$ rpki-client -vvf repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft File: 6176447D40001B20E000D73A3B5E66B74A431374.mft (raw, json) Hash identifier: 2feXEjQHRv9mxL33Z08F3/+DMiFHGETSQU+UasB/Qgk= Subject key identifier: E7:F4:C4:86:03:9F:82:2A:0B:18:7D:9A:9B:93:1E:31:86:5B:C2:90 Authority key identifier: 61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74 Certificate issuer: /CN=6176447D40001B20E000D73A3B5E66B74A431374 Certificate serial: 736DFF34E18EF44303B98CB257C7E8D4516E08F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft Manifest number: 8D Signing time: Fri 25 Apr 2025 12:41:19 +0000 Manifest this update: Fri 25 Apr 2025 12:36:19 +0000 Manifest next update: Mon 28 Apr 2025 17:15:19 +0000 Files and hashes: 1: 6176447D40001B20E000D73A3B5E66B74A431374.crl (hash: wOsJtjF8rlaW4IaGDi+QWhmVdge1VRssbXGcKpzbtto=) 2: 3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa (hash: uR53pbwW9P8hqVOeVN0hgPpqYO4PeD2g8LQ/VFiv7kA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.crl rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 17:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:6d:ff:34:e1:8e:f4:43:03:b9:8c:b2:57:c7:e8:d4:51:6e:08:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6176447D40001B20E000D73A3B5E66B74A431374 Validity Not Before: Apr 25 12:36:19 2025 GMT Not After : Apr 28 17:15:19 2025 GMT Subject: CN=E7F4C486039F822A0B187D9A9B931E31865BC290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b6:55:b1:94:c4:33:23:79:2b:4e:26:7e:1f: 3a:42:5d:99:53:ca:b7:67:30:dc:ab:b3:41:f7:4b: 29:70:27:80:e7:25:7e:a0:0d:31:a7:e0:b5:96:f2: 93:c1:2e:16:e4:20:e3:84:98:04:62:0c:94:2d:54: 01:ac:fb:b3:2a:2b:25:99:4e:43:33:85:24:8f:97: 3f:76:8d:27:cd:28:c9:be:01:ab:4a:db:dd:91:2e: 31:a1:2b:d9:29:e7:54:f3:10:a1:8c:b2:0a:c0:4a: f8:57:98:d4:75:4a:ab:9d:ba:8f:81:4b:66:14:e2: 63:e8:3d:81:d4:ee:65:a3:c8:a8:43:e7:61:8f:b5: 2e:0c:78:75:2b:25:e2:02:05:d0:05:07:0c:ac:7c: a6:e5:2d:6f:b9:ee:28:fd:00:8d:65:69:14:af:eb: 5d:93:2a:7b:32:b4:fa:a4:41:dd:62:b6:45:77:61: 5e:3c:58:c7:54:33:17:a1:b5:51:8f:cd:fe:6c:6a: 05:5b:94:7b:67:1e:94:1f:bd:d5:e7:ae:ef:2a:a9: 11:c0:46:dd:9e:98:52:f1:79:08:6e:99:95:a2:ec: 4b:f9:d2:f9:ae:4c:c1:36:b3:1e:19:15:7d:1c:64: fb:28:73:c8:3c:d3:c9:a7:e7:5a:ca:79:05:34:02: a5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F4:C4:86:03:9F:82:2A:0B:18:7D:9A:9B:93:1E:31:86:5B:C2:90 X509v3 Authority Key Identifier: keyid:61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:9c:80:80:1c:b0:6b:72:df:6d:92:01:90:86:48:02:76:ce: cd:d4:1a:43:d4:bb:3f:ad:67:1a:54:29:39:39:61:f9:3f:73: 5a:3e:67:ad:92:cc:d3:ef:de:48:54:00:eb:24:1c:a1:d3:46: d6:37:13:86:6d:21:5d:f3:93:47:61:b3:65:1f:e7:75:4b:c8: 5d:05:a9:58:c2:3f:fa:db:b3:13:51:09:b3:47:01:2c:9b:5d: 2b:79:9c:34:9d:ee:51:31:75:00:34:94:a1:c8:cb:8a:e7:8f: a9:7c:f8:4b:be:dd:34:85:8e:b1:7b:95:2c:78:16:22:15:e5: 00:21:12:35:94:5f:26:58:d5:6c:38:ac:52:4c:b7:29:92:9a: b2:35:e8:5d:26:ac:e6:73:50:85:2b:c1:d8:9d:e1:e1:1e:2e: 00:06:f4:dd:99:a5:5e:75:66:bf:14:cb:3d:71:cd:de:c2:08: 31:b2:84:bb:30:6b:18:24:de:b6:36:b3:ad:33:fb:bf:99:75: b2:24:65:36:30:4c:81:48:a1:4f:34:22:00:a2:29:6f:19:04: d6:70:a2:d1:fa:6f:08:1f:dd:14:45:a6:e2:86:01:03:ad:f3: a1:0a:5c:fc:70:2c:3b:30:ff:41:fa:ba:35:e8:ab:50:34:fb: 7e:b2:e9:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc23/NOGO9EMDuYyyV8fo1FFuCPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2Qjc0 QTQzMTM3NDAeFw0yNTA0MjUxMjM2MTlaFw0yNTA0MjgxNzE1MTlaMDMxMTAvBgNV BAMTKEU3RjRDNDg2MDM5RjgyMkEwQjE4N0Q5QTlCOTMxRTMxODY1QkMyOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCetlWxlMQzI3krTiZ+HzpCXZlT yrdnMNyrs0H3SylwJ4DnJX6gDTGn4LWW8pPBLhbkIOOEmARiDJQtVAGs+7MqKyWZ TkMzhSSPlz92jSfNKMm+AatK292RLjGhK9kp51TzEKGMsgrASvhXmNR1Squduo+B S2YU4mPoPYHU7mWjyKhD52GPtS4MeHUrJeICBdAFBwysfKblLW+57ij9AI1laRSv 612TKnsytPqkQd1itkV3YV48WMdUMxehtVGPzf5sagVblHtnHpQfvdXnru8qqRHA Rt2emFLxeQhumZWi7Ev50vmuTME2sx4ZFX0cZPsoc8g808mn51rKeQU0AqXzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5/TEhgOfgioLGH2am5MeMYZbwpAwHwYDVR0j BBgwFoAUYXZEfUAAGyDgANc6O15mt0pDE3QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDBiZDZlNC1iNGZiLTRmNDgtYjgzYS1hY2I4ZjJkNzQ1ODMvMC82MTc2NDQ3RDQw MDAxQjIwRTAwMEQ3M0EzQjVFNjZCNzRBNDMxMzc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2Qjc0QTQz MTM3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQwYmQ2ZTQtYjRmYi00ZjQ4LWI4 M2EtYWNiOGYyZDc0NTgzLzAvNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2 Qjc0QTQzMTM3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABCcgIAcsGty322SAZCGSAJ2zs3UGkPUuz+t ZxpUKTk5Yfk/c1o+Z62SzNPv3khUAOskHKHTRtY3E4ZtIV3zk0dhs2Uf53VLyF0F qVjCP/rbsxNRCbNHASybXSt5nDSd7lExdQA0lKHIy4rnj6l8+Eu+3TSFjrF7lSx4 FiIV5QAhEjWUXyZY1Ww4rFJMtymSmrI16F0mrOZzUIUrwdid4eEeLgAG9N2ZpV51 Zr8Uyz1xzd7CCDGyhLswaxgk3rY2s60z+7+ZdbIkZTYwTIFIoU80IgCiKW8ZBNZw otH6bwgf3RRFpuKGAQOt86EKXPxwLDsw/0H6ujXoq1A0+36y6Zw= -----END CERTIFICATE-----Generated at Sun Apr 27 07:40:43 2025 by rpki-client