$ rpki-client -vvf repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft File: A61585874729C58BB62740692BA8FA6ED286FDC9.mft (raw, json) Hash identifier: i0zT75tqFwb0+9bnncTJsVdcJADFmVKUG7fPNKYD5/A= Subject key identifier: CA:7D:55:11:4A:7B:72:4E:38:7D:DC:C2:BD:41:B9:42:A8:C1:59:AD Authority key identifier: A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9 Certificate issuer: /CN=A61585874729C58BB62740692BA8FA6ED286FDC9 Certificate serial: 3C14B781AFBCC9EC986132109D4DB958D55FDAF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft Manifest number: 01B2 Signing time: Sat 10 May 2025 01:21:55 +0000 Manifest this update: Sat 10 May 2025 01:16:55 +0000 Manifest next update: Tue 13 May 2025 12:47:55 +0000 Files and hashes: 1: 3130332e3234352e3137382e302f32332d3233203d3e2039333431.roa (hash: JQ2sbHxQyDFZhgbZypy5jZxgy9AwBRkpTank5bXdFdU=) 2: 3130332e3234352e3137382e302f32342d3234203d3e2039333431.roa (hash: VHj+BrkZ6iMwd6Ih4uLfhywh2RJ8HhOVFUyFHjtmvfI=) 3: 3130332e3234352e3137392e302f32342d3234203d3e2039333431.roa (hash: dJLGbPNETK4Ljwpxmc7fr7zDeLYDSeJTvSKzUm9sVu4=) 4: A61585874729C58BB62740692BA8FA6ED286FDC9.crl (hash: sA/W0gwMQg7ZORSq59Xx1SVCE7/mExKIrTTdY2sQdKY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 08:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:14:b7:81:af:bc:c9:ec:98:61:32:10:9d:4d:b9:58:d5:5f:da:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A61585874729C58BB62740692BA8FA6ED286FDC9 Validity Not Before: May 10 01:16:55 2025 GMT Not After : May 13 12:47:55 2025 GMT Subject: CN=CA7D55114A7B724E387DDCC2BD41B942A8C159AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:54:7f:f7:59:20:2c:57:75:6c:f6:2a:77:23: 3c:0a:45:bc:e7:dc:b7:ee:4a:5c:94:94:97:74:a7: 78:24:95:26:ae:7e:5d:c6:e8:6f:1d:5e:15:10:d8: 82:35:e0:c1:5d:9c:49:2d:4f:2f:d2:f1:72:6c:6a: 11:c3:c5:89:4d:43:7d:63:99:be:25:61:ba:ab:79: 13:8a:a0:49:8f:20:a8:28:79:1d:60:33:f8:4a:6a: ff:1f:13:c3:fd:8f:3f:09:b8:92:ca:ad:bb:e3:24: 1f:bb:2b:1d:62:31:65:60:84:dd:04:04:b0:02:e3: da:c5:26:5d:bc:ae:8d:25:71:a0:85:76:66:e2:19: 29:97:34:44:70:5b:59:89:bf:3d:f2:fb:58:a9:f9: 79:af:3d:45:08:c1:d6:33:cf:5e:54:91:33:3e:4e: a4:13:06:a5:d6:a1:69:0b:16:5f:1e:43:28:d0:60: 7f:b4:c4:8e:84:37:d0:d2:f1:ab:20:af:61:63:f7: fd:70:31:21:60:40:50:9e:b5:9e:85:f6:a7:15:24: fd:3f:e3:d0:65:ca:24:29:18:7f:3e:f2:96:ce:50: f5:ac:00:20:da:f1:43:85:ba:c0:cc:d8:31:9a:b3: 84:9d:7f:05:75:f0:fe:43:0c:39:c0:1b:46:12:05: c8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7D:55:11:4A:7B:72:4E:38:7D:DC:C2:BD:41:B9:42:A8:C1:59:AD X509v3 