$ rpki-client -vvf repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft File: 6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft (raw, json) Hash identifier: IDhmk8+gILFCwctaiSUT2MfyoEL5ezCAzFispGi8Qio= Subject key identifier: 04:8B:49:C6:15:A3:1F:91:80:3D:77:76:81:F7:B1:50:C1:5B:52:6F Authority key identifier: 6A:2F:66:2B:6D:6A:DE:8B:FC:30:D2:CD:E4:9E:36:01:52:FD:38:BF Certificate issuer: /CN=6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF Certificate serial: 3464623747CFB70E0DC83AB076CB450A95619FA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft Manifest number: 01BD Signing time: Sat 05 Apr 2025 06:12:02 +0000 Manifest this update: Sat 05 Apr 2025 06:07:02 +0000 Manifest next update: Tue 08 Apr 2025 10:43:02 +0000 Files and hashes: 1: 3130332e3135382e3132382e302f32332d3234203d3e203338333230.roa (hash: HS49hTMhZgQ0/mCNKcMSWVwuhznM34+P2aN6B4wSIyw=) 2: 6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.crl (hash: caCw7y20mMySHkPVq6L7bqg9SvVY5Mopcc5afsZrR0g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.crl rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:64:62:37:47:cf:b7:0e:0d:c8:3a:b0:76:cb:45:0a:95:61:9f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF Validity Not Before: Apr 5 06:07:02 2025 GMT Not After : Apr 8 10:43:02 2025 GMT Subject: CN=048B49C615A31F91803D777681F7B150C15B526F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bf:d3:f5:65:18:de:81:04:fd:b3:47:a0:3b: 71:34:7c:9e:81:e6:19:99:15:ba:1b:b3:19:15:b1: 44:88:58:90:16:d6:14:2a:76:89:41:ac:fd:eb:f2: 6b:9b:8b:cf:f7:ca:f3:c9:ef:ec:3f:15:da:68:88: 24:7c:25:c7:15:9f:ad:6a:ed:8a:93:8b:17:0f:78: d0:96:28:5d:35:95:05:1b:66:96:8b:a0:1c:b3:ec: ce:cb:4d:9e:7b:49:ae:33:23:5c:15:46:84:6a:44: 76:3d:37:dd:b3:37:d0:a4:99:f4:eb:32:48:ae:ed: 8c:61:36:ad:99:91:ae:f1:98:9b:c0:70:ef:0a:39: 40:5f:f6:dc:d4:40:d2:fe:76:50:17:04:b1:d1:74: 20:0a:68:a8:38:86:ee:d6:c3:24:05:ca:a2:2f:51: 94:e0:37:d6:43:aa:a0:60:d8:6c:8b:07:74:8b:3a: 56:b5:ba:ef:f5:95:5e:ea:34:b3:8b:89:cf:18:fa: 40:1a:23:f6:f5:9e:e6:9e:7f:cb:ad:d8:ad:86:ea: 31:c9:7d:b1:2c:0f:83:af:48:7b:16:b6:01:90:f9: ef:a8:6d:5b:05:2c:fd:ff:10:f3:11:83:4e:1d:81: 97:91:da:b4:2d:99:52:32:94:8c:a2:75:28:2d:a7: 9d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8B:49:C6:15:A3:1F:91:80:3D:77:76:81:F7:B1:50:C1:5B:52:6F X509v3 Authority Key Identifier: keyid:6A:2F:66:2B:6D:6A:DE:8B:FC:30:D2:CD:E4:9E:36:01:52:FD:38:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:61:8d:ef:59:55:fb:19:82:6b:5f:4d:d8:0c:74:68:e2:fb: 