$ rpki-client -vvf repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft File: 6D2120D281865021E16D49A2451DC53A851B5BBD.mft (raw, json) Hash identifier: NicJaN4waOWB21IZi4CVVU2r6QYYkiA6TGGlnRehE4s= Subject key identifier: B1:67:A7:C1:08:14:DE:05:2D:65:F7:49:22:F1:68:20:E2:9B:22:58 Authority key identifier: 6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD Certificate issuer: /CN=6D2120D281865021E16D49A2451DC53A851B5BBD Certificate serial: 413633E8E44AA0A0811EC2C8DAE07B5668DE983D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft Manifest number: 53 Signing time: Thu 01 May 2025 00:01:35 +0000 Manifest this update: Wed 30 Apr 2025 23:56:35 +0000 Manifest next update: Sun 04 May 2025 04:11:35 +0000 Files and hashes: 1: 3130332e3234352e31362e302f32332d3234203d3e203436303233.roa (hash: r+Lb1druh87TuPBvbGkUhC/GpzU18DRigq7n/TRclBo=) 2: 6D2120D281865021E16D49A2451DC53A851B5BBD.crl (hash: Le7LAH48SJ0Fh+8wn4qWphwXu0KMVe5IDDHa6eaTXr0=) 3: 3130332e3234352e31372e302f32342d3234203d3e203436303233.roa (hash: b+Xtzw+6na2a+xMS20wYCYPacvkf2l2PSoCEFblC4OY=) 4: 3130332e3234352e31392e302f32342d3234203d3e203436303233.roa (hash: GFImrwcqsA1f+8jAtf3KA9NFE2jyS21niSNaMCPf864=) 5: 3130332e3234352e31382e302f32342d3234203d3e203436303233.roa (hash: AShL+HPisPSiiNmtbZE+edgEgIJDv3kNOSZOwH9eeKo=) 6: 3130332e3234352e31382e302f32332d3234203d3e203436303233.roa (hash: LiUE5E5NP3y/9rJb+3iR5iXWUeVWyAD0Ol8W0BAVcIY=) 7: 3130332e3234352e31362e302f32342d3234203d3e203436303233.roa (hash: oc7a2yZBp9q1BdzfUR+tIB5Dtqa/efadojr7/o0DfQ4=) 8: 3130332e3234352e31362e302f32322d3234203d3e203436303233.roa (hash: PpALimtbBE16UsxvYAE3t7KXuw0rzaxc/sz7ukHKaaU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 04:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:36:33:e8:e4:4a:a0:a0:81:1e:c2:c8:da:e0:7b:56:68:de:98:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D2120D281865021E16D49A2451DC53A851B5BBD Validity Not Before: Apr 30 23:56:35 2025 GMT Not After : May 4 04:11:35 2025 GMT Subject: CN=B167A7C10814DE052D65F74922F16820E29B2258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:50:ae:9c:28:ff:76:09:9b:bc:f3:6d:20:dc: df:ec:9e:fd:0d:5a:50:c0:11:7a:82:e6:32:22:10: 8d:bf:75:af:14:97:86:8a:ea:8c:6e:f0:76:a0:7a: 26:c8:6e:3d:0c:b3:7f:51:f2:a9:54:af:4f:14:17: ad:cd:c0:e0:91:c7:dd:cb:06:3c:36:3a:94:54:37: 59:a4:0e:0a:72:4d:8a:ef:02:8c:12:af:14:df:3c: f2:c0:9e:5d:e8:e6:7c:67:5c:6d:2d:33:bd:54:8f: 9c:2d:3b:fd:cd:19:bd:f4:de:37:2f:1e:f7:67:f8: a9:bc:7a:e0:c9:19:f8:f3:d0:37:41:76:68:1b:1d: 51:cd:09:32:0b:ee:29:bc:6d:1b:4f:e5:41:34:46: 56:36:88:d1:cf:78:9e:34:fc:13:16:3d:45:c9:65: 82:f6:11:92:f9:12:05:a4:66:a3:23:6e:8f:59:8e: 91:b8:f3:50:7d:1f:39:06:f9:0a:8c:e9:8e:f9:3b: 9a:01:10:37:cf:d4:c5:5d:bc:56:28:7f:bf:fa:ee: 