$ rpki-client -vvf repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft File: 8910B51FCAA7F54124A76AF839CE19F4055A1061.mft (raw, json) Hash identifier: dNRNymTVJjnECgDoA8XkOGNlCNVs5fDFA8yv2AeffBE= Subject key identifier: 05:1C:97:26:24:D3:E1:1D:E0:1B:DA:5D:A9:86:A3:0B:58:25:68:12 Authority key identifier: 89:10:B5:1F:CA:A7:F5:41:24:A7:6A:F8:39:CE:19:F4:05:5A:10:61 Certificate issuer: /CN=8910B51FCAA7F54124A76AF839CE19F4055A1061 Certificate serial: 1CD4880DE8A07AF8F825F317A2B88D99A3621F44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer Subject info access: rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft Manifest number: A6 Signing time: Tue 01 Jul 2025 16:31:38 +0000 Manifest this update: Tue 01 Jul 2025 16:26:38 +0000 Manifest next update: Sat 05 Jul 2025 01:12:38 +0000 Files and hashes: 1: 3136302e31392e31362e302f32342d3234203d3e20313532303733.roa (hash: BD9874huussdd9AhnhjODm64dILqVkWxIW7wjOoaAMQ=) 2: 3136302e31392e31372e302f32342d3234203d3e20313532303733.roa (hash: z0YgoG/ujpHrwuWoXrEZAv8nwDL/OBeAUxVX0QCVaBM=) 3: 8910B51FCAA7F54124A76AF839CE19F4055A1061.crl (hash: g9h8fbnksXO68IBJ9tzrDF/XbyAt7cfDZC6gItD0ddA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.crl rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 19:22:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:d4:88:0d:e8:a0:7a:f8:f8:25:f3:17:a2:b8:8d:99:a3:62:1f:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8910B51FCAA7F54124A76AF839CE19F4055A1061 Validity Not Before: Jul 1 16:26:38 2025 GMT Not After : Jul 5 01:12:38 2025 GMT Subject: CN=051C972624D3E11DE01BDA5DA986A30B58256812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:16:3f:5c:30:fa:1a:28:62:c7:a0:b0:68:3a: e9:ff:4a:c5:81:0d:f3:9d:5c:ff:88:89:28:e5:38: dc:d4:64:1b:f5:15:e9:53:c2:1f:51:13:fe:e3:65: 57:9f:4c:51:97:7e:af:7a:ec:ba:b5:7a:1e:c1:ee: 1a:16:6a:2e:bd:61:35:92:7c:45:f7:32:1d:84:60: 29:50:79:33:09:3d:7e:7c:79:a5:9f:5f:23:32:31: 99:fc:f3:f5:c6:db:e3:b4:76:0a:bf:6c:df:89:fd: 62:5f:b2:05:08:f3:63:06:15:e4:4f:88:10:4c:b9: 68:35:f2:a5:65:93:5d:a1:0f:b6:b3:14:13:6f:44: 44:9f:02:02:40:a9:96:e1:f3:20:8b:d4:df:ba:eb: ab:7a:18:39:ca:c8:0e:78:f6:a9:9d:1e:fa:a2:c8: 49:c1:41:2f:4c:cd:ae:a8:35:60:df:b6:11:81:f0: c2:96:37:cb:ef:2b:64:c2:a4:15:06:a6:d1:ef:6e: 18:61:da:45:ff:a5:c9:57:e8:73:75:30:e7:75:99: f0:51:ff:ab:d6:c2:05:5d:69:6c:b6:8a:e1:ba:5c: 37:6f:a6:d0:f3:ae:de:d5:28:5e:37:2c:93:32:7e: 97:15:da:c0:e1:79:0c:e8:04:b3:f8:5f:9b:9f:58: 00:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1C:97:26:24:D3:E1:1D:E0:1B:DA:5D:A9:86:A3:0B:58:25:68:12 X509v3 Authority Key Identifier: