$ rpki-client -vvf repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft File: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft (raw, json) Hash identifier: ePrnLh6tuPOY3Fj/a3Z6L2wN+eOnMj3ABZZ5cF3QsmU= Subject key identifier: 62:58:BC:63:ED:D3:E3:A8:33:5A:B0:C6:92:35:D7:8C:B0:5D:54:9E Authority key identifier: A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB Certificate issuer: /CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Certificate serial: 7E8520F370EBAD35C4F0AEC871EBA972EA5D1AB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft Manifest number: 6B Signing time: Tue 08 Apr 2025 09:40:55 +0000 Manifest this update: Tue 08 Apr 2025 09:35:55 +0000 Manifest next update: Fri 11 Apr 2025 16:30:55 +0000 Files and hashes: 1: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl (hash: UAATltH/8BU6ehnauwWmOmfBHFjly4ua/I3HnRilrbs=) 2: 3136302e32302e33362e302f32332d3234203d3e20313532373631.roa (hash: avjOhQMHcwWGlDF7WDzZoOiS3u3B2hy6xJEOi4n8Cr0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:85:20:f3:70:eb:ad:35:c4:f0:ae:c8:71:eb:a9:72:ea:5d:1a:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Validity Not Before: Apr 8 09:35:55 2025 GMT Not After : Apr 11 16:30:55 2025 GMT Subject: CN=6258BC63EDD3E3A8335AB0C69235D78CB05D549E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f8:a5:e5:3a:d2:a7:70:7e:6c:f9:9d:32:d0: 2e:9a:5e:57:f9:4e:29:a2:18:74:17:f9:1f:f5:d8: 52:dc:22:cd:9d:7d:f9:88:15:ef:9e:3c:38:57:12: 75:50:16:20:33:55:83:cc:6e:63:0d:18:27:bf:8c: cc:cb:2c:e6:71:26:39:11:87:68:24:51:87:fc:a2: 1b:11:f7:d1:89:f8:3d:07:e7:86:9f:0e:5a:51:7f: 01:e0:93:fa:ed:bd:20:27:56:cf:8b:77:24:c4:55: 07:bf:0e:e1:e4:44:e6:bc:6c:e7:f5:0f:83:e3:b7: 52:af:bd:52:1e:ae:78:88:c6:b3:9d:51:85:89:0a: 68:db:5a:61:9c:fa:cc:7f:03:b9:67:c2:62:3c:5e: f7:81:06:3d:0c:32:84:b9:b2:bc:52:51:e7:c1:3a: 7a:46:dd:b1:09:69:70:2b:ba:dd:45:e3:7a:54:bb: 20:f3:04:ae:2e:69:6f:db:6e:cf:af:6c:ab:7d:fa: 73:3b:23:92:b5:8c:c9:51:79:2c:55:ab:cf:b7:29: f3:3f:59:ea:b3:fa:c3:30:1f:32:14:4e:b4:01:9e: 7a:22:bc:4a:6e:36:db:d9:6b:9d:52:38:4f:37:02: 9a:43:c4:8e:7b:1e:25:20:a9:5d:62:91:9a:cb:83: 6a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:58:BC:63:ED:D3:E3:A8:33:5A:B0:C6:92:35:D7:8C:B0:5D:54:9E X509v3 Authority Key Identifier: keyid:A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:18:45:da:f8:77:e1:ed:68:52:53:1a:a1:2a:1b:29:f1:16: 70:40:a4:e0:3d:7a:6e:b2:a6:10:d2:4e:c1:3a:57:ba:ba:4d: b1:b2:7c:a1:0b:85:6c:4b:99:aa:af:b6:02:15:d2:65:d0:7d: 68:94:01:70:02:ad:8c:0a:33:be:fb:a7:5e:aa:dd:3b:c1:7e: e8:e8:71:d9:b1:94:c1:c5:b2:54:e4:1c:29:7b:68:62:05:cd: 82:d9:ca:f4:ed:20:d4:d7:2e:7f:f8:7d:8b:df:87:4e:78:71: 59:27:4d:2d:86:38:42:12:82:30:ba:6a:f8:e4:60:a7:e2:74: 05:d3:36:8d:02:90:46:ea:e5:b9:6a:40:e4:ca:64:4f:4a:2b: 99:1c:7c:06:ff:cb:17:3f:48:ea:a2:d3:af:df:dd:31:6a:b4: bc:ef:c6:fd:b0:f3:c2:89:27:45:64:b3:4d:aa:be:39:48:50: 71:db:9b:86:ce:f3:de:86:4f:83:11:3e:7e:69:a6:9d:2c:e7: 78:36:fe:7d:a1:85:41:14:e2:bf:5e:1e:0a:2b:42:25:86:5b: c1:c7:f8:33:19:33:03:71:9d:8e:e2:64:a4:24:b2:3f:58:5b: 7d:cb:5c:39:4b:50:e1:82:9d:40:00:f8:6b:e3:66:51:9c:de: 57:00:7a:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfoUg83DrrTXE8K7IceupcupdGrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1 RTUyRThFQjAeFw0yNTA0MDgwOTM1NTVaFw0yNTA0MTExNjMwNTVaMDMxMTAvBgNV BAMTKDYyNThCQzYzRUREM0UzQTgzMzVBQjBDNjkyMzVENzhDQjA1RDU0OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd+KXlOtKncH5s+Z0y0C6aXlf5 TimiGHQX+R/12FLcIs2dffmIFe+ePDhXEnVQFiAzVYPMbmMNGCe/jMzLLOZxJjkR h2gkUYf8ohsR99GJ+D0H54afDlpRfwHgk/rtvSAnVs+LdyTEVQe/DuHkROa8bOf1 D4Pjt1KvvVIerniIxrOdUYWJCmjbWmGc+sx/A7lnwmI8XveBBj0MMoS5srxSUefB OnpG3bEJaXArut1F43pUuyDzBK4uaW/bbs+vbKt9+nM7I5K1jMlReSxVq8+3KfM/ Weqz+sMwHzIUTrQBnnoivEpuNtvZa51SOE83AppDxI57HiUgqV1ikZrLg2pbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYli8Y+3T46gzWrDGkjXXjLBdVJ4wHwYDVR0j BBgwFoAUpxuqZmI4R7e9nqfEC8vKhV5S6OswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODFlZjQ0MC01YTVmLTRhNGYtYjUwOS1iMTAzMjQ1YzVjZjEvMC9BNzFCQUE2NjYy Mzg0N0I3QkQ5RUE3QzQwQkNCQ0E4NTVFNTJFOEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1RTUy RThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgxZWY0NDAtNWE1Zi00YTRmLWI1 MDktYjEwMzI0NWM1Y2YxLzAvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNB ODU1RTUyRThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4YRdr4d+HtaFJTGqEqGynxFnBApOA9em6y phDSTsE6V7q6TbGyfKELhWxLmaqvtgIV0mXQfWiUAXACrYwKM777p16q3TvBfujo cdmxlMHFslTkHCl7aGIFzYLZyvTtINTXLn/4fYvfh054cVknTS2GOEISgjC6avjk YKfidAXTNo0CkEbq5blqQOTKZE9KK5kcfAb/yxc/SOqi06/f3TFqtLzvxv2w88KJ J0Vks02qvjlIUHHbm4bO896GT4MRPn5ppp0s53g2/n2hhUEU4r9eHgorQiWGW8HH +DMZMwNxnY7iZKQksj9YW33LXDlLUOGCnUAA+GvjZlGc3lcAeuI= -----END CERTIFICATE-----Generated at Wed Apr 9 17:00:26 2025 by rpki-client