1e:7e:a7:ec:4d:1f:bf:d6:c6:f4:3e:a2:20:82:f6: 0b:7b:e1:14:bf:9b:de:0f:73:23:e5:6a:d2:e8:df: 9a:af:d4:20:72:b4:81:a2:64:77:69:29:3c:74:1f: c1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:67:A7:C1:08:14:DE:05:2D:65:F7:49:22:F1:68:20:E2:9B:22:58 X509v3 Authority Key Identifier: keyid:6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:c3:d8:87:73:f5:d8:80:07:c9:bb:cf:e6:cf:5a:c0:ac:db: 0e:69:71:8c:0f:55:89:95:07:fe:05:02:ba:c2:de:6c:e9:2c: 68:65:46:0e:64:49:5a:0d:3a:40:6d:d5:b2:67:cd:c2:7c:68: 8b:62:48:f8:31:09:09:19:e6:c8:1a:6f:82:ea:a0:0e:43:73: 2b:0c:4f:e9:00:fd:91:b2:4d:2d:34:84:1e:8c:51:f5:09:ad: 3b:6c:72:cc:1a:b6:33:3b:23:59:5a:69:ed:21:4f:8a:a7:12: 56:21:b0:de:a7:6c:ac:00:f7:de:bd:8a:7a:06:32:73:9d:84: 9c:43:e2:11:58:e2:30:85:73:68:7d:b5:14:05:aa:5f:c2:58: f3:54:14:9d:a0:8f:d1:d4:ce:40:7c:de:74:9e:c9:b9:0b:b1: cd:4a:77:77:72:66:63:cf:b5:0d:6e:94:02:e6:0f:90:0f:1a: 64:db:d5:af:10:38:f6:b9:4b:33:0a:d7:38:c3:a3:68:e9:9d: 64:fa:25:e3:18:30:3a:aa:d6:12:d2:62:30:5b:33:df:39:8b: bc:ae:a3:92:fa:05:53:7d:41:af:e6:09:9d:e5:c1:8a:fb:24: 27:10:a1:50:d5:8c:fd:b4:b7:6a:4d:c8:f6:0f:6f:9c:85:7b: 25:73:46:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQTYz6ORKoKCBHsLI2uB7VmjemD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4 NTFCNUJCRDAeFw0yNTA0MzAyMzU2MzVaFw0yNTA1MDQwNDExMzVaMDMxMTAvBgNV BAMTKEIxNjdBN0MxMDgxNERFMDUyRDY1Rjc0OTIyRjE2ODIwRTI5QjIyNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2UK6cKP92CZu8820g3N/snv0N WlDAEXqC5jIiEI2/da8Ul4aK6oxu8HageibIbj0Ms39R8qlUr08UF63NwOCRx93L Bjw2OpRUN1mkDgpyTYrvAowSrxTfPPLAnl3o5nxnXG0tM71Uj5wtO/3NGb303jcv Hvdn+Km8euDJGfjz0DdBdmgbHVHNCTIL7im8bRtP5UE0RlY2iNHPeJ40/BMWPUXJ ZYL2EZL5EgWkZqMjbo9ZjpG481B9HzkG+QqM6Y75O5oBEDfP1MVdvFYof7/67h5+ p+xNH7/WxvQ+oiCC9gt74RS/m94PcyPlatLo35qv1CBytIGiZHdpKTx0H8FbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsWenwQgU3gUtZfdJIvFoIOKbIlgwHwYDVR0j BBgwFoAUbSEg0oGGUCHhbUmiRR3FOoUbW70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTI3MmY3Yi1kNjU2LTQwNTgtYTdiNi1mMjVhZGYzZWQxYmUvMC82RDIxMjBEMjgx ODY1MDIxRTE2RDQ5QTI0NTFEQzUzQTg1MUI1QkJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4NTFC NUJCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTUyNzJmN2ItZDY1Ni00MDU4LWE3 YjYtZjI1YWRmM2VkMWJlLzAvNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1 M0E4NTFCNUJCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3D2Idz9diAB8m7z+bPWsCs2w5pcYwPVYmV B/4FArrC3mzpLGhlRg5kSVoNOkBt1bJnzcJ8aItiSPgxCQkZ5sgab4LqoA5DcysM T+kA/ZGyTS00hB6MUfUJrTtscswatjM7I1laae0hT4qnElYhsN6nbKwA9969inoG MnOdhJxD4hFY4jCFc2h9tRQFql/CWPNUFJ2gj9HUzkB83nSeybkLsc1Kd3dyZmPP tQ1ulALmD5APGmTb1a8QOPa5SzMK1zjDo2jpnWT6JeMYMDqq1hLSYjBbM985i7yu o5L6BVN9Qa/mCZ3lwYr7JCcQoVDVjP20t2pNyPYPb5yFeyVzRmQ= -----END CERTIFICATE-----Generated at Fri May 2 15:00:59 2025 by rpki-client