$ rpki-client -vvf repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft File: 06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft (raw, json) Hash identifier: 6nldHuwdf745EK9hVTeH1ext9EaltDEe4QRsYTTcQkw= Subject key identifier: 0E:3B:03:E3:5F:E5:6C:46:2C:8F:3A:A0:C6:66:D0:F7:CC:87:53:1A Authority key identifier: 06:A0:35:96:D6:FA:10:E3:F5:08:10:F5:86:E3:F6:3A:EE:96:F9:8E Certificate issuer: /CN=06A03596D6FA10E3F50810F586E3F63AEE96F98E Certificate serial: 6D40715357F804E94750D92BA2F58228C3DDB4EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft Manifest number: AD Signing time: Fri 25 Apr 2025 18:21:03 +0000 Manifest this update: Fri 25 Apr 2025 18:16:03 +0000 Manifest next update: Tue 29 Apr 2025 04:30:03 +0000 Files and hashes: 1: 06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl (hash: n+3tlFeHisWY7Lz3AmmJhoZ74oAO9VemOn6cASIG6Y0=) 2: 3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa (hash: c4zKb4BC8Sb0059Tmuc8jeyTEWO85EjEdef3ktgt6EU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 04:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:40:71:53:57:f8:04:e9:47:50:d9:2b:a2:f5:82:28:c3:dd:b4:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06A03596D6FA10E3F50810F586E3F63AEE96F98E Validity Not Before: Apr 25 18:16:03 2025 GMT Not After : Apr 29 04:30:03 2025 GMT Subject: CN=0E3B03E35FE56C462C8F3AA0C666D0F7CC87531A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:01:d4:a6:97:a7:77:c4:1e:4c:5a:38:a0:96: 10:a1:90:9a:52:69:9d:98:cc:3f:f7:dd:3e:cb:a5: 38:ee:55:11:1b:c4:d2:11:6c:2f:ad:c2:46:9d:9f: 82:33:7b:d5:4d:8d:15:02:58:ce:88:2f:c4:2a:3e: 22:67:8c:d1:7a:87:d3:d9:1f:54:7b:cd:ef:0c:f5: 1d:2d:53:e3:06:07:b4:6b:ae:72:e0:24:48:c6:71: b5:28:bd:bf:07:e4:f0:f9:53:97:d9:8d:21:2d:b8: e1:2e:16:5e:aa:58:3c:9e:83:78:35:9a:6f:9b:31: 02:4e:68:49:46:bc:b8:40:17:70:da:55:7d:b9:e0: cf:d8:75:da:25:1f:4e:29:74:ac:ef:f1:e5:a5:94: 68:c0:29:e0:8d:e7:38:62:9d:7d:3f:dc:4f:0d:09: a9:c8:09:23:a6:ce:08:66:37:dc:61:3a:17:46:2b: 2b:57:13:9f:21:04:e5:fb:a7:c9:6e:1d:96:da:32: 2a:1a:69:d8:87:97:ca:3c:29:28:b4:6a:9f:1c:79: 50:fd:d9:4a:a4:a9:bf:22:63:f4:92:2c:b5:a8:04: fd:e6:05:4a:b4:6d:1a:f6:1e:c3:04:7a:82:42:1f: 1e:8b:bc:03:f2:38:ae:15:8f:a3:20:8c:d6:45:c7: 92:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3B:03:E3:5F:E5:6C:46:2C:8F:3A:A0:C6:66:D0:F7:CC:87:53:1A X509v3 Authority Key Identifier: keyid:06:A0:35:96:D6:FA:10:E3:F5:08:10:F5:86:E3:F6:3A:EE:96:F9:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:34:4e:12:9e:86:85:9f:00:f2:1f:8a:b8:22:a9:d9:ba:39: 