$ rpki-client -vvf repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft File: 6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft (raw, json) Hash identifier: kCpGHIxnqBFZPeucSBykJyXMPmzI0oQn6OjvOHNQu5Y= Subject key identifier: 46:7F:80:FF:B5:A7:CA:70:57:71:C3:E7:88:47:F5:DD:CA:D1:85:61 Authority key identifier: 6D:34:40:FA:38:B5:13:21:C8:A8:FD:81:36:BA:70:59:7A:86:86:E0 Certificate issuer: /CN=6D3440FA38B51321C8A8FD8136BA70597A8686E0 Certificate serial: 116F69BBF892A3C06EC61C95E1B688323BEF9407 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft Manifest number: 0137 Signing time: Fri 04 Apr 2025 08:00:58 +0000 Manifest this update: Fri 04 Apr 2025 07:55:58 +0000 Manifest next update: Mon 07 Apr 2025 15:36:58 +0000 Files and hashes: 1: 6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl (hash: TU1lLfaPfkDq+dBuTlo6BIUYPKALEJT0bC3b9rlQwcM=) 2: 3130332e3136302e3139332e302f32342d3234203d3e20313530353433.roa (hash: 4Rc4ZkmdbbdveQiTO9ywjy41ILEiG5tUChzvFR34zXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 15:36:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:6f:69:bb:f8:92:a3:c0:6e:c6:1c:95:e1:b6:88:32:3b:ef:94:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D3440FA38B51321C8A8FD8136BA70597A8686E0 Validity Not Before: Apr 4 07:55:58 2025 GMT Not After : Apr 7 15:36:58 2025 GMT Subject: CN=467F80FFB5A7CA705771C3E78847F5DDCAD18561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:18:da:25:66:fd:3e:5a:7c:bc:f1:93:ed:57: 1b:55:0f:a4:82:41:7b:03:a3:c8:df:e7:2e:1f:7a: 0f:d7:c5:2c:5d:60:f1:7d:4e:77:26:ee:87:b5:05: df:d6:25:7e:ab:65:47:14:d2:b9:f9:03:0b:9c:cb: 2c:56:25:84:2c:1b:8f:8a:64:0d:a6:96:af:fd:c0: 8e:e5:c1:4e:31:66:35:71:35:ab:71:bf:46:76:33: 44:75:4a:5d:38:23:83:c7:ad:92:20:90:dc:7d:3e: 72:61:31:ae:b2:85:ad:73:d5:4f:0f:80:bd:1e:e4: 21:61:b0:d9:d9:5d:d7:6e:27:ee:09:87:5e:74:d2: e7:07:30:16:25:7c:f2:ba:28:66:fc:4c:43:0f:2d: c7:78:f2:b1:43:4b:e3:ad:45:b2:1c:9c:8f:2f:5b: 61:75:63:a0:09:95:c3:53:2d:75:3b:7d:8e:68:c2: 93:c3:a9:64:9e:ff:a8:6d:44:ff:ee:2f:15:24:8b: f7:9a:92:ba:36:95:d8:b8:dd:19:11:46:6d:e0:ba: 3f:e7:94:9d:1c:25:e9:2c:d7:21:4a:25:ea:c6:83: e7:46:e8:24:52:19:6e:7f:37:d8:80:f2:d0:b9:f0: 09:c1:6a:96:70:fb:e4:4b:70:37:48:71:cb:5a:13: 9c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:7F:80:FF:B5:A7:CA:70:57:71:C3:E7:88:47:F5:DD:CA:D1:85:61 X509v3 Authority Key Identifier: keyid:6D:34:40:FA:38:B5:13:21:C8:A8:FD:81:36:BA:70:59:7A:86:86:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:19:ad:c3:61:f1:c2:44:9d:74:a5:c1:fd:b0:c5:74:6b:0c: 