$ rpki-client -vvf repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft File: 1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft (raw, json) Hash identifier: 2k4tGZf9EAsufCKjt3Jdyh3cwo1U9shXcOohEA6h+hw= Subject key identifier: 59:CB:CA:0D:01:0D:D7:66:D6:27:05:71:10:60:5B:86:FC:00:83:11 Authority key identifier: 16:61:A1:BC:89:CC:AD:D4:C7:BE:72:30:52:AE:59:00:DE:18:1E:06 Certificate issuer: /CN=1661A1BC89CCADD4C7BE723052AE5900DE181E06 Certificate serial: 064D2256BB0A823B217A87B296C9DD4B4683E3CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft Manifest number: 0497 Signing time: Thu 24 Apr 2025 04:52:13 +0000 Manifest this update: Thu 24 Apr 2025 04:47:13 +0000 Manifest next update: Sun 27 Apr 2025 05:33:13 +0000 Files and hashes: 1: 3230322e35322e3134362e302f32332d3234203d3e203435333234.roa (hash: iyuYI15kkpPbO7NUigKqskqQQ4plk9btKYZQ0Pd1YJg=) 2: 1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl (hash: fCbzl7cYjID+Je3W8gr6o3zpICTY7EGfZEA/DFAot24=) 3: 3130332e33302e3134372e302f32342d3234203d3e203436303530.roa (hash: e40kdwd9RGaDzut85pUqofV0tIg/vdE6e4M9mcDTUZU=) 4: 323030313a6466353a643230303a3a2f34382d3438203d3e203436303530.roa (hash: yvEJWkP0xFq1u9XfkAxvcy195JE5QOchL8JpvPiL8B8=) 5: 3130332e33302e3134342e302f32322d3234203d3e203436303530.roa (hash: Ect2ZTg7f92BY0SZ7MDChpSHiOXgr96F/7kTPjRYg7g=) 6: 3230332e3136312e3138342e302f32332d3234203d3e203436303530.roa (hash: qb/Mp/evl7jg0oYt9bdhD9XiouNQbvER0H1nFXzf/fA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 05:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:4d:22:56:bb:0a:82:3b:21:7a:87:b2:96:c9:dd:4b:46:83:e3:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1661A1BC89CCADD4C7BE723052AE5900DE181E06 Validity Not Before: Apr 24 04:47:13 2025 GMT Not After : Apr 27 05:33:13 2025 GMT Subject: CN=59CBCA0D010DD766D627057110605B86FC008311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f9:3d:55:16:67:ce:eb:4c:f1:e6:f8:f8:c5: 93:54:67:1c:bd:93:38:81:82:d1:73:c4:06:74:2a: 23:68:1c:f7:2f:11:78:4a:06:c5:d1:e9:c3:72:3f: 25:16:36:33:ba:30:eb:a7:80:c7:b5:bb:03:7f:65: de:9f:ca:20:ce:20:5e:1a:35:3f:57:d7:d6:34:6f: 7f:b9:04:86:16:ae:54:4b:83:34:8d:9b:8d:e3:ed: 77:63:43:05:20:29:fa:dd:64:65:3a:ba:49:57:97: 73:f0:13:0f:9c:8c:d6:3e:3c:a6:e6:f5:86:0b:8e: 9e:fc:87:8a:70:8b:7e:49:15:a2:5c:1d:6c:3b:5e: bb:ab:e4:74:02:d7:b4:85:4b:2d:f7:7b:16:d3:81: e1:38:77:89:0b:07:49:5a:64:98:48:eb:68:89:80: ca:37:15:6e:6f:3e:b1:62:de:9e:19:ab:9a:e1:b1: 4b:ba:99:8e:21:5f:99:e0:e1:77:8d:c3:79:47:d2: 20:86:96:d5:6e:a2:71:35:99:e8:20:68:74:89:f0: 52:0e:16:d3:6f:f9:b8:3d:ea:e2:a8:44:d7:c2:ec: 70:34:88:db:d8:d8:67:6d:33:5f:64:70:29:02:5c: 40:40:a1:b9:79:68:43:4c:ce:93:0b:f7:55:46:0a: 60:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CB:CA:0D:01:0D:D7:66:D6:27:05:71:10:60:5B:86:FC:00:83:11 X509v3 Authority Key Identifier: keyid:16:61:A1:BC:89:CC:AD:D4:C7:BE:72:30:52:AE:59:00:DE:18:1E:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:e7:fd:95:63:2b:d7:fe:3c:b7:e6:6a:54:08:97:39:0f:3d: c1:a9:5e:57:1e:3b:90:7d:15:31:3f:b4:19:05:16:7f:92:d3: 9c:41:2c:11:18:d2:a1:3b:79:b0:c1:d1:80:0d:e3:c8:5d:40: 96:cc:c8:3c:f6:27:12:a3:cc:b5:e8:0a:17:36:40:35:b5:64: c0:14:79:36:73:fe:8d:41:40:a0:1b:12:35:f4:83:53:4e:47: f6:01:3c:3e:d3:fe:10:29:7c:b4:cc:02:9f:56:f3:fe:3a:0c: c1:84:98:be:f3:0a:e6:e7:85:cd:94:0a:5d:98:7c:7d:8e:61: 5d:22:59:ea:34:9e:75:92:bd:82:fc:05:8f:64:52:fd:93:fd: ff:ff:a0:71:20:d7:b6:53:4a:87:5a:02:84:c8:96:bd:a0:50: 21:85:45:3f:bd:e6:fd:7d:74:a2:4f:f0:37:5d:2f:a9:71:34: eb:66:1c:a6:73:c2:f2:9d:c3:de:6c:ae:17:1c:f2:03:d0:8b: cb:4a:3b:40:bf:89:2d:fe:c6:4a:27:9e:f8:22:b7:2e:b4:62: f2:28:a0:80:55:60:5d:c9:58:0f:3d:1a:b0:99:a9:a5:c9:92: 8b:93:bc:fd:40:d8:56:02:a7:70:85:c2:c1:d3:bb:8b:26:3b: 99:2b:4d:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBk0iVrsKgjsheoeylsndS0aD484wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5MDBE RTE4MUUwNjAeFw0yNTA0MjQwNDQ3MTNaFw0yNTA0MjcwNTMzMTNaMDMxMTAvBgNV BAMTKDU5Q0JDQTBEMDEwREQ3NjZENjI3MDU3MTEwNjA1Qjg2RkMwMDgzMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ+T1VFmfO60zx5vj4xZNUZxy9 kziBgtFzxAZ0KiNoHPcvEXhKBsXR6cNyPyUWNjO6MOungMe1uwN/Zd6fyiDOIF4a NT9X19Y0b3+5BIYWrlRLgzSNm43j7XdjQwUgKfrdZGU6uklXl3PwEw+cjNY+PKbm 9YYLjp78h4pwi35JFaJcHWw7Xrur5HQC17SFSy33exbTgeE4d4kLB0laZJhI62iJ gMo3FW5vPrFi3p4Zq5rhsUu6mY4hX5ng4XeNw3lH0iCGltVuonE1meggaHSJ8FIO FtNv+bg96uKoRNfC7HA0iNvY2GdtM19kcCkCXEBAobl5aENMzpML91VGCmDnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWcvKDQEN12bWJwVxEGBbhvwAgxEwHwYDVR0j BBgwFoAUFmGhvInMrdTHvnIwUq5ZAN4YHgYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MGQyZDNlMy00YzIwLTRhOTAtODMzZS1lYWQ0M2MzMzk5MWUvMC8xNjYxQTFCQzg5 Q0NBREQ0QzdCRTcyMzA1MkFFNTkwMERFMTgxRTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5MDBERTE4 MUUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDBkMmQzZTMtNGMyMC00YTkwLTgz M2UtZWFkNDNjMzM5OTFlLzAvMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5 MDBERTE4MUUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHn/ZVjK9f+PLfmalQIlzkPPcGpXlceO5B9 FTE/tBkFFn+S05xBLBEY0qE7ebDB0YAN48hdQJbMyDz2JxKjzLXoChc2QDW1ZMAU eTZz/o1BQKAbEjX0g1NOR/YBPD7T/hApfLTMAp9W8/46DMGEmL7zCubnhc2UCl2Y fH2OYV0iWeo0nnWSvYL8BY9kUv2T/f//oHEg17ZTSodaAoTIlr2gUCGFRT+95v19 dKJP8DddL6lxNOtmHKZzwvKdw95srhcc8gPQi8tKO0C/iS3+xkonnvgity60YvIo oIBVYF3JWA89GrCZqaXJkouTvP1A2FYCp3CFwsHTu4smO5krTdI= -----END CERTIFICATE-----Generated at Thu Apr 24 06:50:02 2025 by rpki-client on console.sobornost.net