$ rpki-client -vvf repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft File: 6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft (raw, json) Hash identifier: yk6ZAPL7KGbfJ4KRFgqrzLTMeNca78u8UGeV/OrDUP4= Subject key identifier: 9E:BE:D0:33:33:6D:33:B2:F1:DD:5E:D1:A1:C8:E3:8D:A6:30:0B:7F Authority key identifier: 6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB Certificate issuer: /CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB Certificate serial: 6C6E2CEB6FB8BBEBE424471F7ADE202589732F84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft Manifest number: 0399 Signing time: Mon 28 Apr 2025 04:03:31 +0000 Manifest this update: Mon 28 Apr 2025 03:58:31 +0000 Manifest next update: Thu 01 May 2025 09:00:31 +0000 Files and hashes: 1: 3130332e3232362e35352e302f32342d3234203d3e20313331373835.roa (hash: w25Hdja8cVcMSMfXbCo6MIHOJSikdvlBUIB8EBkQuqs=) 2: 3130332e3131362e3130382e302f32342d3234203d3e20313331373835.roa (hash: LY7WT+w7FguQLmfrSOP0mKv6BUNq2KCw3SGoAGK1WaA=) 3: 6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl (hash: BKqQxCrZzQNrUNr3JhTJ4cDbc0RqJ18d72DbIhuVlS4=) 4: 3130332e31362e37392e302f32342d3234203d3e20313331373835.roa (hash: dq2C0qn2bszea5JrNdqQBrs3uxaP2+6us75MTw8i5Kc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:6e:2c:eb:6f:b8:bb:eb:e4:24:47:1f:7a:de:20:25:89:73:2f:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB Validity Not Before: Apr 28 03:58:31 2025 GMT Not After : May 1 09:00:31 2025 GMT Subject: CN=9EBED033336D33B2F1DD5ED1A1C8E38DA6300B7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ca:b6:34:b3:dd:0b:62:11:9c:b6:9a:4d:47: 5c:54:1a:80:64:d2:90:08:c0:a5:30:66:46:24:8d: 13:ba:db:64:2e:b9:7c:6b:03:40:64:46:81:10:bf: 3a:69:6a:02:aa:44:a3:6b:ac:76:58:96:10:48:99: 6c:eb:70:f7:cb:16:c7:6f:7c:ba:4f:38:90:bd:76: 3e:05:5f:3c:e6:73:58:42:a0:07:15:77:ff:05:d0: 9d:be:01:99:c2:24:31:c6:d7:57:3e:3e:7b:e9:d5: a5:7f:b3:a2:9e:18:46:b9:d1:6e:47:a1:45:5c:b2: 42:5b:d7:c0:2b:07:7b:1a:10:fa:29:3e:a0:9e:aa: 5d:1f:7e:d3:24:93:35:e4:14:01:73:14:99:b8:c3: f3:5d:3e:0e:81:9d:6f:aa:98:f1:43:6f:a1:5c:42: 9d:b0:b2:5e:6d:4e:0e:7a:7c:65:a9:b5:f9:7d:5f: 11:ac:e3:bb:03:ef:60:d7:ab:76:a1:6f:81:44:63: 4f:b6:61:2d:a8:8e:b1:a0:24:2e:7e:ee:e2:b6:32: 0f:95:a0:23:8f:56:4c:2e:d1:52:56:1a:77:25:f8: 75:61:ff:57:f0:7d:4c:20:54:d5:ed:76:39:27:2a: ce:a0:85:53:8b:a3:6f:67:c6:b4:2f:22:1b:2a:25: 90:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BE:D0:33:33:6D:33:B2:F1:DD:5E:D1:A1:C8:E3:8D:A6:30:0B:7F X509v3 Authority Key Identifier: