$ rpki-client -vvf repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft File: 6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft (raw, json) Hash identifier: YGi1HRN6Cn/pLjtPktHBuLg9NZn6etWgxYynQJybvTs= Subject key identifier: 66:7E:7F:8F:EE:85:27:02:AC:A6:0E:D7:3F:08:92:57:A5:15:8B:1D Authority key identifier: 6E:3C:89:E6:A3:E3:C6:1A:73:15:8A:3C:FF:82:90:9F:AE:F8:ED:EF Certificate issuer: /CN=6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF Certificate serial: 496F4B8FBD0C97BC06DA717FE5800856BE1B8D8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft Manifest number: 0333 Signing time: Fri 04 Apr 2025 09:01:46 +0000 Manifest this update: Fri 04 Apr 2025 08:56:46 +0000 Manifest next update: Mon 07 Apr 2025 11:01:46 +0000 Files and hashes: 1: 6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.crl (hash: d592ns5lFsttKXgBrCwlY12hUVORjGE7XnjkLPDjDNI=) 2: 3130332e3136392e31302e302f32332d3234203d3e20313432333335.roa (hash: /EB5uVPByNIi8kXY9MVULDEpqEYMsLoCXri+MR4evTc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.crl rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 11:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:6f:4b:8f:bd:0c:97:bc:06:da:71:7f:e5:80:08:56:be:1b:8d:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF Validity Not Before: Apr 4 08:56:46 2025 GMT Not After : Apr 7 11:01:46 2025 GMT Subject: CN=667E7F8FEE852702ACA60ED73F089257A5158B1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:83:59:b0:33:97:c2:af:bd:49:91:d3:e7:af: 9b:66:b2:6f:9e:f4:ab:da:cf:16:95:1d:2f:82:09: bc:c9:29:4d:9e:8e:bf:df:22:46:79:cd:da:b4:ec: b6:0c:36:e7:b6:1d:8d:be:ab:69:7a:4f:0f:5c:dc: fc:80:d8:84:d9:27:64:d8:b9:9c:0c:d1:2c:7e:e8: 44:c3:c7:fe:6a:37:63:a3:7d:cd:da:0e:ce:87:47: d5:73:7b:b1:cc:45:a4:26:db:73:44:c2:7c:28:b9: 37:33:4c:7a:d6:d4:a8:57:a3:cd:ee:8d:3d:d3:ea: 26:c8:c2:af:ba:76:9b:ff:ac:5d:78:67:c4:9d:6c: 34:4b:d5:74:42:f5:09:76:63:29:a8:ac:76:a9:81: 9b:2b:89:98:b3:3b:54:b6:e2:c2:64:47:67:b9:61: 1b:4e:da:10:66:47:6a:82:5f:00:ef:ca:5e:cf:a8: 1b:06:6f:47:f4:5e:b1:d6:d7:e1:72:7a:74:dd:e9: 41:5b:bd:a4:1b:d6:4b:15:0d:53:c9:23:8b:c1:a6: ab:11:ba:c9:3c:77:91:e0:3c:fc:39:5f:37:f9:ec: d5:84:dd:11:31:7e:db:40:35:ab:88:55:fb:b7:7b: 69:de:19:32:6e:bd:99:9e:58:43:af:de:ad:4c:23: d3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7E:7F:8F:EE:85:27:02:AC:A6:0E:D7:3F:08:92:57:A5:15:8B:1D X509v3 Authority Key Identifier: keyid:6E:3C:89:E6:A3:E3:C6:1A:73:15:8A:3C:FF:82:90:9F:AE:F8:ED:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:da:56:19:3c:e3:b0:8f:c7:50:ab:27:c4:50:4d:bb:28:88: 