$ rpki-client -vvf repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft File: 6C11FF5474BE690E545132237E53030296585D32.mft (raw, json) Hash identifier: 1E4RdXP7k9+xI2PTFZwfomQwIQ+rSc5kQ+YShMq6djM= Subject key identifier: 9C:2F:58:31:9A:91:2F:48:C8:A9:DE:1C:10:68:63:3F:27:D0:53:AE Authority key identifier: 6C:11:FF:54:74:BE:69:0E:54:51:32:23:7E:53:03:02:96:58:5D:32 Certificate issuer: /CN=6C11FF5474BE690E545132237E53030296585D32 Certificate serial: 551E2B8EFA2E24186BE5012125F96EA463C85FFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C11FF5474BE690E545132237E53030296585D32.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft Manifest number: 0428 Signing time: Mon 28 Apr 2025 00:21:12 +0000 Manifest this update: Mon 28 Apr 2025 00:16:12 +0000 Manifest next update: Thu 01 May 2025 09:35:12 +0000 Files and hashes: 1: 3130332e3235312e3138302e302f32322d3234203d3e203538383138.roa (hash: FFWbcrgwEt8avpT8DpM1zZTtvliwRyBHooSUvsRbv54=) 2: 6C11FF5474BE690E545132237E53030296585D32.crl (hash: IeBkRzXLfHcXMKx/TkKF1R73Juy6tye7Y7jm3XMj7EE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.crl rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C11FF5474BE690E545132237E53030296585D32.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 09:35:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:1e:2b:8e:fa:2e:24:18:6b:e5:01:21:25:f9:6e:a4:63:c8:5f:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C11FF5474BE690E545132237E53030296585D32 Validity Not Before: Apr 28 00:16:12 2025 GMT Not After : May 1 09:35:12 2025 GMT Subject: CN=9C2F58319A912F48C8A9DE1C1068633F27D053AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:51:e4:b4:af:ee:ea:5e:dd:04:b7:dd:94:67: 15:73:ee:34:5e:2a:65:8e:08:72:ed:4a:fe:1b:6b: 31:3b:62:da:eb:cd:b3:99:43:ec:92:77:0a:01:c3: b3:5f:29:e7:1a:e8:79:5c:12:8d:58:51:52:b1:d5: a6:2d:9e:7b:2f:51:87:1d:9f:14:50:4f:4e:74:6d: d7:dc:a9:ef:2e:3a:64:7a:c9:1b:4f:d5:56:bb:d8: ee:fa:9e:e6:3b:97:5c:76:c8:30:67:22:13:ca:13: 48:8b:f0:d4:05:a6:48:41:76:f4:42:89:66:49:53: f1:ea:09:e3:57:b4:c4:a9:14:d0:c5:fd:f8:e3:ea: c3:f8:ee:37:5c:0a:c6:cd:43:8a:94:ab:f7:c5:b9: a5:6d:d7:86:ff:72:d0:9d:34:8f:0a:64:3e:d7:1f: 17:7a:5b:95:f6:1f:5c:1a:6c:57:ba:ad:72:3f:cd: f2:20:c2:55:4a:3f:97:08:e9:96:f5:8a:e3:71:b3: 9d:e6:9f:78:97:4e:97:06:0e:f2:c0:dd:a2:22:4a: 58:88:4a:6f:95:22:a1:67:f3:e2:89:0c:78:3c:47: 82:1c:ae:16:f9:b7:83:07:a2:3f:3c:cd:7e:c5:d4: c4:e0:eb:dd:f7:b7:64:26:28:fa:47:77:4e:7f:1c: 36:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:2F:58:31:9A:91:2F:48:C8:A9:DE:1C:10:68:63:3F:27:D0:53:AE X509v3 Authority Key Identifier: keyid:6C:11:FF:54:74:BE:69:0E:54:51:32:23:7E:53:03:02:96:58:5D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C11FF5474BE690E545132237E53030296585D32.