$ rpki-client -vvf repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft File: 6D958AAEBD8946E47C968284B2652E02A2017E9E.mft (raw, json) Hash identifier: llimLbB7safkRVZIRPt+7g+N4uFOqMcarUlm049KAFg= Subject key identifier: 72:BF:85:DC:7A:6C:A0:F3:45:D0:67:4D:C0:8A:B1:68:3F:A5:F0:AC Authority key identifier: 6D:95:8A:AE:BD:89:46:E4:7C:96:82:84:B2:65:2E:02:A2:01:7E:9E Certificate issuer: /CN=6D958AAEBD8946E47C968284B2652E02A2017E9E Certificate serial: 6242A99354C32DC9284A9879672B56BD5F057B5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft Manifest number: 0162 Signing time: Wed 30 Apr 2025 20:30:57 +0000 Manifest this update: Wed 30 Apr 2025 20:25:57 +0000 Manifest next update: Sun 04 May 2025 00:49:57 +0000 Files and hashes: 1: 3130332e3136372e3135362e302f32342d3234203d3e20313530353534.roa (hash: q9Y/LW+GvgpQns3JaxXDJK5aiDeS3kCAGsXt4jOSFx0=) 2: 6D958AAEBD8946E47C968284B2652E02A2017E9E.crl (hash: 5pe8+uin2Q7g3kDY8jaB4MqGH3sa95XZI+WyNGZAUqA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.crl rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:42:a9:93:54:c3:2d:c9:28:4a:98:79:67:2b:56:bd:5f:05:7b:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D958AAEBD8946E47C968284B2652E02A2017E9E Validity Not Before: Apr 30 20:25:57 2025 GMT Not After : May 4 00:49:57 2025 GMT Subject: CN=72BF85DC7A6CA0F345D0674DC08AB1683FA5F0AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:28:da:5c:87:78:b9:8a:03:c2:dd:1c:c2:95: 47:b4:ee:8b:ec:f8:e5:30:09:70:d3:4f:80:b1:76: e4:d1:50:ae:a4:8a:df:a6:5f:76:88:74:15:62:78: 59:57:5f:7f:e8:04:62:15:de:3c:ac:03:13:8a:fd: f3:b2:7b:8e:5d:25:0b:72:de:20:f3:8c:6a:09:96: 90:53:cc:c1:86:9e:a6:b6:04:ce:92:ed:68:59:74: cf:b4:d8:06:b9:90:d6:4a:f8:ea:30:3e:55:80:6d: 3e:81:32:32:a8:40:fe:cf:45:91:c9:2e:8a:c7:30: fe:d8:62:1b:0b:1f:c2:db:b5:5c:a9:a6:9c:35:c2: 37:0f:05:f1:79:51:8c:5c:58:15:39:e8:f7:16:8d: be:d4:35:87:60:b1:ba:6c:d7:ec:ab:0f:05:9a:dd: d9:bc:e9:c9:59:a6:19:5d:2e:b8:5c:71:9b:59:a0: 3a:4f:1e:ca:ed:51:de:96:54:ff:e9:62:2d:14:f3: 26:d7:a7:27:c1:5c:d6:90:2d:d7:dd:fb:a7:20:97: 94:f3:55:7d:0e:98:1a:08:74:14:89:55:05:bb:f1: 95:69:59:d6:91:d4:c4:54:6f:f9:24:5e:e5:9c:b9: 36:5c:d3:1f:77:42:f5:06:dc:ca:71:02:4d:f1:62: 1c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BF:85:DC:7A:6C:A0:F3:45:D0:67:4D:C0:8A:B1:68:3F:A5:F0:AC X509v3 Authority Key Identifier: keyid:6D:95:8A:AE:BD:89:46:E4:7C:96:82:84:B2:65:2E:02:A2:01:7E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:5e:0f:ae:a3:4d:35:96:a2:91:f2:a7:1e:2c:8f:16:2f:1a: 