$ rpki-client -vvf repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft File: A61585874729C58BB62740692BA8FA6ED286FDC9.mft (raw, json) Hash identifier: VjLTjuF+kWIug8jxQD4/pKvHZF6ONfGv11/mQdc7YE8= Subject key identifier: 81:E0:A7:3C:16:F2:9A:F0:78:66:72:9E:6D:41:FD:13:BD:5C:3D:D7 Authority key identifier: A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9 Certificate issuer: /CN=A61585874729C58BB62740692BA8FA6ED286FDC9 Certificate serial: 6557B56873307EF045342EC808701B9C9B836334 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft Manifest number: 01C9 Signing time: Mon 30 Jun 2025 06:01:56 +0000 Manifest this update: Mon 30 Jun 2025 05:56:56 +0000 Manifest next update: Thu 03 Jul 2025 09:23:56 +0000 Files and hashes: 1: 3130332e3234352e3137392e302f32342d3234203d3e2039333431.roa (hash: e1O7IFU9uCaYA+jMLBiE2GdFukypRRniAf+RRVQm+So=) 2: 3130332e3234352e3137382e302f32332d3233203d3e2039333431.roa (hash: 3t8POxW2mcQ/nvjJPU9gXim41a5qa0GKDf3HQqW/V6Y=) 3: 3130332e3234352e3137382e302f32342d3234203d3e2039333431.roa (hash: OVp41P8XiusORgDYjhyG3tIoN5ypPHdHjH6RGxbqADk=) 4: A61585874729C58BB62740692BA8FA6ED286FDC9.crl (hash: hb92WC3i17v6JCUVO3Cxe0zb9cmYZzzfX3nO3MwHdV4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 09:23:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:57:b5:68:73:30:7e:f0:45:34:2e:c8:08:70:1b:9c:9b:83:63:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A61585874729C58BB62740692BA8FA6ED286FDC9 Validity Not Before: Jun 30 05:56:56 2025 GMT Not After : Jul 3 09:23:56 2025 GMT Subject: CN=81E0A73C16F29AF07866729E6D41FD13BD5C3DD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d1:d7:0a:de:c4:9e:25:fd:47:33:50:d9:bd: 26:92:56:93:cb:a9:90:05:5b:c4:05:d7:65:40:f3: 21:c5:de:e7:7b:bf:63:e5:82:2d:e4:4a:d0:78:ae: e8:50:82:de:1d:06:55:0d:4c:37:a7:98:dc:7d:ed: 8e:e1:06:36:b6:09:24:5d:0c:5e:91:2a:51:1a:14: 9e:dc:6d:aa:09:d8:3b:13:03:77:2b:07:78:67:94: ae:9b:ce:fe:a5:bf:36:3f:f2:e0:8d:cb:7d:82:46: e3:50:05:0d:04:26:ef:4e:dc:59:b0:01:d4:70:67: e4:d0:28:58:46:71:7f:c2:9e:fb:09:38:6b:a2:05: 5b:35:46:bc:04:8f:7b:21:8f:99:a6:42:00:c2:c4: 8c:fd:65:6b:fc:9f:f3:e3:25:2e:c2:28:fd:ce:e0: bb:3d:e0:bb:64:63:9a:ba:35:db:79:de:6d:e3:d9: d6:86:bf:3d:ab:fa:1d:d5:2e:ac:90:34:f6:9b:71: 06:6a:ae:c6:1e:4b:ef:ae:01:f3:e2:80:3e:5e:59: 87:92:af:b7:09:0b:0d:d7:55:ba:99:41:73:b8:3f: 37:87:47:ec:4c:cd:de:d4:b3:3d:dc:29:5a:c1:f6: be:f6:94:34:f8:ff:52:88:aa:6a:a8:24:42:4e:67: 9c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E0:A7:3C:16:F2:9A:F0:78:66:72:9E:6D:41:FD:13:BD:5C:3D:D7 X509v3 