$ rpki-client -vvf repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft File: 6862B9697E607C0C4861E56917A18D87AC33A721.mft (raw, json) Hash identifier: jMudue4LAm4kFzolK46LBA7isVeRQe9cdZgeHw/2osg= Subject key identifier: B0:91:31:7A:2D:5D:7A:D1:D3:C2:D0:9F:BF:FA:5C:0A:AC:1F:B0:E1 Authority key identifier: 68:62:B9:69:7E:60:7C:0C:48:61:E5:69:17:A1:8D:87:AC:33:A7:21 Certificate issuer: /CN=6862B9697E607C0C4861E56917A18D87AC33A721 Certificate serial: 2B86A6D37F5157CE9B98D2C0697501C85A3C75FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer Subject info access: rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft Manifest number: 017C Signing time: Mon 28 Apr 2025 15:42:05 +0000 Manifest this update: Mon 28 Apr 2025 15:37:05 +0000 Manifest next update: Thu 01 May 2025 17:48:05 +0000 Files and hashes: 1: 3130332e36302e3233322e302f32342d3234203d3e20313530353034.roa (hash: mAaFNkz4VS/8CUTW6nLj8oCW6VaOOiFXLJeViPHtvE4=) 2: 3130332e36302e3233332e302f32342d3234203d3e20313530353034.roa (hash: dF+8Wtg6B9yArRChkZjRjTgsTdgcRkNXBMlkqZFq73s=) 3: 6862B9697E607C0C4861E56917A18D87AC33A721.crl (hash: xNKy5MH6lbkSgWVRq4W+3upcYF/Dt2d65WVVvPfEsqw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.crl rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:86:a6:d3:7f:51:57:ce:9b:98:d2:c0:69:75:01:c8:5a:3c:75:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6862B9697E607C0C4861E56917A18D87AC33A721 Validity Not Before: Apr 28 15:37:05 2025 GMT Not After : May 1 17:48:05 2025 GMT Subject: CN=B091317A2D5D7AD1D3C2D09FBFFA5C0AAC1FB0E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f9:78:67:5c:6f:bf:7a:7d:83:e7:75:06:c1: 64:86:19:3f:ed:25:ec:15:4a:55:6b:07:36:a7:9c: e4:96:df:2d:be:62:d1:4b:3a:8b:14:44:ef:4d:48: 42:20:e8:aa:d1:ef:69:cd:6b:4f:25:8c:b1:51:b5: 18:d1:d1:5f:9a:ef:98:e9:f8:47:d3:18:76:ec:ae: 45:f9:75:cd:d1:9e:f1:d2:b2:77:ac:d4:ae:ee:ae: 51:20:ec:01:e3:51:3c:9a:99:96:cc:30:9c:28:3a: d7:1e:ab:48:77:47:15:d7:34:42:32:72:4a:f4:80: 08:cf:86:4b:2c:6d:21:65:a6:83:87:1e:f4:38:d7: bd:e4:81:e1:1a:c5:42:d0:c6:88:15:b6:6e:9c:bf: 53:8e:03:3f:1d:7d:38:b2:36:46:41:27:31:c4:92: 9a:39:98:81:8a:1c:81:26:3b:21:f0:52:58:1b:79: 53:12:fa:33:b8:87:f0:84:d1:d4:a4:04:93:ec:37: 6e:04:2c:9b:34:b8:b9:4f:24:02:e6:dc:c5:d2:f4: 0e:22:62:69:90:d0:b5:61:ce:d8:c5:16:fd:2e:f9: 1a:bc:30:78:6a:4a:98:ed:ff:60:e7:f0:f9:fb:c4: 5a:fc:8e:e5:b4:fb:b2:7b:9c:cb:e1:71:85:d7:7d: 9e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:91:31:7A:2D:5D:7A:D1:D3:C2:D0:9F:BF:FA:5C:0A:AC:1F:B0:E1 X509v3 Authority Key Identifier: