$ rpki-client -vvf repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft File: 6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft (raw, json) Hash identifier: ZJ7hbk3KpcscNrRONEHD6QyF/cB9mJ1qWdtGt+5DJPM= Subject key identifier: C7:8C:29:76:23:97:4E:94:C9:1E:C8:57:57:58:8F:88:AD:21:3C:9D Authority key identifier: 6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E Certificate issuer: /CN=6B647F696A9BB5C718605E8922BEF1BEE566F94E Certificate serial: 3A8E23A1BBF9BAE1E2DB41FA3AFC2FED6B503558 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft Manifest number: 038F Signing time: Sat 26 Apr 2025 05:01:56 +0000 Manifest this update: Sat 26 Apr 2025 04:56:56 +0000 Manifest next update: Tue 29 Apr 2025 15:12:56 +0000 Files and hashes: 1: 3130332e3132302e36342e302f32332d3234203d3e20313337333733.roa (hash: iFaAxi0PM/hgZKE/oQtyBH44ESJg2ZCsggHfIjGB4BQ=) 2: 6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl (hash: 6QD3TjyWe+alLfaKHLZ9MfknON0d1TQ0GGEvURNZDhE=) 3: 3130332e3132302e36372e302f32342d3234203d3e2036393339.roa (hash: qvK+skO3QT34G8uQRqHtG6VsmJ/hmuNcrRmSO599EIs=) 4: 3130332e3132302e36362e302f32342d3234203d3e20313337333733.roa (hash: 8JbwHHtI2+x8Q7Ly9bJcp9ZLV+q/WXTIRy0nL9ot5M8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 15:12:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:8e:23:a1:bb:f9:ba:e1:e2:db:41:fa:3a:fc:2f:ed:6b:50:35:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B647F696A9BB5C718605E8922BEF1BEE566F94E Validity Not Before: Apr 26 04:56:56 2025 GMT Not After : Apr 29 15:12:56 2025 GMT Subject: CN=C78C297623974E94C91EC85757588F88AD213C9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ed:fe:e7:db:92:9f:4a:57:ae:de:76:22:b5: 0f:0f:58:9c:c4:92:b8:fc:ba:ea:b8:b0:5f:bb:03: 93:35:8f:7b:0a:25:48:d5:d3:7b:3d:6d:61:d2:39: d9:f8:99:da:3e:96:38:f0:72:e5:f0:40:dd:23:2a: ed:57:b9:31:d2:dc:25:fe:bc:a4:28:e0:44:8e:83: 5c:d4:21:e7:24:a2:28:af:b0:d4:d0:eb:37:c9:5a: d6:26:82:fb:20:7d:4a:1d:bb:09:10:25:05:55:05: 25:ad:6d:97:66:6c:5c:d0:1f:f6:59:f0:92:21:a1: 71:72:c8:3a:22:7c:47:ee:b9:95:01:da:39:9f:b9: 15:b4:f0:ac:24:74:31:26:7b:fb:23:d1:81:a7:2f: c7:98:70:5e:be:07:cd:ba:46:a5:bd:65:f0:75:85: cc:1b:c4:18:a1:d4:54:db:93:a8:c2:21:48:46:5f: 18:62:cd:61:d9:b8:3a:9a:d8:ac:64:46:f6:1f:7c: 4b:1f:32:97:1e:b1:fd:67:99:79:62:43:e6:16:7f: 3f:d3:c2:b0:bd:67:e9:c5:8e:a8:50:4b:b6:0b:4f: b2:9c:d2:97:b2:ee:a9:31:d6:53:01:00:90:33:88: f6:98:b3:92:39:00:83:63:60:69:26:36:72:b8:54: 03:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8C:29:76:23:97:4E:94:C9:1E:C8:57:57:58:8F:88:AD:21:3C:9D X509v3 Authority Key