$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft File: 6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft (raw, json) Hash identifier: 1xznRl+zCuX4b49QlhThhLwHteCCLMRWdukJtFnO+GI= Subject key identifier: 07:08:06:3F:8E:D0:11:75:75:C2:CC:AA:C2:E6:78:B6:8C:F0:AC:D3 Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Certificate serial: 6D33DAB5E2F6C972024E7DC7775BEAD11592B711 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft Manifest number: 0570 Signing time: Wed 30 Apr 2025 03:41:33 +0000 Manifest this update: Wed 30 Apr 2025 03:36:33 +0000 Manifest next update: Sat 03 May 2025 11:32:33 +0000 Files and hashes: 1: AS38768.roa (hash: 1MWEV5tgHs2Zer2TXzzjNIdBv6VOof5lbDzM+kS3Zcs=) 2: AS38755.roa (hash: js+OcGH/znL82r1Bq/i751nV9v0ky8Qg2sTbyo8OyDQ=) 3: AS137346.roa (hash: 3RtAGBSJfLGZo3YU7r/kwG8TMuY0YqumRB/agoOe/YM=) 4: AS38496.roa (hash: l96GpdfvAhNqsRPZv4dtmD7WPPu/t/V+vi82QrJFXsw=) 5: 6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl (hash: uCPGKWQi4v5mUfSBU0fBzFzPVsS4y4HaKNVArezxL1M=) 6: AS24520.roa (hash: /X2OowKvSum0rz+umcdT3kPQkSHfCFlWzy8KzFiLuzk=) 7: AS140421.roa (hash: RfoESpxBfC9xRwHZO2fU/8RUGYVevfom5f/XSg00ECU=) 8: AS138885.roa (hash: /n3QwdVfZD0QCe9dNF/CT2sxuwEtNa1/FhrwvyPZKsA=) 9: AS135457.roa (hash: Laio/RIOlqnhOFofbIiXLzFmTpeQDF+7GIIdTet4ZB8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 11:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:33:da:b5:e2:f6:c9:72:02:4e:7d:c7:77:5b:ea:d1:15:92:b7:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Validity Not Before: Apr 30 03:36:33 2025 GMT Not After : May 3 11:32:33 2025 GMT Subject: CN=0708063F8ED0117575C2CCAAC2E678B68CF0ACD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e6:6d:cd:4c:18:57:d0:e8:3b:19:35:52:1a: db:7f:93:08:2d:e2:4e:a9:84:e8:0c:35:94:be:87: d9:6a:bc:1f:0c:09:e1:13:75:65:3c:27:8a:d8:da: cc:86:70:b9:73:2b:c2:b7:8f:ed:16:eb:05:e3:86: 52:85:0e:b6:20:38:79:22:fa:d7:cc:94:bd:53:77: 8b:1d:22:e9:04:9e:29:75:4b:51:16:ad:8c:6c:43: 3f:bd:9b:f2:7b:e7:9b:e8:a2:60:bb:bf:8a:37:2e: b6:4d:7f:a9:3d:8f:c9:81:43:02:53:75:24:ef:88: 70:b6:2e:1b:ff:fd:73:4a:d2:b5:af:79:8a:39:df: 18:ab:37:9d:9f:bf:38:29:a6:19:cf:e3:88:bf:86: f6:4e:e3:ab:34:cc:3e:b6:d0:af:44:cc:dd:3b:05: 5e:b7:53:3d:e5:54:d2:fb:90:b1:57:d5:0e:89:6f: 3f:ed:b4:14:bc:49:04:e0:0c:0b:25:59:73:53:ae: f6:4e:d0:3b:8e:e0:d8:f0:7b:66:fe:02:73:ee:43: c5:c8:ce:79:32:16:ca:bc:11:61:5f:78:00:8b:04: 44:89:c1:e7:f7:45:a4:fc:3e:fe:ee:e3:30:26:64: 83:1a:9f:04:3c:fa:24:3d:c0:42:46:e5:99:cc:ec: b0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:08:06:3F:8E:D0:11:75:75:C2:CC:AA:C2:E6:78:B6:8C:F0:AC:D3 X509v3 Authority Key Identifier: keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:73:08:ad:c6:ab:c7:78:aa:62:74:4e:bb:c0:05:01:cb:1e: c1:4e:e6:8c:03:10:40:c9:96:b0:ed:06:a6:36:88:c3:6c:e7: 5a:78:80:a8:f4:dc:48:97:f1:75:60:b4:51:ff:da:a9:f3:1d: a8:44:18:e2:78:8b:53:52:23:0b:f2:96:08:c4:28:f5:ef:fa: 7c:a0:59:68:26:c1:a5:5e:53:aa:96:b2:d8:7c:55:9f:d4:b5: 70:ce:d2:40:bb:c2:47:8b:42:09:56:18:e3:c6:97:88:65:2a: 43:f7:f3:89:7f:0c:0e:ea:51:51:19:57:b6:a0:06:52:7f:2f: f3:b8:72:1c:9f:d5:b2:15:b2:0b:df:84:54:7f:d6:f4:a7:7c: 21:bb:c3:63:04:48:34:b2:5c:4c:23:89:11:5a:85:85:c0:98: 1d:de:34:93:95:01:61:9c:18:d0:23:02:3b:17:e0:31:17:49: 0f:da:a3:dc:ca:fc:3f:96:6c:0c:79:99:3a:ea:79:0c:d8:3b: 3c:43:4a:b6:0f:d0:b0:a4:ff:74:cc:33:62:9c:cf:6b:2e:62: 62:ac:f1:da:01:37:54:93:22:50:af:18:a2:ab:71:1a:c3:49: eb:eb:c9:49:ca:a6:36:94:b5:54:5b:98:b0:4f:04:33:c8:74: a8:10:7e:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbTPateL2yXICTn3Hd1vq0RWStxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG OEZDMDZFQzAeFw0yNTA0MzAwMzM2MzNaFw0yNTA1MDMxMTMyMzNaMDMxMTAvBgNV BAMTKDA3MDgwNjNGOEVEMDExNzU3NUMyQ0NBQUMyRTY3OEI2OENGMEFDRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY5m3NTBhX0Og7GTVSGtt/kwgt 4k6phOgMNZS+h9lqvB8MCeETdWU8J4rY2syGcLlzK8K3j+0W6wXjhlKFDrYgOHki +tfMlL1Td4sdIukEnil1S1EWrYxsQz+9m/J755voomC7v4o3LrZNf6k9j8mBQwJT dSTviHC2Lhv//XNK0rWveYo53xirN52fvzgpphnP44i/hvZO46s0zD620K9EzN07 BV63Uz3lVNL7kLFX1Q6Jbz/ttBS8SQTgDAslWXNTrvZO0DuO4Njwe2b+AnPuQ8XI znkyFsq8EWFfeACLBESJwef3RaT8Pv7u4zAmZIManwQ8+iQ9wEJG5ZnM7LDdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBwgGP47QEXV1wsyqwuZ4tozwrNMwHwYDVR0j BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2 QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD MDZFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTg3MzQ5ZmItNDY1ZS00ZThiLWE5 NzQtOTBlOTM5YmNiMGZiLzAvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZE NTFGOEZDMDZFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9zCK3Gq8d4qmJ0TrvABQHLHsFO5owDEEDJ lrDtBqY2iMNs51p4gKj03EiX8XVgtFH/2qnzHahEGOJ4i1NSIwvylgjEKPXv+nyg WWgmwaVeU6qWsth8VZ/UtXDO0kC7wkeLQglWGOPGl4hlKkP384l/DA7qUVEZV7ag BlJ/L/O4chyf1bIVsgvfhFR/1vSnfCG7w2MESDSyXEwjiRFahYXAmB3eNJOVAWGc GNAjAjsX4DEXSQ/ao9zK/D+WbAx5mTrqeQzYOzxDSrYP0LCk/3TMM2Kcz2suYmKs 8doBN1STIlCvGKKrcRrDSevryUnKpjaUtVRbmLBPBDPIdKgQfgY= -----END CERTIFICATE-----Generated at Wed Apr 30 21:23:31 2025 by rpki-client