7b:78:50:13:bb:fd:48:32:a8:09:e1:c5:2c:a7:cd:a4:6c:fe: 18:49:11:cf:91:60:d3:d8:1c:68:11:68:75:d4:32:09:52:25: 94:2b:e5:10:ad:44:15:77:97:e4:c8:f8:fc:12:74:99:44:26: 61:a5:f5:ae:88:80:98:f9:cf:5a:3e:8e:ec:3d:3d:38:f9:43: 96:c2:c3:ca:e4:bd:32:fa:a8:40:3f:4d:64:61:e8:6a:5f:a5: 9e:a2:70:37:7c:f2:81:c1:d0:d9:91:82:0d:05:6f:1e:95:68: 21:b2:88:aa:f5:93:c8:d4:c7:ec:03:d0:8d:86:32:75:18:19: 06:d0:46:d9:25:d9:7c:c5:e3:4a:dc:ca:6b:68:a4:84:f2:a4: 23:ac:5a:88:98:3b:9c:bb:6a:cf:8b:45:15:be:2e:d0:28:7d: 92:f4:42:c6:a2:03:43:cd:6b:7d:58:ca:e2:e7:77:70:78:88: d4:01:3e:12:a7:b7:b4:c6:7f:f2:eb:2a:3e:3d:73:39:92:ba: c1:f0:66:21:59:c9:96:70:16:eb:18:27:81:1a:6d:4d:de:d6: b4:72:c6:be:da:91:0d:d8:b7:43:08:87:c4:f4:fd:87:17:26: de:e1:cf:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYkKpk1TDLckoSph5ZytWvV8Fe18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJFMDJB MjAxN0U5RTAeFw0yNTA0MzAyMDI1NTdaFw0yNTA1MDQwMDQ5NTdaMDMxMTAvBgNV BAMTKDcyQkY4NURDN0E2Q0EwRjM0NUQwNjc0REMwOEFCMTY4M0ZBNUYwQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOKNpch3i5igPC3RzClUe07ovs +OUwCXDTT4CxduTRUK6kit+mX3aIdBVieFlXX3/oBGIV3jysAxOK/fOye45dJQty 3iDzjGoJlpBTzMGGnqa2BM6S7WhZdM+02Aa5kNZK+OowPlWAbT6BMjKoQP7PRZHJ LorHMP7YYhsLH8LbtVypppw1wjcPBfF5UYxcWBU56PcWjb7UNYdgsbps1+yrDwWa 3dm86clZphldLrhccZtZoDpPHsrtUd6WVP/pYi0U8ybXpyfBXNaQLdfd+6cgl5Tz VX0OmBoIdBSJVQW78ZVpWdaR1MRUb/kkXuWcuTZc0x93QvUG3MpxAk3xYhx1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcr+F3HpsoPNF0GdNwIqxaD+l8KwwHwYDVR0j BBgwFoAUbZWKrr2JRuR8loKEsmUuAqIBfp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTgwMzEyNS1kNzc3LTQwNTYtODQ0ZC04ZDFiZWZkMDE2M2QvMC82RDk1OEFBRUJE ODk0NkU0N0M5NjgyODRCMjY1MkUwMkEyMDE3RTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJFMDJBMjAx N0U5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE4MDMxMjUtZDc3Ny00MDU2LTg0 NGQtOGQxYmVmZDAxNjNkLzAvNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJF MDJBMjAxN0U5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZeD66jTTWWopHypx4sjxYvGnt4UBO7/Ugy qAnhxSynzaRs/hhJEc+RYNPYHGgRaHXUMglSJZQr5RCtRBV3l+TI+PwSdJlEJmGl 9a6IgJj5z1o+juw9PTj5Q5bCw8rkvTL6qEA/TWRh6GpfpZ6icDd88oHB0NmRgg0F bx6VaCGyiKr1k8jUx+wD0I2GMnUYGQbQRtkl2XzF40rcymtopITypCOsWoiYO5y7 as+LRRW+LtAofZL0QsaiA0PNa31YyuLnd3B4iNQBPhKnt7TGf/LrKj49czmSusHw ZiFZyZZwFusYJ4EabU3e1rRyxr7akQ3Yt0MIh8T0/YcXJt7hz9Y= -----END CERTIFICATE-----Generated at Thu May 1 11:09:55 2025 by rpki-client