$ rpki-client -vvf repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft File: 6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft (raw, json) Hash identifier: zh0gDmy463yAfDM6ysl+iqP9uwqQvV08+N4K9/h4A3U= Subject key identifier: BC:59:E2:6C:7A:BF:4B:13:41:C5:0E:FA:B5:AB:72:CF:6C:1B:0B:F1 Authority key identifier: 6A:AF:6E:8D:1C:9A:80:94:46:CB:C0:76:FE:39:08:3A:F9:54:70:8E Certificate issuer: /CN=6AAF6E8D1C9A809446CBC076FE39083AF954708E Certificate serial: 2971BC4F22F70BAACF342A470747DF2D2556DFCD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft Manifest number: 0182 Signing time: Sun 27 Apr 2025 14:21:23 +0000 Manifest this update: Sun 27 Apr 2025 14:16:23 +0000 Manifest next update: Wed 30 Apr 2025 23:59:23 +0000 Files and hashes: 1: 6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl (hash: 22XTQh2m8CKl3coAeE1LTWybmCyfheOeV3OwFSzBQ58=) 2: 3130332e33392e37342e302f32332d3234203d3e20313530323732.roa (hash: /jbCkGD1i8NyhuUnKVEmZYj4vCqIPPKrbQpk5MF5I1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 23:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:71:bc:4f:22:f7:0b:aa:cf:34:2a:47:07:47:df:2d:25:56:df:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AAF6E8D1C9A809446CBC076FE39083AF954708E Validity Not Before: Apr 27 14:16:23 2025 GMT Not After : Apr 30 23:59:23 2025 GMT Subject: CN=BC59E26C7ABF4B1341C50EFAB5AB72CF6C1B0BF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c7:dd:68:98:99:df:f0:83:dc:87:d8:4c:a3: 60:ba:b0:2d:8f:1e:1b:44:51:58:5c:44:5d:08:c4: 9e:23:9d:64:f8:60:97:cc:68:79:26:bf:94:0c:6c: 8a:ab:68:41:b4:3c:75:1b:58:d3:f8:c2:80:10:0f: 08:c3:57:37:9e:63:4f:cb:22:23:32:9b:42:d5:3c: 98:15:ec:22:08:c8:12:c8:f3:bb:dc:47:a3:87:92: e3:4b:b6:3f:d4:82:e3:68:1b:aa:05:ab:30:0c:99: 41:87:b2:58:e6:d6:3e:8f:9c:bb:86:67:de:39:ea: 96:f9:86:94:db:03:b2:44:9e:51:f0:ce:57:0e:c7: 87:2e:ce:ae:78:f2:11:d2:32:a2:15:84:cb:03:e7: d2:94:80:6a:6e:d8:3e:bc:7d:4f:1d:b8:d0:f6:6b: 75:61:ca:10:52:b4:c6:df:f7:93:96:0c:cf:1e:54: b6:31:3b:5a:db:20:b6:83:81:b6:e6:31:d4:96:13: 09:0f:f4:43:9a:f2:dd:0b:4b:58:f8:7e:29:1e:8d: d8:fb:5e:0e:1d:01:36:ef:e7:50:75:27:ce:3e:09: 40:74:f4:f0:2f:4b:13:99:7c:63:a9:c3:73:14:4f: 99:8e:e4:1f:a1:69:53:3d:3f:0e:99:92:80:84:76: 7a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:59:E2:6C:7A:BF:4B:13:41:C5:0E:FA:B5:AB:72:CF:6C:1B:0B:F1 X509v3 Authority Key Identifier: keyid:6A:AF:6E:8D:1C:9A:80:94:46:CB:C0:76:FE:39:08:3A:F9:54:70:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:39:4c:3d:73:9c:7b:2c:97:bb:85:a4:70:6f:b6:04:7f:33: 