$ rpki-client -vvf repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft File: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft (raw, json) Hash identifier: KRu/Hs7o4eq9sLJH2aBVh3KKX/Wr7mtAtsJ6ZfEjZYg= Subject key identifier: FD:9D:9D:49:93:F1:4F:64:C1:98:12:E4:5A:C2:C5:07:CF:5B:24:8C Authority key identifier: 6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 Certificate issuer: /CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Certificate serial: 26B213D4CA4EC89F3C3766C2A8F72795D6219E29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft Manifest number: 01E6 Signing time: Mon 28 Apr 2025 18:40:50 +0000 Manifest this update: Mon 28 Apr 2025 18:35:50 +0000 Manifest next update: Thu 01 May 2025 23:54:50 +0000 Files and hashes: 1: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl (hash: bBxKSkly/JaEFs6XC0yaHfpKOmMCTHpQTbpfcP8v6A4=) 2: 3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa (hash: 8i2rkzBjlPEti5Kr8Zm8/78pVX8xhxtJgE0QaB9hDOo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:b2:13:d4:ca:4e:c8:9f:3c:37:66:c2:a8:f7:27:95:d6:21:9e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Validity Not Before: Apr 28 18:35:50 2025 GMT Not After : May 1 23:54:50 2025 GMT Subject: CN=FD9D9D4993F14F64C19812E45AC2C507CF5B248C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0d:f6:d5:17:73:0a:38:9d:c1:40:93:29:ed: c1:91:64:0a:1c:15:cd:05:f7:75:1d:a7:d5:e4:b0: 11:f6:47:71:e8:2e:4e:73:05:0e:e2:6f:3f:b5:8c: 90:a8:32:05:83:f4:7f:86:e7:a6:69:e1:03:25:7d: 8d:25:92:51:b8:91:af:a8:db:51:ae:61:6a:c2:b2: d7:32:49:98:a4:57:f9:c7:03:74:38:b3:db:85:6c: 09:66:88:91:9f:11:b4:65:1f:62:d3:4c:59:ce:e5: 12:90:00:f9:44:20:49:9d:4b:7e:cf:8e:86:90:c1: 36:1b:2d:c2:af:bc:aa:95:ce:c5:56:9d:02:8d:e9: fe:df:af:54:aa:2a:27:59:88:a4:53:9e:82:1a:52: f2:b5:1e:4e:40:54:eb:fd:b4:82:3a:9f:88:2d:bb: a3:be:b3:28:3b:82:f5:7b:cc:fa:03:62:c5:ff:68: a3:8f:89:26:7a:2a:5b:79:ee:ef:a0:70:f1:e7:0b: f6:64:79:71:29:3c:89:b9:dc:26:57:40:e4:63:74: da:03:c5:51:7a:ab:81:5e:75:d8:e0:b2:f8:10:4a: ab:ed:8c:d8:76:76:87:70:23:24:a2:fd:18:a5:92: 5a:9a:c9:4f:fe:8d:9c:d8:84:33:69:ef:bf:36:a2: f2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:9D:9D:49:93:F1:4F:64:C1:98:12:E4:5A:C2:C5:07:CF:5B:24:8C X509v3 Authority Key Identifier: keyid:6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:47:f7:25:eb:2f:e5:43:39:28:a4:cf:a8:ed:9b:09:8f:e2: 6d:f2:1d:34:9e:eb:2d:80:ac:2d:7e:46:85:e7:3c:42:50:30: ea:e0:70:ef:10:98:dd:b1:4e:84:da:d7:71:d5:e6:43:b2:6e: af:d9:01:23:22:98:f8:3a:8b:d0:e6:e0:bf:0b:73:0f:03:0b: 5f:7a:1a:e7:88:64:95:88:a8:55:32:ec:16:8d:a5:0d:b9:fb: 31:92:19:b1:1b:f7:cb:a7:3a:dd:e7:b4:02:c0:5c:47:d1:d1: c8:61:1b:33:a5:92:59:06:18:d6:1f:c2:1c:58:67:1c:23:42: b9:23:b9:9d:df:dc:72:17:9a:ec:69:a6:91:b4:31:69:ca:55: 18:71:27:14:db:64:60:8e:5c:71:2a:77:f1:10:aa:76:47:4f: f3:7c:6e:bc:aa:0c:5a:04:7e:68:65:18:e4:85:8d:b0:ea:b6: 81:c8:55:b7:a1:94:6f:ea:27:91:f8:74:62:17:6f:1f:ec:a2: 81:91:1b:2d:3e:19:b0:27:9b:74:2e:3f:e2:1a:f2:60:1c:8b: cb:51:f2:09:37:8e:a7:42:d7:ee:13:42:42:a5:36:17:fe:f3: 41:ea:ae:4f:08:aa:43:1d:27:01:86:0a:12:34:2b:ad:0e:ec: a0:e4:eb:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJrIT1MpOyJ88N2bCqPcnldYhnikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1 RkUwQkUxMTAeFw0yNTA0MjgxODM1NTBaFw0yNTA1MDEyMzU0NTBaMDMxMTAvBgNV BAMTKEZEOUQ5RDQ5OTNGMTRGNjRDMTk4MTJFNDVBQzJDNTA3Q0Y1QjI0OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9DfbVF3MKOJ3BQJMp7cGRZAoc Fc0F93Udp9XksBH2R3HoLk5zBQ7ibz+1jJCoMgWD9H+G56Zp4QMlfY0lklG4ka+o 21GuYWrCstcySZikV/nHA3Q4s9uFbAlmiJGfEbRlH2LTTFnO5RKQAPlEIEmdS37P joaQwTYbLcKvvKqVzsVWnQKN6f7fr1SqKidZiKRTnoIaUvK1Hk5AVOv9tII6n4gt u6O+syg7gvV7zPoDYsX/aKOPiSZ6Klt57u+gcPHnC/ZkeXEpPIm53CZXQORjdNoD xVF6q4FeddjgsvgQSqvtjNh2dodwIySi/RilklqayU/+jZzYhDNp7782ovLFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Z2dSZPxT2TBmBLkWsLFB89bJIwwHwYDVR0j BBgwFoAUb8hX33/lNQpsBaHxE/PcLl/gvhEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTIzOGE2Mi02YTk2LTQzYmMtODdhZi0wMmRiNjQxZjcxMDkvMC82RkM4NTdERjdG RTUzNTBBNkMwNUExRjExM0YzREMyRTVGRTBCRTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1RkUw QkUxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGEyMzhhNjItNmE5Ni00M2JjLTg3 YWYtMDJkYjY0MWY3MTA5LzAvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RD MkU1RkUwQkUxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHNH9yXrL+VDOSikz6jtmwmP4m3yHTSe6y2A rC1+RoXnPEJQMOrgcO8QmN2xToTa13HV5kOybq/ZASMimPg6i9Dm4L8Lcw8DC196 GueIZJWIqFUy7BaNpQ25+zGSGbEb98unOt3ntALAXEfR0chhGzOlklkGGNYfwhxY ZxwjQrkjuZ3f3HIXmuxpppG0MWnKVRhxJxTbZGCOXHEqd/EQqnZHT/N8bryqDFoE fmhlGOSFjbDqtoHIVbehlG/qJ5H4dGIXbx/sooGRGy0+GbAnm3QuP+Ia8mAci8tR 8gk3jqdC1+4TQkKlNhf+80Hqrk8IqkMdJwGGChI0K60O7KDk66w= -----END CERTIFICATE-----Generated at Wed Apr 30 09:21:15 2025 by rpki-client