Authority Key Identifier: keyid:A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:01:e6:db:59:74:db:ec:96:a9:3b:1e:bc:dd:4a:7e:7b:f6: 3f:73:21:70:b5:7a:69:82:4c:87:14:94:ec:f0:5e:86:e5:2d: bf:ee:14:a8:c0:a2:03:36:05:ae:8f:31:75:ec:45:9b:4f:cb: e8:de:f5:26:b7:57:f3:0a:b0:68:fb:63:ab:78:8b:f3:c2:35: fc:1c:f3:a5:2e:f3:b0:02:03:ce:44:de:e1:8c:68:d6:4d:fb: 94:a2:9b:a6:8a:59:d5:e1:66:d4:69:06:a8:bf:f7:23:7e:fd: 91:cf:96:58:6b:d1:c4:49:cb:0e:d3:fd:f5:1e:e2:ba:93:c5: d6:ab:a3:28:ed:3c:d6:81:8a:7b:a0:b6:99:a2:23:42:e0:d4: d3:33:ea:3d:2a:da:f2:0c:3e:84:47:c4:2f:5e:2d:62:db:f8: 1c:f5:8c:a4:5e:5e:7c:7e:8f:d2:06:93:91:1c:7a:59:4e:02: 12:fe:59:36:ec:14:30:d4:19:af:c4:30:07:6a:26:59:1a:9e: ad:c2:86:13:1f:3b:f2:06:89:36:5a:5c:05:1d:d8:96:ae:27: d6:52:53:64:01:89:20:ac:9f:79:cd:41:15:2b:e1:a8:fb:0d: 4a:63:1d:6d:f8:65:21:e5:87:4d:24:d4:c2:ed:fb:1f:ef:17: d6:94:92:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPBS3ga+8yeyYYTIQnU25WNVf2vUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZBNkVE Mjg2RkRDOTAeFw0yNTA1MTAwMTE2NTVaFw0yNTA1MTMxMjQ3NTVaMDMxMTAvBgNV BAMTKENBN0Q1NTExNEE3QjcyNEUzODdERENDMkJENDFCOTQyQThDMTU5QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0VH/3WSAsV3Vs9ip3IzwKRbzn 3LfuSlyUlJd0p3gklSaufl3G6G8dXhUQ2II14MFdnEktTy/S8XJsahHDxYlNQ31j mb4lYbqreROKoEmPIKgoeR1gM/hKav8fE8P9jz8JuJLKrbvjJB+7Kx1iMWVghN0E BLAC49rFJl28ro0lcaCFdmbiGSmXNERwW1mJvz3y+1ip+XmvPUUIwdYzz15UkTM+ TqQTBqXWoWkLFl8eQyjQYH+0xI6EN9DS8asgr2Fj9/1wMSFgQFCetZ6F9qcVJP0/ 49BlyiQpGH8+8pbOUPWsACDa8UOFusDM2DGas4SdfwV18P5DDDnAG0YSBcinAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyn1VEUp7ck44fdzCvUG5QqjBWa0wHwYDVR0j BBgwFoAUphWFh0cpxYu2J0BpK6j6btKG/ckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzBjNDc1OS00M2I4LTRlODAtYmU4Yy04M2NiZTlmODIzMWIvMC9BNjE1ODU4NzQ3 MjlDNThCQjYyNzQwNjkyQkE4RkE2RUQyODZGREM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZBNkVEMjg2 RkRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzcwYzQ3NTktNDNiOC00ZTgwLWJl OGMtODNjYmU5ZjgyMzFiLzAvQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZB NkVEMjg2RkRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4B5ttZdNvslqk7HrzdSn579j9zIXC1emmC TIcUlOzwXoblLb/uFKjAogM2Ba6PMXXsRZtPy+je9Sa3V/MKsGj7Y6t4i/PCNfwc 86Uu87ACA85E3uGMaNZN+5Sim6aKWdXhZtRpBqi/9yN+/ZHPllhr0cRJyw7T/fUe 4rqTxdaroyjtPNaBinugtpmiI0Lg1NMz6j0q2vIMPoRHxC9eLWLb+Bz1jKReXnx+ j9IGk5EcellOAhL+WTbsFDDUGa/EMAdqJlkanq3ChhMfO/IGiTZaXAUd2JauJ9ZS U2QBiSCsn3nNQRUr4aj7DUpjHW34ZSHlh00k1MLt+x/vF9aUkrE= -----END CERTIFICATE-----Generated at Sat May 10 16:59:01 2025 by rpki-client