$ rpki-client -vvf repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft File: 6437999FD06F2C7F0F16F8160CD6145F775884A4.mft (raw, json) Hash identifier: 2IWrlKUzEAv99A0056XGUHxa460ttsdHvhskHwJp/G8= Subject key identifier: B4:1A:E6:AF:69:6C:25:DE:33:43:23:CF:CF:0E:9A:36:C9:78:F0:B9 Authority key identifier: 64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 Certificate issuer: /CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Certificate serial: 5E3192F14314AF4F09631AC973B42F6B8F5AD3F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft Manifest number: 0201 Signing time: Sat 26 Apr 2025 08:40:03 +0000 Manifest this update: Sat 26 Apr 2025 08:35:03 +0000 Manifest next update: Tue 29 Apr 2025 16:05:03 +0000 Files and hashes: 1: 3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa (hash: 6kBcLlz4I+EwiYd/zHv8YINF31MEROhjhbQ+A0qjPjE=) 2: 3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa (hash: FtQ7YyJ/nXZZN06U1YB5sNs24X+l1RzMYb5gI1y1G9M=) 3: 3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa (hash: b3wEoQmduATe2XsB1+5lzcIjLJ7k0E7+xb68g1ewVFQ=) 4: 6437999FD06F2C7F0F16F8160CD6145F775884A4.crl (hash: ahZoWaiANfNN9V8b7vm6ECYkjqEfdOUivt+CqbLkEl8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 16:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:31:92:f1:43:14:af:4f:09:63:1a:c9:73:b4:2f:6b:8f:5a:d3:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Validity Not Before: Apr 26 08:35:03 2025 GMT Not After : Apr 29 16:05:03 2025 GMT Subject: CN=B41AE6AF696C25DE334323CFCF0E9A36C978F0B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f0:0b:4d:9c:fe:2a:0f:9c:04:c2:29:41:00: 23:8d:f8:63:b2:18:40:7c:9a:60:d4:bd:31:34:d9: 3f:43:97:2c:9c:c9:4e:c0:f8:b8:3e:9d:e9:06:47: 83:27:9c:b5:a7:b9:c6:4e:b0:7e:a7:5c:57:33:57: 21:3e:5d:7f:f5:9f:0d:f9:ce:84:f8:91:94:a4:27: 61:3e:f9:aa:ea:35:eb:64:73:7c:3e:2a:70:6a:e3: 3b:6b:c9:ee:e5:45:28:b3:f4:20:9e:63:cb:6e:64: f4:e4:fc:1e:ba:9f:3c:b3:18:e8:65:03:b1:5c:3a: 0c:2a:fd:d4:2c:1e:10:72:b1:2a:de:9f:2f:c5:08: 61:9a:97:ed:ef:91:24:8f:52:34:6b:94:00:21:bd: 0b:7e:2f:09:50:94:80:19:6b:55:bb:4f:b0:fa:ca: 9b:2e:a5:cd:de:ab:e3:65:5c:a5:c6:3f:40:28:85: c3:79:7f:58:e2:20:84:45:fd:48:d5:99:f8:11:87: 33:38:f6:5e:84:c6:a8:ba:d9:37:85:d0:4f:d7:42: 1f:00:a6:90:17:c6:9f:ed:d6:62:45:af:ce:e0:a7: d1:a2:f9:5c:50:c1:04:73:90:89:a6:7a:cb:3e:cb: 00:cc:c2:85:8a:82:54:d0:d1:65:b6:7f:e4:f2:60: a8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1A:E6:AF:69:6C:25:DE:33:43:23:CF:CF:0E:9A:36:C9:78:F0:B9 X509v3 Authority Key