$ rpki-client -vvf repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft File: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft (raw, json) Hash identifier: 6v0uEP44CEwJ4HkzNsjjV2o9ZFNvlPweAcs7DzDaa80= Subject key identifier: 14:E1:7B:B1:72:BD:15:F9:FD:BA:55:64:D4:F0:7B:A0:E6:EE:64:B5 Authority key identifier: 0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 Certificate issuer: /CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Certificate serial: 1A87AA80E4409D4CF65832ECF6837BBE42576EE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft Manifest number: 83 Signing time: Thu 05 Jun 2025 03:11:13 +0000 Manifest this update: Thu 05 Jun 2025 03:06:13 +0000 Manifest next update: Sun 08 Jun 2025 04:20:13 +0000 Files and hashes: 1: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl (hash: oB7xbfzDWEvejGa/htrQF1wZbOEahwmFPxNpyDvrcN8=) 2: 3136302e32322e3230342e302f32342d3234203d3e20313533313034.roa (hash: szMURNdFUqxYqnRoh3vpxUbYvQoQdMVwZ3qiHO0mD48=) 3: 3136302e32322e3230352e302f32342d3234203d3e20313533313034.roa (hash: mJptvnaCZpvYt1ePBiP6NGxZH5WXDRil3Ge+lEPPsl8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 04:20:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:87:aa:80:e4:40:9d:4c:f6:58:32:ec:f6:83:7b:be:42:57:6e:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Validity Not Before: Jun 5 03:06:13 2025 GMT Not After : Jun 8 04:20:13 2025 GMT Subject: CN=14E17BB172BD15F9FDBA5564D4F07BA0E6EE64B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0f:e8:7d:95:63:74:c8:58:5d:7a:b2:02:69: 62:6a:94:9c:c4:22:87:f7:61:08:87:a6:e2:32:40: 90:fd:1e:88:a9:58:51:47:7f:a4:ab:2d:cf:78:1e: 0b:02:de:f6:88:d0:6b:af:15:45:e4:d0:8f:1f:c6: ca:75:a4:49:ba:59:c9:37:3a:28:2a:1e:c7:f8:42: e2:77:f0:96:1a:17:2a:92:c7:4e:54:81:e9:9b:49: 3c:df:0e:65:f7:52:0a:1d:3b:3e:0e:b7:95:71:b3: 18:7c:0b:85:ce:a4:e2:c5:6f:cc:ca:93:12:6f:24: 31:22:8f:de:45:e1:20:e0:01:35:db:ab:35:39:70: 23:19:67:ca:ac:f0:75:6d:d4:9a:9a:fc:92:89:5f: c8:13:2d:bf:24:67:00:4e:57:19:53:fa:03:8b:2a: af:67:97:03:9c:ab:27:3e:e0:a4:d2:7e:32:c5:c8: c9:39:26:0a:82:72:9f:d1:d1:bb:aa:23:2c:7d:0b: 02:26:69:a5:89:55:cc:24:0d:20:57:ed:b7:a8:e8: 3e:d2:04:17:92:f3:20:ca:ea:43:5f:b3:3d:82:8c: 4f:07:e6:0f:b0:d3:4d:b4:80:ac:64:27:bd:f7:b7: b2:ff:9e:42:35:4c:83:a0:d3:f9:cc:2d:15:ca:4c: 14:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E1:7B:B1:72:BD:15:F9:FD:BA:55:64:D4:F0:7B:A0:E6:EE:64:B5 X509v3 Authority Key Identifier: keyid:0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:bf:d2:0d:74:49:e1:47:2c:5b:43:ac:98:45:16:83:d6:62: 24:07:4f:38:12:1c:2c:c4:31:4b:70:26:11:32:f7:61:c1:9d: 57:6e:a7:60:b1:d2:0f:f2:f4:50:67:5f:1b:62:3f:92:4a:28: ef:98:6e:7a:f7:7a:b6:3d:63:07:79:4c:ef:6e:65:f9:46:3a: c8:b6:30:e9:0e:97:72:65:51:c2:c0:c8:64:10:f5:ae:62:16: b5:3c:34:5e:c7:c1:f2:50:3e:b1:97:5d:0d:ee:f3:97:6a:80: f4:07:33:5b:95:0b:82:5a:b2:a5:77:85:2b:11:a4:d8:27:5b: a5:32:9f:f7:9c:65:88:bd:78:c4:20:bb:82:dc:ea:40:d4:f9: c1:ec:19:89:ff:be:f7:21:b1:c0:92:75:f3:06:33:76:e8:1c: 9f:ce:2c:97:f0:e8:33:1a:51:13:5c:ca:0c:74:ee:0c:1b:15: 35:13:e7:a1:10:0c:af:4c:51:3c:28:2a:d9:ae:f0:f0:15:2d: fb:e3:ea:dd:d8:80:34:0a:b2:74:c5:ec:26:ea:20:00:2a:33: c0:de:0e:76:b6:84:95:08:ba:4f:c4:89:47:5b:2a:9e:d1:16: ae:4e:0b:ac:91:43:4e:4b:9a:a1:e0:6c:89:a2:68:03:09:1d: 38:53:8e:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGoeqgORAnUz2WDLs9oN7vkJXbuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFG MDYwMzYxMjAeFw0yNTA2MDUwMzA2MTNaFw0yNTA2MDgwNDIwMTNaMDMxMTAvBgNV BAMTKDE0RTE3QkIxNzJCRDE1RjlGREJBNTU2NEQ0RjA3QkEwRTZFRTY0QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcD+h9lWN0yFhderICaWJqlJzE Iof3YQiHpuIyQJD9HoipWFFHf6SrLc94HgsC3vaI0GuvFUXk0I8fxsp1pEm6Wck3 OigqHsf4QuJ38JYaFyqSx05UgembSTzfDmX3UgodOz4Ot5Vxsxh8C4XOpOLFb8zK kxJvJDEij95F4SDgATXbqzU5cCMZZ8qs8HVt1Jqa/JKJX8gTLb8kZwBOVxlT+gOL Kq9nlwOcqyc+4KTSfjLFyMk5JgqCcp/R0buqIyx9CwImaaWJVcwkDSBX7beo6D7S BBeS8yDK6kNfsz2CjE8H5g+w0020gKxkJ733t7L/nkI1TIOg0/nMLRXKTBQbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFOF7sXK9Ffn9ulVk1PB7oObuZLUwHwYDVR0j BBgwFoAUChv85nYdi3+yCffPntGz2vBgNhIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzFiNGMzOC03NzQ3LTQ1ZmMtYTU5MC1jYWM1MjE2M2Q1MzgvMC8wQTFCRkNFNjc2 MUQ4QjdGQjIwOUY3Q0Y5RUQxQjNEQUYwNjAzNjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFGMDYw MzYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMxYjRjMzgtNzc0Ny00NWZjLWE1 OTAtY2FjNTIxNjNkNTM4LzAvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIz REFGMDYwMzYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAy/0g10SeFHLFtDrJhFFoPWYiQHTzgSHCzE MUtwJhEy92HBnVdup2Cx0g/y9FBnXxtiP5JKKO+Ybnr3erY9Ywd5TO9uZflGOsi2 MOkOl3JlUcLAyGQQ9a5iFrU8NF7HwfJQPrGXXQ3u85dqgPQHM1uVC4JasqV3hSsR pNgnW6Uyn/ecZYi9eMQgu4Lc6kDU+cHsGYn/vvchscCSdfMGM3boHJ/OLJfw6DMa URNcygx07gwbFTUT56EQDK9MUTwoKtmu8PAVLfvj6t3YgDQKsnTF7CbqIAAqM8De Dna2hJUIuk/EiUdbKp7RFq5OC6yRQ05LmqHgbImiaAMJHThTjhg= -----END CERTIFICATE-----Generated at Fri Jun 6 18:24:01 2025 by rpki-client