91:c1:29:d2:4c:d5:9c:a5:99:b3:4c:27:10:c0:8b:94:a9:a3: 19:ad:8a:e7:dc:d3:89:9f:9e:cb:7d:8b:4c:d1:78:1d:dd:2c: 44:b6:6c:0d:fd:be:78:6b:4f:79:b2:21:96:57:8f:63:f2:c4: 6c:f1:b0:a7:56:7d:34:c9:3f:32:ce:1e:3c:c6:11:20:39:ea: 91:ba:42:ba:98:47:21:6e:d9:fd:71:93:2e:52:f7:7e:b9:09: 33:df:cc:1b:3b:fc:a4:9d:19:43:b7:9b:f9:71:d7:a1:e5:1d: be:03:5a:b3:a4:50:de:38:08:13:ce:9f:1e:9c:d4:a9:fa:17: fc:12:94:33:9c:a5:c1:29:23:3f:e2:4a:7a:94:ee:7a:9e:cf: 5e:11:17:7d:00:ee:42:cd:84:c7:d1:f3:36:a2:45:a5:c7:1e: 16:2b:5f:f2:f5:c9:9a:41:c3:23:03:8c:f6:a0:e8:56:54:dd: df:83:ff:a3:b9:6b:c1:6b:96:67:0e:1e:c5:07:6f:f1:46:83: b1:3f:10:a0:51:df:ac:ab:cd:cb:1a:32:49:55:51:bb:0a:c2: 06:15:a7:a2:3e:07:4d:d9:ef:e7:65:b3:73:8b:b4:ac:a7:13: 37:7c:2d:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEW9pu/iSo8BuxhyV4baIMjvvlAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQzNDQwRkEzOEI1MTMyMUM4QThGRDgxMzZCQTcwNTk3 QTg2ODZFMDAeFw0yNTA0MDQwNzU1NThaFw0yNTA0MDcxNTM2NThaMDMxMTAvBgNV BAMTKDQ2N0Y4MEZGQjVBN0NBNzA1NzcxQzNFNzg4NDdGNUREQ0FEMTg1NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyGNolZv0+Wny88ZPtVxtVD6SC QXsDo8jf5y4feg/XxSxdYPF9Tncm7oe1Bd/WJX6rZUcU0rn5AwucyyxWJYQsG4+K ZA2mlq/9wI7lwU4xZjVxNatxv0Z2M0R1Sl04I4PHrZIgkNx9PnJhMa6yha1z1U8P gL0e5CFhsNnZXdduJ+4Jh1500ucHMBYlfPK6KGb8TEMPLcd48rFDS+OtRbIcnI8v W2F1Y6AJlcNTLXU7fY5owpPDqWSe/6htRP/uLxUki/eakro2ldi43RkRRm3guj/n lJ0cJeks1yFKJerGg+dG6CRSGW5/N9iA8tC58AnBapZw++RLcDdIcctaE5wHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURn+A/7WnynBXccPniEf13crRhWEwHwYDVR0j BBgwFoAUbTRA+ji1EyHIqP2BNrpwWXqGhuAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2IzYjAwYi1hZDdiLTQ4NDktYjBiMi1lMjQ5YTJmYTYwNGEvMC82RDM0NDBGQTM4 QjUxMzIxQzhBOEZEODEzNkJBNzA1OTdBODY4NkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQzNDQwRkEzOEI1MTMyMUM4QThGRDgxMzZCQTcwNTk3QTg2 ODZFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NiM2IwMGItYWQ3Yi00ODQ5LWIw YjItZTI0OWEyZmE2MDRhLzAvNkQzNDQwRkEzOEI1MTMyMUM4QThGRDgxMzZCQTcw NTk3QTg2ODZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUZrcNh8cJEnXSlwf2wxXRrDJHBKdJM1Zyl mbNMJxDAi5Spoxmtiufc04mfnst9i0zReB3dLES2bA39vnhrT3myIZZXj2PyxGzx sKdWfTTJPzLOHjzGESA56pG6QrqYRyFu2f1xky5S9365CTPfzBs7/KSdGUO3m/lx 16HlHb4DWrOkUN44CBPOnx6c1Kn6F/wSlDOcpcEpIz/iSnqU7nqez14RF30A7kLN hMfR8zaiRaXHHhYrX/L1yZpBwyMDjPag6FZU3d+D/6O5a8FrlmcOHsUHb/FGg7E/ EKBR36yrzcsaMklVUbsKwgYVp6I+B03Z7+dls3OLtKynEzd8Lc8= -----END CERTIFICATE-----Generated at Sat Apr 5 19:03:29 2025 by rpki-client