Identifier: keyid:64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:dd:19:37:74:12:21:42:38:4e:a9:46:bb:81:d7:33:a0:ab: 10:86:ce:61:97:41:2e:9a:11:43:e0:42:ed:08:3f:b6:c3:4f: 5c:50:dc:93:f3:0c:68:2b:1f:f9:0f:e7:73:94:55:25:41:c0: 0d:ed:a4:e4:fe:96:b4:b2:d9:b9:57:b2:a7:87:11:43:1f:14: 0e:af:a2:97:41:5f:60:10:eb:7d:50:36:05:5c:a8:e9:f6:8f: 87:e1:ab:4d:18:a8:6b:ff:dc:c9:3e:68:52:ff:4a:38:e4:85: 17:7c:a2:6d:47:63:86:9d:04:3e:2c:ab:47:15:70:c9:40:b2: 71:5d:62:78:a0:26:a7:15:97:44:1d:bb:a0:f5:81:f9:8c:43: d5:87:d8:5d:c0:95:a9:21:5e:46:82:db:ba:13:d3:b9:fb:5c: bd:5a:76:86:88:68:9e:c2:37:a0:64:30:4c:57:87:9e:e7:5f: d5:27:cf:88:0d:21:ad:65:36:cf:6a:71:d4:25:2b:de:53:4b: a6:79:78:13:f5:ef:c7:87:62:5b:72:0b:6f:26:c9:fe:b3:72: c5:c1:d3:d7:1e:55:87:5a:8f:49:fa:00:5f:bf:d8:49:b8:d2: 5a:a8:41:77:c4:c9:73:a0:bd:2a:ad:38:34:e5:6f:e1:4c:44: 18:75:57:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXjGS8UMUr08JYxrJc7Qva49a0/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3 NzU4ODRBNDAeFw0yNTA0MjYwODM1MDNaFw0yNTA0MjkxNjA1MDNaMDMxMTAvBgNV BAMTKEI0MUFFNkFGNjk2QzI1REUzMzQzMjNDRkNGMEU5QTM2Qzk3OEYwQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx8AtNnP4qD5wEwilBACON+GOy GEB8mmDUvTE02T9DlyycyU7A+Lg+nekGR4MnnLWnucZOsH6nXFczVyE+XX/1nw35 zoT4kZSkJ2E++arqNetkc3w+KnBq4ztrye7lRSiz9CCeY8tuZPTk/B66nzyzGOhl A7FcOgwq/dQsHhBysSreny/FCGGal+3vkSSPUjRrlAAhvQt+LwlQlIAZa1W7T7D6 ypsupc3eq+NlXKXGP0AohcN5f1jiIIRF/UjVmfgRhzM49l6Exqi62TeF0E/XQh8A ppAXxp/t1mJFr87gp9Gi+VxQwQRzkImmess+ywDMwoWKglTQ0WW2f+TyYKjnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtBrmr2lsJd4zQyPPzw6aNsl48LkwHwYDVR0j BBgwFoAUZDeZn9BvLH8PFvgWDNYUX3dYhKQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzZmZGM2MC04MDIzLTQwY2QtYWFhNC1jZDZlZDIyYzRkNDUvMC82NDM3OTk5RkQw NkYyQzdGMEYxNkY4MTYwQ0Q2MTQ1Rjc3NTg4NEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3NzU4 ODRBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc2ZmRjNjAtODAyMy00MGNkLWFh YTQtY2Q2ZWQyMmM0ZDQ1LzAvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0 NUY3NzU4ODRBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHdGTd0EiFCOE6pRruB1zOgqxCGzmGXQS6a EUPgQu0IP7bDT1xQ3JPzDGgrH/kP53OUVSVBwA3tpOT+lrSy2blXsqeHEUMfFA6v opdBX2AQ631QNgVcqOn2j4fhq00YqGv/3Mk+aFL/SjjkhRd8om1HY4adBD4sq0cV cMlAsnFdYnigJqcVl0Qdu6D1gfmMQ9WH2F3AlakhXkaC27oT07n7XL1adoaIaJ7C N6BkMExXh57nX9Unz4gNIa1lNs9qcdQlK95TS6Z5eBP178eHYltyC28myf6zcsXB 09ceVYdaj0n6AF+/2Em40lqoQXfEyXOgvSqtODTlb+FMRBh1Vww= -----END CERTIFICATE-----Generated at Sat Apr 26 16:23:47 2025 by rpki-client