$ rpki-client -vvf repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft File: B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft (raw, json) Hash identifier: Si0MG3/IRrjSE2UK39CquPivvwWv/2vl2PSiwHbOr/Q= Subject key identifier: DA:C2:62:D0:52:62:96:B0:5F:6B:B0:38:B0:A3:AA:D3:BA:9D:BE:1A Authority key identifier: B6:82:9F:5E:7E:F7:B5:DF:33:97:CD:32:22:16:0B:E9:44:49:AC:6E Certificate issuer: /CN=B6829F5E7EF7B5DF3397CD3222160BE94449AC6E Certificate serial: 052A71D18033D1AECCD752A2B0E27437C8DAD2F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft Manifest number: 02C8 Signing time: Tue 29 Apr 2025 05:11:50 +0000 Manifest this update: Tue 29 Apr 2025 05:06:50 +0000 Manifest next update: Fri 02 May 2025 10:57:50 +0000 Files and hashes: 1: 3130332e3137342e3131362e302f32342d3234203d3e20313437313030.roa (hash: T/avkK1K5KQqb3goD2eSalwCBXNjyLMnINGvgboUmkE=) 2: B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.crl (hash: uMFt0O6AwpnLH7Ga14E/OVoV4Yfg3CMrDkh7PlWS1B8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.crl rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 10:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:2a:71:d1:80:33:d1:ae:cc:d7:52:a2:b0:e2:74:37:c8:da:d2:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6829F5E7EF7B5DF3397CD3222160BE94449AC6E Validity Not Before: Apr 29 05:06:50 2025 GMT Not After : May 2 10:57:50 2025 GMT Subject: CN=DAC262D0526296B05F6BB038B0A3AAD3BA9DBE1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d3:1f:1c:2c:94:7f:c5:e3:78:d4:cc:7b:d4: 24:e4:11:c4:d8:ee:5e:b9:e7:2b:ff:25:54:45:5c: 7a:18:f5:40:50:88:94:cc:ac:c7:52:e5:95:99:05: 34:9b:04:51:d0:f0:73:a1:2c:66:39:fe:10:b6:58: 6e:d2:b3:7e:27:0d:4c:f9:4f:ad:b7:c1:a4:0e:7b: 89:64:78:fc:5f:85:59:e8:79:75:66:32:cb:3c:ee: 2f:62:03:c9:29:97:4c:b7:29:6e:f4:5b:a9:32:a0: 85:07:40:33:1c:af:f2:48:02:82:f0:60:f4:ef:b0: d8:bc:be:36:a9:41:89:3d:8c:cd:6c:18:8e:7b:cd: d2:57:8e:12:78:f7:49:1d:22:44:29:29:4c:29:5a: a5:25:15:9e:c0:9b:f2:8b:0c:4f:31:68:ca:d9:44: 07:c8:08:49:0b:ce:d3:a2:0b:a8:ea:a3:dc:b2:58: 3a:45:72:18:fc:a2:1a:e9:3f:61:e8:ca:04:bd:a5: b5:32:f2:76:4c:58:75:b2:c2:de:04:e5:a3:f0:18: 4a:6d:2d:3f:74:43:a3:bd:04:21:1d:39:2c:a7:cb: 86:37:75:02:29:b3:ee:44:11:c9:92:4c:b8:b0:b4: 9d:12:fb:6a:ae:38:84:c4:5e:0a:97:41:2f:80:ec: 10:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C2:62:D0:52:62:96:B0:5F:6B:B0:38:B0:A3:AA:D3:BA:9D:BE:1A X509v3 Authority Key Identifier: keyid:B6:82:9F:5E:7E:F7:B5:DF:33:97:CD:32:22:16:0B:E9:44:49:AC:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:3d:5f:8f:e9:66:d6:68:da:72:7d:98:45:5a:d8:76:a5:cc: 