$ rpki-client -vvf repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft File: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft (raw, json) Hash identifier: 3TTaBcBtGImNIlPZoeVzItXsmpIR1aDhMHNzoechSJ4= Subject key identifier: 83:E5:FF:A4:81:0C:4F:6B:CF:C9:45:88:C8:33:AB:90:2E:39:E4:F0 Authority key identifier: 6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 Certificate issuer: /CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Certificate serial: 11783605FA05B34DE5A12CF274A8E9D0E62C5182 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft Manifest number: 01E3 Signing time: Mon 21 Apr 2025 19:20:50 +0000 Manifest this update: Mon 21 Apr 2025 19:15:50 +0000 Manifest next update: Thu 24 Apr 2025 22:17:50 +0000 Files and hashes: 1: 3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa (hash: 8i2rkzBjlPEti5Kr8Zm8/78pVX8xhxtJgE0QaB9hDOo=) 2: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl (hash: aFPZxPMS4VsEbvWDqi42NGMJjhR5p7FGUI2HLTYFFvc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 22:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:78:36:05:fa:05:b3:4d:e5:a1:2c:f2:74:a8:e9:d0:e6:2c:51:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Validity Not Before: Apr 21 19:15:50 2025 GMT Not After : Apr 24 22:17:50 2025 GMT Subject: CN=83E5FFA4810C4F6BCFC94588C833AB902E39E4F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:53:5e:fa:f9:52:d5:f9:53:b5:3e:dc:0e:9f: 25:39:cf:8e:6d:00:7f:27:57:5b:56:0f:c0:b8:6d: 8a:23:90:bf:26:45:48:af:d4:27:97:45:14:50:82: 09:f3:30:31:86:03:94:8c:13:d8:a7:4a:09:2c:e9: 15:e5:e4:e7:2b:ec:ed:fd:84:c9:77:41:a3:6f:c6: 92:2c:b9:1e:3b:51:a4:e5:f1:bf:90:8d:f7:47:ed: 91:10:d4:e4:9f:5c:8c:34:da:b1:64:31:30:d1:d4: f0:57:6c:a7:1a:de:df:f7:e5:59:df:e2:b3:1c:48: 2f:7d:44:d7:70:63:3b:de:94:f8:c5:5f:0b:d7:07: 0a:ee:50:5a:5c:66:53:c7:32:c1:9a:60:4e:44:16: 70:5a:6e:58:05:77:6c:c4:c1:27:44:7e:4f:b2:51: 2f:2c:78:1f:2c:75:6d:45:13:31:e5:0e:59:a0:a2: 6d:a0:c3:7e:b6:d0:74:5a:40:1e:b1:89:3c:54:68: ca:85:69:d7:00:9c:8f:a7:cd:c0:ad:2b:16:ac:fb: 7a:6b:c9:05:f0:d2:bf:fc:46:65:11:97:a2:4e:ee: 15:ad:35:5d:8e:2d:b0:e0:21:e2:d6:6b:d5:8f:98: 06:fa:52:ad:f3:e9:61:81:52:3f:26:c8:e2:21:b9: 3e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E5:FF:A4:81:0C:4F:6B:CF:C9:45:88:C8:33:AB:90:2E:39:E4:F0 X509v3 Authority Key Identifier: keyid:6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c0:b2:8d:1a:86:82:a4:3b:c8:8f:e4:b6:c7:97:92:97:0e: 0b:e2:b2:2b:a7:b3:7f:8d:7b:16:c5:73:43:11:d1:f8:57:b5: 6a:09:a9:2a:dd:0b:cc:fa:ba:8a:5f:2b:89:35:83:8b:1d:e9: 4a:b1:a0:2f:3a:52:b9:41:00:a8:17:4a:bf:43:17:77:22:ab: 95:eb:f4:dd:21:42:3d:52:06:a1:56:69:6e:18:63:bb:3e:17: 4b:38:50:31:8e:01:1c:59:c0:17:a4:8a:d5:3b:9f:9d:4a:52: 81:fc:2e:fc:78:25:cd:58:bc:ef:ca:d3:60:45:a6:c6:c4:c7: 54:43:c2:99:63:9b:44:17:ce:60:54:40:d3:a8:0a:3f:17:3a: 12:be:61:ef:ce:03:9f:a7:60:ed:da:73:d5:76:07:cc:a1:af: 59:71:3b:bf:eb:08:17:1c:01:2b:78:2e:00:19:02:24:94:aa: 35:95:3d:a3:f2:bd:77:e4:be:19:1c:97:83:cd:86:9d:96:f6: f5:03:0f:31:1c:e3:af:49:50:a2:71:c2:ea:73:63:84:03:3d: 4c:55:3d:eb:d2:c7:91:34:40:93:91:04:0e:84:07:ab:0d:72: b4:84:3f:b9:1d:66:76:c6:79:98:1f:fc:61:e3:05:ee:21:ce: 39:c9:19:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEXg2BfoFs03loSzydKjp0OYsUYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1 RkUwQkUxMTAeFw0yNTA0MjExOTE1NTBaFw0yNTA0MjQyMjE3NTBaMDMxMTAvBgNV BAMTKDgzRTVGRkE0ODEwQzRGNkJDRkM5NDU4OEM4MzNBQjkwMkUzOUU0RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjU176+VLV+VO1PtwOnyU5z45t AH8nV1tWD8C4bYojkL8mRUiv1CeXRRRQggnzMDGGA5SME9inSgks6RXl5Ocr7O39 hMl3QaNvxpIsuR47UaTl8b+QjfdH7ZEQ1OSfXIw02rFkMTDR1PBXbKca3t/35Vnf 4rMcSC99RNdwYzvelPjFXwvXBwruUFpcZlPHMsGaYE5EFnBablgFd2zEwSdEfk+y US8seB8sdW1FEzHlDlmgom2gw3620HRaQB6xiTxUaMqFadcAnI+nzcCtKxas+3pr yQXw0r/8RmURl6JO7hWtNV2OLbDgIeLWa9WPmAb6Uq3z6WGBUj8myOIhuT4NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg+X/pIEMT2vPyUWIyDOrkC455PAwHwYDVR0j BBgwFoAUb8hX33/lNQpsBaHxE/PcLl/gvhEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTIzOGE2Mi02YTk2LTQzYmMtODdhZi0wMmRiNjQxZjcxMDkvMC82RkM4NTdERjdG RTUzNTBBNkMwNUExRjExM0YzREMyRTVGRTBCRTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1RkUw QkUxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGEyMzhhNjItNmE5Ni00M2JjLTg3 YWYtMDJkYjY0MWY3MTA5LzAvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RD MkU1RkUwQkUxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7Aso0ahoKkO8iP5LbHl5KXDgvisiuns3+N exbFc0MR0fhXtWoJqSrdC8z6uopfK4k1g4sd6UqxoC86UrlBAKgXSr9DF3ciq5Xr 9N0hQj1SBqFWaW4YY7s+F0s4UDGOARxZwBekitU7n51KUoH8Lvx4Jc1YvO/K02BF psbEx1RDwpljm0QXzmBUQNOoCj8XOhK+Ye/OA5+nYO3ac9V2B8yhr1lxO7/rCBcc ASt4LgAZAiSUqjWVPaPyvXfkvhkcl4PNhp2W9vUDDzEc469JUKJxwupzY4QDPUxV PevSx5E0QJORBA6EB6sNcrSEP7kdZnbGeZgf/GHjBe4hzjnJGQc= -----END CERTIFICATE-----Generated at Tue Apr 22 23:28:52 2025 by rpki-client