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:36:7d:fb:32:2a:54:5d:7c:2f:38:dc:65:29:41:88:28:b2: 0a:f4:ae:a6:f7:f5:9d:98:04:c5:20:51:c9:5c:07:15:94:cc: b1:b7:07:13:bf:2b:bd:2d:02:98:70:f5:a8:40:df:cd:37:d3: 9b:ea:bb:92:b7:5b:18:36:3a:f7:32:20:5a:ce:d6:64:60:b8: ed:24:97:27:be:61:bd:ac:48:0e:e4:69:6c:5f:fa:10:1e:ff: 68:a0:de:10:a0:fe:9a:cf:26:40:93:6b:ce:de:b9:b5:63:58: 29:01:c4:7d:05:eb:12:0c:2e:d2:cb:c3:30:f5:16:d0:25:ce: 6b:0b:18:ac:9a:3b:33:11:6e:3b:6c:05:ba:02:e8:a1:63:de: fa:8a:90:53:e1:1d:73:ad:8d:30:2d:52:96:e6:67:b8:b8:9d: e3:dd:35:27:a2:b3:dd:ea:23:8e:11:d9:b6:cd:55:81:9e:35: 27:ed:29:38:ee:fe:94:7d:d1:7d:3c:0a:de:d6:8e:4b:b8:0a: b4:2f:34:65:fc:03:92:00:db:e5:b4:7a:ea:95:6a:af:2a:09: 49:62:65:ed:43:66:bc:5f:34:99:9c:e8:75:00:58:0d:0b:0e: 9b:fc:00:de:71:1b:02:b0:37:ea:75:b9:0e:57:ac:29:59:62: 4e:ef:6a:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVR4rjvouJBhr5QEhJflupGPIX/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkMxMUZGNTQ3NEJFNjkwRTU0NTEzMjIzN0U1MzAzMDI5 NjU4NUQzMjAeFw0yNTA0MjgwMDE2MTJaFw0yNTA1MDEwOTM1MTJaMDMxMTAvBgNV BAMTKDlDMkY1ODMxOUE5MTJGNDhDOEE5REUxQzEwNjg2MzNGMjdEMDUzQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIUeS0r+7qXt0Et92UZxVz7jRe KmWOCHLtSv4bazE7YtrrzbOZQ+ySdwoBw7NfKeca6HlcEo1YUVKx1aYtnnsvUYcd nxRQT050bdfcqe8uOmR6yRtP1Va72O76nuY7l1x2yDBnIhPKE0iL8NQFpkhBdvRC iWZJU/HqCeNXtMSpFNDF/fjj6sP47jdcCsbNQ4qUq/fFuaVt14b/ctCdNI8KZD7X Hxd6W5X2H1wabFe6rXI/zfIgwlVKP5cI6Zb1iuNxs53mn3iXTpcGDvLA3aIiSliI Sm+VIqFn8+KJDHg8R4Icrhb5t4MHoj88zX7F1MTg6933t2QmKPpHd05/HDZJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnC9YMZqRL0jIqd4cEGhjPyfQU64wHwYDVR0j BBgwFoAUbBH/VHS+aQ5UUTIjflMDApZYXTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTMzYTllZi01YjVmLTQ0MjktODM0Yi05NWIyYjczNjgwZTYvMC82QzExRkY1NDc0 QkU2OTBFNTQ1MTMyMjM3RTUzMDMwMjk2NTg1RDMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkMxMUZGNTQ3NEJFNjkwRTU0NTEzMjIzN0U1MzAzMDI5NjU4 NUQzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmUzM2E5ZWYtNWI1Zi00NDI5LTgz NGItOTViMmI3MzY4MGU2LzAvNkMxMUZGNTQ3NEJFNjkwRTU0NTEzMjIzN0U1MzAz MDI5NjU4NUQzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADo2ffsyKlRdfC843GUpQYgosgr0rqb39Z2Y BMUgUclcBxWUzLG3BxO/K70tAphw9ahA380305vqu5K3Wxg2OvcyIFrO1mRguO0k lye+Yb2sSA7kaWxf+hAe/2ig3hCg/prPJkCTa87eubVjWCkBxH0F6xIMLtLLwzD1 FtAlzmsLGKyaOzMRbjtsBboC6KFj3vqKkFPhHXOtjTAtUpbmZ7i4nePdNSeis93q I44R2bbNVYGeNSftKTju/pR90X08Ct7Wjku4CrQvNGX8A5IA2+W0euqVaq8qCUli Ze1DZrxfNJmc6HUAWA0LDpv8AN5xGwKwN+p1uQ5XrClZYk7vavM= -----END CERTIFICATE-----Generated at Tue Apr 29 09:24:09 2025 by rpki-client