$ rpki-client -vvf repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft File: 6490D3D85678E9C1587D21E9545EF730D21346B5.mft (raw, json) Hash identifier: x5fT1lfGhPkmd/jdj6qHDyHYo1adWEX5w2/16JBGYaA= Subject key identifier: A5:22:26:5B:65:61:54:E8:EF:E8:F1:F0:75:99:D7:69:96:F2:DA:15 Authority key identifier: 64:90:D3:D8:56:78:E9:C1:58:7D:21:E9:54:5E:F7:30:D2:13:46:B5 Certificate issuer: /CN=6490D3D85678E9C1587D21E9545EF730D21346B5 Certificate serial: 528873D3DA79CA9C57A9ADFC2153DF1C6D02CB3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft Manifest number: 79 Signing time: Sun 27 Apr 2025 05:10:42 +0000 Manifest this update: Sun 27 Apr 2025 05:05:42 +0000 Manifest next update: Wed 30 Apr 2025 06:31:42 +0000 Files and hashes: 1: 3136302e32302e3232302e302f32342d3234203d3e20313532373835.roa (hash: GDptFXCos4zkhK0BICLJWbr+aS8jyf1+uPPWMmueFX0=) 2: 6490D3D85678E9C1587D21E9545EF730D21346B5.crl (hash: Zwu3N8JobHrdWAfdBBCVWsQKFOcjFuzapZiQpvLzLNc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.crl rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 06:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:88:73:d3:da:79:ca:9c:57:a9:ad:fc:21:53:df:1c:6d:02:cb:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6490D3D85678E9C1587D21E9545EF730D21346B5 Validity Not Before: Apr 27 05:05:42 2025 GMT Not After : Apr 30 06:31:42 2025 GMT Subject: CN=A522265B656154E8EFE8F1F07599D76996F2DA15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ea:19:b7:70:c5:2c:b5:08:63:8a:90:4b:b0: 2b:05:5a:68:ef:8d:67:e0:95:47:aa:b4:3d:3f:c4: f7:d8:a0:d7:89:7a:ba:ff:42:d9:ce:d9:3f:f4:4e: 2c:56:c8:d7:c7:03:72:72:51:5b:7e:ed:b3:05:7e: 12:3c:11:83:6b:51:6d:b2:7b:13:00:31:6f:5f:bc: 4f:60:9e:4c:53:21:54:e9:62:39:0d:cd:de:07:bb: a9:00:63:b4:bc:01:64:eb:91:88:a2:92:32:42:dd: 93:24:52:d1:7a:dd:0d:b4:44:ff:27:37:b3:fb:91: 18:7f:4c:12:53:f7:f2:bb:0f:74:de:2f:fb:47:09: ba:84:94:05:07:20:1d:af:1d:76:f8:9f:e5:ac:b9: 91:64:30:17:2a:1c:95:0d:70:d0:10:77:c7:24:9a: 82:25:5b:f2:85:f3:3b:56:83:4c:ce:cf:4b:b9:b6: 6f:81:cd:8f:7d:4b:95:ca:8d:03:1c:d5:35:f6:2a: 15:dd:a0:20:c4:9b:58:0c:45:3c:fe:39:06:f2:00: bf:87:4d:67:75:1c:c2:13:d7:57:7e:68:f9:16:4b: 10:c8:a7:6b:7e:fe:13:3b:51:14:86:19:6d:74:e0: 68:ff:19:c2:33:7a:96:92:50:0b:49:26:56:a8:76: d1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:22:26:5B:65:61:54:E8:EF:E8:F1:F0:75:99:D7:69:96:F2:DA:15 X509v3 Authority Key Identifier: keyid:64:90:D3:D8:56:78:E9:C1:58:7D:21:E9:54:5E:F7:30:D2:13:46:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:54:69:39:91:d2:2e:2a:bf:d0:dd:81:7d:d8:b4:a5:b0:b3: a1:45:53:70:b1:81:19:73:af:fd:bb:4a:18:fe:1d:d5:09:c8: f2:33:f9:49:57:a9:92:e5:25:ab:b6:be:7f:6d:00:4b:24:30: 0a:ad:e7:5b:0c:42:39:a3:00:40:02:19:9a:28:17:04:aa:ca: b0:a4:21:8a:1e:21:b0:3f:77:6c:c3:57:73:15:82:33:20:61: 66:a4:01:78:75:c1:bb:61:a0:b7:5f:b2:bc:59:63:3a:ce:1a: ce:4f:7d:29:3a:18:92:65:0a:5e:80:b6:f5:0a:db:06:05:de: 17:aa:d6:a6:78:a3:cb:3c:17:42:6a:28:25:e4:c4:78:2c:01: 7d:39:2d:f4:e9:04:36:a3:db:7d:c8:44:16:b5:69:9b:bc:30: ff:65:44:53:1f:4c:aa:bf:ff:49:33:c5:2f:eb:c2:b9:c3:83: 6b:33:5c:79:ba:fb:f2:3d:d0:1d:86:b9:76:63:38:c5:d1:3d: 9b:49:12:da:d9:d6:44:6d:99:0a:a4:88:41:5f:9c:91:53:c2: 7b:61:3a:bc:9f:cd:14:43:77:d5:1d:98:9e:d9:a6:0e:34:3b: 18:73:96:44:7a:8e:1f:e5:0b:0e:11:da:e4:19:d0:78:3e:fb: 3c:d3:c6:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUohz09p5ypxXqa38IVPfHG0CyzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3MzBE MjEzNDZCNTAeFw0yNTA0MjcwNTA1NDJaFw0yNTA0MzAwNjMxNDJaMDMxMTAvBgNV BAMTKEE1MjIyNjVCNjU2MTU0RThFRkU4RjFGMDc1OTlENzY5OTZGMkRBMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC06hm3cMUstQhjipBLsCsFWmjv jWfglUeqtD0/xPfYoNeJerr/QtnO2T/0TixWyNfHA3JyUVt+7bMFfhI8EYNrUW2y exMAMW9fvE9gnkxTIVTpYjkNzd4Hu6kAY7S8AWTrkYiikjJC3ZMkUtF63Q20RP8n N7P7kRh/TBJT9/K7D3TeL/tHCbqElAUHIB2vHXb4n+WsuZFkMBcqHJUNcNAQd8ck moIlW/KF8ztWg0zOz0u5tm+BzY99S5XKjQMc1TX2KhXdoCDEm1gMRTz+OQbyAL+H TWd1HMIT11d+aPkWSxDIp2t+/hM7URSGGW104Gj/GcIzepaSUAtJJlaodtG/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpSImW2VhVOjv6PHwdZnXaZby2hUwHwYDVR0j BBgwFoAUZJDT2FZ46cFYfSHpVF73MNITRrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODg1NzVjOC01NGZlLTQ4MDEtYTdiMS01MTdkMGU2YjhiNzMvMC82NDkwRDNEODU2 NzhFOUMxNTg3RDIxRTk1NDVFRjczMEQyMTM0NkI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3MzBEMjEz NDZCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg4NTc1YzgtNTRmZS00ODAxLWE3 YjEtNTE3ZDBlNmI4YjczLzAvNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3 MzBEMjEzNDZCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJUaTmR0i4qv9DdgX3YtKWws6FFU3CxgRlz r/27Shj+HdUJyPIz+UlXqZLlJau2vn9tAEskMAqt51sMQjmjAEACGZooFwSqyrCk IYoeIbA/d2zDV3MVgjMgYWakAXh1wbthoLdfsrxZYzrOGs5PfSk6GJJlCl6AtvUK 2wYF3heq1qZ4o8s8F0JqKCXkxHgsAX05LfTpBDaj233IRBa1aZu8MP9lRFMfTKq/ /0kzxS/rwrnDg2szXHm6+/I90B2GuXZjOMXRPZtJEtrZ1kRtmQqkiEFfnJFTwnth OryfzRRDd9UdmJ7Zpg40OxhzlkR6jh/lCw4R2uQZ0Hg++zzTxow= -----END CERTIFICATE-----Generated at Sun Apr 27 21:34:38 2025 by rpki-client