$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft File: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft (raw, json) Hash identifier: 3gm6VxiLzVX66wWiABmlWEUAvzcvzVix9Or9/X89E/E= Subject key identifier: 3A:F9:C7:A7:EC:6F:3A:68:A3:B5:C8:5B:7E:99:A0:BD:03:63:65:8B Authority key identifier: 69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E Certificate issuer: /CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Certificate serial: 3B70B0BB67639D6C194806FCAB8F111E3F72233F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft Manifest number: 01BD Signing time: Tue 29 Apr 2025 08:10:05 +0000 Manifest this update: Tue 29 Apr 2025 08:05:05 +0000 Manifest next update: Fri 02 May 2025 19:32:05 +0000 Files and hashes: 1: 3130312e302e342e302f32322d3234203d3e203535363730.roa (hash: qmP+7iTwSq5yMJyaVS+S1MXqaf8L36fD59OGMbn8B/w=) 2: 3130312e302e342e302f32322d3234203d3e203438343635.roa (hash: 8mh8KupdLyWQUvBNib+4skF1x/A11Hrwfuz1jJcLVAs=) 3: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl (hash: CQ534doDyHOTVDwo6JP6Cd9TP6cTmuCCWhJPURXwMYM=) 4: 323430303a666230303a3a2f33322d3438203d3e203535363730.roa (hash: lgxk4KiMeAbMInJr9CjWAOKKcw6Ql0u5vJeO30mSdIc=) 5: 3130332e31322e32382e302f32322d3234203d3e203535363730.roa (hash: RTKq+KNIMQtjHmaGcIFEI8O5xsHc+JbM4YVC1smExa8=) 6: 3130332e31322e32382e302f32322d3234203d3e203438343635.roa (hash: 0OjoY+05zt8Z8400j80eRAcHaPBuMx39KYxLU+S/mlo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 19:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:70:b0:bb:67:63:9d:6c:19:48:06:fc:ab:8f:11:1e:3f:72:23:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Validity Not Before: Apr 29 08:05:05 2025 GMT Not After : May 2 19:32:05 2025 GMT Subject: CN=3AF9C7A7EC6F3A68A3B5C85B7E99A0BD0363658B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:db:40:57:45:ea:cf:0c:7c:bc:97:2c:c6:3b: af:9c:9c:7c:13:ac:0a:26:58:8f:9b:6d:24:41:ed: 23:24:7b:12:9e:fb:a6:fa:89:a4:45:7a:43:b3:cc: a3:40:ec:81:80:b2:06:99:75:de:2a:25:0e:99:3c: 8c:4b:86:24:91:ab:a2:27:a7:76:79:af:30:e5:52: d0:a8:10:9a:00:ff:36:f6:26:f2:b4:de:0b:f8:19: e4:5b:f5:ff:61:6c:bb:42:8e:0a:15:8a:c5:51:67: 33:f1:2d:2c:8a:47:94:d0:de:17:74:8a:7a:24:59: 11:0e:d3:76:b5:e7:1d:77:dc:75:62:f7:e9:ef:e7: 64:47:5f:e3:82:a9:99:9e:77:dc:1b:a9:85:d7:6e: 74:18:4d:2e:bd:1c:64:9b:58:fa:a2:d7:e5:77:b4: 36:65:5f:5c:fe:0c:20:6a:ec:07:5a:74:07:24:2f: e6:e9:31:82:fc:7e:66:2b:d4:7c:67:e3:fb:18:02: 1a:42:56:32:68:c1:06:1f:fe:dc:f2:8b:0a:e8:95: c4:ec:8e:3e:60:04:d4:da:7a:7d:fd:f0:2a:64:3e: 2b:04:82:e0:15:84:33:d3:66:ed:30:6c:8b:0e:9d: 38:51:78:0d:4a:e2:60:a9:1c:fa:ee:75:4e:9c:71: 