$ rpki-client -vvf repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft File: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft (raw, json) Hash identifier: 9pUr6APk1+fJJJ2tb9nWUtvHbYFG2V/xfNokvOU9mdg= Subject key identifier: 40:9D:44:27:76:A5:8A:C4:02:72:8B:7D:4B:38:11:2C:74:2E:5F:79 Authority key identifier: 0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 Certificate issuer: /CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Certificate serial: 48DBCE4680DF24B13F2482E0200D6891EDCC83F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft Manifest number: 6E Signing time: Sat 19 Apr 2025 09:51:06 +0000 Manifest this update: Sat 19 Apr 2025 09:46:06 +0000 Manifest next update: Tue 22 Apr 2025 15:30:06 +0000 Files and hashes: 1: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl (hash: cFmYOo6FodMm1sk4FAb/s8Y0aF23buF2Pl2uaB3ibmU=) 2: 3136302e32322e3230352e302f32342d3234203d3e20313533313034.roa (hash: mJptvnaCZpvYt1ePBiP6NGxZH5WXDRil3Ge+lEPPsl8=) 3: 3136302e32322e3230342e302f32342d3234203d3e20313533313034.roa (hash: szMURNdFUqxYqnRoh3vpxUbYvQoQdMVwZ3qiHO0mD48=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 14:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:db:ce:46:80:df:24:b1:3f:24:82:e0:20:0d:68:91:ed:cc:83:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Validity Not Before: Apr 19 09:46:06 2025 GMT Not After : Apr 22 15:30:06 2025 GMT Subject: CN=409D442776A58AC402728B7D4B38112C742E5F79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:95:dc:12:f3:9a:c6:59:7c:bf:18:d5:47:be: 8b:ee:7d:51:fb:91:2f:50:2b:4b:7b:e8:cb:24:73: ae:6b:da:ab:a6:f2:1f:76:c5:b5:f5:d8:71:32:0c: e9:fc:99:dc:31:49:cb:19:6f:52:54:3c:ea:05:a9: 29:06:eb:ef:47:53:86:aa:e7:78:56:d5:a0:74:18: 8c:06:77:18:6c:a2:5f:6d:81:2f:d2:92:67:f8:38: 30:24:13:aa:60:bd:31:c2:3e:09:c5:d8:8b:7f:66: 8c:e1:fc:e1:16:8e:bf:c7:11:b3:02:86:af:c7:af: 4d:49:50:b4:1c:bc:e2:7f:aa:fa:0c:97:55:a5:36: 14:a0:03:d4:e6:91:b7:1b:14:c1:e2:f2:88:f6:95: ca:05:9c:e3:8a:54:39:5e:e8:8a:26:d3:d6:af:35: 32:db:87:7e:0c:87:1d:eb:94:e8:7e:68:ae:f8:42: 12:04:a4:d8:dc:38:cb:b7:e1:e8:85:44:4d:7d:bd: 2b:0f:cf:9c:e9:50:d9:f1:90:f7:55:71:6e:6d:07: 05:6e:b9:8d:48:ff:5f:e9:cd:79:3c:a9:39:41:9f: 75:6b:ea:fb:ce:6c:e9:1d:bf:f2:9b:2f:92:b2:04: 83:67:c0:ab:2a:9c:28:0a:06:b0:d9:35:97:1b:7e: a0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9D:44:27:76:A5:8A:C4:02:72:8B:7D:4B:38:11:2C:74:2E:5F:79 X509v3 Authority Key Identifier: