$ rpki-client -vvf repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft File: 961A52A522DEB902D9CBDDE98AF82B424422F566.mft (raw, json) Hash identifier: U1UmqEmH+Ujeib+Hndyeb5AETEpVfWDRm0+WM+LjgFg= Subject key identifier: 56:1F:23:45:31:FE:E1:C4:29:1A:01:21:8A:6E:7B:9C:26:31:3F:DC Authority key identifier: 96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 Certificate issuer: /CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Certificate serial: 622A73DA63FC0CA29FC9FDC2B544751D29559FEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft Manifest number: 55 Signing time: Tue 08 Apr 2025 18:01:47 +0000 Manifest this update: Tue 08 Apr 2025 17:56:47 +0000 Manifest next update: Fri 11 Apr 2025 20:27:47 +0000 Files and hashes: 1: 961A52A522DEB902D9CBDDE98AF82B424422F566.crl (hash: irezQhxOsDWHOLVjgoWdJl9GwohzDFKyMCbl6nyU+eA=) 2: 3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa (hash: JTzBC/tUY4YKAC/+r+uXmWAv3T2JRL+s5BpODc7IPU4=) 3: 3136302e32352e3132302e302f32342d3234203d3e20313533303632.roa (hash: /2/aGmGUHvyKK7WNmuKzAj0cNzsdhjisomKkikn2mP8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:2a:73:da:63:fc:0c:a2:9f:c9:fd:c2:b5:44:75:1d:29:55:9f:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Validity Not Before: Apr 8 17:56:47 2025 GMT Not After : Apr 11 20:27:47 2025 GMT Subject: CN=561F234531FEE1C4291A01218A6E7B9C26313FDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:96:47:95:8e:d7:f5:d1:02:ca:d3:7d:18:24: 73:3f:ab:5e:6a:f9:da:fd:96:27:2e:70:26:18:b1: 9c:20:83:43:e1:2d:f1:6d:cb:df:e7:f7:01:16:97: 99:4c:b4:06:b8:83:7d:a1:ff:c6:62:59:3d:a0:53: 13:f3:c6:ed:99:21:2d:27:08:c3:be:6c:e2:cc:ff: da:f8:86:02:ae:8b:65:19:d4:65:c2:d7:f2:22:a9: b2:3f:c7:42:0d:dc:05:d5:b9:83:f8:78:e9:fe:a3: 87:d9:df:7f:01:f0:ed:24:c2:bf:ba:3e:68:47:4c: ec:c1:1b:ce:71:29:bf:28:77:ca:6a:3c:34:e0:32: a7:ca:a9:7a:c8:de:77:6a:fe:b9:66:fb:1f:4b:f9: 36:3f:eb:28:f9:89:f7:1a:65:9c:5c:47:ad:fa:80: 63:85:c4:56:59:8f:d4:bd:7d:95:7d:d1:f8:e7:23: 22:e9:6e:c6:1e:05:dc:51:07:ec:2a:6c:08:3a:30: 78:04:0d:38:86:3f:63:1c:c8:4e:4a:59:b3:7c:b9: 7b:3a:cf:4c:ad:8d:9e:c0:77:cb:3a:5b:83:b0:1d: 6b:cf:38:76:0a:37:15:7d:04:d1:60:89:d0:72:2a: 0f:69:a2:a5:0a:7e:12:08:47:81:26:73:46:76:fa: 99:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:1F:23:45:31:FE:E1:C4:29:1A:01:21:8A:6E:7B:9C:26:31:3F:DC X509v3 Authority Key Identifier: keyid:96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:50:16:f9:10:e0:58:64:ff:41:0e:e2:77:70:36:2f:78:ad: fa:b0:e8:47:f2:de:6d:d4:d5:38:7d:76:a6:ef:7f:ec:a7:51: cb:ef:e7:76:20:84:16:03:bf:e6:20:2d:92:76:a5:cc:82:7f: c2:21:d0:5e:cb:20:17:86:12:66:2d:3c:17:81:7f:36:18:f0: e7:c2:28:b9:4e:ba:4d:4c:a0:a9:47:71:c3:5d:20:64:2c:5a: ae:e5:de:a8:00:db:1c:19:5f:43:a4:7e:68:55:f5:85:c9:ed: 52:50:e3:f1:f0:4d:7a:a1:01:65:42:58:b9:7a:6a:6d:2c:9d: 9f:37:bb:90:ba:1d:7b:c9:5f:4d:b1:2b:bf:30:53:a0:0e:b6: 83:01:81:ca:ac:a9:5b:52:1a:f1:ff:e3:96:88:b8:00:2c:54: e3:04:9a:99:c3:b3:71:a3:28:6a:ea:44:9d:68:ec:3b:2d:4d: 0d:cc:68:f9:85:84:fa:a0:0a:6c:c0:40:68:c4:dd:09:b8:40: 9d:22:3d:17:64:8a:95:e4:40:15:f2:42:a4:48:6a:0d:9e:19: fd:0e:8d:23:ba:3d:58:c7:2b:4a:cb:13:32:aa:4b:20:39:66: d0:a4:e3:b1:70:7d:b2:be:2c:c6:c1:99:6c:02:76:67:5d:44: 7e:cc:46:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYipz2mP8DKKfyf3CtUR1HSlVn+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0 NDIyRjU2NjAeFw0yNTA0MDgxNzU2NDdaFw0yNTA0MTEyMDI3NDdaMDMxMTAvBgNV BAMTKDU2MUYyMzQ1MzFGRUUxQzQyOTFBMDEyMThBNkU3QjlDMjYzMTNGREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDklkeVjtf10QLK030YJHM/q15q +dr9licucCYYsZwgg0PhLfFty9/n9wEWl5lMtAa4g32h/8ZiWT2gUxPzxu2ZIS0n CMO+bOLM/9r4hgKui2UZ1GXC1/IiqbI/x0IN3AXVuYP4eOn+o4fZ338B8O0kwr+6 PmhHTOzBG85xKb8od8pqPDTgMqfKqXrI3ndq/rlm+x9L+TY/6yj5ifcaZZxcR636 gGOFxFZZj9S9fZV90fjnIyLpbsYeBdxRB+wqbAg6MHgEDTiGP2McyE5KWbN8uXs6 z0ytjZ7Ad8s6W4OwHWvPOHYKNxV9BNFgidByKg9poqUKfhIIR4Emc0Z2+pkfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVh8jRTH+4cQpGgEhim57nCYxP9wwHwYDVR0j BBgwFoAUlhpSpSLeuQLZy93pivgrQkQi9WYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjcyZjAxMi1hNDNhLTRmY2ItODZhOS1hYjNlOTU3M2E4ZDkvMC85NjFBNTJBNTIy REVCOTAyRDlDQkRERTk4QUY4MkI0MjQ0MjJGNTY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0NDIy RjU2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y3MmYwMTItYTQzYS00ZmNiLTg2 YTktYWIzZTk1NzNhOGQ5LzAvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJC NDI0NDIyRjU2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZQFvkQ4Fhk/0EO4ndwNi94rfqw6Efy3m3U 1Th9dqbvf+ynUcvv53YghBYDv+YgLZJ2pcyCf8Ih0F7LIBeGEmYtPBeBfzYY8OfC KLlOuk1MoKlHccNdIGQsWq7l3qgA2xwZX0OkfmhV9YXJ7VJQ4/HwTXqhAWVCWLl6 am0snZ83u5C6HXvJX02xK78wU6AOtoMBgcqsqVtSGvH/45aIuAAsVOMEmpnDs3Gj KGrqRJ1o7DstTQ3MaPmFhPqgCmzAQGjE3Qm4QJ0iPRdkipXkQBXyQqRIag2eGf0O jSO6PVjHK0rLEzKqSyA5ZtCk47FwfbK+LMbBmWwCdmddRH7MRo4= -----END CERTIFICATE-----Generated at Thu Apr 10 02:38:21 2025 by rpki-client