$ rpki-client -vvf repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft File: A603F8DE41A0C254133C531FFB98C664160BB962.mft (raw, json) Hash identifier: aVEJzpx2e0IpWZoBpC0NvEDdqbAtCY5MUQMfNniEUhw= Subject key identifier: FA:B0:9D:BF:DE:BC:AF:54:56:CE:4B:92:A5:24:56:D4:F2:46:48:D4 Authority key identifier: A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 Certificate issuer: /CN=A603F8DE41A0C254133C531FFB98C664160BB962 Certificate serial: 5CDDD4DC5C48FFC3CC918BA172BCF1E152CE75CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft Manifest number: 82 Signing time: Mon 07 Apr 2025 15:51:32 +0000 Manifest this update: Mon 07 Apr 2025 15:46:32 +0000 Manifest next update: Thu 10 Apr 2025 20:41:32 +0000 Files and hashes: 1: 3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa (hash: thcrqGuYAGyt3mKNgShgWyqLoLYzUIjX7Ch0ut3CYH8=) 2: A603F8DE41A0C254133C531FFB98C664160BB962.crl (hash: PsNX8YmzOG5mTB4c4RazBT9OEcPPT5zZNiwhJz55/bw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 20:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:dd:d4:dc:5c:48:ff:c3:cc:91:8b:a1:72:bc:f1:e1:52:ce:75:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A603F8DE41A0C254133C531FFB98C664160BB962 Validity Not Before: Apr 7 15:46:32 2025 GMT Not After : Apr 10 20:41:32 2025 GMT Subject: CN=FAB09DBFDEBCAF5456CE4B92A52456D4F24648D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:03:2e:05:44:25:09:3c:af:88:6e:71:df:a4: b3:0d:81:96:2f:35:b7:e4:42:6c:ac:ca:08:26:2e: 96:a2:94:89:7a:8d:94:de:16:53:c2:d1:ca:85:df: 9a:9c:88:0f:46:50:21:a4:0e:db:c6:76:ba:da:eb: 41:7a:f1:f7:77:d7:ea:ae:d8:1c:20:af:ac:91:01: f0:e9:e8:b2:c5:9b:ba:f5:17:d2:8e:27:03:6b:08: 9f:2e:c7:98:6f:8c:c4:06:2c:25:41:52:1d:89:6f: 6f:74:3d:e3:5f:1a:63:2d:f0:ee:0d:7c:2c:62:6d: f4:08:c1:d5:b4:fe:f9:62:ee:a2:c0:74:6b:25:25: 06:27:82:e7:17:17:8f:9d:d9:21:39:98:f6:0d:7b: dd:dd:93:47:7b:be:5d:57:2e:15:14:99:f9:25:5b: 9e:c4:48:33:f7:b4:ec:87:de:0e:3d:f6:20:4d:ef: 0a:50:ad:e7:0e:25:ad:08:8a:fd:9f:95:3d:6c:05: 01:01:88:8c:ab:ae:db:2f:7d:a2:10:70:92:14:bb: e3:a0:ed:ee:cd:88:4d:c5:c6:72:75:67:d3:be:a2: db:22:71:ec:2c:8f:47:41:69:83:5c:28:b2:cb:8f: d6:67:c8:fa:fa:b0:f4:21:3b:ba:c2:4e:94:a2:98: fa:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B0:9D:BF:DE:BC:AF:54:56:CE:4B:92:A5:24:56:D4:F2:46:48:D4 X509v3 Authority Key Identifier: keyid:A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:3a:d3:ad:74:f8:87:1d:ee:2c:cd:27:80:4e:8a:a0:d8:d5: 