Authority Key Identifier: keyid:A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:a3:83:42:4b:9c:34:d2:c5:84:5a:79:f2:2f:2b:97:23:27: a2:73:fd:b0:f3:43:81:ad:cf:78:a7:ef:c9:bc:0f:75:c3:3c: 22:08:e7:7d:70:96:8b:db:c3:4e:9f:9e:a4:c0:86:9e:41:51: 8d:47:e2:44:0b:9b:25:56:dc:9b:bc:82:68:8b:e9:a4:2f:ac: 5a:b8:93:eb:87:83:e7:9f:b5:f1:d4:ea:37:67:d9:e6:09:61: 3c:f4:e7:77:57:c2:ec:48:cf:95:34:f2:17:84:99:06:32:db: 6e:78:cd:12:72:ea:ec:8b:aa:4f:6c:8f:40:d9:af:ea:64:34: 4c:bb:c6:57:76:df:cb:15:da:3d:6e:ec:c2:bc:46:8f:55:e8: 47:79:2e:9f:da:c6:0f:39:8c:3c:c9:00:ad:4b:a3:0c:01:72: 7e:eb:9e:98:85:42:45:26:60:89:af:f8:95:f7:ed:c8:f1:cf: bf:ad:57:8d:ac:43:43:58:23:c7:29:ce:e6:0e:bd:a6:47:dd: d9:21:b8:bc:09:a3:e0:c2:c6:31:3a:3d:02:da:8a:03:07:d3: 4b:68:8d:f3:8b:df:5f:e2:54:d5:b5:97:77:b1:88:71:b8:02: db:2b:da:f1:5e:d8:a7:3e:4e:aa:97:c3:40:9b:80:21:53:4c: dd:fd:1f:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZVe1aHMwfvBFNC7ICHAbnJuDYzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZBNkVE Mjg2RkRDOTAeFw0yNTA2MzAwNTU2NTZaFw0yNTA3MDMwOTIzNTZaMDMxMTAvBgNV BAMTKDgxRTBBNzNDMTZGMjlBRjA3ODY2NzI5RTZENDFGRDEzQkQ1QzNERDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi0dcK3sSeJf1HM1DZvSaSVpPL qZAFW8QF12VA8yHF3ud7v2Plgi3kStB4ruhQgt4dBlUNTDenmNx97Y7hBja2CSRd DF6RKlEaFJ7cbaoJ2DsTA3crB3hnlK6bzv6lvzY/8uCNy32CRuNQBQ0EJu9O3Fmw AdRwZ+TQKFhGcX/CnvsJOGuiBVs1RrwEj3shj5mmQgDCxIz9ZWv8n/PjJS7CKP3O 4Ls94LtkY5q6Ndt53m3j2daGvz2r+h3VLqyQNPabcQZqrsYeS++uAfPigD5eWYeS r7cJCw3XVbqZQXO4PzeHR+xMzd7Usz3cKVrB9r72lDT4/1KIqmqoJEJOZ5w7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgeCnPBbymvB4ZnKebUH9E71cPdcwHwYDVR0j BBgwFoAUphWFh0cpxYu2J0BpK6j6btKG/ckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzBjNDc1OS00M2I4LTRlODAtYmU4Yy04M2NiZTlmODIzMWIvMC9BNjE1ODU4NzQ3 MjlDNThCQjYyNzQwNjkyQkE4RkE2RUQyODZGREM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZBNkVEMjg2 RkRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzcwYzQ3NTktNDNiOC00ZTgwLWJl OGMtODNjYmU5ZjgyMzFiLzAvQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZB NkVEMjg2RkRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKjg0JLnDTSxYRaefIvK5cjJ6Jz/bDzQ4Gt z3in78m8D3XDPCII531wlovbw06fnqTAhp5BUY1H4kQLmyVW3Ju8gmiL6aQvrFq4 k+uHg+eftfHU6jdn2eYJYTz053dXwuxIz5U08heEmQYy2254zRJy6uyLqk9sj0DZ r+pkNEy7xld238sV2j1u7MK8Ro9V6Ed5Lp/axg85jDzJAK1LowwBcn7rnpiFQkUm YImv+JX37cjxz7+tV42sQ0NYI8cpzuYOvaZH3dkhuLwJo+DCxjE6PQLaigMH00to jfOL31/iVNW1l3exiHG4Atsr2vFe2Kc+TqqXw0CbgCFTTN39H/Q= -----END CERTIFICATE-----Generated at Mon Jun 30 10:16:27 2025 by rpki-client