keyid:89:10:B5:1F:CA:A7:F5:41:24:A7:6A:F8:39:CE:19:F4:05:5A:10:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:0b:06:e0:a0:78:78:1e:f7:46:b8:be:c0:50:cd:2d:bc:46: a2:59:2a:0b:99:48:56:74:0f:dc:54:97:49:a9:0f:49:78:d9: 20:e5:0b:f9:1e:be:15:22:55:9c:a7:7c:53:49:04:af:3f:3e: f9:89:ee:a4:09:72:10:51:f1:b2:2f:31:65:64:33:de:be:ec: be:39:23:9a:58:2a:c2:41:51:b8:29:28:ba:23:e2:57:3b:c3: d3:52:bc:8c:52:0c:e1:cb:46:4f:47:96:91:b0:81:07:23:3c: c2:ab:5d:4f:e0:a1:f3:28:49:b6:ab:b5:7a:18:b9:a5:51:8e: a3:ec:90:da:f1:7e:c5:c4:2e:b5:ab:a4:7b:b2:38:64:0e:03: c4:d8:c8:35:07:6f:9b:e7:3f:15:e4:9d:1d:99:3c:e6:f4:d4: dc:df:bb:67:42:cb:c6:f3:ef:23:cf:d2:66:87:82:93:84:c0: ba:5a:71:c8:7e:69:76:10:4d:ac:14:97:34:3b:bd:dd:64:1e: 10:f4:e0:e8:a8:bf:19:a7:32:9e:c4:e5:b1:3b:d0:f4:39:63: 48:a3:21:02:0d:0b:c3:3f:ae:4b:90:d1:ce:9d:a9:d3:cd:31: 4e:1e:8c:73:0c:78:88:fc:ce:49:c6:3e:b8:66:cb:5f:3f:7a: ec:ea:99:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHNSIDeigevj4JfMXoriNmaNiH0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkxMEI1MUZDQUE3RjU0MTI0QTc2QUY4MzlDRTE5RjQw NTVBMTA2MTAeFw0yNTA3MDExNjI2MzhaFw0yNTA3MDUwMTEyMzhaMDMxMTAvBgNV BAMTKDA1MUM5NzI2MjREM0UxMURFMDFCREE1REE5ODZBMzBCNTgyNTY4MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Fj9cMPoaKGLHoLBoOun/SsWB DfOdXP+IiSjlONzUZBv1FelTwh9RE/7jZVefTFGXfq967Lq1eh7B7hoWai69YTWS fEX3Mh2EYClQeTMJPX58eaWfXyMyMZn88/XG2+O0dgq/bN+J/WJfsgUI82MGFeRP iBBMuWg18qVlk12hD7azFBNvRESfAgJAqZbh8yCL1N+666t6GDnKyA549qmdHvqi yEnBQS9Mza6oNWDfthGB8MKWN8vvK2TCpBUGptHvbhhh2kX/pclX6HN1MOd1mfBR /6vWwgVdaWy2iuG6XDdvptDzrt7VKF43LJMyfpcV2sDheQzoBLP4X5ufWABVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBRyXJiTT4R3gG9pdqYajC1glaBIwHwYDVR0j BBgwFoAUiRC1H8qn9UEkp2r4Oc4Z9AVaEGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MTQwMzQwOS1iZjA0LTQyZTktOTU2Ny1iMDZlYzgyM2Q5MDEvMC84OTEwQjUxRkNB QTdGNTQxMjRBNzZBRjgzOUNFMTlGNDA1NUExMDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODkxMEI1MUZDQUE3RjU0MTI0QTc2QUY4MzlDRTE5RjQwNTVB MTA2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzE0MDM0MDktYmYwNC00MmU5LTk1 NjctYjA2ZWM4MjNkOTAxLzAvODkxMEI1MUZDQUE3RjU0MTI0QTc2QUY4MzlDRTE5 RjQwNTVBMTA2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4LBuCgeHge90a4vsBQzS28RqJZKguZSFZ0 D9xUl0mpD0l42SDlC/kevhUiVZynfFNJBK8/PvmJ7qQJchBR8bIvMWVkM96+7L45 I5pYKsJBUbgpKLoj4lc7w9NSvIxSDOHLRk9HlpGwgQcjPMKrXU/gofMoSbartXoY uaVRjqPskNrxfsXELrWrpHuyOGQOA8TYyDUHb5vnPxXknR2ZPOb01Nzfu2dCy8bz 7yPP0maHgpOEwLpacch+aXYQTawUlzQ7vd1kHhD04OiovxmnMp7E5bE70PQ5Y0ij IQINC8M/rkuQ0c6dqdPNMU4ejHMMeIj8zknGPrhmy18/euzqmec= -----END CERTIFICATE-----Generated at Tue Jul 1 20:03:03 2025 by rpki-client