99:c3:c0:92:28:71:5f:72:93:02:71:5e:53:94:b0:f0:cd:7a: 0c:46:44:25:82:cb:e1:b8:c0:cd:e8:77:0e:fb:41:b7:a7:f9: ff:48:60:f1:5d:91:63:99:2b:19:3e:54:99:6e:24:c7:55:c9: 11:fb:ad:71:b2:24:e2:2b:f9:a4:e9:d6:c6:e9:0d:9b:fd:80: c0:c5:56:39:df:0d:20:86:24:78:54:ca:66:f6:ea:07:86:1f: 53:72:6d:28:1e:4d:04:f4:f9:06:cb:b7:0b:eb:e3:c7:a8:28: 2c:8c:9b:50:eb:a9:78:b9:f4:d8:4b:1b:85:3d:0c:c0:43:46: 63:6d:f8:fb:16:d8:32:9c:02:51:96:fc:a4:76:5d:72:25:c5: 0d:ee:01:cf:db:ba:75:34:0b:12:ea:fb:d5:03:93:dc:9f:e0: 4c:0d:81:8b:39:dc:fe:fb:6f:62:05:d1:14:4d:3c:93:1b:16: 31:81:81:c3:fc:24:ff:ca:5a:5a:6c:93:88:24:ac:23:40:02: 90:77:4e:eb:2a:24:66:7c:b8:f9:e8:41:36:91:5e:10:96:eb: 03:f3:3d:68:66:36:a7:60:7d:da:d4:2e:0a:f9:29:8b:8b:8e: 63:f6:8b:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBSpx0YAz0a7M11KisOJ0N8ja0vUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4MjlGNUU3RUY3QjVERjMzOTdDRDMyMjIxNjBCRTk0 NDQ5QUM2RTAeFw0yNTA0MjkwNTA2NTBaFw0yNTA1MDIxMDU3NTBaMDMxMTAvBgNV BAMTKERBQzI2MkQwNTI2Mjk2QjA1RjZCQjAzOEIwQTNBQUQzQkE5REJFMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ0x8cLJR/xeN41Mx71CTkEcTY 7l655yv/JVRFXHoY9UBQiJTMrMdS5ZWZBTSbBFHQ8HOhLGY5/hC2WG7Ss34nDUz5 T623waQOe4lkePxfhVnoeXVmMss87i9iA8kpl0y3KW70W6kyoIUHQDMcr/JIAoLw YPTvsNi8vjapQYk9jM1sGI57zdJXjhJ490kdIkQpKUwpWqUlFZ7Am/KLDE8xaMrZ RAfICEkLztOiC6jqo9yyWDpFchj8ohrpP2HoygS9pbUy8nZMWHWywt4E5aPwGEpt LT90Q6O9BCEdOSyny4Y3dQIps+5EEcmSTLiwtJ0S+2quOITEXgqXQS+A7BAfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2sJi0FJilrBfa7A4sKOq07qdvhowHwYDVR0j BBgwFoAUtoKfXn73td8zl80yIhYL6URJrG4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MTA5MDU3My02YWQzLTRlNjMtOGFmNC04YTJkNTgyYWEwY2QvMC9CNjgyOUY1RTdF RjdCNURGMzM5N0NEMzIyMjE2MEJFOTQ0NDlBQzZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY4MjlGNUU3RUY3QjVERjMzOTdDRDMyMjIxNjBCRTk0NDQ5 QUM2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzEwOTA1NzMtNmFkMy00ZTYzLThh ZjQtOGEyZDU4MmFhMGNkLzAvQjY4MjlGNUU3RUY3QjVERjMzOTdDRDMyMjIxNjBC RTk0NDQ5QUM2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFo9X4/pZtZo2nJ9mEVa2HalzJnDwJIocV9y kwJxXlOUsPDNegxGRCWCy+G4wM3odw77Qben+f9IYPFdkWOZKxk+VJluJMdVyRH7 rXGyJOIr+aTp1sbpDZv9gMDFVjnfDSCGJHhUymb26geGH1NybSgeTQT0+QbLtwvr 48eoKCyMm1DrqXi59NhLG4U9DMBDRmNt+PsW2DKcAlGW/KR2XXIlxQ3uAc/bunU0 CxLq+9UDk9yf4EwNgYs53P77b2IF0RRNPJMbFjGBgcP8JP/KWlpsk4gkrCNAApB3 TusqJGZ8uPnoQTaRXhCW6wPzPWhmNqdgfdrULgr5KYuLjmP2i9I= -----END CERTIFICATE-----Generated at Tue Apr 29 09:16:25 2025 by rpki-client