$ rpki-client -vvf repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft File: 611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft (raw, json) Hash identifier: whEB/j0x3yDpk5vNhRzP5BujpB3cE6n9APd56YHbGl0= Subject key identifier: 70:BA:C1:0B:EE:CE:28:E1:C1:CC:E4:CD:6D:4A:11:C6:41:0B:49:22 Authority key identifier: 61:1A:20:5C:7A:5D:65:83:CE:58:01:C6:4D:C8:EA:FA:B5:7E:41:29 Certificate issuer: /CN=611A205C7A5D6583CE5801C64DC8EAFAB57E4129 Certificate serial: 7CA66EE609A92EB5D5BFDFED36AA6CAD76E6CED8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft Manifest number: A3 Signing time: Sun 06 Apr 2025 04:51:58 +0000 Manifest this update: Sun 06 Apr 2025 04:46:58 +0000 Manifest next update: Wed 09 Apr 2025 04:54:58 +0000 Files and hashes: 1: 611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl (hash: wDwwD1zWGulJtMBBdVPVOlaqu6eAfikKDkZrL6MajYo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 04:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:a6:6e:e6:09:a9:2e:b5:d5:bf:df:ed:36:aa:6c:ad:76:e6:ce:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=611A205C7A5D6583CE5801C64DC8EAFAB57E4129 Validity Not Before: Apr 6 04:46:58 2025 GMT Not After : Apr 9 04:54:58 2025 GMT Subject: CN=70BAC10BEECE28E1C1CCE4CD6D4A11C6410B4922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e3:e2:45:49:ce:15:f5:d0:d5:24:77:91:1c: 2c:0b:7a:61:84:cc:9b:5e:ae:fa:c3:7c:31:d5:89: 6d:f2:02:97:ce:86:73:aa:80:f7:13:67:8c:d3:85: ea:b9:fc:45:46:5c:a7:60:8a:6d:50:4b:2b:24:48: 40:e1:71:29:83:00:e8:a1:7f:51:cf:05:2f:57:34: 84:d6:a7:19:5c:3b:39:bc:31:0b:38:54:5a:9b:fb: 8b:81:3a:46:d0:14:ab:25:c3:a4:6b:95:f9:a0:3b: 04:b8:1e:0a:d7:21:8f:d3:39:2c:55:da:83:d2:fa: 0d:e5:33:aa:7a:7e:87:c1:6b:e3:aa:9d:c2:07:53: 14:91:06:85:f0:db:55:31:0b:a0:42:ff:63:ca:54: 82:3d:e5:8a:47:e6:11:c2:56:44:44:b3:68:b0:60: a8:67:f4:6b:ae:ec:82:eb:08:0b:de:3a:a2:57:65: 02:0f:cf:77:08:9e:16:02:0a:09:96:e9:24:2b:ff: 6c:50:9d:9a:2e:1e:72:a4:ee:b0:2d:c9:29:7e:98: 6b:cb:06:fd:43:64:47:f9:0f:c6:34:11:92:54:be: 1c:6c:9b:f0:f2:8e:5e:18:e9:13:88:6d:8f:a5:89: 93:0b:51:91:08:ce:8a:5d:59:29:1b:9a:7a:15:7e: de:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:BA:C1:0B:EE:CE:28:E1:C1:CC:E4:CD:6D:4A:11:C6:41:0B:49:22 X509v3 Authority Key Identifier: keyid:61:1A:20:5C:7A:5D:65:83:CE:58:01:C6:4D:C8:EA:FA:B5:7E:41:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:d9:1c:60:fa:49:72:68:30:4f:f9:28:67:2d:81:88:bd:92: ca:64:ad:38:ca:0c:00:4c:47:d1:bd:5c:70:46:1d:ee:87:7f: f6:26:c5:8c:b4:e8:b3:26:f8:b1:c3:b0:77:b4:82:12:15:27: 1e:7d:7d:12:35:ca:26:8c:ea:40:cf:17:d0:25:84:70:75:46: 43:1d:a3:b2:3f:b2:09:97:3e:56:7f:77:ad:30:2e:67:fd:cc: 54:ea:5e:55:c3:8c:60:18:0e:4c:d2:d6:30:14:fd:59:e8:ef: 93:47:71:d7:3b:fe:ee:d9:8c:52:53:14:eb:41:80:e0:8c:7a: 95:04:94:89:f4:87:3c:76:a3:51:f3:4a:22:68:47:da:1a:f7: b9:64:03:79:20:34:bf:59:82:74:cc:f4:c9:f4:5b:c1:d3:c0: ac:22:7c:51:6c:c2:6f:c5:58:83:c2:7e:83:e0:6a:50:6c:4b: 14:86:55:ab:00:5c:f2:48:da:9c:31:07:38:af:59:1b:a1:15: d9:77:00:ea:4e:ed:07:90:59:08:b9:ec:31:c3:bf:36:c9:3a: 5f:aa:01:f1:1e:d0:f0:54:9a:d2:57:0a:07:1b:ed:bb:2e:75: 9f:a1:04:ec:a1:7f:1e:53:7d:e0:e1:ee:7d:da:f7:65:76:81: b1:16:50:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfKZu5gmpLrXVv9/tNqpsrXbmztgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVBRkFC NTdFNDEyOTAeFw0yNTA0MDYwNDQ2NThaFw0yNTA0MDkwNDU0NThaMDMxMTAvBgNV BAMTKDcwQkFDMTBCRUVDRTI4RTFDMUNDRTRDRDZENEExMUM2NDEwQjQ5MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC14+JFSc4V9dDVJHeRHCwLemGE zJtervrDfDHViW3yApfOhnOqgPcTZ4zTheq5/EVGXKdgim1QSyskSEDhcSmDAOih f1HPBS9XNITWpxlcOzm8MQs4VFqb+4uBOkbQFKslw6RrlfmgOwS4HgrXIY/TOSxV 2oPS+g3lM6p6fofBa+OqncIHUxSRBoXw21UxC6BC/2PKVII95YpH5hHCVkREs2iw YKhn9Guu7ILrCAveOqJXZQIPz3cInhYCCgmW6SQr/2xQnZouHnKk7rAtySl+mGvL Bv1DZEf5D8Y0EZJUvhxsm/Dyjl4Y6ROIbY+liZMLUZEIzopdWSkbmnoVft49AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcLrBC+7OKOHBzOTNbUoRxkELSSIwHwYDVR0j BBgwFoAUYRogXHpdZYPOWAHGTcjq+rV+QSkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2Q1MGYyNy03ZTg4LTQ3MTgtODNkZi02ODMyZWM4MGU2MjQvMC82MTFBMjA1QzdB NUQ2NTgzQ0U1ODAxQzY0REM4RUFGQUI1N0U0MTI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVBRkFCNTdF NDEyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdkNTBmMjctN2U4OC00NzE4LTgz ZGYtNjgzMmVjODBlNjI0LzAvNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVB RkFCNTdFNDEyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDZHGD6SXJoME/5KGctgYi9kspkrTjKDABM R9G9XHBGHe6Hf/YmxYy06LMm+LHDsHe0ghIVJx59fRI1yiaM6kDPF9AlhHB1RkMd o7I/sgmXPlZ/d60wLmf9zFTqXlXDjGAYDkzS1jAU/Vno75NHcdc7/u7ZjFJTFOtB gOCMepUElIn0hzx2o1HzSiJoR9oa97lkA3kgNL9ZgnTM9Mn0W8HTwKwifFFswm/F WIPCfoPgalBsSxSGVasAXPJI2pwxBzivWRuhFdl3AOpO7QeQWQi57DHDvzbJOl+q AfEe0PBUmtJXCgcb7bsudZ+hBOyhfx5TfeDh7n3a92V2gbEWUGY= -----END CERTIFICATE-----Generated at Mon Apr 7 20:02:54 2025 by rpki-client