$ rpki-client -vvf repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft File: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft (raw, json) Hash identifier: 74OGYzEh3nQHRjE7blW8sOXj6rvVw9hTG9uvKWgRbWk= Subject key identifier: 6B:9A:08:50:B6:B4:9A:81:7A:8A:A1:F5:84:3A:4C:DD:BF:25:C2:DB Authority key identifier: 61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98 Certificate issuer: /CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698 Certificate serial: 527506235AFFFAFDA02E18B521B8BF9B60D9E3F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft Manifest number: 59 Signing time: Sun 11 May 2025 07:01:56 +0000 Manifest this update: Sun 11 May 2025 06:56:56 +0000 Manifest next update: Wed 14 May 2025 16:07:56 +0000 Files and hashes: 1: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl (hash: TJdzqzquSO6mhZ/XgFxJKfZvTAixcc7c1IG3YfF+Amo=) 2: 3130332e3230342e34362e302f32332d3233203d3e20313531353835.roa (hash: NvcYnOEp6TNwLUBjxvBXiVS/7BTrnJnJ+1wRwh9R1JM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 16:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:75:06:23:5a:ff:fa:fd:a0:2e:18:b5:21:b8:bf:9b:60:d9:e3:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698 Validity Not Before: May 11 06:56:56 2025 GMT Not After : May 14 16:07:56 2025 GMT Subject: CN=6B9A0850B6B49A817A8AA1F5843A4CDDBF25C2DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:89:22:4f:54:fa:c8:92:12:02:5f:ef:7b:80: cc:8b:d2:00:64:6a:14:f5:44:ad:52:01:21:4a:0b: c8:13:a8:e7:d6:b7:a3:ba:c2:da:9f:3c:92:78:31: 9e:da:2b:e0:d6:8b:93:73:5b:04:7b:f2:6d:fd:68: 31:1a:b5:11:13:b7:57:3a:5c:9e:d4:ae:d6:4f:15: 3c:a3:73:02:3b:f7:45:50:56:bb:a3:c8:72:5c:92: 2b:0d:02:85:5c:04:63:e7:03:16:b6:a4:50:7b:d8: f1:c5:fe:68:f3:15:87:64:b9:be:9b:1e:cf:b0:a0: 22:a2:c1:67:2f:54:cb:a4:b1:9f:05:47:fa:1e:61: 76:0a:4d:7e:a8:fe:4c:a5:80:b3:d6:e5:1f:e5:d5: d0:64:f6:ba:d3:26:eb:52:0c:d9:a8:5a:bb:dd:18: 4e:fd:9c:0b:2b:73:d3:9c:8d:3d:07:7b:92:8f:ad: 90:ca:4e:bc:90:dc:d7:b4:96:2d:cf:58:d3:87:5a: d6:d2:bc:4b:d0:75:f4:ca:11:f0:6b:0b:54:bc:d8: 1c:6b:73:c8:41:14:ef:b2:40:2b:3e:03:bf:59:87: db:cc:36:fc:b6:3f:60:33:a3:91:5f:5d:59:27:8e: 97:22:db:8f:c6:52:ad:3b:3b:6e:bf:46:2f:9d:b1: 4e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9A:08:50:B6:B4:9A:81:7A:8A:A1:F5:84:3A:4C:DD:BF:25:C2:DB X509v3 Authority Key Identifier: keyid:61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:8c:2c:ee:8d:31:9e:83:09:bf:a4:c1:b8:75:9e:1c:b4:61: 