$ rpki-client -vvf repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft File: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft (raw, json) Hash identifier: AXzbvQavshQ3zQarSEHbsZtapuoqMaqga1k+qDyUutk= Subject key identifier: 5E:5A:76:EC:C1:5C:FE:23:E4:13:B6:83:6D:87:2D:68:D0:A4:1B:90 Authority key identifier: 0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 Certificate issuer: /CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Certificate serial: 622E3CB3830F7E74E997603AF69BEBD771EA3507 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft Manifest number: 5D Signing time: Tue 11 Mar 2025 14:41:04 +0000 Manifest this update: Tue 11 Mar 2025 14:36:04 +0000 Manifest next update: Sat 15 Mar 2025 00:09:04 +0000 Files and hashes: 1: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl (hash: NCezK59GEJ2loyUSoBhh6fz3LznC2cveJvdNSiXUFXA=) 2: 3136302e32322e3230342e302f32342d3234203d3e20313533313034.roa (hash: szMURNdFUqxYqnRoh3vpxUbYvQoQdMVwZ3qiHO0mD48=) 3: 3136302e32322e3230352e302f32342d3234203d3e20313533313034.roa (hash: mJptvnaCZpvYt1ePBiP6NGxZH5WXDRil3Ge+lEPPsl8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 00:09:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:2e:3c:b3:83:0f:7e:74:e9:97:60:3a:f6:9b:eb:d7:71:ea:35:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Validity Not Before: Mar 11 14:36:04 2025 GMT Not After : Mar 15 00:09:04 2025 GMT Subject: CN=5E5A76ECC15CFE23E413B6836D872D68D0A41B90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6b:62:41:95:99:0e:eb:83:8b:63:d1:5a:ea: 2c:64:bf:8c:05:72:91:b3:94:ef:f5:ac:fa:44:fe: 35:ab:4d:fd:f5:a7:21:16:75:f6:cf:e7:be:a3:c8: 65:f7:eb:39:27:6a:d0:39:2a:72:5d:b8:df:3f:6f: 3f:c1:f7:05:85:2c:62:76:c0:1d:06:bb:81:fa:f6: 5c:38:33:21:79:e3:93:d1:9a:64:ff:75:ee:d6:95: 56:de:11:a7:40:cf:73:70:71:28:75:ea:40:7e:dd: 12:e5:1e:cb:35:61:de:c8:dd:a0:3b:ce:a3:ea:1c: 74:d9:d5:1c:21:44:68:b9:ae:d1:eb:9d:9f:a6:a7: 59:8b:d3:e5:30:c5:77:06:c7:33:1a:8f:78:8a:87: fc:57:6c:5c:82:00:fb:4a:0d:97:73:88:a9:bc:d3: ed:4b:82:0e:c7:9c:f7:b4:53:07:69:22:7e:94:d0: c6:9f:d2:eb:59:0e:3f:bd:5a:39:1e:24:bb:70:25: 65:bf:36:7c:f6:c9:06:1e:a3:a4:e1:d5:f3:53:03: ee:94:26:9f:8f:d3:1f:f5:47:38:8b:d4:38:60:52: 94:d1:cc:aa:f9:97:60:2b:07:3a:26:9b:bd:8d:b7: fe:5f:e0:bb:05:89:5b:98:05:57:2c:8f:2d:48:34: 7c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5A:76:EC:C1:5C:FE:23:E4:13:B6:83:6D:87:2D:68:D0:A4:1B:90 X509v3 Authority Key Identifier: keyid:0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:0c:7f:a4:62:77:2e:b9:53:d6:68:d8:05:d5:d9:7f:c0:6b: e2:b8:e4:57:60:51:58:c5:92:c3:fa:c5:c0:54:ce:f6:66:79: f9:c1:c5:7f:a6:94:55:47:c8:b9:fb:c4:70:5c:52:a4:f5:2a: f4:8d:24:b7:99:e8:08:c6:6d:72:41:1d:78:84:aa:a1:8a:ce: 4c:9c:4d:87:15:7e:92:a4:89:a7:2c:14:73:ca:f0:ee:a5:ac: 89:3e:03:00:7e:aa:5f:9e:56:2d:f3:90:27:81:4c:0d:e7:3a: 56:ef:29:92:3c:e7:ae:07:b3:8d:c9:32:dd:2a:e0:3b:5d:c3: 82:46:05:f3:7a:df:12:ce:6f:be:d5:18:fa:21:23:93:9f:63: 5b:e1:d3:59:41:44:52:7d:ad:fb:ff:14:97:02:08:74:a0:62: f8:50:9d:5c:cb:13:7e:5f:d9:e7:34:03:09:f0:aa:e9:98:12: 47:9d:78:e0:e6:5f:f5:53:75:ac:4c:58:85:5e:fa:61:f2:30: ee:f2:0b:f4:89:b7:85:01:fb:f6:85:49:c9:19:01:d9:12:b8: f3:d2:db:74:ce:63:d0:30:aa:50:bc:ac:2e:e9:33:ea:b9:0c: be:4f:e0:47:5d:dd:77:03:db:0a:71:1e:0a:49:09:59:00:87: 5f:df:9b:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYi48s4MPfnTpl2A69pvr13HqNQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFG MDYwMzYxMjAeFw0yNTAzMTExNDM2MDRaFw0yNTAzMTUwMDA5MDRaMDMxMTAvBgNV BAMTKDVFNUE3NkVDQzE1Q0ZFMjNFNDEzQjY4MzZEODcyRDY4RDBBNDFCOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIa2JBlZkO64OLY9Fa6ixkv4wF cpGzlO/1rPpE/jWrTf31pyEWdfbP576jyGX36zknatA5KnJduN8/bz/B9wWFLGJ2 wB0Gu4H69lw4MyF545PRmmT/de7WlVbeEadAz3NwcSh16kB+3RLlHss1Yd7I3aA7 zqPqHHTZ1RwhRGi5rtHrnZ+mp1mL0+UwxXcGxzMaj3iKh/xXbFyCAPtKDZdziKm8 0+1Lgg7HnPe0UwdpIn6U0Maf0utZDj+9WjkeJLtwJWW/Nnz2yQYeo6Th1fNTA+6U Jp+P0x/1RziL1DhgUpTRzKr5l2ArBzomm72Nt/5f4LsFiVuYBVcsjy1INHw1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXlp27MFc/iPkE7aDbYctaNCkG5AwHwYDVR0j BBgwFoAUChv85nYdi3+yCffPntGz2vBgNhIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzFiNGMzOC03NzQ3LTQ1ZmMtYTU5MC1jYWM1MjE2M2Q1MzgvMC8wQTFCRkNFNjc2 MUQ4QjdGQjIwOUY3Q0Y5RUQxQjNEQUYwNjAzNjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFGMDYw MzYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMxYjRjMzgtNzc0Ny00NWZjLWE1 OTAtY2FjNTIxNjNkNTM4LzAvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIz REFGMDYwMzYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQMf6Ridy65U9Zo2AXV2X/Aa+K45FdgUVjF ksP6xcBUzvZmefnBxX+mlFVHyLn7xHBcUqT1KvSNJLeZ6AjGbXJBHXiEqqGKzkyc TYcVfpKkiacsFHPK8O6lrIk+AwB+ql+eVi3zkCeBTA3nOlbvKZI8564Hs43JMt0q 4Dtdw4JGBfN63xLOb77VGPohI5OfY1vh01lBRFJ9rfv/FJcCCHSgYvhQnVzLE35f 2ec0AwnwqumYEkedeODmX/VTdaxMWIVe+mHyMO7yC/SJt4UB+/aFSckZAdkSuPPS 23TOY9AwqlC8rC7pM+q5DL5P4Edd3XcD2wpxHgpJCVkAh1/fm+c= -----END CERTIFICATE-----Generated at Thu Mar 13 21:32:54 2025 by rpki-client