$ rpki-client -vvf repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.mft File: C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.mft (raw, json) Hash identifier: WvuXVrHWFqmCwSvAC8ALHWvoZTV2ysJlSpk6jIxRJXA= Subject key identifier: 6E:43:65:24:24:9B:57:0C:43:A2:4E:1E:8F:8D:D7:B1:EE:4A:8A:83 Authority key identifier: C6:E9:3E:AA:6C:14:3C:47:BB:6C:1F:02:2B:52:4F:9C:08:9D:B6:F0 Certificate issuer: /CN=C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0 Certificate serial: 7986EF4CEF34C2DC316EB0555658848F69F8BA69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.mft Manifest number: 0423 Signing time: Mon 28 Apr 2025 14:52:09 +0000 Manifest this update: Mon 28 Apr 2025 14:47:09 +0000 Manifest next update: Fri 02 May 2025 00:35:09 +0000 Files and hashes: 1: C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.crl (hash: 2AqqN5vqHm+C3jkBEzJuOXxOHgEkB3sEmPCzuLDe7fU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.crl rsync://repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:35:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:86:ef:4c:ef:34:c2:dc:31:6e:b0:55:56:58:84:8f:69:f8:ba:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0 Validity Not Before: Apr 28 14:47:09 2025 GMT Not After : May 2 00:35:09 2025 GMT Subject: CN=6E436524249B570C43A24E1E8F8DD7B1EE4A8A83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:48:98:0c:f8:5e:b8:2e:e6:5f:30:d7:86:09: 25:d2:1c:53:b5:bd:00:87:c5:e6:a0:03:64:7b:6d: 05:6b:77:48:dd:fb:55:e3:9f:83:a0:f5:10:6e:eb: 43:73:cb:1f:c3:16:c4:94:2d:8b:b4:05:ea:eb:27: 55:8a:33:9c:bc:00:88:2f:2b:c4:7d:31:96:57:31: 59:8d:9f:cc:1d:15:99:da:9e:59:4e:69:de:57:ee: 2a:a0:0e:65:4f:95:ee:1b:0b:d5:13:1c:1c:70:0a: a7:73:f0:39:fe:1c:21:e1:5d:2a:d7:66:f8:f0:4f: 0a:2c:e2:2f:59:c7:12:c3:22:38:cf:70:7c:1e:d3: 2b:c4:3b:33:b4:8f:16:9e:40:f1:44:36:c0:78:a6: 38:b2:61:3b:b8:88:ae:ba:c8:b7:f3:21:3c:72:f3: 0d:28:1d:22:fb:36:1f:88:50:68:9e:93:7a:32:f8: 45:f4:ea:cb:80:c6:8b:0b:0e:63:10:13:49:ed:70: 29:b7:88:d8:a4:88:b9:3d:bf:ec:40:aa:29:7b:c6: 29:28:81:56:ee:7b:52:11:1c:ce:fd:e0:3f:98:ac: b8:f9:a6:65:a4:46:ee:10:c5:09:9b:8b:8f:f1:12: e8:ca:62:2f:48:e9:ca:64:b2:f2:24:d1:2d:33:27: d4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:43:65:24:24:9B:57:0C:43:A2:4E:1E:8F:8D:D7:B1:EE:4A:8A:83 X509v3 Authority Key Identifier: keyid:C6:E9:3E:AA:6C:14:3C:47:BB:6C:1F:02:2B:52:4F:9C:08:9D:B6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:24:50:7e:5f:58:26:48:a5:3f:d4:e8:fb:c8:2c:4a:f8:db: 