$ rpki-client -vvf repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft File: 6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft (raw, json) Hash identifier: d/iU10VQwsMKgyTcL442r05bgK5UZzR0zvhCEPIsqoY= Subject key identifier: DC:AF:F1:53:72:AD:FD:4E:83:DF:17:98:50:5B:53:10:CE:CB:9F:09 Authority key identifier: 6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 Certificate issuer: /CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Certificate serial: 38E019355B2C7A5DFF5F5F8D14B2992C9EAD3E33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft Manifest number: 031F Signing time: Thu 24 Apr 2025 05:01:11 +0000 Manifest this update: Thu 24 Apr 2025 04:56:11 +0000 Manifest next update: Sun 27 Apr 2025 15:38:11 +0000 Files and hashes: 1: 3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa (hash: QReThr3L/8y8L/3AEdob8H7epOdOKEjss3T3HzyvfMI=) 2: 3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa (hash: G1U9gODI47ty2yrLIvmBDS+xG1WkgDbqidFt5qR0lew=) 3: 3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa (hash: lkrHej4FZPJ4f2E40DosArf8hhkwpkjiPyYFXEzD3uU=) 4: 6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl (hash: 7Whmy+sFvrZCh9Yr7IKrhsgZQI1GorivfP5MhSNCUuk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 15:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:e0:19:35:5b:2c:7a:5d:ff:5f:5f:8d:14:b2:99:2c:9e:ad:3e:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Validity Not Before: Apr 24 04:56:11 2025 GMT Not After : Apr 27 15:38:11 2025 GMT Subject: CN=DCAFF15372ADFD4E83DF1798505B5310CECB9F09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:50:36:07:a8:0d:8c:7c:a8:e4:c3:f3:e7:a1: ca:58:d5:23:94:55:b6:02:2b:5d:0e:9b:ff:5d:40: 68:c7:29:90:cb:3a:63:cd:c2:e1:58:a0:d3:f6:0d: 17:2d:8b:fb:c5:38:65:18:20:72:ec:fc:83:76:f8: 09:80:d4:67:25:f7:88:d0:89:22:e7:e7:e0:d5:b2: 07:4d:ea:d7:7b:d1:c7:ba:90:ef:84:aa:57:26:bb: 51:68:a2:b4:f0:9f:a0:c8:58:cd:f7:d2:35:a6:b8: e7:3d:7c:31:fc:3b:8a:ec:e3:7e:56:62:93:04:00: f3:79:77:07:1b:84:d8:79:41:de:50:e8:b9:e2:25: e2:4e:63:3b:25:8b:ec:03:c5:d7:a6:06:21:4d:b1: 20:94:59:e3:b9:29:80:16:6e:70:71:07:6b:33:91: 59:e9:73:c6:06:4d:46:10:b7:6b:46:8e:fa:a8:76: dd:5a:38:a2:aa:d3:1e:d0:14:ce:54:dc:c6:73:5a: f7:b0:db:32:cc:a9:28:ae:20:db:5d:6c:8d:c6:1a: 95:41:1c:68:20:96:9a:3a:1e:9d:21:ab:0d:c9:b5: b2:cc:32:39:ed:1c:c9:a7:80:53:ca:f0:cb:b1:f3: 66:be:9e:d2:f9:cc:07:b6:c8:67:65:2c:b1:e9:96: 9d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:AF:F1:53:72:AD:FD:4E:83:DF:17:98:50:5B:53:10:CE:CB:9F:09 X509v3 