$ rpki-client -vvf repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft File: C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft (raw, json) Hash identifier: yXKQGDGEyFR1X3CKF+XpZOv2n1KiQLnzf/nQwau/I+A= Subject key identifier: 3A:E8:EA:36:A9:01:F1:AB:C5:41:2F:1A:A8:E7:D2:67:B8:54:25:F4 Authority key identifier: C6:07:6E:33:0D:46:79:EF:04:55:EA:40:0D:11:58:D4:F4:9B:0B:F1 Certificate issuer: /CN=C6076E330D4679EF0455EA400D1158D4F49B0BF1 Certificate serial: 66D640CE0E98201B9B48483628D8808AEF3EC8CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft Manifest number: 024D Signing time: Tue 29 Apr 2025 13:51:59 +0000 Manifest this update: Tue 29 Apr 2025 13:46:59 +0000 Manifest next update: Fri 02 May 2025 14:18:59 +0000 Files and hashes: 1: C6076E330D4679EF0455EA400D1158D4F49B0BF1.crl (hash: PR5EmsAI3/jzVE3rNUCCj3xOr8zMqumxZ/Y9jRen0X8=) 2: 3130332e3137382e322e302f32332d3234203d3e20313431303737.roa (hash: +823HS/ZLXy7YJoTx9tsaJGIQ/2DUTJiFFHC7z3DV5k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.crl rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 14:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d6:40:ce:0e:98:20:1b:9b:48:48:36:28:d8:80:8a:ef:3e:c8:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6076E330D4679EF0455EA400D1158D4F49B0BF1 Validity Not Before: Apr 29 13:46:59 2025 GMT Not After : May 2 14:18:59 2025 GMT Subject: CN=3AE8EA36A901F1ABC5412F1AA8E7D267B85425F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5c:a2:a2:fa:d0:f3:3d:ad:c8:39:02:5b:a7: 71:a2:3b:5d:6b:03:2e:76:69:e4:be:84:10:4b:47: 73:4d:81:f5:ae:0a:77:0a:d1:01:9e:d6:1c:d5:69: 5a:05:0a:f8:d7:95:d8:0b:4e:fd:d7:5d:67:4f:c4: 71:6b:3b:d7:6c:0f:ca:a9:4f:59:3b:99:da:19:cb: 4b:c3:10:aa:0a:af:21:31:74:fe:cb:3a:e0:c9:08: b0:ef:2e:bc:4b:70:81:1b:d4:02:06:5b:2e:c5:01: 7a:bf:51:53:24:c7:94:7a:93:49:52:c1:b7:10:af: 86:9a:ae:c5:a6:a5:b8:b7:ba:ba:01:a0:c8:e2:d7: 28:27:61:36:24:99:be:3f:05:70:15:a6:81:e0:ab: ec:b8:d1:b3:3f:de:d3:7f:ee:90:76:ee:14:ca:3f: 0b:a4:d8:17:a8:2a:c5:32:2b:d0:db:f7:d6:c2:9f: cd:00:06:c9:03:a6:f2:e6:03:51:91:67:48:6e:12: a5:ea:4b:56:f5:96:98:1f:e4:7a:3f:6d:ee:0a:ab: 51:0a:50:5d:f6:93:8e:09:bf:00:17:6c:da:7f:6f: cf:65:26:75:f9:f9:98:d9:93:9d:00:3a:e6:b0:a1: f7:5d:fb:d4:b2:ea:ca:5f:ea:bb:7c:a2:d5:0f:ff: 33:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E8:EA:36:A9:01:F1:AB:C5:41:2F:1A:A8:E7:D2:67:B8:54:25:F4 X509v3 Authority Key Identifier: keyid:C6:07:6E:33:0D:46:79:EF:04:55:EA:40:0D:11:58:D4:F4:9B:0B:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:2e:5f:fb:7c:de:2b:68:5d:83:b0:8c:d1:92:b7:85:29:15: ac:5d:a4:b7:88:64:3b:56:bd:9c:99:5d:b7:90:a7:15:90:e1: b5:52:c5:bb:23:a8:83:91:6f:cb:29:aa:d2:79:6b:9d:05:ba: 93:b7:54:d9:9b:52:01:71:4a:a3:69:fe:07:16:64:0e:22:d5: 9d:50:ac:66:d4:84:0c:d3:1b:da:2e:e8:79:7e:87:8a:5f:8f: 72:ec:ac:1c:43:94:f0:43:ab:05:24:0f:22:4e:52:c9:19:f6: 61:0b:d3:8e:df:4e:16:cb:62:44:10:6f:6b:88:27:7e:e5:44: b6:5f:d5:14:5a:13:bd:ec:83:61:3e:b4:43:db:ed:98:c3:1c: bd:10:5a:f9:2a:30:16:a6:c5:ce:ca:c3:0e:b5:48:c0:fd:e4: bd:1b:9f:0d:fd:8c:ac:15:a6:77:02:d7:9e:94:b9:76:c1:9b: 01:8a:9d:44:32:70:21:5e:d0:0f:c5:f3:b0:89:2d:22:e4:df: d6:3d:50:b5:c9:9d:45:1c:b2:9f:e7:dc:df:fb:29:c7:07:7a: aa:f6:ff:cf:b4:59:62:a2:e2:df:7e:ad:c7:ad:83:a4:f4:8d: 8d:39:cc:41:39:21:32:7d:56:b1:f5:06:59:49:83:fc:ab:70: 5d:ae:0d:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZtZAzg6YIBubSEg2KNiAiu8+yM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYwNzZFMzMwRDQ2NzlFRjA0NTVFQTQwMEQxMTU4RDRG NDlCMEJGMTAeFw0yNTA0MjkxMzQ2NTlaFw0yNTA1MDIxNDE4NTlaMDMxMTAvBgNV BAMTKDNBRThFQTM2QTkwMUYxQUJDNTQxMkYxQUE4RTdEMjY3Qjg1NDI1RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDXKKi+tDzPa3IOQJbp3GiO11r Ay52aeS+hBBLR3NNgfWuCncK0QGe1hzVaVoFCvjXldgLTv3XXWdPxHFrO9dsD8qp T1k7mdoZy0vDEKoKryExdP7LOuDJCLDvLrxLcIEb1AIGWy7FAXq/UVMkx5R6k0lS wbcQr4aarsWmpbi3uroBoMji1ygnYTYkmb4/BXAVpoHgq+y40bM/3tN/7pB27hTK Pwuk2BeoKsUyK9Db99bCn80ABskDpvLmA1GRZ0huEqXqS1b1lpgf5Ho/be4Kq1EK UF32k44JvwAXbNp/b89lJnX5+ZjZk50AOuawofdd+9Sy6spf6rt8otUP/zMJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOujqNqkB8avFQS8aqOfSZ7hUJfQwHwYDVR0j BBgwFoAUxgduMw1Gee8EVepADRFY1PSbC/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmZhZTU2NS00MTE0LTQ0MzQtOTQwZC03YzAxOTI4YzhhYjEvMC9DNjA3NkUzMzBE NDY3OUVGMDQ1NUVBNDAwRDExNThENEY0OUIwQkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYwNzZFMzMwRDQ2NzlFRjA0NTVFQTQwMEQxMTU4RDRGNDlC MEJGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JmYWU1NjUtNDExNC00NDM0LTk0 MGQtN2MwMTkyOGM4YWIxLzAvQzYwNzZFMzMwRDQ2NzlFRjA0NTVFQTQwMEQxMTU4 RDRGNDlCMEJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQuX/t83itoXYOwjNGSt4UpFaxdpLeIZDtW vZyZXbeQpxWQ4bVSxbsjqIORb8spqtJ5a50FupO3VNmbUgFxSqNp/gcWZA4i1Z1Q rGbUhAzTG9ou6Hl+h4pfj3LsrBxDlPBDqwUkDyJOUskZ9mEL047fThbLYkQQb2uI J37lRLZf1RRaE73sg2E+tEPb7ZjDHL0QWvkqMBamxc7Kww61SMD95L0bnw39jKwV pncC156UuXbBmwGKnUQycCFe0A/F87CJLSLk39Y9ULXJnUUcsp/n3N/7KccHeqr2 /8+0WWKi4t9+rcetg6T0jY05zEE5ITJ9VrH1BllJg/yrcF2uDbo= -----END CERTIFICATE-----Generated at Wed Apr 30 07:34:15 2025 by rpki-client