00:cf:a0:86:dd:02:58:1c:23:35:ab:bc:ef:de:43:f0:d4:18: 79:20:29:a5:30:b0:9b:08:45:50:3f:4a:fd:be:59:4b:99:0d: 2c:7b:35:16:c8:8e:15:2f:d4:f7:68:44:3e:43:38:57:10:15: cf:28:5a:61:c2:64:52:ed:10:44:3a:98:d5:7c:51:12:3a:19: fb:4b:64:fe:bd:cc:51:d4:e2:77:52:d5:53:02:cd:3f:f1:96: dd:45:35:ec:07:c0:44:31:21:5c:5a:75:66:72:01:b2:bc:ed: 65:3e:e7:82:df:5b:45:9b:e6:c0:33:69:43:4b:cd:50:c7:43: a7:0c:1f:2a:c6:17:a0:43:b6:89:fd:a3:50:f9:62:46:da:9e: f5:b3:ec:b4:37:f5:c0:79:1f:6f:15:1f:e8:38:b6:18:66:6b: d2:e3:47:26:94:42:21:2f:c7:33:11:02:f9:fe:e1:69:a9:48: 34:94:2a:f9:f1:ac:0f:7a:65:7d:d4:d5:6f:e7:9c:5c:72:f1: e3:34:68:93:66:95:25:3f:f2:53:b8:2a:56:f5:94:ef:bd:b5: 32:1a:86:95:e8:3e:1f:47:10:14:88:28:d5:d6:3f:aa:f2:a6: 00:3b:c2:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNGRiN0fPtw4NyDqwdstFCpVhn6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEyRjY2MkI2RDZBREU4QkZDMzBEMkNERTQ5RTM2MDE1 MkZEMzhCRjAeFw0yNTA0MDUwNjA3MDJaFw0yNTA0MDgxMDQzMDJaMDMxMTAvBgNV BAMTKDA0OEI0OUM2MTVBMzFGOTE4MDNENzc3NjgxRjdCMTUwQzE1QjUyNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/v9P1ZRjegQT9s0egO3E0fJ6B 5hmZFbobsxkVsUSIWJAW1hQqdolBrP3r8mubi8/3yvPJ7+w/FdpoiCR8JccVn61q 7YqTixcPeNCWKF01lQUbZpaLoByz7M7LTZ57Sa4zI1wVRoRqRHY9N92zN9CkmfTr Mkiu7YxhNq2Zka7xmJvAcO8KOUBf9tzUQNL+dlAXBLHRdCAKaKg4hu7WwyQFyqIv UZTgN9ZDqqBg2GyLB3SLOla1uu/1lV7qNLOLic8Y+kAaI/b1nuaef8ut2K2G6jHJ fbEsD4OvSHsWtgGQ+e+obVsFLP3/EPMRg04dgZeR2rQtmVIylIyidSgtp50RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBItJxhWjH5GAPXd2gfexUMFbUm8wHwYDVR0j BBgwFoAUai9mK21q3ov8MNLN5J42AVL9OL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x M2YwYTgzYy0yYmMwLTQyYTUtYTRhZS0xMWE1Mzg4MmRmMTAvMC82QTJGNjYyQjZE NkFERThCRkMzMEQyQ0RFNDlFMzYwMTUyRkQzOEJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEyRjY2MkI2RDZBREU4QkZDMzBEMkNERTQ5RTM2MDE1MkZE MzhCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTNmMGE4M2MtMmJjMC00MmE1LWE0 YWUtMTFhNTM4ODJkZjEwLzAvNkEyRjY2MkI2RDZBREU4QkZDMzBEMkNERTQ5RTM2 MDE1MkZEMzhCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVhje9ZVfsZgmtfTdgMdGji+wDPoIbdAlgc IzWrvO/eQ/DUGHkgKaUwsJsIRVA/Sv2+WUuZDSx7NRbIjhUv1PdoRD5DOFcQFc8o WmHCZFLtEEQ6mNV8URI6GftLZP69zFHU4ndS1VMCzT/xlt1FNewHwEQxIVxadWZy AbK87WU+54LfW0Wb5sAzaUNLzVDHQ6cMHyrGF6BDton9o1D5YkbanvWz7LQ39cB5 H28VH+g4thhma9LjRyaUQiEvxzMRAvn+4WmpSDSUKvnxrA96ZX3U1W/nnFxy8eM0 aJNmlSU/8lO4Klb1lO+9tTIahpXoPh9HEBSIKNXWP6rypgA7wpU= -----END CERTIFICATE-----Generated at Sun Apr 6 03:12:13 2025 by rpki-client