$ rpki-client -vvf repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft File: 061065EDF2843A4462114BCE0A173E21A84A019E.mft (raw, json) Hash identifier: RZ3xKJpwIWhLO1hSMYbDF/JTaDhH6hQ72UYXsyU5m3Y= Subject key identifier: 3F:C5:0F:75:DE:65:20:2A:ED:79:88:E0:79:D8:E4:24:85:BC:A0:F2 Authority key identifier: 06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E Certificate issuer: /CN=061065EDF2843A4462114BCE0A173E21A84A019E Certificate serial: 3CBE85FEC0BFD76DECFA4287EA0E76CA47722075 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft Manifest number: 0280 Signing time: Fri 04 Apr 2025 13:52:18 +0000 Manifest this update: Fri 04 Apr 2025 13:47:18 +0000 Manifest next update: Mon 07 Apr 2025 22:00:18 +0000 Files and hashes: 1: 3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa (hash: H8eCB1ajNrVrh3omhOA+7EIUqPrlMk7lfLVZEODKpTs=) 2: 061065EDF2843A4462114BCE0A173E21A84A019E.crl (hash: CChsjqrVAGPQb66N/inUB1tTxIbaNL+a9Fr0uXpKn9w=) 3: 3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa (hash: 2Hf0voiLyRB5yquDwOqQGzECahxM0QLqpt8+luqMRjw=) 4: 3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa (hash: 6kHHWGOl1WkB5FFpqU5tEepFu8NpO3D8mqOqYEjynek=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:be:85:fe:c0:bf:d7:6d:ec:fa:42:87:ea:0e:76:ca:47:72:20:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061065EDF2843A4462114BCE0A173E21A84A019E Validity Not Before: Apr 4 13:47:18 2025 GMT Not After : Apr 7 22:00:18 2025 GMT Subject: CN=3FC50F75DE65202AED7988E079D8E42485BCA0F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e4:93:d0:e0:57:0f:ea:2f:19:56:40:ec:26: e8:5d:00:ba:24:62:20:ec:7b:9b:5c:32:f3:03:a4: 6a:e3:3e:b9:4d:85:d0:2c:cd:0d:2f:c2:e1:ef:0f: c9:6e:5b:92:cd:47:70:db:ff:7e:2f:6d:f3:f6:aa: 4c:bd:ea:3f:7b:b7:f7:75:99:a4:7a:35:aa:42:a3: 95:1d:6a:82:7f:51:e2:38:29:14:ad:fb:7d:61:e5: 5e:e4:22:e7:ee:aa:92:29:f8:67:5d:63:a2:e4:2a: 69:d2:ab:8e:d0:67:84:de:73:7a:1e:8b:55:62:b8: 06:c5:a5:46:ce:78:34:10:d2:44:31:21:18:ef:b7: 2e:73:16:b0:d4:60:b5:b9:35:45:d1:a0:28:26:fb: 2d:b7:04:24:56:6b:5e:c8:ce:66:a1:26:37:0b:9f: be:87:6f:01:7b:cb:bb:50:df:fc:a7:7a:89:28:73: 03:dd:b4:66:62:18:f4:67:c3:15:74:d9:58:7e:80: 01:e1:7e:d9:c5:d6:24:a5:af:41:5b:5b:27:65:69: 51:fa:57:67:c6:d4:51:a8:c3:94:a8:85:15:9f:82: 61:40:a0:24:1f:f5:14:d2:aa:cb:9d:e7:b2:55:41: 69:62:87:05:c7:13:49:a6:a4:7a:07:23:73:e5:7b: f3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C5:0F:75:DE:65:20:2A:ED:79:88:E0:79:D8:E4:24:85:BC:A0:F2 X509v3 Authority Key Identifier: keyid:06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:66:5d:ce:5f:64:fd:c4:40:60:73:42:cc:e1:ba:32:fc:01: 03:e3:54:bc:43:f4:b3:eb:8f:8a:18:d9:51:aa:a1:63:9d:4f: 97:e0:56:fe:ff:cf:ec:da:17:39:e2:fb:5e:32:ea:09:8e:64: 60:55:63:1d:d4:32:b9:87:6d:ac:77:38:e2:f9:2a:15:89:13: 03:9c:78:23:dd:bb:a5:e4:06:b8:40:55:d1:94:97:1d:45:48: 1a:34:52:27:45:0f:3b:63:8d:e0:62:20:2b:29:71:57:7a:62: b6:ba:d6:d3:38:cb:cc:b2:ef:a3:22:d1:c2:b2:72:8b:72:9c: 70:9c:e1:b3:c7:9e:78:90:04:30:ad:a2:a6:5d:16:d7:9e:42: ae:78:4f:6e:92:9b:6c:10:58:d3:76:09:5a:fa:41:c3:49:d8: ca:cc:bc:ed:76:63:74:61:73:b0:f7:6d:96:40:bf:7a:d3:63: d2:01:a8:35:1d:f3:dc:41:61:7a:3b:66:10:34:b2:ac:00:e1: 95:62:a9:d2:2a:12:98:78:bd:1c:6a:63:bd:b1:f9:f6:21:ee: 7b:2a:9f:6f:96:c2:d3:21:76:ee:32:3c:8b:54:2f:7b:f7:8e: 54:ed:84:1f:9a:ba:a7:ce:38:99:b4:b7:8a:5b:8d:31:5d:92: ae:fe:74:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPL6F/sC/123s+kKH6g52ykdyIHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFB ODRBMDE5RTAeFw0yNTA0MDQxMzQ3MThaFw0yNTA0MDcyMjAwMThaMDMxMTAvBgNV BAMTKDNGQzUwRjc1REU2NTIwMkFFRDc5ODhFMDc5RDhFNDI0ODVCQ0EwRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp5JPQ4FcP6i8ZVkDsJuhdALok YiDse5tcMvMDpGrjPrlNhdAszQ0vwuHvD8luW5LNR3Db/34vbfP2qky96j97t/d1 maR6NapCo5UdaoJ/UeI4KRSt+31h5V7kIufuqpIp+GddY6LkKmnSq47QZ4Tec3oe i1ViuAbFpUbOeDQQ0kQxIRjvty5zFrDUYLW5NUXRoCgm+y23BCRWa17IzmahJjcL n76HbwF7y7tQ3/yneokocwPdtGZiGPRnwxV02Vh+gAHhftnF1iSlr0FbWydlaVH6 V2fG1FGow5SohRWfgmFAoCQf9RTSqsud57JVQWlihwXHE0mmpHoHI3Ple/PbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP8UPdd5lICrteYjgedjkJIW8oPIwHwYDVR0j BBgwFoAUBhBl7fKEOkRiEUvOChc+IahKAZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzM2MjRjNC1iZmRjLTRlNDgtOGVhMC1lYjA1NjA1YzYyMTMvMC8wNjEwNjVFREYy ODQzQTQ0NjIxMTRCQ0UwQTE3M0UyMUE4NEEwMTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFBODRB MDE5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMzNjI0YzQtYmZkYy00ZTQ4LThl YTAtZWIwNTYwNWM2MjEzLzAvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNF MjFBODRBMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANRmXc5fZP3EQGBzQszhujL8AQPjVLxD9LPr j4oY2VGqoWOdT5fgVv7/z+zaFzni+14y6gmOZGBVYx3UMrmHbax3OOL5KhWJEwOc eCPdu6XkBrhAVdGUlx1FSBo0UidFDztjjeBiICspcVd6Yra61tM4y8yy76Mi0cKy cotynHCc4bPHnniQBDCtoqZdFteeQq54T26Sm2wQWNN2CVr6QcNJ2MrMvO12Y3Rh c7D3bZZAv3rTY9IBqDUd89xBYXo7ZhA0sqwA4ZViqdIqEph4vRxqY72x+fYh7nsq n2+WwtMhdu4yPItUL3v3jlTthB+auqfOOJm0t4pbjTFdkq7+dEE= -----END CERTIFICATE-----Generated at Sat Apr 5 16:47:33 2025 by rpki-client