$ rpki-client -vvf repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft File: 961A52A522DEB902D9CBDDE98AF82B424422F566.mft (raw, json) Hash identifier: grzlu8+GuIVzSRivxADwVnlWSGyuY+92HGujm32OmrA= Subject key identifier: A5:9B:41:F1:44:77:32:48:87:90:1B:0F:84:26:7D:5D:18:E3:4D:11 Authority key identifier: 96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 Certificate issuer: /CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Certificate serial: 28408447B10DE32CE7B67B7BD93143BA36B70A30 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft Manifest number: 6F Signing time: Fri 06 Jun 2025 01:01:51 +0000 Manifest this update: Fri 06 Jun 2025 00:56:51 +0000 Manifest next update: Mon 09 Jun 2025 02:56:51 +0000 Files and hashes: 1: 3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa (hash: JTzBC/tUY4YKAC/+r+uXmWAv3T2JRL+s5BpODc7IPU4=) 2: 3136302e32352e3132302e302f32342d3234203d3e20313533303632.roa (hash: /2/aGmGUHvyKK7WNmuKzAj0cNzsdhjisomKkikn2mP8=) 3: 961A52A522DEB902D9CBDDE98AF82B424422F566.crl (hash: NRj2DK3jDEc7sxVtAsjTtNowK25JMRxBugcPtFNHKxY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 02:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:40:84:47:b1:0d:e3:2c:e7:b6:7b:7b:d9:31:43:ba:36:b7:0a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Validity Not Before: Jun 6 00:56:51 2025 GMT Not After : Jun 9 02:56:51 2025 GMT Subject: CN=A59B41F14477324887901B0F84267D5D18E34D11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a0:34:ee:4e:51:f7:cf:2b:dd:60:41:01:9e: 13:2c:8d:93:0f:18:21:0e:b0:83:bf:50:2d:55:ec: 65:c3:f3:40:26:92:67:4d:a6:2c:57:82:2a:c6:1d: 13:4f:5e:1b:d4:06:e8:63:fb:a7:40:89:10:b8:4e: c4:1e:77:fe:b3:c7:eb:f4:6d:ce:5a:a6:64:f1:f2: d4:23:67:9e:f3:83:ad:9d:5f:82:21:ed:0d:5b:2a: 3a:26:66:c3:e9:ae:e4:d7:19:f5:5a:cd:fa:69:49: cf:bc:00:d6:16:5f:b7:ba:69:c6:bc:1d:18:76:0f: 27:22:cb:9e:62:1c:4d:8a:a2:c8:6f:33:8c:aa:2e: 45:eb:32:3d:b8:f8:dc:ac:d4:cf:61:fc:3f:b6:21: fa:06:c5:78:b8:3b:8d:d3:90:52:83:e8:04:67:4b: 40:5d:3e:6d:0b:27:66:7d:80:e7:73:fd:91:bc:7d: d7:0d:cb:35:1b:63:40:ae:85:b6:52:f8:48:c4:c3: 1f:b3:dd:5b:20:bd:76:38:b0:51:3b:52:d4:2d:b2: a9:47:bf:db:d8:09:19:a3:6a:1b:cb:fa:ed:93:5a: 05:34:88:f9:4e:ca:d5:a2:ab:fd:9c:93:38:88:d9: e9:40:24:87:e9:99:9c:f7:bb:8d:1d:ee:ed:06:cd: a1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:9B:41:F1:44:77:32:48:87:90:1B:0F:84:26:7D:5D:18:E3:4D:11 X509v3 Authority Key Identifier: