$ rpki-client -vvf repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft File: 6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft (raw, json) Hash identifier: gpjZngKEamXsyEi2E+EuAtDtM6Z7z3u627LFEzgw++o= Subject key identifier: BD:05:B8:BB:02:AA:4F:12:37:A9:6C:3B:FB:D5:53:7F:88:C9:78:03 Authority key identifier: 6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 Certificate issuer: /CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53 Certificate serial: 26F31CA35D8A1B35672B530AC2642A5AD2E9CDA5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer Subject info access: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft Manifest number: 34 Signing time: Mon 07 Apr 2025 06:42:21 +0000 Manifest this update: Mon 07 Apr 2025 06:37:21 +0000 Manifest next update: Thu 10 Apr 2025 12:09:21 +0000 Files and hashes: 1: 3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa (hash: b3FwlMsLVeDm7arhAC1MOxAg/+Ixy8Gs1MmwDRmmqco=) 2: 3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa (hash: 4xFtj009j2KyXApXnh4MToBnYNS6TXxPJe0g07ZPzfw=) 3: 3130332e3133362e31322e302f32342d3234203d3e20313338383231.roa (hash: Lk7MgzxdNvFWTQC60iPK0vpuf42JvMwfykIHdcb6dFo=) 4: 3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa (hash: R+IkOnhEEkrZOxf8Y3xufcx4Q4z9+2sI/l2mQF5vKrU=) 5: 3130332e3133362e31322e302f32322d3234203d3e20313338383231.roa (hash: Cb5AEtlH1NnuqmCvEw1t1v8nRYfGeJ7DwpY/kiNXrBE=) 6: 6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl (hash: jyn1hxzFtZmfaZ+RyJjoEuOqFgWWNWAPdTiBPk/fO74=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 12:09:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:f3:1c:a3:5d:8a:1b:35:67:2b:53:0a:c2:64:2a:5a:d2:e9:cd:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53 Validity Not Before: Apr 7 06:37:21 2025 GMT Not After : Apr 10 12:09:21 2025 GMT Subject: CN=BD05B8BB02AA4F1237A96C3BFBD5537F88C97803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2f:91:07:dc:d2:a7:61:ba:05:cb:86:a0:f2: 2e:a0:de:f0:fc:39:aa:de:02:86:98:46:2f:1e:c3: e8:33:ef:28:83:66:85:ab:a9:fd:c2:86:43:83:bb: 99:08:00:d2:70:7f:46:7b:ee:3c:19:c7:e5:ba:0c: 82:d6:50:2c:14:fa:38:fa:dc:3b:0a:85:fb:48:68: 59:24:c6:1e:8b:16:7f:8a:5d:fd:52:02:41:4f:0f: 58:09:e8:3c:5f:36:b2:4a:45:87:79:03:a6:76:07: 31:98:66:e2:85:36:e9:34:3f:0e:2c:09:b1:af:ba: ff:8c:69:e8:78:62:f6:9a:fe:12:94:47:21:db:57: 8f:91:08:8e:b9:85:b6:f0:a8:16:cd:86:01:99:75: c2:b7:42:4c:10:ee:41:78:23:d1:f4:9a:29:fb:eb: af:7b:a7:c4:3f:11:4d:30:98:14:0c:a1:06:82:57: d6:d1:9f:01:d8:02:f1:22:2d:09:6f:d9:94:19:88: ab:ee:e1:23:b0:9c:95:4b:f3:87:08:5c:8c:9c:7e: f1:fd:92:84:13:e2:70:c9:b7:dc:a6:c7:29:cc:b2: 47:07:c1:82:be:cc:a2:2e:2e:83:db:af:7a:74:e5: b2:b7:c9:3b:2d:bd:ed:7f:83:4e:67:dc:bd:cc:79: 42:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:05:B8:BB:02:AA:4F:12:37:A9:6C:3B:FB:D5:53:7F:88:C9:78:03 X509v3 Authority Key Identifier: keyid:6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:d0:40:59:f9:0b:8c:25:df:08:32:09:cc:87:dc:23:05:2c: be:2f:0e:05:2d:bf:8b:77:a0:a0:b8:72:4c:d5:84:e3:bd:29: fe:25:1a:13:dd:a7:19:25:30:1a:d9:84:a2:cc:c1:55:14:b3: f1:02:d6:b3:c1:06:51:50:42:b9:9c:4f:1d:bb:5c:6b:52:ce: 3c:11:40:75:42:cb:26:eb:be:e7:b0:c1:b7:58:59:3e:5c:06: 66:8a:79:f9:05:f4:e6:0f:a2:e2:b2:84:08:7c:85:18:fd:96: b9:c3:6c:0e:56:56:7d:33:92:93:6a:2a:1b:2c:bd:d6:a3:26: 7f:14:85:c1:37:f4:d2:c7:cb:7c:34:ca:94:01:1d:67:6e:eb: a5:d6:ae:72:0f:95:f9:a9:1d:1c:17:98:29:fb:71:6d:75:06: 51:83:5c:b0:77:65:66:9e:13:cd:58:e1:7e:97:e8:dd:84:67: a6:30:6d:94:d8:8b:11:17:a0:66:39:10:9c:70:8f:65:68:be: c8:4c:a3:4d:59:64:ea:34:9b:73:50:9a:15:b4:dc:a4:fa:78: c4:cc:5c:9b:8d:b1:1d:93:12:0a:37:70:54:43:03:db:61:14: 73:fe:e1:dd:78:d6:43:c4:03:14:4d:05:ec:fe:b5:6e:08:ef: b7:f6:ab:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJvMco12KGzVnK1MKwmQqWtLpzaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNC RkIzN0I1MzAeFw0yNTA0MDcwNjM3MjFaFw0yNTA0MTAxMjA5MjFaMDMxMTAvBgNV BAMTKEJEMDVCOEJCMDJBQTRGMTIzN0E5NkMzQkZCRDU1MzdGODhDOTc4MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbL5EH3NKnYboFy4ag8i6g3vD8 OareAoaYRi8ew+gz7yiDZoWrqf3ChkODu5kIANJwf0Z77jwZx+W6DILWUCwU+jj6 3DsKhftIaFkkxh6LFn+KXf1SAkFPD1gJ6DxfNrJKRYd5A6Z2BzGYZuKFNuk0Pw4s CbGvuv+Maeh4Yvaa/hKURyHbV4+RCI65hbbwqBbNhgGZdcK3QkwQ7kF4I9H0min7 6697p8Q/EU0wmBQMoQaCV9bRnwHYAvEiLQlv2ZQZiKvu4SOwnJVL84cIXIycfvH9 koQT4nDJt9ymxynMskcHwYK+zKIuLoPbr3p05bK3yTstve1/g05n3L3MeUJNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvQW4uwKqTxI3qWw7+9VTf4jJeAMwHwYDVR0j BBgwFoAUamnvxciXkHx0yKHr3Z03/L+ze1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDFiMWMxYi02NTZjLTQ4OWQtOWVkMy1jY2M3N2M4MzAxOGQvMC82QTY5RUZDNUM4 OTc5MDdDNzRDOEExRUJERDlEMzdGQ0JGQjM3QjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNCRkIz N0I1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAxYjFjMWItNjU2Yy00ODlkLTll ZDMtY2NjNzdjODMwMThkLzAvNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3 RkNCRkIzN0I1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILQQFn5C4wl3wgyCcyH3CMFLL4vDgUtv4t3 oKC4ckzVhOO9Kf4lGhPdpxklMBrZhKLMwVUUs/EC1rPBBlFQQrmcTx27XGtSzjwR QHVCyybrvuewwbdYWT5cBmaKefkF9OYPouKyhAh8hRj9lrnDbA5WVn0zkpNqKhss vdajJn8UhcE39NLHy3w0ypQBHWdu66XWrnIPlfmpHRwXmCn7cW11BlGDXLB3ZWae E81Y4X6X6N2EZ6YwbZTYixEXoGY5EJxwj2VovshMo01ZZOo0m3NQmhW03KT6eMTM XJuNsR2TEgo3cFRDA9thFHP+4d141kPEAxRNBez+tW4I77f2q8s= -----END CERTIFICATE-----Generated at Mon Apr 7 13:02:45 2025 by rpki-client