84:61:b8:6e:8a:20:42:6d:84:b2:d0:f5:dc:45:90:45:3c:bd: 71:21:ad:4f:ac:5d:1f:03:51:12:c4:82:ee:70:04:79:83:77: 9d:09:33:c0:bc:3f:09:49:7f:1b:79:76:1a:50:23:65:56:d9: bc:30:2d:ee:6f:69:e3:75:24:84:14:5a:cd:7e:b1:98:91:d4: c2:a4:e0:15:93:ec:a4:4f:10:25:22:3f:c5:c8:93:01:24:dc: ae:fa:b5:14:c9:83:0c:b0:1b:85:17:fe:3d:45:0c:8f:fd:f6: 53:fe:db:34:3e:0f:52:c3:32:d8:ca:18:9d:a6:f6:45:ab:43: 4f:f7:20:08:e5:0e:76:54:be:9a:41:31:84:7b:9c:83:4a:02: 9c:83:2b:51:fd:55:43:5d:a5:fe:a0:c0:8f:5d:c0:4b:ff:a2: 09:a3:78:94:6d:50:89:5f:8d:ea:b8:f7:e0:ee:b3:dd:61:21: e8:f3:86:d4:b7:b0:da:8a:dd:65:cb:a7:c9:21:d2:b9:e3:77: 14:dd:c5:a3:0f:87:2c:54:54:15:46:6b:e0:db:c8:b5:4c:ca: 16:ef:ce:47:63:70:98:d2:11:46:47:33:ed:25:8e:e7:aa:60: a8:f0:95:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeYbvTO80wtwxbrBVVliEj2n4umkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZFOTNFQUE2QzE0M0M0N0JCNkMxRjAyMkI1MjRGOUMw ODlEQjZGMDAeFw0yNTA0MjgxNDQ3MDlaFw0yNTA1MDIwMDM1MDlaMDMxMTAvBgNV BAMTKDZFNDM2NTI0MjQ5QjU3MEM0M0EyNEUxRThGOEREN0IxRUU0QThBODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+SJgM+F64LuZfMNeGCSXSHFO1 vQCHxeagA2R7bQVrd0jd+1Xjn4Og9RBu60Nzyx/DFsSULYu0BerrJ1WKM5y8AIgv K8R9MZZXMVmNn8wdFZnanllOad5X7iqgDmVPle4bC9UTHBxwCqdz8Dn+HCHhXSrX ZvjwTwos4i9ZxxLDIjjPcHwe0yvEOzO0jxaeQPFENsB4pjiyYTu4iK66yLfzITxy 8w0oHSL7Nh+IUGiek3oy+EX06suAxosLDmMQE0ntcCm3iNikiLk9v+xAqil7xiko gVbue1IRHM794D+YrLj5pmWkRu4QxQmbi4/xEujKYi9I6cpksvIk0S0zJ9QbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbkNlJCSbVwxDok4ej43Xse5KioMwHwYDVR0j BBgwFoAUxuk+qmwUPEe7bB8CK1JPnAidtvAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmE2YmNhOC0zNzQxLTQ0ZWYtOGE1Zi0wZTc2YjgwZDQxNDYvMC9DNkU5M0VBQTZD MTQzQzQ3QkI2QzFGMDIyQjUyNEY5QzA4OURCNkYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzZFOTNFQUE2QzE0M0M0N0JCNkMxRjAyMkI1MjRGOUMwODlE QjZGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZhNmJjYTgtMzc0MS00NGVmLThh NWYtMGU3NmI4MGQ0MTQ2LzAvQzZFOTNFQUE2QzE0M0M0N0JCNkMxRjAyMkI1MjRG OUMwODlEQjZGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACokUH5fWCZIpT/U6PvILEr424RhuG6KIEJt hLLQ9dxFkEU8vXEhrU+sXR8DURLEgu5wBHmDd50JM8C8PwlJfxt5dhpQI2VW2bww Le5vaeN1JIQUWs1+sZiR1MKk4BWT7KRPECUiP8XIkwEk3K76tRTJgwywG4UX/j1F DI/99lP+2zQ+D1LDMtjKGJ2m9kWrQ0/3IAjlDnZUvppBMYR7nINKApyDK1H9VUNd pf6gwI9dwEv/ogmjeJRtUIlfjeq49+Dus91hIejzhtS3sNqK3WXLp8kh0rnjdxTd xaMPhyxUVBVGa+DbyLVMyhbvzkdjcJjSEUZHM+0ljueqYKjwlUI= -----END CERTIFICATE-----Generated at Wed Apr 30 03:38:19 2025 by rpki-client