19:5f:02:0e:c9:f4:cc:8b:89:aa:02:f7:a8:d2:a9:00:06:35: 14:be:a5:bf:98:58:9a:c4:e2:1e:c0:e5:93:f3:d7:fd:5e:90: 67:09:76:e9:4c:c5:fd:32:0d:6a:4a:5f:08:82:4b:53:5f:3f: 51:b5:91:6a:b9:0b:89:d1:a1:c3:5a:74:b5:4f:0d:9d:9a:34: 5a:e6:a3:fd:ab:fa:e0:f6:61:f1:ee:1d:f3:29:06:8a:89:aa: 1b:c8:1e:0d:96:07:d1:7d:0a:ea:8d:88:45:1e:c3:20:63:58: 89:9a:78:93:93:7d:b8:1c:e3:51:9b:22:cf:9f:1b:33:21:5d: 60:52:8c:24:3e:69:37:67:05:a2:7f:5e:4b:be:3e:8d:14:87: 16:5b:4f:cf:70:57:7e:78:19:38:35:b5:2a:05:65:d9:25:b3: 06:a4:4e:0c:63:e6:ac:f0:30:fc:5b:10:f9:bb:81:a7:11:d1: 01:c5:73:5b:97:4a:c2:1d:98:a4:6c:f0:ee:92:a0:f9:72:1f: b5:c0:b5:2a:eb:ff:27:22:4e:52:a8:57:fa:c1:b5:bd:a1:b8: e8:5e:99:a1:1d:b8:dd:b6:8f:22:6c:db:83:60:a0:99:74:a8: a3:7b:83:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbUBxU1f4BOlHUNkrovWCKMPdtOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2M0FF RTk2Rjk4RTAeFw0yNTA0MjUxODE2MDNaFw0yNTA0MjkwNDMwMDNaMDMxMTAvBgNV BAMTKDBFM0IwM0UzNUZFNTZDNDYyQzhGM0FBMEM2NjZEMEY3Q0M4NzUzMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYAdSml6d3xB5MWjiglhChkJpS aZ2YzD/33T7LpTjuVREbxNIRbC+twkadn4Ize9VNjRUCWM6IL8QqPiJnjNF6h9PZ H1R7ze8M9R0tU+MGB7RrrnLgJEjGcbUovb8H5PD5U5fZjSEtuOEuFl6qWDyeg3g1 mm+bMQJOaElGvLhAF3DaVX254M/YddolH04pdKzv8eWllGjAKeCN5zhinX0/3E8N CanICSOmzghmN9xhOhdGKytXE58hBOX7p8luHZbaMioaadiHl8o8KSi0ap8ceVD9 2Uqkqb8iY/SSLLWoBP3mBUq0bRr2HsMEeoJCHx6LvAPyOK4Vj6MgjNZFx5KTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDjsD41/lbEYsjzqgxmbQ98yHUxowHwYDVR0j BBgwFoAUBqA1ltb6EOP1CBD1huP2Ou6W+Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGY3Yzc5MC03NmI1LTQ5NjctYjZmZi0xMmRjNzU2YmJmN2QvMC8wNkEwMzU5NkQ2 RkExMEUzRjUwODEwRjU4NkUzRjYzQUVFOTZGOThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2M0FFRTk2 Rjk4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmN2M3OTAtNzZiNS00OTY3LWI2 ZmYtMTJkYzc1NmJiZjdkLzAvMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2 M0FFRTk2Rjk4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHo0ThKehoWfAPIfirgiqdm6ORlfAg7J9MyL iaoC96jSqQAGNRS+pb+YWJrE4h7A5ZPz1/1ekGcJdulMxf0yDWpKXwiCS1NfP1G1 kWq5C4nRocNadLVPDZ2aNFrmo/2r+uD2YfHuHfMpBoqJqhvIHg2WB9F9CuqNiEUe wyBjWImaeJOTfbgc41GbIs+fGzMhXWBSjCQ+aTdnBaJ/Xku+Po0UhxZbT89wV354 GTg1tSoFZdklswakTgxj5qzwMPxbEPm7gacR0QHFc1uXSsIdmKRs8O6SoPlyH7XA tSrr/yciTlKoV/rBtb2huOhemaEduN22jyJs24NgoJl0qKN7g20= -----END CERTIFICATE-----Generated at Sun Apr 27 23:48:52 2025 by rpki-client