$ rpki-client -vvf repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft File: 260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft (raw, json) Hash identifier: qmggbc3FI+Bz40IhDUWaGQbI7hTEKlPYWXmiVcpQNSU= Subject key identifier: 86:5B:4C:F3:52:02:CC:6C:CD:BE:41:04:6E:40:E0:D2:72:68:6B:99 Authority key identifier: 26:08:81:82:3F:28:04:BC:A7:A6:5A:C9:3B:D3:DC:9A:7E:E1:73:0A Certificate issuer: /CN=260881823F2804BCA7A65AC93BD3DC9A7EE1730A Certificate serial: 121AE350554A6BAAA3CE3B652ED6FB657330FB8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft Manifest number: AB Signing time: Fri 11 Apr 2025 21:50:53 +0000 Manifest this update: Fri 11 Apr 2025 21:45:53 +0000 Manifest next update: Mon 14 Apr 2025 21:52:53 +0000 Files and hashes: 1: 260881823F2804BCA7A65AC93BD3DC9A7EE1730A.crl (hash: +Us0hBI8BOdU15rKtWYkIGGvW1tB0iZowcDKK+/ZgbE=) 2: 3135372e32302e3138382e302f32332d3234203d3e20313532343232.roa (hash: M0SX+vBa40WoWqrVHk7qnsi+9OoTYdUJpRbnZC9ESb0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.crl rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 12:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:1a:e3:50:55:4a:6b:aa:a3:ce:3b:65:2e:d6:fb:65:73:30:fb:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=260881823F2804BCA7A65AC93BD3DC9A7EE1730A Validity Not Before: Apr 11 21:45:53 2025 GMT Not After : Apr 14 21:52:53 2025 GMT Subject: CN=865B4CF35202CC6CCDBE41046E40E0D272686B99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:06:a0:b5:03:d9:3d:a3:9d:d3:1a:b2:79:20: 5a:a3:17:b3:d1:c2:0c:e2:e6:ef:40:37:20:43:90: d1:ba:0a:7d:02:cf:7b:07:7b:9b:b3:e7:c9:5b:85: f5:8a:66:4a:72:48:5d:d7:d0:a6:5b:91:a9:08:5a: 4d:87:e8:50:14:c7:5a:e5:96:d3:4f:87:a0:c4:49: c9:b8:40:03:be:de:e1:6d:db:cb:bf:21:9c:1b:24: db:c2:d1:3c:33:ab:73:26:69:b2:dd:2b:ef:b8:69: 35:f7:5f:be:94:42:d2:eb:26:22:1b:84:3a:6a:2c: 8d:15:45:bd:c3:e3:ba:02:c7:0c:98:5f:07:22:b2: 05:d9:77:d7:30:71:78:62:e6:2e:ed:d0:58:11:54: 8d:ed:55:e4:96:ea:0e:53:90:d6:ca:62:d1:18:55: 15:69:9d:7f:67:53:5e:15:d7:39:39:54:d7:2b:6b: f3:24:6a:6b:6f:7e:3c:b0:05:cc:86:17:1b:cc:5e: ad:01:fd:1b:d9:81:5e:a8:ed:3d:f5:88:c6:54:85: a5:1e:a0:da:ad:46:32:a2:a3:82:c0:ac:0c:ce:a3: 9a:01:28:e3:74:26:dc:e3:a6:55:ba:a8:04:e4:31: 10:47:89:99:f1:fe:da:ac:a8:ef:b5:8c:71:c9:85: a1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5B:4C:F3:52:02:CC:6C:CD:BE:41:04:6E:40:E0:D2:72:68:6B:99 X509v3 Authority Key Identifier: keyid:26:08:81:82:3F:28:04:BC:A7:A6:5A:C9:3B:D3:DC:9A:7E:E1:73:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:f5:c7:c2:68:2f:f6:5b:bd:37:19:3c:24:bf:86:93:0e:c1: 