$ rpki-client -vvf repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft File: 6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft (raw, json) Hash identifier: HNx2klGbYBGMpycalzyvheTthJhm97pgd0vKuxtvMVY= Subject key identifier: 59:7D:11:6C:8D:78:A7:8A:13:B4:99:74:76:AE:60:67:94:E2:4D:88 Authority key identifier: 6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9 Certificate issuer: /CN=6A75F95EA11C3F984C5C610FE9222026394BA8E9 Certificate serial: 20306D17C6DD50E34B938E5EC36A8026C39EB67C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft Manifest number: 04CA Signing time: Fri 02 May 2025 10:40:38 +0000 Manifest this update: Fri 02 May 2025 10:35:38 +0000 Manifest next update: Mon 05 May 2025 21:05:38 +0000 Files and hashes: 1: 3130332e3135312e39342e302f32342d3234203d3e203137353338.roa (hash: 6APR7Hv9TSOuXZpSsPHBjMrP1CKzIss5d9cN4qNnUI8=) 2: 3130332e3135312e39352e302f32342d3234203d3e203137353338.roa (hash: bGhluMXBlQ6D58wwD+73zV+Z0ql197un24tcoC8iLHI=) 3: 323030313a6466333a623838303a3a2f34382d3438203d3e203137353338.roa (hash: qdWdsvIUCg9flRqMStTQ4oe1N2TKrSaY2SzVkpN3z2c=) 4: 6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl (hash: yo02z+YwvXqYIixzODAZKd/UM1bFQw2cT5AIkt8rsgw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:30:6d:17:c6:dd:50:e3:4b:93:8e:5e:c3:6a:80:26:c3:9e:b6:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A75F95EA11C3F984C5C610FE9222026394BA8E9 Validity Not Before: May 2 10:35:38 2025 GMT Not After : May 5 21:05:38 2025 GMT Subject: CN=597D116C8D78A78A13B4997476AE606794E24D88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cc:65:4f:25:f3:ab:ed:11:ae:4f:9b:61:c3: 1c:21:99:05:e1:02:ba:e0:ad:a6:4c:2c:6c:5c:a2: a1:84:81:d7:8b:57:8f:e3:8e:2f:26:d2:06:ce:2b: d5:29:89:cd:71:7e:ae:66:0b:1d:0c:c0:1b:99:2b: cb:d3:5e:74:1c:bc:66:b8:38:46:c2:2c:ec:80:fb: 85:8c:e8:43:68:51:d2:fd:17:4d:20:d9:48:d8:e5: 48:04:8f:34:0c:f5:c1:37:91:14:b4:59:c3:bc:d3: 59:c2:ae:af:01:2b:7d:90:16:2b:eb:f7:d3:dc:09: ae:44:5d:c0:e8:8d:c4:e0:bd:ef:a9:2d:4c:07:38: 05:b9:18:12:f0:1b:1c:b9:77:fe:39:67:df:ba:4c: 18:58:0a:b4:22:c1:29:bd:80:77:20:e6:ea:07:44: 4d:cf:17:64:59:ac:90:65:81:7c:83:c8:7b:03:26: df:9b:e9:73:22:3c:da:b7:00:e3:9c:78:ea:61:36: b7:f1:f0:43:06:59:a2:23:53:69:c5:ed:28:82:a6: a8:cc:c9:a0:dc:8c:cb:b7:f2:69:19:be:6e:af:6e: 7a:74:bf:91:aa:be:db:09:4b:c1:92:3e:20:40:d3: 72:e8:bb:e5:0e:a2:61:f1:00:35:35:af:50:6a:46: 4e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7D:11:6C:8D:78:A7:8A:13:B4:99:74:76:AE:60:67:94:E2:4D:88 X509v3 Authority Key Identifier: keyid:6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:4f:d4:db:2e:25:89:71:14:e5:c1:d6:e4:84:35:18:d2:06: 77:10:56:7e:b0:fa:75:ef:e1:8a:db:61:46:2a:c2:d7:31:1d: c9:fc:88:7e:9f:cb:c3:64:60:ba:cf:20:5d:a2:57:7e:fa:33: 4d:bf:de:39:77:99:7a:33:cf:70:15:be:9d:47:7e:63:bc:96: 8e:fe:62:17:8d:b6:ce:d8:0c:78:23:cc:bc:31:da:69:dc:04: b5:53:e7:62:99:e1:2b:71:09:f6:49:a8:4b:c1:eb:70:26:af: 21:2b:87:88:de:af:92:78:7e:a5:2a:f2:e6:b1:ef:12:e7:ce: 68:ed:14:f0:02:23:0a:67:bc:69:69:a2:01:5e:30:89:dd:ab: 69:be:12:23:17:30:37:58:bf:8d:8f:ca:61:51:6b:3c:51:c9: 11:e6:cb:47:c1:4c:a6:f6:91:6a:4a:6a:47:2b:5f:93:6d:5a: 44:8b:5b:65:f6:81:e4:7b:4d:49:7d:d2:cc:d3:93:b0:21:b3: 9d:21:69:81:84:ec:de:cd:8e:ff:c2:ca:88:c7:05:d3:4d:e1: 57:0e:2b:ce:3b:f5:68:6b:8f:69:7f:03:95:03:b3:3b:d8:07: b8:d3:66:e8:9a:38:2e:74:83:ab:fd:ce:73:8e:29:8b:f7:6b: 70:40:26:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIDBtF8bdUONLk45ew2qAJsOetnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE3NUY5NUVBMTFDM0Y5ODRDNUM2MTBGRTkyMjIwMjYz OTRCQThFOTAeFw0yNTA1MDIxMDM1MzhaFw0yNTA1MDUyMTA1MzhaMDMxMTAvBgNV BAMTKDU5N0QxMTZDOEQ3OEE3OEExM0I0OTk3NDc2QUU2MDY3OTRFMjREODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkzGVPJfOr7RGuT5thwxwhmQXh ArrgraZMLGxcoqGEgdeLV4/jji8m0gbOK9Upic1xfq5mCx0MwBuZK8vTXnQcvGa4 OEbCLOyA+4WM6ENoUdL9F00g2UjY5UgEjzQM9cE3kRS0WcO801nCrq8BK32QFivr 99PcCa5EXcDojcTgve+pLUwHOAW5GBLwGxy5d/45Z9+6TBhYCrQiwSm9gHcg5uoH RE3PF2RZrJBlgXyDyHsDJt+b6XMiPNq3AOOceOphNrfx8EMGWaIjU2nF7SiCpqjM yaDcjMu38mkZvm6vbnp0v5GqvtsJS8GSPiBA03Lou+UOomHxADU1r1BqRk4zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWX0RbI14p4oTtJl0dq5gZ5TiTYgwHwYDVR0j BBgwFoAUanX5XqEcP5hMXGEP6SIgJjlLqOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTQzMzkzNC0zODQ0LTQ2NTMtOGZhYy0xODU4YjI4MjNkMWMvMC82QTc1Rjk1RUEx MUMzRjk4NEM1QzYxMEZFOTIyMjAyNjM5NEJBOEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE3NUY5NUVBMTFDM0Y5ODRDNUM2MTBGRTkyMjIwMjYzOTRC QThFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE0MzM5MzQtMzg0NC00NjUzLThm YWMtMTg1OGIyODIzZDFjLzAvNkE3NUY5NUVBMTFDM0Y5ODRDNUM2MTBGRTkyMjIw MjYzOTRCQThFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlP1NsuJYlxFOXB1uSENRjSBncQVn6w+nXv 4YrbYUYqwtcxHcn8iH6fy8NkYLrPIF2iV376M02/3jl3mXozz3AVvp1HfmO8lo7+ YheNts7YDHgjzLwx2mncBLVT52KZ4StxCfZJqEvB63AmryErh4jer5J4fqUq8uax 7xLnzmjtFPACIwpnvGlpogFeMIndq2m+EiMXMDdYv42PymFRazxRyRHmy0fBTKb2 kWpKakcrX5NtWkSLW2X2geR7TUl90szTk7Ahs50haYGE7N7Njv/CyojHBdNN4VcO K8479Whrj2l/A5UDszvYB7jTZuiaOC50g6v9znOOKYv3a3BAJjw= -----END CERTIFICATE-----Generated at Fri May 2 16:14:41 2025 by rpki-client