keyid:0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:49:48:f5:9d:04:85:98:91:49:76:d4:d5:cb:23:12:0d:80: 65:49:9f:3e:9c:69:b4:d8:cb:4b:5d:5d:c7:15:8b:40:c2:e4: 10:f4:71:6d:9e:13:cb:c2:bc:f0:55:de:f7:ae:bd:9f:e9:3d: fc:12:4c:77:38:30:cb:ad:19:62:80:7c:4f:1d:e3:f2:81:cb: ba:8f:59:d7:75:cc:2d:64:d7:ab:dd:82:cb:f0:da:e7:53:db: 04:00:0b:14:07:f6:5c:2d:0d:e1:1e:01:0d:fc:de:2d:ff:3e: 16:14:c9:4d:58:a0:ec:fc:9c:81:fa:87:64:66:8f:4a:bf:82: e6:d3:02:aa:96:59:aa:63:cf:05:a1:d5:21:d2:c4:66:22:4f: 67:b4:a5:9c:96:2e:d7:e3:10:a8:66:f3:78:cd:46:19:a5:5a: c3:91:e3:6b:f2:73:c9:0f:0f:7e:33:1f:a1:43:4c:44:a1:c0: 7a:60:5e:62:e9:da:16:ca:0c:21:68:ab:ff:e8:d2:54:1a:b9: 80:fd:b2:ed:d3:93:37:35:81:09:dd:f3:c3:37:9f:e0:5b:72: b5:ed:2f:05:b9:b3:bc:4d:a6:96:a7:bd:6e:3d:29:8b:a9:28: f8:a0:d7:68:d1:1d:13:31:05:39:57:12:a7:2d:cb:f9:3c:b3: 0d:b5:67:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSNvORoDfJLE/JILgIA1oke3Mg/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFG MDYwMzYxMjAeFw0yNTA0MTkwOTQ2MDZaFw0yNTA0MjIxNTMwMDZaMDMxMTAvBgNV BAMTKDQwOUQ0NDI3NzZBNThBQzQwMjcyOEI3RDRCMzgxMTJDNzQyRTVGNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmldwS85rGWXy/GNVHvovufVH7 kS9QK0t76Mskc65r2qum8h92xbX12HEyDOn8mdwxScsZb1JUPOoFqSkG6+9HU4aq 53hW1aB0GIwGdxhsol9tgS/Skmf4ODAkE6pgvTHCPgnF2It/Zozh/OEWjr/HEbMC hq/Hr01JULQcvOJ/qvoMl1WlNhSgA9TmkbcbFMHi8oj2lcoFnOOKVDle6Iom09av NTLbh34Mhx3rlOh+aK74QhIEpNjcOMu34eiFRE19vSsPz5zpUNnxkPdVcW5tBwVu uY1I/1/pzXk8qTlBn3Vr6vvObOkdv/KbL5KyBINnwKsqnCgKBrDZNZcbfqApAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQJ1EJ3alisQCcot9SzgRLHQuX3kwHwYDVR0j BBgwFoAUChv85nYdi3+yCffPntGz2vBgNhIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzFiNGMzOC03NzQ3LTQ1ZmMtYTU5MC1jYWM1MjE2M2Q1MzgvMC8wQTFCRkNFNjc2 MUQ4QjdGQjIwOUY3Q0Y5RUQxQjNEQUYwNjAzNjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFGMDYw MzYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMxYjRjMzgtNzc0Ny00NWZjLWE1 OTAtY2FjNTIxNjNkNTM4LzAvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIz REFGMDYwMzYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1JSPWdBIWYkUl21NXLIxINgGVJnz6cabTY y0tdXccVi0DC5BD0cW2eE8vCvPBV3veuvZ/pPfwSTHc4MMutGWKAfE8d4/KBy7qP Wdd1zC1k16vdgsvw2udT2wQACxQH9lwtDeEeAQ383i3/PhYUyU1YoOz8nIH6h2Rm j0q/gubTAqqWWapjzwWh1SHSxGYiT2e0pZyWLtfjEKhm83jNRhmlWsOR42vyc8kP D34zH6FDTEShwHpgXmLp2hbKDCFoq//o0lQauYD9su3Tkzc1gQnd88M3n+BbcrXt LwW5s7xNppanvW49KYupKPig12jRHRMxBTlXEqcty/k8sw21Z1E= -----END CERTIFICATE-----Generated at Sun Apr 20 12:57:26 2025 by rpki-client