$ rpki-client -vvf repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft File: 6D958AAEBD8946E47C968284B2652E02A2017E9E.mft (raw, json) Hash identifier: OVnX0wHnCbxc4PUEbFUsmE6HyYiNa3mX/RY3xtDL4GU= Subject key identifier: 14:2E:90:3C:9F:3E:82:E8:F5:08:A9:48:32:C6:72:B3:98:DA:E2:F9 Authority key identifier: 6D:95:8A:AE:BD:89:46:E4:7C:96:82:84:B2:65:2E:02:A2:01:7E:9E Certificate issuer: /CN=6D958AAEBD8946E47C968284B2652E02A2017E9E Certificate serial: 0C9EFD777BD73DFC7D16E6C093617900CB506F2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft Manifest number: 0161 Signing time: Mon 28 Apr 2025 19:20:04 +0000 Manifest this update: Mon 28 Apr 2025 19:15:04 +0000 Manifest next update: Thu 01 May 2025 20:26:04 +0000 Files and hashes: 1: 6D958AAEBD8946E47C968284B2652E02A2017E9E.crl (hash: 7sCnD5LJDP6GsoZB6ShJZzufbe+ujfRkCN8KD41p/NE=) 2: 3130332e3136372e3135362e302f32342d3234203d3e20313530353534.roa (hash: q9Y/LW+GvgpQns3JaxXDJK5aiDeS3kCAGsXt4jOSFx0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.crl rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:26:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:9e:fd:77:7b:d7:3d:fc:7d:16:e6:c0:93:61:79:00:cb:50:6f:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D958AAEBD8946E47C968284B2652E02A2017E9E Validity Not Before: Apr 28 19:15:04 2025 GMT Not After : May 1 20:26:04 2025 GMT Subject: CN=142E903C9F3E82E8F508A94832C672B398DAE2F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b0:be:74:25:c5:6d:fb:76:d4:5b:20:62:35: ae:aa:9c:3a:46:d1:6b:55:32:d8:11:e1:ed:8f:26: e8:d9:b0:01:b6:91:8b:f2:ab:03:d8:63:be:e4:2a: 07:b0:3f:fc:4d:a1:f5:c2:68:35:79:68:c4:f0:bb: 4c:f7:cf:7a:c4:14:fe:65:2c:56:0c:dc:a0:d8:66: 67:aa:2b:49:23:d7:8c:e9:12:c7:5d:3c:48:7f:bb: 79:32:85:9c:6a:cd:df:30:72:29:33:01:59:b9:f1: 33:9f:96:68:3e:4a:e1:00:9b:0e:c3:08:a9:0f:f4: fd:ca:d0:d5:b1:43:04:12:8b:4f:be:e3:f3:44:fb: 5c:eb:0a:92:8f:c6:61:b2:08:fa:61:f8:3f:30:9b: e9:b2:cd:db:93:c6:1b:16:26:3b:60:21:69:e4:98: de:3d:80:f4:c3:68:f2:b4:b2:78:2b:13:0e:5b:59: fb:75:ce:58:6a:b2:c3:29:5c:d5:93:70:e8:26:77: df:a5:a6:12:4e:8a:a3:42:e0:51:27:9b:69:17:e4: 48:43:fc:8f:32:1a:e6:c1:fd:00:40:22:fc:22:1d: 40:0f:f8:93:3d:e8:02:54:3b:71:3a:12:19:52:e9: 51:89:04:81:1d:b0:34:bc:d3:23:b6:a1:62:eb:19: 3b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2E:90:3C:9F:3E:82:E8:F5:08:A9:48:32:C6:72:B3:98:DA:E2:F9 X509v3 Authority Key Identifier: keyid:6D:95:8A:AE:BD:89:46:E4:7C:96:82:84:B2:65:2E:02:A2:01:7E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:17:c6:70:b0:60:57:fc:ee:22:a6:b2:e2:4b:fa:47:89:e8: e2:31:dd:29:90:05:f5:de:01:91:67:31:1a:d9:94:72:eb:bf: db:13:9a:c6:95:4f:f7:2b:8a:d0:4d:64:e5:72:16:a3:8c:3e: ec:ac:1b:15:5f:8b:bf:b1:cf:b9:a8:8d:6f:05:0c:75:c0:59: be:db:5a:9b:1c:aa:f0:08:63:14:a0:a0:f6:9d:67:75:82:20: ce:f7:97:d8:49:cf:2d:63:c0:9e:d6:54:f0:7f:69:51:57:ce: ae:db:01:f1:ea:1b:da:69:82:8f:d8:d5:98:28:ed:7c:1d:92: 7e:0f:bc:38:79:b4:d7:fc:55:93:af:66:8e:64:44:ff:03:54: 67:a1:b1:34:c9:65:8f:c0:4f:2f:72:33:ab:e0:ef:0a:d0:67: 74:30:86:3e:58:83:bb:1a:af:3e:22:cf:9d:97:54:13:5a:7a: 04:e0:25:5a:e1:44:46:2c:76:59:6c:94:a7:99:ca:69:fb:c2: e8:c8:51:c2:7a:8a:29:68:9c:6b:99:9c:c0:18:62:7a:d6:8f: 6a:ec:9e:7c:4d:44:b8:fc:45:a9:be:73:44:ed:2a:6e:15:78: bf:eb:ff:09:df:d8:f3:d3:84:a4:df:b4:a6:a4:ec:5c:50:43: 77:dc:9e:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDJ79d3vXPfx9FubAk2F5AMtQby8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJFMDJB MjAxN0U5RTAeFw0yNTA0MjgxOTE1MDRaFw0yNTA1MDEyMDI2MDRaMDMxMTAvBgNV BAMTKDE0MkU5MDNDOUYzRTgyRThGNTA4QTk0ODMyQzY3MkIzOThEQUUyRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpsL50JcVt+3bUWyBiNa6qnDpG 0WtVMtgR4e2PJujZsAG2kYvyqwPYY77kKgewP/xNofXCaDV5aMTwu0z3z3rEFP5l LFYM3KDYZmeqK0kj14zpEsddPEh/u3kyhZxqzd8wcikzAVm58TOflmg+SuEAmw7D CKkP9P3K0NWxQwQSi0++4/NE+1zrCpKPxmGyCPph+D8wm+myzduTxhsWJjtgIWnk mN49gPTDaPK0sngrEw5bWft1zlhqssMpXNWTcOgmd9+lphJOiqNC4FEnm2kX5EhD /I8yGubB/QBAIvwiHUAP+JM96AJUO3E6EhlS6VGJBIEdsDS80yO2oWLrGTuXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFC6QPJ8+guj1CKlIMsZys5ja4vkwHwYDVR0j BBgwFoAUbZWKrr2JRuR8loKEsmUuAqIBfp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTgwMzEyNS1kNzc3LTQwNTYtODQ0ZC04ZDFiZWZkMDE2M2QvMC82RDk1OEFBRUJE ODk0NkU0N0M5NjgyODRCMjY1MkUwMkEyMDE3RTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJFMDJBMjAx N0U5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE4MDMxMjUtZDc3Ny00MDU2LTg0 NGQtOGQxYmVmZDAxNjNkLzAvNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJF MDJBMjAxN0U5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIXxnCwYFf87iKmsuJL+keJ6OIx3SmQBfXe AZFnMRrZlHLrv9sTmsaVT/critBNZOVyFqOMPuysGxVfi7+xz7mojW8FDHXAWb7b WpscqvAIYxSgoPadZ3WCIM73l9hJzy1jwJ7WVPB/aVFXzq7bAfHqG9ppgo/Y1Zgo 7Xwdkn4PvDh5tNf8VZOvZo5kRP8DVGehsTTJZY/ATy9yM6vg7wrQZ3Qwhj5Yg7sa rz4iz52XVBNaegTgJVrhREYsdllslKeZymn7wujIUcJ6iilonGuZnMAYYnrWj2rs nnxNRLj8Ram+c0TtKm4VeL/r/wnf2PPThKTftKak7FxQQ3fcngg= -----END CERTIFICATE-----Generated at Wed Apr 30 15:23:26 2025 by rpki-client