Authority Key Identifier: keyid:6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:83:63:b9:8e:8e:5f:f0:e7:94:46:85:61:62:48:c8:e0:87: 9c:78:b4:b9:e3:3e:cc:2a:2b:ef:8a:27:67:42:8f:05:2d:41: d6:45:91:86:44:d7:9b:14:d4:37:96:88:14:70:fc:d1:53:0b: 9f:99:f3:ba:a6:b9:c5:42:f7:8b:5e:37:8f:39:41:c3:c8:17: b0:86:df:c6:52:47:6e:be:35:da:53:1a:5f:94:f6:25:00:aa: 1b:1e:d9:e7:ba:b1:72:28:b8:83:e1:9f:13:54:56:df:49:1e: df:7b:dd:ab:3e:15:34:1e:05:47:ab:93:91:52:86:b3:1e:ad: e3:51:a0:4e:50:48:d4:d6:44:01:d7:ca:8c:26:19:36:26:0f: ba:09:2c:63:f7:bc:ef:da:08:80:bd:e0:d4:c8:d6:ab:82:9c: 00:6f:0e:ee:40:7d:32:b3:ae:69:90:1c:be:3b:0f:88:a8:bc: 55:74:2f:0c:e8:6c:c5:ee:3d:fe:88:43:f9:bf:38:0e:6a:ad: b7:65:5c:a2:30:2d:26:ac:eb:96:91:e7:9c:d2:a6:90:84:6e: 82:f4:b7:b5:76:a9:90:f2:70:41:d1:4c:da:f2:aa:b9:62:ae: 4b:19:24:82:55:b9:cf:66:28:0c:35:19:23:15:02:60:3f:4b: 63:94:8a:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOOAZNVssel3/X1+NFLKZLJ6tPjMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlD MEYyRTNGNzAeFw0yNTA0MjQwNDU2MTFaFw0yNTA0MjcxNTM4MTFaMDMxMTAvBgNV BAMTKERDQUZGMTUzNzJBREZENEU4M0RGMTc5ODUwNUI1MzEwQ0VDQjlGMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuUDYHqA2MfKjkw/PnocpY1SOU VbYCK10Om/9dQGjHKZDLOmPNwuFYoNP2DRcti/vFOGUYIHLs/IN2+AmA1Gcl94jQ iSLn5+DVsgdN6td70ce6kO+Eqlcmu1FoorTwn6DIWM330jWmuOc9fDH8O4rs435W YpMEAPN5dwcbhNh5Qd5Q6LniJeJOYzsli+wDxdemBiFNsSCUWeO5KYAWbnBxB2sz kVnpc8YGTUYQt2tGjvqodt1aOKKq0x7QFM5U3MZzWvew2zLMqSiuINtdbI3GGpVB HGgglpo6Hp0hqw3JtbLMMjntHMmngFPK8Mux82a+ntL5zAe2yGdlLLHplp1FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3K/xU3Kt/U6D3xeYUFtTEM7LnwkwHwYDVR0j BBgwFoAUagLcEPQfzg60l5jdvPMfycDy4/cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTQ2YmRhZC1mMTMwLTQ4YTktODUzNC01NGJhM2U4ZWQ2MWYvMC82QTAyREMxMEY0 MUZDRTBFQjQ5Nzk4RERCQ0YzMUZDOUMwRjJFM0Y3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlDMEYy RTNGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE0NmJkYWQtZjEzMC00OGE5LTg1 MzQtNTRiYTNlOGVkNjFmLzAvNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFG QzlDMEYyRTNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHuDY7mOjl/w55RGhWFiSMjgh5x4tLnjPswq K++KJ2dCjwUtQdZFkYZE15sU1DeWiBRw/NFTC5+Z87qmucVC94teN485QcPIF7CG 38ZSR26+NdpTGl+U9iUAqhse2ee6sXIouIPhnxNUVt9JHt973as+FTQeBUerk5FS hrMereNRoE5QSNTWRAHXyowmGTYmD7oJLGP3vO/aCIC94NTI1quCnABvDu5AfTKz rmmQHL47D4iovFV0LwzobMXuPf6IQ/m/OA5qrbdlXKIwLSas65aR55zSppCEboL0 t7V2qZDycEHRTNryqrlirksZJIJVuc9mKAw1GSMVAmA/S2OUip8= -----END CERTIFICATE-----Generated at Sat Apr 26 16:24:07 2025 by rpki-client