$ rpki-client -vvf repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft File: 260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft (raw, json) Hash identifier: Du6WAWR4zXtOGdv79ybtDLteQP0lZ6b8+00TjQc+hCc= Subject key identifier: 7F:BF:BA:7B:1F:BD:81:45:CA:35:06:F0:84:ED:BE:78:C8:22:C3:49 Authority key identifier: 26:08:81:82:3F:28:04:BC:A7:A6:5A:C9:3B:D3:DC:9A:7E:E1:73:0A Certificate issuer: /CN=260881823F2804BCA7A65AC93BD3DC9A7EE1730A Certificate serial: 57AEFE08F5DC9C6B9A498C0EE49367DCBAB511FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft Manifest number: 9D Signing time: Thu 13 Mar 2025 09:00:54 +0000 Manifest this update: Thu 13 Mar 2025 08:55:54 +0000 Manifest next update: Sun 16 Mar 2025 20:10:54 +0000 Files and hashes: 1: 260881823F2804BCA7A65AC93BD3DC9A7EE1730A.crl (hash: 258NA67uZqlLtXSlaYbXDYyFPaBuzpkJyBU80JwjExk=) 2: 3135372e32302e3138382e302f32332d3234203d3e20313532343232.roa (hash: uXN8fe3vkJx+wSW+M/ejclDs8Allv99c27F8IyjPFGI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.crl rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 11:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ae:fe:08:f5:dc:9c:6b:9a:49:8c:0e:e4:93:67:dc:ba:b5:11:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=260881823F2804BCA7A65AC93BD3DC9A7EE1730A Validity Not Before: Mar 13 08:55:54 2025 GMT Not After : Mar 16 20:10:54 2025 GMT Subject: CN=7FBFBA7B1FBD8145CA3506F084EDBE78C822C349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1e:15:86:87:10:6f:34:3a:14:1a:85:5c:e3: 76:23:ee:68:ba:db:cc:61:f1:29:df:50:20:f0:63: d2:64:e6:0c:ae:53:70:8b:2b:85:c1:8d:56:b2:4a: b3:d0:d0:4d:8e:0d:58:df:39:71:a0:3a:dc:05:62: 11:b9:eb:d9:21:57:c5:da:74:22:e7:6e:48:64:f6: c3:3c:83:0b:91:d6:45:6a:1a:66:c2:19:a6:f7:2c: f0:ca:31:86:ea:4b:ca:1e:26:ed:77:1b:3c:fd:9f: ad:7f:ac:5e:9c:b9:0b:23:1f:7e:2b:4e:84:9c:a0: a8:45:10:1d:12:8f:b1:74:31:65:cf:0d:bf:70:1e: 5f:07:41:76:5a:71:b0:e4:f9:79:82:4c:04:dd:35: 5f:4c:90:4c:3c:f9:7d:6f:b7:e2:0c:c0:63:eb:26: 46:12:67:f9:d5:32:8b:70:1d:f1:1f:ec:c7:74:eb: 90:38:af:e0:3f:d1:f7:c5:5b:7d:c4:84:88:e0:26: 47:1a:08:11:6f:b6:c1:68:9a:bc:d8:cc:43:80:d0: db:60:61:6d:e1:e9:9c:7b:aa:b1:57:2b:76:16:70: 94:b6:78:00:ad:45:54:ea:f9:c7:49:8b:5f:a8:47: 44:21:7c:01:48:21:ce:f8:c4:7f:6b:32:d5:32:8d: 38:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:BF:BA:7B:1F:BD:81:45:CA:35:06:F0:84:ED:BE:78:C8:22:C3:49 X509v3 Authority Key Identifier: keyid:26:08:81:82:3F:28:04:BC:A7:A6:5A:C9:3B:D3:DC:9A:7E:E1:73:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:6d:69:19:20:cc:7b:f7:e9:55:e6:ed:a1:2b:b3:16:38:d8: 