7b:16:39:e6:13:6b:4c:15:f4:27:5a:cf:01:e2:bb:68:68:5d: 95:0c:5f:a6:8f:5b:83:2d:59:aa:c6:72:1e:47:49:25:a9:77: c2:96:3f:36:cc:97:f4:64:a8:12:a7:17:96:f8:29:ce:5d:b2: cf:7d:58:4d:89:e3:8a:8b:d8:85:1a:f4:fb:1b:98:ac:4b:17: b1:03:ba:07:00:1e:cd:76:90:b7:a8:be:d2:65:33:3e:7e:e7: 9b:15:25:90:47:8c:fe:8a:34:82:9c:18:cc:7d:5f:ec:06:f6: 50:c2:df:d1:29:96:fb:1b:fa:00:b6:38:1a:e1:81:73:ca:0b: 78:be:d5:a7:c2:28:69:39:cc:47:e1:46:f6:9b:ce:fe:31:9b: 54:32:66:97:54:f9:32:fe:d4:97:10:e0:33:4b:5f:14:c8:32: 17:12:0c:83:97:69:f2:18:44:48:ca:a1:f0:0b:79:cb:22:1a: e0:25:65:c6:c3:31:c7:d7:cd:41:b5:92:79:ad:f4:86:25:a7: e5:63:6b:5e:26:2a:27:49:b6:01:09:e9:8a:ad:ed:c4:39:ad: dd:96:1a:56:85:47:84:df:c8:25:bb:ce:fd:c3:c3:50:d8:6f: d2:78:c7:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSW9Lj70Ml7wG2nF/5YAIVr4bjYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkUzQzg5RTZBM0UzQzYxQTczMTU4QTNDRkY4MjkwOUZB RUY4RURFRjAeFw0yNTA0MDQwODU2NDZaFw0yNTA0MDcxMTAxNDZaMDMxMTAvBgNV BAMTKDY2N0U3RjhGRUU4NTI3MDJBQ0E2MEVENzNGMDg5MjU3QTUxNThCMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBg1mwM5fCr71JkdPnr5tmsm+e 9KvazxaVHS+CCbzJKU2ejr/fIkZ5zdq07LYMNue2HY2+q2l6Tw9c3PyA2ITZJ2TY uZwM0Sx+6ETDx/5qN2Ojfc3aDs6HR9Vze7HMRaQm23NEwnwouTczTHrW1KhXo83u jT3T6ibIwq+6dpv/rF14Z8SdbDRL1XRC9Ql2YymorHapgZsriZizO1S24sJkR2e5 YRtO2hBmR2qCXwDvyl7PqBsGb0f0XrHW1+FyenTd6UFbvaQb1ksVDVPJI4vBpqsR usk8d5HgPPw5Xzf57NWE3RExfttANauIVfu3e2neGTJuvZmeWEOv3q1MI9PbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZn5/j+6FJwKspg7XPwiSV6UVix0wHwYDVR0j BBgwFoAUbjyJ5qPjxhpzFYo8/4KQn6747e8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWFhOGNiZS03MThiLTQ5NTMtYjc4OS02MGZhODU3YWVjOGQvMC82RTNDODlFNkEz RTNDNjFBNzMxNThBM0NGRjgyOTA5RkFFRjhFREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkUzQzg5RTZBM0UzQzYxQTczMTU4QTNDRkY4MjkwOUZBRUY4 RURFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVhYThjYmUtNzE4Yi00OTUzLWI3 ODktNjBmYTg1N2FlYzhkLzAvNkUzQzg5RTZBM0UzQzYxQTczMTU4QTNDRkY4Mjkw OUZBRUY4RURFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDaVhk847CPx1CrJ8RQTbsoiHsWOeYTa0wV 9CdazwHiu2hoXZUMX6aPW4MtWarGch5HSSWpd8KWPzbMl/RkqBKnF5b4Kc5dss99 WE2J44qL2IUa9PsbmKxLF7EDugcAHs12kLeovtJlMz5+55sVJZBHjP6KNIKcGMx9 X+wG9lDC39Eplvsb+gC2OBrhgXPKC3i+1afCKGk5zEfhRvabzv4xm1QyZpdU+TL+ 1JcQ4DNLXxTIMhcSDIOXafIYREjKofALecsiGuAlZcbDMcfXzUG1knmt9IYlp+Vj a14mKidJtgEJ6Yqt7cQ5rd2WGlaFR4TfyCW7zv3Dw1DYb9J4x7Q= -----END CERTIFICATE-----Generated at Sat Apr 5 16:40:09 2025 by rpki-client