2f:dc:54:f6:5e:4a:47:40:5b:83:56:7e:98:35:c5:3e:1d:37: f5:72:cb:93:f3:96:22:b9:7d:e8:3e:e3:9a:2c:0f:05:92:36: ca:49:eb:c2:09:15:71:18:9b:c1:bb:c7:b3:18:a1:dc:d0:2d: 96:ac:f3:e0:30:bb:2e:24:21:c9:0f:55:12:a4:cb:49:c7:fd: cf:c2:21:fc:ac:53:0c:5f:e2:c6:fd:e7:96:aa:ae:62:04:76: 5a:5b:48:b2:c6:4d:2f:16:bc:44:e5:2b:c1:7e:15:8c:12:6c: f6:ea:0e:12:22:6e:8e:aa:d5:83:a8:db:82:bc:93:b2:7d:8d: 73:7f:f3:de:eb:75:14:d0:23:0d:fb:92:81:0a:e9:0d:10:8a: 8a:a8:18:58:a7:55:c8:eb:fa:ea:e7:38:a4:86:72:3f:36:67: 10:cc:8f:17:4a:01:e4:17:b5:ab:79:df:3e:30:c0:63:ef:d8: 9a:1e:7b:4f:22:83:57:81:53:96:7b:3f:08:e2:c8:12:c7:16: 59:6b:a6:cb:4d:aa:d8:6f:7f:9a:55:d8:72:8a:60:f1:85:45: 25:d0:ec:c9:80:2e:58:c5:4d:38:48:65:ee:da:62:c6:6b:5f: 62:e2:dd:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXN3U3FxI/8PMkYuhcrzx4VLOdc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2NjQx NjBCQjk2MjAeFw0yNTA0MDcxNTQ2MzJaFw0yNTA0MTAyMDQxMzJaMDMxMTAvBgNV BAMTKEZBQjA5REJGREVCQ0FGNTQ1NkNFNEI5MkE1MjQ1NkQ0RjI0NjQ4RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Ay4FRCUJPK+IbnHfpLMNgZYv NbfkQmysyggmLpailIl6jZTeFlPC0cqF35qciA9GUCGkDtvGdrra60F68fd31+qu 2Bwgr6yRAfDp6LLFm7r1F9KOJwNrCJ8ux5hvjMQGLCVBUh2Jb290PeNfGmMt8O4N fCxibfQIwdW0/vli7qLAdGslJQYngucXF4+d2SE5mPYNe93dk0d7vl1XLhUUmfkl W57ESDP3tOyH3g499iBN7wpQrecOJa0Iiv2flT1sBQEBiIyrrtsvfaIQcJIUu+Og 7e7NiE3FxnJ1Z9O+otsicewsj0dBaYNcKLLLj9ZnyPr6sPQhO7rCTpSimPrdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+rCdv968r1RWzkuSpSRW1PJGSNQwHwYDVR0j BBgwFoAUpgP43kGgwlQTPFMf+5jGZBYLuWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OWI4MTUyZS1hYTg2LTRkOGEtODFkYS1lNzEwODZiMjk1NmMvMC9BNjAzRjhERTQx QTBDMjU0MTMzQzUzMUZGQjk4QzY2NDE2MEJCOTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2NjQxNjBC Qjk2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzAvQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2 NjQxNjBCQjk2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIM60610+Icd7izNJ4BOiqDY1S/cVPZeSkdA W4NWfpg1xT4dN/Vyy5PzliK5feg+45osDwWSNspJ68IJFXEYm8G7x7MYodzQLZas 8+Awuy4kIckPVRKky0nH/c/CIfysUwxf4sb955aqrmIEdlpbSLLGTS8WvETlK8F+ FYwSbPbqDhIibo6q1YOo24K8k7J9jXN/897rdRTQIw37koEK6Q0QioqoGFinVcjr +urnOKSGcj82ZxDMjxdKAeQXtat53z4wwGPv2Joee08ig1eBU5Z7PwjiyBLHFllr pstNqthvf5pV2HKKYPGFRSXQ7MmALljFTThIZe7aYsZrX2Li3aE= -----END CERTIFICATE-----Generated at Wed Apr 9 17:54:23 2025 by rpki-client