5f:c1:eb:ea:79:e8:91:e6:09:bd:77:c4:20:fb:a3:7a:9a:b9: ee:55:22:b7:50:c0:0e:7c:69:18:0d:54:d5:67:15:d2:63:9b: a8:90:9c:83:47:2f:11:3e:ef:e4:84:9e:71:99:52:89:a1:b7: 52:20:75:0e:2e:99:4e:76:b4:d8:5f:71:dc:0a:0b:8b:bd:24: e5:7a:89:29:9b:f3:01:10:ac:e6:d7:23:e8:33:23:a3:f3:61: cd:3d:e8:81:95:25:4d:f8:93:73:9c:5d:e0:8d:67:cc:1e:e9: 09:6c:55:f9:39:aa:ac:8d:4f:57:5e:de:c9:02:fc:41:31:8f: eb:70:33:9f:20:c8:43:ad:ae:77:1e:1e:4b:cb:9a:b8:5d:82: 59:4b:5a:a1:bd:65:ce:76:e7:3f:d4:a2:a8:32:42:62:c6:ef: 37:c0:d2:fd:a4:56:d0:fa:ab:e0:70:4d:81:ac:07:92:9e:44: 0d:06:2a:d9:15:8d:7d:68:d1:a1:5d:a0:9a:f1:e0:b6:c1:1c: 6c:2e:49:30:55:34:98:55:20:4b:74:70:56:5a:f1:41:01:96: 37:60:79:57:92:6a:51:91:83:fe:3e:f2:26:ce:bc:00:32:1d: ec:ec:ed:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV67+CPXcnGuaSYwO5JNn3Lq1Ef4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjYwODgxODIzRjI4MDRCQ0E3QTY1QUM5M0JEM0RDOUE3 RUUxNzMwQTAeFw0yNTAzMTMwODU1NTRaFw0yNTAzMTYyMDEwNTRaMDMxMTAvBgNV BAMTKDdGQkZCQTdCMUZCRDgxNDVDQTM1MDZGMDg0RURCRTc4QzgyMkMzNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRHhWGhxBvNDoUGoVc43Yj7mi6 28xh8SnfUCDwY9Jk5gyuU3CLK4XBjVaySrPQ0E2ODVjfOXGgOtwFYhG569khV8Xa dCLnbkhk9sM8gwuR1kVqGmbCGab3LPDKMYbqS8oeJu13Gzz9n61/rF6cuQsjH34r ToScoKhFEB0Sj7F0MWXPDb9wHl8HQXZacbDk+XmCTATdNV9MkEw8+X1vt+IMwGPr JkYSZ/nVMotwHfEf7Md065A4r+A/0ffFW33EhIjgJkcaCBFvtsFomrzYzEOA0Ntg YW3h6Zx7qrFXK3YWcJS2eACtRVTq+cdJi1+oR0QhfAFIIc74xH9rMtUyjTiRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf7+6ex+9gUXKNQbwhO2+eMgiw0kwHwYDVR0j BBgwFoAUJgiBgj8oBLynplrJO9Pcmn7hcwowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTM2OGFlMy1kZDEyLTRhYTMtODk0OC01NDZkZTA0YzUxZTQvMC8yNjA4ODE4MjNG MjgwNEJDQTdBNjVBQzkzQkQzREM5QTdFRTE3MzBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjYwODgxODIzRjI4MDRCQ0E3QTY1QUM5M0JEM0RDOUE3RUUx NzMwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDEzNjhhZTMtZGQxMi00YWEzLTg5 NDgtNTQ2ZGUwNGM1MWU0LzAvMjYwODgxODIzRjI4MDRCQ0E3QTY1QUM5M0JEM0RD OUE3RUUxNzMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBtaRkgzHv36VXm7aErsxY42F/B6+p56JHm Cb13xCD7o3qaue5VIrdQwA58aRgNVNVnFdJjm6iQnINHLxE+7+SEnnGZUomht1Ig dQ4umU52tNhfcdwKC4u9JOV6iSmb8wEQrObXI+gzI6PzYc096IGVJU34k3OcXeCN Z8we6QlsVfk5qqyNT1de3skC/EExj+twM58gyEOtrnceHkvLmrhdgllLWqG9Zc52 5z/UoqgyQmLG7zfA0v2kVtD6q+BwTYGsB5KeRA0GKtkVjX1o0aFdoJrx4LbBHGwu STBVNJhVIEt0cFZa8UEBljdgeVeSalGRg/4+8ibOvAAyHezs7f8= -----END CERTIFICATE-----Generated at Thu Mar 13 21:32:57 2025 by rpki-client