$ rpki-client -vvf repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft File: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft (raw, json) Hash identifier: ZiHGCBzOAhNi50lt3CnJuJEWu6X3DjsaP4pTQkFWZYY= Subject key identifier: 20:4F:CB:ED:01:98:02:A6:80:1C:9A:2F:35:15:62:0A:4A:DC:78:18 Authority key identifier: 6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA Certificate issuer: /CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Certificate serial: 30EDE633B8923C524FCB8DF0FEAE849320868FF3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft Manifest number: 01C1 Signing time: Fri 04 Apr 2025 16:10:02 +0000 Manifest this update: Fri 04 Apr 2025 16:05:02 +0000 Manifest next update: Tue 08 Apr 2025 02:22:02 +0000 Files and hashes: 1: 3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa (hash: 1RMT6G7QnsJcXCeoX41dd9HXbMd1FoTOfa/tEvmM6xo=) 2: 3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa (hash: xVOwIPvBQ0n872k/gfDVvNmh+7kWsfCWp3uf32P6Pv0=) 3: 3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa (hash: jKU5gtVU219lnceaTucZefwhfrwPqEuRsJNHBd5zgSY=) 4: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl (hash: zKroPJIYOwnAOxFX9vWHbThAAb6V9fDdRArdSfeHlL4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:ed:e6:33:b8:92:3c:52:4f:cb:8d:f0:fe:ae:84:93:20:86:8f:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Validity Not Before: Apr 4 16:05:02 2025 GMT Not After : Apr 8 02:22:02 2025 GMT Subject: CN=204FCBED019802A6801C9A2F3515620A4ADC7818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1c:0c:06:93:36:8a:ae:a2:12:0f:52:2a:d1: 47:3a:33:7d:17:42:32:a8:85:b4:2d:36:b8:84:24: ef:51:bb:52:fb:75:43:81:b6:f6:08:f0:96:b8:7e: b2:4f:c3:4d:6b:7e:8b:a5:c3:4b:54:b2:05:a6:31: ae:6f:d5:30:98:36:f7:3e:aa:76:c5:df:e2:44:2b: 19:8d:45:93:3a:e3:e6:4e:e9:d8:bf:10:18:c3:b8: 88:80:f2:d0:cd:bd:c6:ea:5e:59:62:ed:d9:33:fb: 63:18:3f:14:a4:bb:c5:c9:ce:6e:49:52:79:81:96: e1:d7:92:75:17:ab:98:ff:14:f6:56:33:9d:c4:18: d0:e7:01:8a:8e:83:bb:af:04:dc:0b:ec:df:b9:2e: 27:32:c0:a0:fa:c4:e4:df:b3:05:30:cd:8f:48:86: c2:b1:2d:0a:d9:82:6c:cf:c6:1c:f2:91:90:4e:d7: c3:e8:5c:09:1e:fa:a0:d1:1f:60:d0:c0:9f:1d:5c: 24:b9:ff:bd:28:4e:ef:9d:b8:e4:21:10:03:9b:44: 2f:4c:db:df:ba:32:8f:37:0c:4d:9e:e6:8d:ee:c3: 80:95:a8:ba:e7:69:5e:f3:e7:fa:e5:e4:f2:fa:2d: bb:bb:48:92:fc:0f:14:2c:06:82:cb:b2:29:35:4d: 4b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4F:CB:ED:01:98:02:A6:80:1C:9A:2F:35:15:62:0A:4A:DC:78:18 X509v3 Authority Key Identifier: keyid:6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:be:30:31:b4:12:a4:34:85:4c:97:d4:44:32:64:14:a5:7e: d2:89:ff:05:80:ed:f7:ef:7b:af:a6:95:f2:23:70:ec:ef:dd: db:bf:57:59:6e:5a:97:f6:de:bd:da:3c:69:07:fe:40:97:11: 08:6b:ca:1c:c8:38:f5:a4:fd:e0:7a:0e:8b:6c:a3:32:35:28: 98:03:36:9a:e5:57:95:32:fb:2a:a8:68:48:0a:a8:b3:43:10: c3:9e:f6:b2:19:3b:c2:fd:10:14:82:af:b3:64:bc:f8:63:86: 96:38:9d:f5:e1:e2:28:f8:3b:9e:47:6a:cd:0f:3a:fa:63:cc: aa:24:90:a7:53:74:59:99:29:69:84:a0:ee:02:fe:43:e2:4f: a5:d0:d1:90:7a:fe:14:44:de:4c:18:41:53:4d:d4:c4:ea:15: dc:1f:b6:4e:cd:e3:12:4e:a1:b6:dd:b4:3b:1a:36:b9:a6:d1: e4:b6:44:2a:c1:35:32:0a:db:76:9d:58:88:98:72:73:0c:99: 4b:73:77:c5:c9:5b:3c:7d:a8:81:d0:fe:94:41:82:18:cd:76: 4d:24:8f:0c:d9:2f:6c:be:7b:67:86:e1:58:94:98:59:e7:b1: 4a:8c:f9:79:88:f3:51:28:53:c9:26:a4:c1:58:86:c1:f8:8d: 17:5a:29:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMO3mM7iSPFJPy43w/q6EkyCGj/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMx REIwOEZEQTAeFw0yNTA0MDQxNjA1MDJaFw0yNTA0MDgwMjIyMDJaMDMxMTAvBgNV BAMTKDIwNEZDQkVEMDE5ODAyQTY4MDFDOUEyRjM1MTU2MjBBNEFEQzc4MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJHAwGkzaKrqISD1Iq0Uc6M30X QjKohbQtNriEJO9Ru1L7dUOBtvYI8Ja4frJPw01rfoulw0tUsgWmMa5v1TCYNvc+ qnbF3+JEKxmNRZM64+ZO6di/EBjDuIiA8tDNvcbqXlli7dkz+2MYPxSku8XJzm5J UnmBluHXknUXq5j/FPZWM53EGNDnAYqOg7uvBNwL7N+5LicywKD6xOTfswUwzY9I hsKxLQrZgmzPxhzykZBO18PoXAke+qDRH2DQwJ8dXCS5/70oTu+duOQhEAObRC9M 29+6Mo83DE2e5o3uw4CVqLrnaV7z5/rl5PL6Lbu7SJL8DxQsBoLLsik1TUtHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIE/L7QGYAqaAHJovNRViCkrceBgwHwYDVR0j BBgwFoAUb8DJM0D/c1k0NMjv/O2Osx2wj9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjY1OTkwNC0zNzAyLTQ3OTctYmQxYi00NDdhYjhjOTRlMGMvMC82RkMwQzkzMzQw RkY3MzU5MzQzNEM4RUZGQ0VEOEVCMzFEQjA4RkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMxREIw OEZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY2NTk5MDQtMzcwMi00Nzk3LWJk MWItNDQ3YWI4Yzk0ZTBjLzAvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhF QjMxREIwOEZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6+MDG0EqQ0hUyX1EQyZBSlftKJ/wWA7ffv e6+mlfIjcOzv3du/V1luWpf23r3aPGkH/kCXEQhryhzIOPWk/eB6DotsozI1KJgD NprlV5Uy+yqoaEgKqLNDEMOe9rIZO8L9EBSCr7NkvPhjhpY4nfXh4ij4O55Has0P OvpjzKokkKdTdFmZKWmEoO4C/kPiT6XQ0ZB6/hRE3kwYQVNN1MTqFdwftk7N4xJO obbdtDsaNrmm0eS2RCrBNTIK23adWIiYcnMMmUtzd8XJWzx9qIHQ/pRBghjNdk0k jwzZL2y+e2eG4ViUmFnnsUqM+XmI81EoU8kmpMFYhsH4jRdaKU0= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:22 2025 by rpki-client