keyid:96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2c:b8:25:0c:2c:9f:4f:35:29:5a:3a:f4:68:f2:00:c5:72: ed:2d:d9:71:12:ed:f5:6f:f8:70:40:0b:3a:58:cf:67:e1:08: cc:e6:b8:84:2a:33:b1:ed:3d:64:58:3b:41:c4:7a:a0:95:50: b4:86:f3:8b:a6:6f:1a:0b:8d:97:8c:6e:7f:6f:f7:0a:e5:93: 25:00:ed:4d:6a:54:3b:2f:3b:1d:0a:90:cb:32:f2:d6:0a:21: 85:b5:cf:0d:ad:2a:96:32:d7:c2:b5:14:e8:61:cb:ca:cd:bc: ec:58:d0:91:eb:e9:d3:cc:ab:8f:c5:b7:f9:82:2a:8f:ba:f7: a3:97:24:a5:ab:10:d6:04:a3:72:8c:21:35:ce:08:4f:bc:45: a2:a9:c5:d3:c9:2e:22:56:66:fa:66:4b:f4:da:c4:ea:00:5e: 65:4e:3b:14:f1:ec:40:3a:d6:72:31:dd:30:b4:3f:56:52:11: 2c:21:8c:70:56:1f:87:0d:af:a8:48:45:16:2a:d0:5c:50:8e: 57:a2:e2:e9:02:cf:fa:30:f0:ca:45:2e:f1:17:ee:7e:a3:15: 03:0b:7f:2f:8c:62:ae:b6:79:98:08:3c:4c:fc:c2:1e:35:c3: df:8a:80:b6:f2:66:5d:db:5e:1f:16:85:3d:ba:55:6d:b7:de: e9:3d:55:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKECER7EN4yzntnt72TFDuja3CjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0 NDIyRjU2NjAeFw0yNTA2MDYwMDU2NTFaFw0yNTA2MDkwMjU2NTFaMDMxMTAvBgNV BAMTKEE1OUI0MUYxNDQ3NzMyNDg4NzkwMUIwRjg0MjY3RDVEMThFMzREMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuoDTuTlH3zyvdYEEBnhMsjZMP GCEOsIO/UC1V7GXD80AmkmdNpixXgirGHRNPXhvUBuhj+6dAiRC4TsQed/6zx+v0 bc5apmTx8tQjZ57zg62dX4Ih7Q1bKjomZsPpruTXGfVazfppSc+8ANYWX7e6aca8 HRh2Dyciy55iHE2KoshvM4yqLkXrMj24+Nys1M9h/D+2IfoGxXi4O43TkFKD6ARn S0BdPm0LJ2Z9gOdz/ZG8fdcNyzUbY0CuhbZS+EjEwx+z3VsgvXY4sFE7UtQtsqlH v9vYCRmjahvL+u2TWgU0iPlOytWiq/2ckziI2elAJIfpmZz3u40d7u0GzaGnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpZtB8UR3MkiHkBsPhCZ9XRjjTREwHwYDVR0j BBgwFoAUlhpSpSLeuQLZy93pivgrQkQi9WYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjcyZjAxMi1hNDNhLTRmY2ItODZhOS1hYjNlOTU3M2E4ZDkvMC85NjFBNTJBNTIy REVCOTAyRDlDQkRERTk4QUY4MkI0MjQ0MjJGNTY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0NDIy RjU2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y3MmYwMTItYTQzYS00ZmNiLTg2 YTktYWIzZTk1NzNhOGQ5LzAvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJC NDI0NDIyRjU2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADssuCUMLJ9PNSlaOvRo8gDFcu0t2XES7fVv +HBACzpYz2fhCMzmuIQqM7HtPWRYO0HEeqCVULSG84umbxoLjZeMbn9v9wrlkyUA 7U1qVDsvOx0KkMsy8tYKIYW1zw2tKpYy18K1FOhhy8rNvOxY0JHr6dPMq4/Ft/mC Ko+696OXJKWrENYEo3KMITXOCE+8RaKpxdPJLiJWZvpmS/TaxOoAXmVOOxTx7EA6 1nIx3TC0P1ZSESwhjHBWH4cNr6hIRRYq0FxQjlei4ukCz/ow8MpFLvEX7n6jFQML fy+MYq62eZgIPEz8wh41w9+KgLbyZl3bXh8WhT26VW233uk9VfQ= -----END CERTIFICATE-----Generated at Sat Jun 7 04:17:12 2025 by rpki-client