33:02:20:c3:04:42:61:5c:b7:82:d9:b3:3f:8a:0b:c1:f2:c2: e8:ba:b8:e5:35:6e:0c:fb:da:7d:12:51:ed:d4:00:e9:cc:32: 1a:4e:0d:5e:a7:bd:88:47:16:a7:43:81:41:c8:06:5f:7b:2e: f5:4f:ed:aa:da:84:7e:67:b9:8b:48:bd:48:b9:5a:f2:60:b7: e5:a3:f5:88:fe:3e:e4:df:63:64:82:af:67:89:1d:f3:99:d3: ed:30:fd:38:7f:cb:c7:48:35:3b:1e:61:af:fb:71:ae:9b:12: 96:6a:d7:d1:94:20:fc:37:59:71:f9:b1:94:44:36:bd:c9:4a: 8a:6f:76:6f:3f:2e:51:39:e4:07:6d:30:ff:c8:ea:d0:0b:4f: 46:40:b3:40:6b:aa:d2:09:d2:6f:09:51:2c:ae:1b:19:74:5c: 75:82:38:e3:c0:58:c1:82:30:16:b0:7e:3d:fc:2d:e8:02:7a: e8:dc:33:6f:7d:5a:00:6f:bf:27:1e:84:fc:d1:09:f8:19:44: 93:12:86:1f:85:36:a4:d9:0a:c8:b6:66:b5:18:74:72:41:1d: 5a:e9:7e:fe:e8:3a:bb:92:47:8e:5d:70:f2:58:75:80:5a:b2: 54:78:dd:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKXG8TyL3C6rPNCpHB0ffLSVW380wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4M0FG OTU0NzA4RTAeFw0yNTA0MjcxNDE2MjNaFw0yNTA0MzAyMzU5MjNaMDMxMTAvBgNV BAMTKEJDNTlFMjZDN0FCRjRCMTM0MUM1MEVGQUI1QUI3MkNGNkMxQjBCRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1x91omJnf8IPch9hMo2C6sC2P HhtEUVhcRF0IxJ4jnWT4YJfMaHkmv5QMbIqraEG0PHUbWNP4woAQDwjDVzeeY0/L IiMym0LVPJgV7CIIyBLI87vcR6OHkuNLtj/UguNoG6oFqzAMmUGHsljm1j6PnLuG Z9456pb5hpTbA7JEnlHwzlcOx4cuzq548hHSMqIVhMsD59KUgGpu2D68fU8duND2 a3VhyhBStMbf95OWDM8eVLYxO1rbILaDgbbmMdSWEwkP9EOa8t0LS1j4fikejdj7 Xg4dATbv51B1J84+CUB09PAvSxOZfGOpw3MUT5mO5B+haVM9Pw6ZkoCEdno1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvFnibHq/SxNBxQ76tatyz2wbC/EwHwYDVR0j BBgwFoAUaq9ujRyagJRGy8B2/jkIOvlUcI4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTE5YWJjOC04NTA3LTQxZWQtODI4OS03ZTNhYzdiMjQ5MzUvMC82QUFGNkU4RDFD OUE4MDk0NDZDQkMwNzZGRTM5MDgzQUY5NTQ3MDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4M0FGOTU0 NzA4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2UxOWFiYzgtODUwNy00MWVkLTgy ODktN2UzYWM3YjI0OTM1LzAvNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4 M0FGOTU0NzA4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIM5TD1znHssl7uFpHBvtgR/MzMCIMMEQmFc t4LZsz+KC8Hywui6uOU1bgz72n0SUe3UAOnMMhpODV6nvYhHFqdDgUHIBl97LvVP 7arahH5nuYtIvUi5WvJgt+Wj9Yj+PuTfY2SCr2eJHfOZ0+0w/Th/y8dINTseYa/7 ca6bEpZq19GUIPw3WXH5sZRENr3JSopvdm8/LlE55AdtMP/I6tALT0ZAs0BrqtIJ 0m8JUSyuGxl0XHWCOOPAWMGCMBawfj38LegCeujcM299WgBvvycehPzRCfgZRJMS hh+FNqTZCsi2ZrUYdHJBHVrpfv7oOruSR45dcPJYdYBaslR43TE= -----END CERTIFICATE-----Generated at Tue Apr 29 17:27:09 2025 by rpki-client