$ rpki-client -vvf repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft File: 961A52A522DEB902D9CBDDE98AF82B424422F566.mft (raw, json) Hash identifier: di6gyHdaIN35lKX+o0IIavVNpbp3YBAMMPRVBd9a1Aw= Subject key identifier: EF:D4:0F:71:29:50:84:84:15:19:C1:A3:64:8C:A8:07:0F:DA:EF:B1 Authority key identifier: 96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 Certificate issuer: /CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Certificate serial: 4F280EDD4A873BC357FA05042837E5CD592338C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft Manifest number: 7A Signing time: Mon 30 Jun 2025 22:31:48 +0000 Manifest this update: Mon 30 Jun 2025 22:26:48 +0000 Manifest next update: Fri 04 Jul 2025 07:48:48 +0000 Files and hashes: 1: 961A52A522DEB902D9CBDDE98AF82B424422F566.crl (hash: z1u+15/317s/Fq1d+tyUjBIoyJu9Yopf18PxW1aTQvA=) 2: 3136302e32352e3132302e302f32342d3234203d3e20313533303632.roa (hash: /2/aGmGUHvyKK7WNmuKzAj0cNzsdhjisomKkikn2mP8=) 3: 3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa (hash: JTzBC/tUY4YKAC/+r+uXmWAv3T2JRL+s5BpODc7IPU4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 07:48:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:28:0e:dd:4a:87:3b:c3:57:fa:05:04:28:37:e5:cd:59:23:38:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Validity Not Before: Jun 30 22:26:48 2025 GMT Not After : Jul 4 07:48:48 2025 GMT Subject: CN=EFD40F71295084841519C1A3648CA8070FDAEFB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fb:fb:6f:b7:dc:27:05:4a:96:16:7c:55:ca: b8:fb:d1:ac:a7:9d:c1:fa:4b:ad:ca:e4:ea:71:21: 45:85:d0:c8:7e:94:9b:50:cf:7b:db:59:1f:ae:ad: bd:13:be:c7:8c:97:91:0d:40:e3:65:f2:53:47:66: d8:08:b9:eb:ba:62:d0:96:ea:57:a3:ff:e3:8a:40: 9a:09:2e:65:2a:bb:c9:2a:db:38:96:d7:44:ce:54: 28:e9:ae:c4:4e:f4:d3:aa:24:18:0d:00:31:cc:8e: f0:49:3b:38:a8:23:b5:08:01:62:67:76:24:72:a8: d1:9c:a4:ed:1c:09:ec:05:51:fc:5d:96:4c:68:55: 60:0a:2c:70:ad:82:ec:a9:9f:14:14:43:93:c8:d5: b0:22:2f:bf:87:f5:65:de:a9:51:c7:76:a3:4c:85: 9e:6f:b4:83:ae:4b:f4:3c:6b:18:be:4f:10:19:24: 8e:b8:97:5b:f6:07:b7:df:c3:6a:23:df:74:b9:f3: 10:75:92:a2:10:0a:0c:7e:84:d6:70:f8:6d:ff:5f: 04:94:f2:0b:18:90:06:e1:57:ff:27:da:06:1e:d4: 0e:9e:c5:ac:3e:1a:de:ac:70:65:ed:b0:b7:bc:7b: ae:aa:26:e3:4f:8d:81:f6:16:f3:84:dc:75:29:ea: 2e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D4:0F:71:29:50:84:84:15:19:C1:A3:64:8C:A8:07:0F:DA:EF:B1 X509v3 Authority Key Identifier: keyid:96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:82:a3:25:80:79:35:75:06:14:03:ad:e7:9d:ed:8e:85:ff: 3b:79:68:ba:67:d6:47:93:ee:49:95:11:f2:98:22:99:04:07: 0c:64:78:52:7c:e2:a0:14:2b:75:19:1b:08:1e:3b:57:7f:f3: 3c:ae:d2:e4:28:98:96:9d:d7:5f:55:53:83:3a:c2:16:c4:ad: 31:32:42:e8:76:ef:2c:0d:03:e8:10:81:34:02:eb:0b:30:5b: 8a:5c:08:b6:40:b6:df:6e:dc:a8:d5:31:e1:c4:d5:34:ca:ba: 30:06:2d:72:27:5b:fd:e8:e2:55:59:dd:6c:92:80:78:c4:09: 54:79:9d:d4:cb:eb:6e:24:93:c0:b7:ef:01:1e:2c:8f:40:67: 07:d6:86:b4:40:2b:98:cd:42:02:35:f5:13:09:2e:11:d4:9c: d6:8c:88:72:b3:b6:07:07:08:34:ed:c2:59:86:69:5a:be:cf: 79:af:e8:5b:1e:d9:d3:c7:d5:c6:2a:9f:57:92:fd:71:58:42: 69:6e:e4:5e:51:3d:da:6e:28:ed:fa:e8:2a:38:a2:d7:c0:61: 79:b8:3f:6e:eb:14:4d:fb:83:2a:d9:e2:e3:14:5a:76:d2:3a: c5:ee:7d:b3:01:1f:c7:50:a1:16:01:02:ee:32:b8:3e:a9:a0: 01:de:3f:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTygO3UqHO8NX+gUEKDflzVkjOMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0 NDIyRjU2NjAeFw0yNTA2MzAyMjI2NDhaFw0yNTA3MDQwNzQ4NDhaMDMxMTAvBgNV BAMTKEVGRDQwRjcxMjk1MDg0ODQxNTE5QzFBMzY0OENBODA3MEZEQUVGQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT+/tvt9wnBUqWFnxVyrj70ayn ncH6S63K5OpxIUWF0Mh+lJtQz3vbWR+urb0TvseMl5ENQONl8lNHZtgIueu6YtCW 6lej/+OKQJoJLmUqu8kq2ziW10TOVCjprsRO9NOqJBgNADHMjvBJOzioI7UIAWJn diRyqNGcpO0cCewFUfxdlkxoVWAKLHCtguypnxQUQ5PI1bAiL7+H9WXeqVHHdqNM hZ5vtIOuS/Q8axi+TxAZJI64l1v2B7ffw2oj33S58xB1kqIQCgx+hNZw+G3/XwSU 8gsYkAbhV/8n2gYe1A6exaw+Gt6scGXtsLe8e66qJuNPjYH2FvOE3HUp6i47AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU79QPcSlQhIQVGcGjZIyoBw/a77EwHwYDVR0j BBgwFoAUlhpSpSLeuQLZy93pivgrQkQi9WYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjcyZjAxMi1hNDNhLTRmY2ItODZhOS1hYjNlOTU3M2E4ZDkvMC85NjFBNTJBNTIy REVCOTAyRDlDQkRERTk4QUY4MkI0MjQ0MjJGNTY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0NDIy RjU2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y3MmYwMTItYTQzYS00ZmNiLTg2 YTktYWIzZTk1NzNhOGQ5LzAvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJC NDI0NDIyRjU2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6CoyWAeTV1BhQDreed7Y6F/zt5aLpn1keT 7kmVEfKYIpkEBwxkeFJ84qAUK3UZGwgeO1d/8zyu0uQomJad119VU4M6whbErTEy Quh27ywNA+gQgTQC6wswW4pcCLZAtt9u3KjVMeHE1TTKujAGLXInW/3o4lVZ3WyS gHjECVR5ndTL624kk8C37wEeLI9AZwfWhrRAK5jNQgI19RMJLhHUnNaMiHKztgcH CDTtwlmGaVq+z3mv6Fse2dPH1cYqn1eS/XFYQmlu5F5RPdpuKO366Co4otfAYXm4 P27rFE37gyrZ4uMUWnbSOsXufbMBH8dQoRYBAu4yuD6poAHeP6A= -----END CERTIFICATE-----Generated at Wed Jul 2 14:20:36 2025 by rpki-client