Identifier: keyid:6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:31:b0:91:7d:19:66:ea:ee:9c:f0:b6:2f:79:a1:ba:8e:b9: 83:1f:02:95:1a:39:cd:d0:f0:3f:70:5b:05:e4:25:88:7e:60: 61:84:b7:c2:b8:89:60:87:d0:a1:7e:3a:10:1d:63:ac:bf:e8: f0:25:45:5e:22:a6:82:fe:b4:06:3f:cb:88:77:c1:52:46:25: d4:84:d7:be:9d:43:96:bf:9f:aa:c5:67:dc:5e:08:86:00:fa: c7:16:be:f0:85:3b:85:bc:e8:24:54:32:65:5a:68:65:18:ac: c2:20:a7:e2:84:ed:ff:09:b8:7f:43:39:0f:6c:f0:a3:1d:d7: d4:3d:60:d5:33:1a:79:7c:6f:1f:c6:4a:72:7b:cb:ca:ad:2f: 37:97:47:4c:f9:3d:f0:7e:6c:3d:d7:59:be:36:d9:ae:76:f4: 80:31:67:09:41:03:af:4d:bd:3f:6c:84:ed:4c:8e:16:74:43: bb:48:e9:3d:f7:e2:03:e6:f8:13:3b:6f:a6:72:69:65:09:c7: 3d:96:0e:75:06:68:f9:67:94:33:12:fd:86:5d:55:1a:ad:aa: 6b:c8:79:7d:18:12:09:d3:36:16:e3:d2:32:e8:09:3a:46:51: 52:20:07:5f:0d:52:71:92:7f:22:2b:44:0c:d1:6c:19:37:aa: fe:fe:24:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOo4jobv5uuHi20H6Ovwv7WtQNVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI2NDdGNjk2QTlCQjVDNzE4NjA1RTg5MjJCRUYxQkVF NTY2Rjk0RTAeFw0yNTA0MjYwNDU2NTZaFw0yNTA0MjkxNTEyNTZaMDMxMTAvBgNV BAMTKEM3OEMyOTc2MjM5NzRFOTRDOTFFQzg1NzU3NTg4Rjg4QUQyMTNDOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+7f7n25KfSleu3nYitQ8PWJzE krj8uuq4sF+7A5M1j3sKJUjV03s9bWHSOdn4mdo+ljjwcuXwQN0jKu1XuTHS3CX+ vKQo4ESOg1zUIeckoiivsNTQ6zfJWtYmgvsgfUoduwkQJQVVBSWtbZdmbFzQH/ZZ 8JIhoXFyyDoifEfuuZUB2jmfuRW08KwkdDEme/sj0YGnL8eYcF6+B826RqW9ZfB1 hcwbxBih1FTbk6jCIUhGXxhizWHZuDqa2KxkRvYffEsfMpcesf1nmXliQ+YWfz/T wrC9Z+nFjqhQS7YLT7Kc0pey7qkx1lMBAJAziPaYs5I5AINjYGkmNnK4VAPRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx4wpdiOXTpTJHshXV1iPiK0hPJ0wHwYDVR0j BBgwFoAUa2R/aWqbtccYYF6JIr7xvuVm+U4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODZlNDZlYy1kZjVjLTRiNGQtYTMwZS0xMGIyYzY4OGMyZmMvMC82QjY0N0Y2OTZB OUJCNUM3MTg2MDVFODkyMkJFRjFCRUU1NjZGOTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkI2NDdGNjk2QTlCQjVDNzE4NjA1RTg5MjJCRUYxQkVFNTY2 Rjk0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTg2ZTQ2ZWMtZGY1Yy00YjRkLWEz MGUtMTBiMmM2ODhjMmZjLzAvNkI2NDdGNjk2QTlCQjVDNzE4NjA1RTg5MjJCRUYx QkVFNTY2Rjk0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4xsJF9GWbq7pzwti95obqOuYMfApUaOc3Q 8D9wWwXkJYh+YGGEt8K4iWCH0KF+OhAdY6y/6PAlRV4ipoL+tAY/y4h3wVJGJdSE 176dQ5a/n6rFZ9xeCIYA+scWvvCFO4W86CRUMmVaaGUYrMIgp+KE7f8JuH9DOQ9s 8KMd19Q9YNUzGnl8bx/GSnJ7y8qtLzeXR0z5PfB+bD3XWb422a529IAxZwlBA69N vT9shO1MjhZ0Q7tI6T334gPm+BM7b6ZyaWUJxz2WDnUGaPlnlDMS/YZdVRqtqmvI eX0YEgnTNhbj0jLoCTpGUVIgB18NUnGSfyIrRAzRbBk3qv7+JJM= -----END CERTIFICATE-----Generated at Mon Apr 28 01:51:32 2025 by rpki-client