$ rpki-client -vvf repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft File: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft (raw, json) Hash identifier: W1LlY4tr/umGCR4mW0UT62nkuWLHA6WuQi5NCj3Z+fs= Subject key identifier: 3B:80:FE:F4:88:1F:C8:57:03:C2:19:F5:CD:70:6C:62:D4:24:E3:BC Authority key identifier: 6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E Certificate issuer: /CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Certificate serial: 2CD4E973CC8F0492FBE0FBAC9D50C0276E93D819 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft Manifest number: A0 Signing time: Mon 28 Apr 2025 13:22:11 +0000 Manifest this update: Mon 28 Apr 2025 13:17:11 +0000 Manifest next update: Thu 01 May 2025 20:02:11 +0000 Files and hashes: 1: 33362e35302e3231362e302f32332d3233203d3e20313437313238.roa (hash: TzFqnwzzY9xia0s3waMLkiGG8A7BVi2jn0Tebn9ZTXg=) 2: 33362e35302e3231372e302f32342d3234203d3e20313437313238.roa (hash: suvA+Wk962jHlhC9+yItBsXmZi+V1BXvTufHDqbDzJE=) 3: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl (hash: qxE55FhDChF8gjtgOGtKmneMF04zzomzJ2/81N1fbZ8=) 4: 33362e35302e3231362e302f32342d3234203d3e20313437313238.roa (hash: knY/ggPl78wk2nvRxnL0Ik6PzIK0DYSQq15iPy2gM40=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:d4:e9:73:cc:8f:04:92:fb:e0:fb:ac:9d:50:c0:27:6e:93:d8:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Validity Not Before: Apr 28 13:17:11 2025 GMT Not After : May 1 20:02:11 2025 GMT Subject: CN=3B80FEF4881FC85703C219F5CD706C62D424E3BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:89:7e:d3:c5:f3:cd:93:2c:2f:45:bc:6b:e3: f1:33:7a:39:ae:a8:6a:86:88:df:b1:8f:14:e5:51: 90:3e:c0:ae:4c:cb:68:ca:85:dc:ad:7e:79:06:cf: 7e:d1:0b:de:fe:e7:ea:d7:5c:9d:39:aa:f9:73:52: 77:52:fc:ba:77:d8:25:ee:a2:95:47:07:db:d4:57: 1a:ed:2b:64:a6:29:25:a2:cf:a1:9c:c1:5b:be:4c: ca:8b:89:28:5d:42:31:b1:fe:9e:79:ad:68:f8:30: 76:53:4f:59:2b:1d:c1:4c:19:ea:20:f1:81:2d:b3: 30:67:c3:ae:98:0a:af:1c:99:33:69:88:7a:dc:c9: 78:1f:70:2b:5a:03:b5:3b:4c:7f:84:17:2d:53:06: 2b:32:98:f3:2f:38:44:cb:71:bb:fb:9f:f3:66:26: 7a:c4:98:64:50:be:98:c8:00:d7:b2:de:ed:18:80: 9e:81:fa:3e:ef:69:12:d2:52:43:0b:69:60:4f:d6: 26:ff:47:6e:25:9b:be:5c:10:8f:fa:d0:c6:7d:3c: 29:1c:ff:df:39:33:d7:95:7a:73:af:ed:3f:fe:09: a7:c2:dd:8e:9e:a0:13:8d:c2:08:5c:a6:3d:12:24: bb:2b:5b:c1:e0:01:88:a2:44:3b:cd:07:fa:1b:e6: d7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:80:FE:F4:88:1F:C8:57:03:C2:19:F5:CD:70:6C:62:D4:24:E3:BC X509v3 Authority Key Identifier: keyid:6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:53:46:da:3f:ec:36:a0:8b:0a:e1:57:09:01:49:c2:df:1a: 6c:3f:6e:c9:2e:82:de:bb:5e:57:99:de:f2:ff:c4:5c:67:f8: 6d:e6:94:8d:5e:48:25:e9:95:93:81:17:55:72:7b:f0:2c:17: d2:61:0c:ac:da:67:ec:d9:74:50:de:8e:16:bb:5e:2f:95:31: 22:17:2b:2e:8f:e4:06:b2:79:6e:0f:ef:69:c8:60:30:e0:61: 92:f6:8a:35:ea:3d:ba:d6:17:38:fc:f1:b1:10:9b:05:1a:f1: bc:f8:c8:6f:39:4a:c5:a5:1b:12:b3:66:f5:a9:92:e5:36:ed: 14:a4:4f:39:42:26:02:9f:d7:1e:6a:c2:74:bf:dd:1a:9f:cf: 08:94:39:a9:92:d8:15:5f:01:f5:fb:fa:8f:d7:b9:c2:b6:35: da:02:1e:9f:bc:6f:ce:3b:ea:94:42:83:30:a1:02:66:ed:d5: c8:80:ef:08:75:30:fd:2f:8d:18:8a:76:31:fc:e4:fb:ef:0f: 1b:37:73:73:c8:bb:db:df:41:3e:47:d3:25:1f:af:d9:37:c3: f8:8e:2a:6d:02:6e:c0:09:34:6e:c8:ea:66:fe:31:77:f7:b3: 0c:28:7a:be:ab:a4:b5:f6:c2:f1:58:05:19:f7:b2:50:90:a8: 75:ff:0a:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULNTpc8yPBJL74PusnVDAJ26T2BkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3 QTk4MDk5RTAeFw0yNTA0MjgxMzE3MTFaFw0yNTA1MDEyMDAyMTFaMDMxMTAvBgNV BAMTKDNCODBGRUY0ODgxRkM4NTcwM0MyMTlGNUNENzA2QzYyRDQyNEUzQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmiX7TxfPNkywvRbxr4/Ezejmu qGqGiN+xjxTlUZA+wK5My2jKhdytfnkGz37RC97+5+rXXJ05qvlzUndS/Lp32CXu opVHB9vUVxrtK2SmKSWiz6GcwVu+TMqLiShdQjGx/p55rWj4MHZTT1krHcFMGeog 8YEtszBnw66YCq8cmTNpiHrcyXgfcCtaA7U7TH+EFy1TBisymPMvOETLcbv7n/Nm JnrEmGRQvpjIANey3u0YgJ6B+j7vaRLSUkMLaWBP1ib/R24lm75cEI/60MZ9PCkc /985M9eVenOv7T/+CafC3Y6eoBONwghcpj0SJLsrW8HgAYiiRDvNB/ob5tc3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO4D+9IgfyFcDwhn1zXBsYtQk47wwHwYDVR0j BBgwFoAUbbsQDY1GaauKXH7gVyKO1nqYCZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTk4OWZhZi00OGZiLTRmNDAtOWU3Ny0yNDNkNzhhNWI1YzQvMC82REJCMTAwRDhE NDY2OUFCOEE1QzdFRTA1NzIyOEVENjdBOTgwOTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3QTk4 MDk5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU5ODlmYWYtNDhmYi00ZjQwLTll NzctMjQzZDc4YTViNWM0LzAvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhF RDY3QTk4MDk5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1TRto/7DagiwrhVwkBScLfGmw/bskugt67 XleZ3vL/xFxn+G3mlI1eSCXplZOBF1Vye/AsF9JhDKzaZ+zZdFDejha7Xi+VMSIX Ky6P5AayeW4P72nIYDDgYZL2ijXqPbrWFzj88bEQmwUa8bz4yG85SsWlGxKzZvWp kuU27RSkTzlCJgKf1x5qwnS/3RqfzwiUOamS2BVfAfX7+o/XucK2NdoCHp+8b847 6pRCgzChAmbt1ciA7wh1MP0vjRiKdjH85PvvDxs3c3PIu9vfQT5H0yUfr9k3w/iO Km0CbsAJNG7I6mb+MXf3swwoer6rpLX2wvFYBRn3slCQqHX/Cr4= -----END CERTIFICATE-----Generated at Tue Apr 29 18:34:28 2025 by rpki-client