$ rpki-client -vvf repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft File: 6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft (raw, json) Hash identifier: 54IZB26KUZyKzRYrN9XKG7fJmo9+WOx4mtRuZxFRgi4= Subject key identifier: 69:D2:B2:2F:04:07:8A:2C:74:B8:47:84:A2:03:0A:8C:BE:C7:03:90 Authority key identifier: 6A:6C:81:36:54:E0:C2:93:39:E6:CA:F5:22:20:1F:8E:70:2F:EA:D3 Certificate issuer: /CN=6A6C813654E0C29339E6CAF522201F8E702FEAD3 Certificate serial: 5D4A6943E9AD7909CC3A4D88D12E8FE42421316E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft Manifest number: 042D Signing time: Mon 28 Apr 2025 22:02:02 +0000 Manifest this update: Mon 28 Apr 2025 21:57:02 +0000 Manifest next update: Fri 02 May 2025 01:38:02 +0000 Files and hashes: 1: 3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa (hash: 8AmYK5KC8hldB1muUmxdPCs0q6CgoH4COunOQq9ZmmY=) 2: 3130332e3136302e3138352e302f32342d3234203d3e20313431353938.roa (hash: 6rRFzhME6P86zn9rXyaucf5gPHmh+tZoSTy7dWKoWbM=) 3: 3130332e3136302e3138342e302f32342d3234203d3e20313431353938.roa (hash: 6xG29ST0Tty2y2lHoFlo3B6yFkaFCAVaRODXgomUpB8=) 4: 3130332e3136302e3138342e302f32332d3233203d3e20313431353938.roa (hash: +5iQfae2lwfJtHF0cOlr2Gk29Amb8+u2o3UG7FztUJU=) 5: 3130332e3136302e3138352e302f32342d3234203d3e20313339393532.roa (hash: 4Nq+JxUfKWjr1BESTy40anbaM3Xf+v+a27YAvrUMBQ0=) 6: 6A6C813654E0C29339E6CAF522201F8E702FEAD3.crl (hash: xKMRi+gw5J2GxDzYeqONuqcefJ6dHRvTMXp53gJrymk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.crl rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:4a:69:43:e9:ad:79:09:cc:3a:4d:88:d1:2e:8f:e4:24:21:31:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A6C813654E0C29339E6CAF522201F8E702FEAD3 Validity Not Before: Apr 28 21:57:02 2025 GMT Not After : May 2 01:38:02 2025 GMT Subject: CN=69D2B22F04078A2C74B84784A2030A8CBEC70390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3a:5e:c9:b3:20:61:f8:55:da:2d:01:0a:7d: a9:fb:ed:af:8a:4b:a3:f7:5a:2b:52:b2:97:55:19: c6:85:1d:53:51:ea:df:15:7b:d4:84:01:6c:c7:de: 73:02:2f:cd:ab:fa:62:9d:2d:c3:58:76:91:20:37: 14:45:22:27:02:e4:e3:6f:ad:6e:f1:01:66:c8:74: 11:16:75:4d:9f:fb:91:a3:f5:63:68:61:29:ed:4d: 68:4b:48:c7:8d:4f:d4:e4:fe:c1:94:9e:73:37:47: 70:6b:7a:85:76:88:57:94:50:58:3c:82:d4:cb:b3: 5a:18:68:4b:b4:01:6a:f2:fe:9b:5a:19:5a:0f:ac: d2:11:35:e9:73:3f:51:28:39:57:81:6c:45:d7:99: e7:08:cd:bd:e5:2a:c0:11:66:4c:4f:0a:4f:d9:1c: 50:7b:c7:94:77:58:b0:88:1f:23:f8:8a:da:07:77: b2:33:b8:b9:53:fc:73:c1:38:18:bc:32:4e:dc:5d: 18:5c:96:de:40:b7:7b:e7:5d:a8:4a:0f:fb:64:6a: a9:aa:5f:c3:54:47:48:cd:f0:99:40:87:01:7c:c5: b0:c9:dd:05:80:2f:75:a1:47:ec:2c:c3:a2:27:da: b7:c9:61:91:2a:5b:1b:e6:a3:f1:48:79:89:c5:63: bb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D2:B2:2F:04:07:8A:2C:74:B8:47:84:A2:03:0A:8C:BE:C7:03:90 X509v3 Authority Key Identifier: keyid:6A:6C:81:36:54:E0:C2:93:39:E6:CA:F5:22:20:1F:8E:70:2F:EA:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f9:62:bf:c1:13:1e:ef:77:a8:9e:e4:82:26:b4:cf:4c:64: 23:30:32:8e:f5:3a:99:7b:dd:c6:23:38:72:ae:23:50:a9:85: 20:de:4b:c9:30:3d:db:64:ad:9a:78:11:11:5b:26:44:e9:f4: 67:7c:b5:1c:de:f1:58:bf:3c:e5:96:d5:f0:15:66:31:b8:c7: d4:24:9c:b7:af:8e:96:09:53:3b:0e:21:1f:f3:8f:f5:6c:b7: f9:62:f3:55:a4:a4:23:74:7d:ad:e3:cc:20:ff:c1:72:9c:d7: b9:34:86:59:4e:27:01:aa:32:05:c5:60:7e:0d:72:5d:73:78: 2c:66:0c:f3:72:8c:8e:8a:9b:2a:a2:d5:0e:85:e3:00:42:44: 50:d8:6a:78:71:80:a0:af:5b:74:c5:9a:ba:c2:78:7c:04:03: ca:6d:fc:64:84:3b:b4:49:ce:be:49:d0:80:a9:9d:67:98:2c: 4b:2e:d2:6f:f7:42:52:1e:18:9a:1f:fb:7f:6c:52:40:3f:2f: 06:f1:63:dc:53:14:82:ef:b2:b6:ce:c3:b6:75:a2:76:a0:ec: 60:14:ab:da:29:f6:29:9f:8c:ca:06:5b:0a:28:3c:52:cc:6d: c0:26:69:f4:2d:7d:e7:1c:32:a7:0b:e5:fa:a0:64:d5:c4:b7: 99:fa:53:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXUppQ+mteQnMOk2I0S6P5CQhMW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE2QzgxMzY1NEUwQzI5MzM5RTZDQUY1MjIyMDFGOEU3 MDJGRUFEMzAeFw0yNTA0MjgyMTU3MDJaFw0yNTA1MDIwMTM4MDJaMDMxMTAvBgNV BAMTKDY5RDJCMjJGMDQwNzhBMkM3NEI4NDc4NEEyMDMwQThDQkVDNzAzOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPOl7JsyBh+FXaLQEKfan77a+K S6P3WitSspdVGcaFHVNR6t8Ve9SEAWzH3nMCL82r+mKdLcNYdpEgNxRFIicC5ONv rW7xAWbIdBEWdU2f+5Gj9WNoYSntTWhLSMeNT9Tk/sGUnnM3R3BreoV2iFeUUFg8 gtTLs1oYaEu0AWry/ptaGVoPrNIRNelzP1EoOVeBbEXXmecIzb3lKsARZkxPCk/Z HFB7x5R3WLCIHyP4itoHd7IzuLlT/HPBOBi8Mk7cXRhclt5At3vnXahKD/tkaqmq X8NUR0jN8JlAhwF8xbDJ3QWAL3WhR+wsw6In2rfJYZEqWxvmo/FIeYnFY7tlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUadKyLwQHiix0uEeEogMKjL7HA5AwHwYDVR0j BBgwFoAUamyBNlTgwpM55sr1IiAfjnAv6tMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjgyYmNhMy1lODU4LTRkNTItYjFhMy0yZjRiYWU0N2M5ZjIvMC82QTZDODEzNjU0 RTBDMjkzMzlFNkNBRjUyMjIwMUY4RTcwMkZFQUQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE2QzgxMzY1NEUwQzI5MzM5RTZDQUY1MjIyMDFGOEU3MDJG RUFEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY4MmJjYTMtZTg1OC00ZDUyLWIx YTMtMmY0YmFlNDdjOWYyLzAvNkE2QzgxMzY1NEUwQzI5MzM5RTZDQUY1MjIyMDFG OEU3MDJGRUFEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFz5Yr/BEx7vd6ie5IImtM9MZCMwMo71Opl7 3cYjOHKuI1CphSDeS8kwPdtkrZp4ERFbJkTp9Gd8tRze8Vi/POWW1fAVZjG4x9Qk nLevjpYJUzsOIR/zj/Vst/li81WkpCN0fa3jzCD/wXKc17k0hllOJwGqMgXFYH4N cl1zeCxmDPNyjI6Kmyqi1Q6F4wBCRFDYanhxgKCvW3TFmrrCeHwEA8pt/GSEO7RJ zr5J0ICpnWeYLEsu0m/3QlIeGJof+39sUkA/LwbxY9xTFILvsrbOw7Z1onag7GAU q9op9imfjMoGWwooPFLMbcAmafQtfeccMqcL5fqgZNXEt5n6Uyc= -----END CERTIFICATE-----Generated at Wed Apr 30 11:37:17 2025 by rpki-client