b:62:db:6e:ab:d9: 79:0e:02:c7:44:ec:46:5b:30:6d:5d:82:43:19:46:d2:d2:b7: 98:24:f1:78:ce:15:b0:b4:d6:3e:7d:60:e7:5e:e9:82:96:12: 58:d6:0a:96:26:47:0f:e3:3a:bb:00:50:99:94:16:63:57:aa: 1b:19:e9:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCXixMY8YB0r/Zus0ymnpAExH7VswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZBNkVE Mjg2RkRDOTAeFw0yNTA4MjExNTA2NTlaFw0yNTA4MjUwMjQ0NTlaMDMxMTAvBgNV BAMTKDRDNEQ2RkM1NzM1MzZEMzYzMDJDQkNCQzlCOTU1Q0U0NDEzMTM1NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuepvX1WXIdOFPotAnJ2rcL6iX fE9jrM+LBP5P7abAWDH53ZNdgVZydrwyk9g/3xQ5OzAgpuTt1un3CG+ZMZNYMG0+ CQJQMJDmR7bR52udqPL83laR6XiyRsmmwIPhNdfomiYlWjwWofobGlDBKuaQ4m9U ho15IA8Rm8jxwRPdwV6bkmpqQCflskWtKyqRvpKNflOw1KKvtQOv3TyVXPDciX7z Y8tGT2ClH/H1jFDqCoBuWGZY8zj/ezVd9T1aOedoyA21DQF+ylNFnMK/VAsPr+L2 yLgh79RrZdzqjyyqhjthubxrNa/lal7DXUbtyrgfDR39UoBdT8s7cza7Yl5vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTE1vxXNTbTYwLLy8m5Vc5EExNWUwHwYDVR0j BBgwFoAUphWFh0cpxYu2J0BpK6j6btKG/ckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzBjNDc1OS00M2I4LTRlODAtYmU4Yy04M2NiZTlmODIzMWIvMC9BNjE1ODU4NzQ3 MjlDNThCQjYyNzQwNjkyQkE4RkE2RUQyODZGREM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZBNkVEMjg2 RkRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzcwYzQ3NTktNDNiOC00ZTgwLWJl OGMtODNjYmU5ZjgyMzFiLzAvQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZB NkVEMjg2RkRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkfC9vv6CVcmbTaNRBnxUWuUORsFFRDmJSs 2ERP+4swJ71yOZRvEeLFevxaCz4aBT2K+Rnui5ROFP8U//nCxpsKrDteRCRmW4Jj zahqGNw0FL3uwUZim4t56feN1KctuzwpyO2hPzf0CjzbtnBOz2imSsXtyN6WSB2f ZoyXPtNFj1EoZBpXd8i/GrKluT0FSCuPsWEXjfivSa+mjhAs80460TBeshRFsZOm Dx0W9uNZ3XbjoKDQLEzci6JEvPn3QYti226r2XkOAsdE7EZbMG1dgkMZRtLSt5gk 8XjOFbC01j59YOde6YKWEljWCpYmRw/jOrsAUJmUFmNXqhsZ6RI= -----END CERTIFICATE-----Generated at Sat Aug 23 12:02:37 2025 by rpki-client