$ rpki-client -vvf repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft File: 611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft (raw, json) Hash identifier: gam6rB41fBlRZkxJOeSfjy+DGk6RocnJI6XK/vZQG4g= Subject key identifier: 4E:8B:67:A7:96:A6:B8:D7:13:65:BE:83:04:89:6F:85:2B:DE:2D:3B Authority key identifier: 61:1A:20:5C:7A:5D:65:83:CE:58:01:C6:4D:C8:EA:FA:B5:7E:41:29 Certificate issuer: /CN=611A205C7A5D6583CE5801C64DC8EAFAB57E4129 Certificate serial: 916DD68F4307AD16A4E169E070F6B2577D7DD7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft Manifest number: BE Signing time: Fri 06 Jun 2025 09:12:30 +0000 Manifest this update: Fri 06 Jun 2025 09:07:30 +0000 Manifest next update: Mon 09 Jun 2025 13:06:30 +0000 Files and hashes: 1: 611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl (hash: PvIyeq503eNd2E9q57B59WHajWoedjg9qJ6k9yCPwEI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 13:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91:6d:d6:8f:43:07:ad:16:a4:e1:69:e0:70:f6:b2:57:7d:7d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=611A205C7A5D6583CE5801C64DC8EAFAB57E4129 Validity Not Before: Jun 6 09:07:30 2025 GMT Not After : Jun 9 13:06:30 2025 GMT Subject: CN=4E8B67A796A6B8D71365BE8304896F852BDE2D3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:77:e4:25:3c:25:9d:e6:a2:a1:65:6b:34:27: 42:5f:d3:ff:37:be:96:c8:b1:e7:b9:d3:c3:17:6f: 4e:1a:71:7c:a1:f1:76:ea:bd:53:60:75:10:d9:98: 12:58:70:5f:20:25:14:8f:ab:fc:7d:17:ba:4e:7d: a5:76:d3:b4:4a:ce:76:f8:e6:24:03:88:46:9d:4a: 5f:85:12:ff:b1:95:19:0f:78:f2:f0:1e:52:f7:d3: d0:44:41:56:7f:42:bf:96:bb:a7:9f:f2:21:1a:ff: 66:d3:5f:c8:b6:97:c8:2d:03:6a:f0:32:6f:23:50: 78:a0:de:ff:0f:2d:2a:b6:45:80:22:86:66:63:70: 02:40:b7:ae:3b:de:c4:1c:5a:49:0e:77:57:31:32: 70:41:27:5d:7a:79:e0:22:a7:e3:e6:16:d2:de:23: 57:5f:94:58:cd:4e:b8:f6:9d:07:af:e4:63:a8:e9: c6:51:6d:d0:40:22:0a:d1:8d:27:c2:11:e2:bf:d7: 05:82:15:a4:0b:aa:b3:13:20:a5:d3:35:55:3d:72: 51:35:22:eb:dc:8a:50:c4:19:8a:0b:62:53:80:33: 13:69:6c:cb:03:b3:42:52:8d:f7:0f:23:b8:4a:db: 75:13:2b:5e:08:9b:97:18:17:ce:e2:2d:0b:08:73: d7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:8B:67:A7:96:A6:B8:D7:13:65:BE:83:04:89:6F:85:2B:DE:2D:3B X509v3 Authority Key Identifier: keyid:61:1A:20:5C:7A:5D:65:83:CE:58:01:C6:4D:C8:EA:FA:B5:7E:41:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:70:0d:8e:50:a3:08:3a:42:0f:7f:ae:5e:04:5b:df:4e:44: 