2e:6c:cd:a9:39:60:61:8f:33:1d:cd:f1:04:36:22:0b:ab:19: a7:c4:6b:cd:26:59:9a:0c:63:c6:68:7d:35:1a:72:df:b6:66: 49:55:a9:31:c9:b3:50:01:7e:1c:a5:08:ac:70:cd:55:13:e2: bc:e6:a6:0b:3a:3a:68:f9:0c:41:f0:3e:b2:e0:f8:75:99:02: 67:e4:fc:15:a4:7f:ac:8e:56:54:b7:b0:55:af:ff:fb:03:d0: a1:37:dd:67:65:50:91:c8:b1:85:46:74:6d:4c:4d:86:61:5f: 1a:62:6b:3e:24:95:b0:7a:56:46:d3:7c:15:18:c6:52:46:e5: 46:fc:7b:b1:4d:54:19:89:8a:78:4c:e8:c7:c1:2d:76:56:ff: c2:86:f0:9b:04:42:75:5e:10:3c:6b:6c:e2:f1:3f:89:25:f9: f6:b7:9f:82:75:9e:d7:e8:f0:f2:50:4e:30:9d:25:5b:b1:e5: 64:a2:b5:0a:7c:ae:a4:2f:c1:29:c0:58:db:de:d5:e1:ff:42: d0:81:ce:35:73:ea:22:a5:a1:72:9e:b6:8f:55:ff:76:5c:33: 45:0c:98:1c:79:b2:65:9c:f6:27:55:19:e4:4f:bc:d7:f3:7a: 54:76:15:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEhrjUFVKa6qjzjtlLtb7ZXMw+40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjYwODgxODIzRjI4MDRCQ0E3QTY1QUM5M0JEM0RDOUE3 RUUxNzMwQTAeFw0yNTA0MTEyMTQ1NTNaFw0yNTA0MTQyMTUyNTNaMDMxMTAvBgNV BAMTKDg2NUI0Q0YzNTIwMkNDNkNDREJFNDEwNDZFNDBFMEQyNzI2ODZCOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQBqC1A9k9o53TGrJ5IFqjF7PR wgzi5u9ANyBDkNG6Cn0Cz3sHe5uz58lbhfWKZkpySF3X0KZbkakIWk2H6FAUx1rl ltNPh6DEScm4QAO+3uFt28u/IZwbJNvC0Twzq3MmabLdK++4aTX3X76UQtLrJiIb hDpqLI0VRb3D47oCxwyYXwcisgXZd9cwcXhi5i7t0FgRVI3tVeSW6g5TkNbKYtEY VRVpnX9nU14V1zk5VNcra/MkamtvfjywBcyGFxvMXq0B/RvZgV6o7T31iMZUhaUe oNqtRjKio4LArAzOo5oBKON0JtzjplW6qATkMRBHiZnx/tqsqO+1jHHJhaGjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhltM81ICzGzNvkEEbkDg0nJoa5kwHwYDVR0j BBgwFoAUJgiBgj8oBLynplrJO9Pcmn7hcwowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTM2OGFlMy1kZDEyLTRhYTMtODk0OC01NDZkZTA0YzUxZTQvMC8yNjA4ODE4MjNG MjgwNEJDQTdBNjVBQzkzQkQzREM5QTdFRTE3MzBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjYwODgxODIzRjI4MDRCQ0E3QTY1QUM5M0JEM0RDOUE3RUUx NzMwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDEzNjhhZTMtZGQxMi00YWEzLTg5 NDgtNTQ2ZGUwNGM1MWU0LzAvMjYwODgxODIzRjI4MDRCQ0E3QTY1QUM5M0JEM0RD OUE3RUUxNzMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFP1x8JoL/ZbvTcZPCS/hpMOwS5szak5YGGP Mx3N8QQ2IgurGafEa80mWZoMY8ZofTUact+2ZklVqTHJs1ABfhylCKxwzVUT4rzm pgs6Omj5DEHwPrLg+HWZAmfk/BWkf6yOVlS3sFWv//sD0KE33WdlUJHIsYVGdG1M TYZhXxpiaz4klbB6VkbTfBUYxlJG5Ub8e7FNVBmJinhM6MfBLXZW/8KG8JsEQnVe EDxrbOLxP4kl+fa3n4J1ntfo8PJQTjCdJVux5WSitQp8rqQvwSnAWNve1eH/QtCB zjVz6iKloXKeto9V/3ZcM0UMmBx5smWc9idVGeRPvNfzelR2FZM= -----END CERTIFICATE-----Generated at Sun Apr 13 08:47:01 2025 by rpki-client