keyid:6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:af:cc:45:13:7a:9e:83:3c:9a:26:89:a7:44:b5:97:e0:5e: a9:bf:21:15:10:6a:28:8e:0a:e2:df:f2:4d:89:3f:d3:9a:33: 87:8d:74:f0:fd:96:a6:ea:6e:9b:04:36:43:8f:88:fe:26:8d: 80:7b:9e:fb:70:f7:18:bb:32:73:31:dc:99:bd:be:ea:51:39: 0b:52:b0:ec:a1:d5:e2:66:ea:48:58:ec:a2:04:fd:8f:51:69: f8:26:82:42:1c:11:7d:21:eb:b8:85:c8:54:02:c0:83:e0:cb: e3:a8:52:cf:73:85:4e:05:40:c7:56:46:93:c7:e7:0a:06:a6: 44:1f:c7:87:19:71:cc:66:e4:7d:6f:51:30:26:f5:b1:7c:f5: 53:be:8d:10:f8:39:e2:70:ae:cc:44:f3:b6:3e:62:b3:44:8a: b5:c1:07:c2:28:bd:58:e6:d2:45:f1:23:37:dc:ab:69:be:28: 12:f5:0e:ad:41:2e:f4:f4:61:0b:b2:5d:73:4f:04:5c:51:09: 6e:d6:dd:6f:c9:40:ef:04:60:02:55:03:37:8e:cf:64:e6:ff: 64:f8:b6:2c:a6:52:e8:de:8b:33:1b:be:8d:ea:56:45:b8:4b: 18:6c:73:04:9c:d9:6a:2e:a9:31:ee:6e:51:75:28:50:e1:66: 83:87:77:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbG4s62+4u+vkJEcfet4gJYlzL4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhGN0M1 OEFDQThBQjAeFw0yNTA0MjgwMzU4MzFaFw0yNTA1MDEwOTAwMzFaMDMxMTAvBgNV BAMTKDlFQkVEMDMzMzM2RDMzQjJGMURENUVEMUExQzhFMzhEQTYzMDBCN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnyrY0s90LYhGctppNR1xUGoBk 0pAIwKUwZkYkjRO622QuuXxrA0BkRoEQvzppagKqRKNrrHZYlhBImWzrcPfLFsdv fLpPOJC9dj4FXzzmc1hCoAcVd/8F0J2+AZnCJDHG11c+Pnvp1aV/s6KeGEa50W5H oUVcskJb18ArB3saEPopPqCeql0fftMkkzXkFAFzFJm4w/NdPg6BnW+qmPFDb6Fc Qp2wsl5tTg56fGWptfl9XxGs47sD72DXq3ahb4FEY0+2YS2ojrGgJC5+7uK2Mg+V oCOPVkwu0VJWGncl+HVh/1fwfUwgVNXtdjknKs6ghVOLo29nxrQvIhsqJZBJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnr7QMzNtM7Lx3V7RocjjjaYwC38wHwYDVR0j BBgwFoAUbUsXSN5S3OOXuGh3LhKPfFisqKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDIwNzUyMy1kNWY1LTRhY2MtYjBhYy1iZmIwOTU0ZmE0ZTAvMC82RDRCMTc0OERF NTJEQ0UzOTdCODY4NzcyRTEyOEY3QzU4QUNBOEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhGN0M1OEFD QThBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQyMDc1MjMtZDVmNS00YWNjLWIw YWMtYmZiMDk1NGZhNGUwLzAvNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhG N0M1OEFDQThBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2vzEUTep6DPJomiadEtZfgXqm/IRUQaiiO CuLf8k2JP9OaM4eNdPD9lqbqbpsENkOPiP4mjYB7nvtw9xi7MnMx3Jm9vupROQtS sOyh1eJm6khY7KIE/Y9RafgmgkIcEX0h67iFyFQCwIPgy+OoUs9zhU4FQMdWRpPH 5woGpkQfx4cZccxm5H1vUTAm9bF89VO+jRD4OeJwrsxE87Y+YrNEirXBB8IovVjm 0kXxIzfcq2m+KBL1Dq1BLvT0YQuyXXNPBFxRCW7W3W/JQO8EYAJVAzeOz2Tm/2T4 tiymUujeizMbvo3qVkW4SxhscwSc2WouqTHublF1KFDhZoOHd0k= -----END CERTIFICATE-----Generated at Wed Apr 30 08:10:44 2025 by rpki-client