68:0d:5c:44:64:c5:e2:e8:5c:33:2d:20:9e:46:2d:c8:e0:a7: 21:9e:07:72:3a:2d:32:7d:a1:60:8b:24:8a:4b:7e:7f:c8:d3: eb:45:6c:f6:89:f6:0a:38:e6:1a:1c:e6:53:45:a9:f6:c8:54: 3c:da:31:d0:8f:68:29:ff:22:86:aa:0e:57:a5:77:7a:46:5c: f8:13:21:98:21:0b:73:ce:7d:fd:b6:4b:d2:fb:96:e7:65:66: 90:f5:6a:84:8e:1b:e3:97:c4:ae:e8:64:b2:94:3d:7a:7f:d7: 3c:82:d4:7c:0b:1a:2e:89:5d:87:c5:95:37:f7:e5:cd:38:a4: eb:09:8a:a5:ee:8e:a5:74:cb:af:6b:d1:08:bb:11:ce:b8:1d: 07:ab:90:b7:35:8b:a5:d7:0e:3d:c9:52:28:ed:d2:ff:f9:11: 35:bc:4e:12:c8:95:1d:43:b0:d7:be:7f:8d:df:a1:52:e4:fd: 0d:88:ca:36:c6:a4:c9:57:cf:ff:e4:60:7f:32:83:f8:64:23: 59:ae:82:48:98:70:46:4c:3c:46:9c:5e:2d:69:89:06:c8:1b: 2e:de:ec:3c:f9:06:5d:93:f9:64:62:df:2b:3d:50:79:85:3d: b2:72:9f:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAJFt1o9DB60WpOFp4HD2sld9fdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVBRkFC NTdFNDEyOTAeFw0yNTA2MDYwOTA3MzBaFw0yNTA2MDkxMzA2MzBaMDMxMTAvBgNV BAMTKDRFOEI2N0E3OTZBNkI4RDcxMzY1QkU4MzA0ODk2Rjg1MkJERTJEM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSd+QlPCWd5qKhZWs0J0Jf0/83 vpbIsee508MXb04acXyh8XbqvVNgdRDZmBJYcF8gJRSPq/x9F7pOfaV207RKznb4 5iQDiEadSl+FEv+xlRkPePLwHlL309BEQVZ/Qr+Wu6ef8iEa/2bTX8i2l8gtA2rw Mm8jUHig3v8PLSq2RYAihmZjcAJAt6473sQcWkkOd1cxMnBBJ116eeAip+PmFtLe I1dflFjNTrj2nQev5GOo6cZRbdBAIgrRjSfCEeK/1wWCFaQLqrMTIKXTNVU9clE1 IuvcilDEGYoLYlOAMxNpbMsDs0JSjfcPI7hK23UTK14Im5cYF87iLQsIc9ddAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTotnp5amuNcTZb6DBIlvhSveLTswHwYDVR0j BBgwFoAUYRogXHpdZYPOWAHGTcjq+rV+QSkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2Q1MGYyNy03ZTg4LTQ3MTgtODNkZi02ODMyZWM4MGU2MjQvMC82MTFBMjA1QzdB NUQ2NTgzQ0U1ODAxQzY0REM4RUFGQUI1N0U0MTI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVBRkFCNTdF NDEyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdkNTBmMjctN2U4OC00NzE4LTgz ZGYtNjgzMmVjODBlNjI0LzAvNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVB RkFCNTdFNDEyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1wDY5Qowg6Qg9/rl4EW99ORGgNXERkxeLo XDMtIJ5GLcjgpyGeB3I6LTJ9oWCLJIpLfn/I0+tFbPaJ9go45hoc5lNFqfbIVDza MdCPaCn/IoaqDleld3pGXPgTIZghC3POff22S9L7ludlZpD1aoSOG+OXxK7oZLKU PXp/1zyC1HwLGi6JXYfFlTf35c04pOsJiqXujqV0y69r0Qi7Ec64HQerkLc1i6XX Dj3JUijt0v/5ETW8ThLIlR1DsNe+f43foVLk/Q2IyjbGpMlXz//kYH8yg/hkI1mu gkiYcEZMPEacXi1piQbIGy7e7Dz5Bl2T+WRi3ys9UHmFPbJynz8= -----END CERTIFICATE-----Generated at Fri Jun 6 19:33:44 2025 by rpki-client