keyid:68:62:B9:69:7E:60:7C:0C:48:61:E5:69:17:A1:8D:87:AC:33:A7:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:08:bf:d9:c1:21:72:3f:64:e1:41:0f:24:50:bc:ab:9a:d9: 4e:46:04:7e:19:6c:92:3a:42:89:a2:58:8c:a5:4b:13:c6:da: 52:0d:cc:f2:89:28:b9:2a:ff:ef:4d:65:24:de:da:7e:44:03: 15:32:f1:cb:0b:e7:3f:6c:9e:8b:09:42:d1:94:79:1f:b9:8f: 57:c4:f2:0c:58:a2:e5:63:7e:95:67:72:23:f5:3d:9c:de:59: 36:13:b4:80:be:07:77:89:aa:5b:7a:89:e1:d8:09:86:1b:ef: 61:0b:1d:4a:1a:7b:8b:0c:89:1b:cf:2e:36:07:50:ce:27:cd: ff:44:92:a2:46:85:bc:dc:cb:02:2b:d0:0a:6f:06:df:d6:e1: ba:a7:cc:f6:d7:0d:53:91:68:c9:68:33:20:e0:1d:a3:4c:a1: d1:a4:45:76:47:2d:6b:a3:73:54:7d:5d:70:08:39:30:f5:22: b9:90:35:c5:ff:8e:cc:0a:ef:aa:b9:8c:a1:6b:73:15:f4:e9: 2c:2c:85:81:b5:40:76:14:b2:d9:07:85:ce:15:de:b5:dd:7e: cb:a1:22:49:a9:1e:4f:4c:15:3a:dd:18:b0:bf:d2:4d:c1:85: 98:b2:03:db:bb:02:7e:15:d0:b9:ab:14:5f:99:87:eb:45:6e: 66:b9:74:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK4am039RV86bmNLAaXUByFo8df4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg2MkI5Njk3RTYwN0MwQzQ4NjFFNTY5MTdBMThEODdB QzMzQTcyMTAeFw0yNTA0MjgxNTM3MDVaFw0yNTA1MDExNzQ4MDVaMDMxMTAvBgNV BAMTKEIwOTEzMTdBMkQ1RDdBRDFEM0MyRDA5RkJGRkE1QzBBQUMxRkIwRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg+XhnXG+/en2D53UGwWSGGT/t JewVSlVrBzannOSW3y2+YtFLOosURO9NSEIg6KrR72nNa08ljLFRtRjR0V+a75jp +EfTGHbsrkX5dc3RnvHSsnes1K7urlEg7AHjUTyamZbMMJwoOtceq0h3RxXXNEIy ckr0gAjPhkssbSFlpoOHHvQ4173kgeEaxULQxogVtm6cv1OOAz8dfTiyNkZBJzHE kpo5mIGKHIEmOyHwUlgbeVMS+jO4h/CE0dSkBJPsN24ELJs0uLlPJALm3MXS9A4i YmmQ0LVhztjFFv0u+Rq8MHhqSpjt/2Dn8Pn7xFr8juW0+7J7nMvhcYXXfZ4HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsJExei1detHTwtCfv/pcCqwfsOEwHwYDVR0j BBgwFoAUaGK5aX5gfAxIYeVpF6GNh6wzpyEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjVlODhiZC03NWUyLTQ1ZGYtODg2Ny00NTQwMmZjN2M0YjEvMC82ODYyQjk2OTdF NjA3QzBDNDg2MUU1NjkxN0ExOEQ4N0FDMzNBNzIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg2MkI5Njk3RTYwN0MwQzQ4NjFFNTY5MTdBMThEODdBQzMz QTcyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI1ZTg4YmQtNzVlMi00NWRmLTg4 NjctNDU0MDJmYzdjNGIxLzAvNjg2MkI5Njk3RTYwN0MwQzQ4NjFFNTY5MTdBMThE ODdBQzMzQTcyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwIv9nBIXI/ZOFBDyRQvKua2U5GBH4ZbJI6 QomiWIylSxPG2lINzPKJKLkq/+9NZSTe2n5EAxUy8csL5z9snosJQtGUeR+5j1fE 8gxYouVjfpVnciP1PZzeWTYTtIC+B3eJqlt6ieHYCYYb72ELHUoae4sMiRvPLjYH UM4nzf9EkqJGhbzcywIr0ApvBt/W4bqnzPbXDVORaMloMyDgHaNModGkRXZHLWuj c1R9XXAIOTD1IrmQNcX/jswK76q5jKFrcxX06SwshYG1QHYUstkHhc4V3rXdfsuh IkmpHk9MFTrdGLC/0k3BhZiyA9u7An4V0LmrFF+Zh+tFbma5dPk= -----END CERTIFICATE-----Generated at Wed Apr 30 08:27:06 2025 by rpki-client