9a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F9:C7:A7:EC:6F:3A:68:A3:B5:C8:5B:7E:99:A0:BD:03:63:65:8B X509v3 Authority Key Identifier: keyid:69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:dc:49:63:be:0f:13:cb:2b:00:7c:8c:46:9a:e3:f6:07:80: 8f:3d:ba:bd:bc:a4:f5:e2:63:09:fa:a9:48:f1:41:ab:d3:4f: d7:10:b9:8e:c7:33:9a:34:b3:47:f2:a6:da:9f:75:f3:ea:d3: 0c:15:33:b4:cf:3f:72:71:cf:94:c5:0b:59:48:e3:a5:b9:e2: 9a:34:d0:bc:17:a1:95:15:fc:76:f1:84:6d:9c:49:d5:94:52: 2e:9c:f9:03:bf:ca:a6:39:9f:fa:f9:e2:96:7a:a9:c4:dc:c0: 06:ba:b9:70:62:93:8a:84:d3:a4:37:c8:c8:ea:5a:dc:66:2f: 36:11:0a:b2:ac:8a:41:a8:b2:e5:a7:1e:a9:33:93:76:cd:f3: 9e:bb:c3:80:d3:b0:2e:c0:c0:e6:17:1b:f8:da:d0:8f:c2:26: 07:93:45:35:ff:fc:4b:40:36:ab:57:4c:8c:7b:12:5b:5b:4d: 48:a2:84:81:1a:3f:12:81:c5:1d:d5:a9:24:51:fd:47:ba:e9: 28:87:ec:b3:47:d1:9a:b4:68:a5:60:a8:5a:86:e8:79:c8:ae: 73:5a:75:d2:b4:ab:50:c8:8b:9f:0f:4f:ed:57:c8:9f:2b:73: 38:d5:fc:cb:81:e5:a7:48:1a:79:e9:a4:8f:cb:e7:a0:08:58: ef:fe:29:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO3Cwu2djnWwZSAb8q48RHj9yIz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVG RTNFN0MzRTAeFw0yNTA0MjkwODA1MDVaFw0yNTA1MDIxOTMyMDVaMDMxMTAvBgNV BAMTKDNBRjlDN0E3RUM2RjNBNjhBM0I1Qzg1QjdFOTlBMEJEMDM2MzY1OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU20BXRerPDHy8lyzGO6+cnHwT rAomWI+bbSRB7SMkexKe+6b6iaRFekOzzKNA7IGAsgaZdd4qJQ6ZPIxLhiSRq6In p3Z5rzDlUtCoEJoA/zb2JvK03gv4GeRb9f9hbLtCjgoVisVRZzPxLSyKR5TQ3hd0 inokWREO03a15x133HVi9+nv52RHX+OCqZmed9wbqYXXbnQYTS69HGSbWPqi1+V3 tDZlX1z+DCBq7AdadAckL+bpMYL8fmYr1Hxn4/sYAhpCVjJowQYf/tzyiwrolcTs jj5gBNTaen398CpkPisEguAVhDPTZu0wbIsOnThReA1K4mCpHPrudU6ccZoTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOvnHp+xvOmijtchbfpmgvQNjZYswHwYDVR0j BBgwFoAUaWcBLvykNpjo4bckuR38Xv4+fD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDZlYTdmYS05NGQyLTRkZGMtYThlNi01ZGM2MjZjMjkxZDQvMC82OTY3MDEyRUZD QTQzNjk4RThFMUI3MjRCOTFERkM1RUZFM0U3QzNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVGRTNF N0MzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4 ZTYtNWRjNjI2YzI5MWQ0LzAvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZD NUVGRTNFN0MzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMzcSWO+DxPLKwB8jEaa4/YHgI89ur28pPXi Ywn6qUjxQavTT9cQuY7HM5o0s0fyptqfdfPq0wwVM7TPP3Jxz5TFC1lI46W54po0 0LwXoZUV/HbxhG2cSdWUUi6c+QO/yqY5n/r54pZ6qcTcwAa6uXBik4qE06Q3yMjq WtxmLzYRCrKsikGosuWnHqkzk3bN8567w4DTsC7AwOYXG/ja0I/CJgeTRTX//EtA NqtXTIx7EltbTUiihIEaPxKBxR3VqSRR/Ue66SiH7LNH0Zq0aKVgqFqG6HnIrnNa ddK0q1DIi58PT+1XyJ8rczjV/MuB5adIGnnppI/L56AIWO/+KaA= -----END CERTIFICATE-----Generated at Wed Apr 30 08:15:28 2025 by rpki-client