2a:1f:17:3b:59:e9:07:7d:ff:a8:f4:da:5a:d5:5c:89:b1:a8: 13:ac:bc:7d:f3:f8:65:2b:81:8b:de:5d:b2:81:d9:c1:dc:8f: ce:f2:b4:f2:35:bc:99:4a:65:92:38:89:52:9d:af:fb:3f:4d: f1:2e:0c:65:b4:0a:db:d4:26:04:4d:44:e0:28:6b:c1:1d:20: f0:3e:d5:f7:d4:ed:4b:be:1f:06:fe:69:74:92:01:a9:51:1d: 67:7e:2f:a2:a5:fb:fb:71:e7:7b:9e:d7:b7:e1:fc:42:9a:9b: 55:fd:2a:15:98:14:b4:64:04:57:6b:5e:55:fa:53:87:e7:a1: af:42:d0:6c:26:7f:3a:12:d8:81:a9:63:fc:dc:48:dd:94:96: cd:1c:5f:c7:3d:10:25:75:cc:e7:1d:31:8f:a8:16:1e:13:11: b6:fb:75:72:3a:db:d2:69:70:44:f6:d3:f2:a2:d2:0e:74:69: 17:41:06:a6:24:3e:2d:a2:2f:71:fa:52:58:8b:fa:a6:85:99: e3:2d:1d:67:d7:f7:cf:c2:07:cb:dc:cd:d4:48:4d:b4:e7:63: 28:d2:b2:16:6c:95:49:6d:e7:1e:14:61:ee:59:20:65:ce:8d: 5c:d7:c9:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUnUGI1r/+v2gLhi1Ibi/m2DZ4/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2N0JD QzYxQjY5ODAeFw0yNTA1MTEwNjU2NTZaFw0yNTA1MTQxNjA3NTZaMDMxMTAvBgNV BAMTKDZCOUEwODUwQjZCNDlBODE3QThBQTFGNTg0M0E0Q0REQkYyNUMyREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPiSJPVPrIkhICX+97gMyL0gBk ahT1RK1SASFKC8gTqOfWt6O6wtqfPJJ4MZ7aK+DWi5NzWwR78m39aDEatRETt1c6 XJ7UrtZPFTyjcwI790VQVrujyHJckisNAoVcBGPnAxa2pFB72PHF/mjzFYdkub6b Hs+woCKiwWcvVMuksZ8FR/oeYXYKTX6o/kylgLPW5R/l1dBk9rrTJutSDNmoWrvd GE79nAsrc9OcjT0He5KPrZDKTryQ3Ne0li3PWNOHWtbSvEvQdfTKEfBrC1S82Bxr c8hBFO+yQCs+A79Zh9vMNvy2P2Azo5FfXVknjpci24/GUq07O26/Ri+dsU5RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa5oIULa0moF6iqH1hDpM3b8lwtswHwYDVR0j BBgwFoAUYU9cbgmx4Fp8AFTmKgzWe8xhtpgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjYwZTc1OC1mNjViLTQ2OWEtOGExYy1mYjAxOTg0MzQzYjEvMC82MTRGNUM2RTA5 QjFFMDVBN0MwMDU0RTYyQTBDRDY3QkNDNjFCNjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2N0JDQzYx QjY5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY2MGU3NTgtZjY1Yi00NjlhLThh MWMtZmIwMTk4NDM0M2IxLzAvNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2 N0JDQzYxQjY5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOMLO6NMZ6DCb+kwbh1nhy0YSofFztZ6Qd9 /6j02lrVXImxqBOsvH3z+GUrgYveXbKB2cHcj87ytPI1vJlKZZI4iVKdr/s/TfEu DGW0CtvUJgRNROAoa8EdIPA+1ffU7Uu+Hwb+aXSSAalRHWd+L6Kl+/tx53ue17fh /EKam1X9KhWYFLRkBFdrXlX6U4fnoa9C0GwmfzoS2IGpY/zcSN2Uls0cX8c9ECV1 zOcdMY+oFh4TEbb7dXI629JpcET20/Ki0g50aRdBBqYkPi2iL3H6UliL+qaFmeMt HWfX98/CB8vczdRITbTnYyjSshZslUlt5x4UYe5ZIGXOjVzXyeM= -----END CERTIFICATE-----Generated at Mon May 12 21:51:56 2025 by rpki-client