$ rpki-client -vvf repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft File: 6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft (raw, json) Hash identifier: r6/yidb//7KFEqhyh73+lqfClVP+w8wyT4loho16h7s= Subject key identifier: F4:29:33:07:51:32:BC:CC:70:60:19:36:37:3E:13:94:55:80:39:C3 Authority key identifier: 6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67 Certificate issuer: /CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567 Certificate serial: 20D1F1ACE9C94836646DE15BAD2D21B22ABB19B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft Manifest number: 38 Signing time: Mon 07 Apr 2025 23:21:26 +0000 Manifest this update: Mon 07 Apr 2025 23:16:26 +0000 Manifest next update: Fri 11 Apr 2025 08:42:26 +0000 Files and hashes: 1: 6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl (hash: GiUxWmlvj/Dm2/W9PImBi0/hdnJn+JZTDZ8OfCaVZ0Y=) 2: 3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa (hash: TQYvew4a918dkXbQmghAnG3D/BGB9JTVAzjo9Xx8OFQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 08:42:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:d1:f1:ac:e9:c9:48:36:64:6d:e1:5b:ad:2d:21:b2:2a:bb:19:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567 Validity Not Before: Apr 7 23:16:26 2025 GMT Not After : Apr 11 08:42:26 2025 GMT Subject: CN=F42933075132BCCC70601936373E1394558039C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:37:a0:71:8a:7c:47:5b:a8:b1:26:fb:43:f2: f5:4c:7b:fd:e2:b6:c4:3d:c1:52:52:41:16:4d:3c: d2:3f:68:bf:cf:ce:65:69:9a:9f:8b:5c:16:d0:30: 85:c4:ab:8c:61:2f:cd:1b:bb:2a:b5:0b:ec:00:36: 65:cf:79:bb:df:c3:8c:7a:fb:83:53:53:89:45:39: 39:6c:1f:bf:29:66:9a:c8:0e:51:3f:4f:f9:03:91: e2:32:f1:b2:0f:9c:24:89:8a:f3:a3:b1:d1:77:da: b6:cc:36:db:ca:ea:bb:f0:ec:e8:cb:a1:79:87:28: 6e:51:d6:81:6b:d2:46:fa:68:17:32:0b:79:c5:aa: d9:6d:cb:8b:70:bc:ad:b8:0a:34:77:74:75:53:19: 58:b1:84:0c:e8:2a:33:fc:34:21:e0:8b:f4:16:c0: 2e:1a:d3:12:32:30:6e:13:5a:31:3e:57:4f:17:f8: ac:e7:ed:46:ba:04:68:f5:07:70:3f:18:76:0d:02: e9:b2:c1:c8:90:a0:16:7c:36:b6:4a:d3:e2:b9:71: 41:4b:bd:1c:8b:bd:db:e5:3a:e2:c7:88:b3:2f:fc: aa:ef:9e:4c:5e:33:55:35:3b:dc:e9:27:da:87:1c: 19:92:07:41:12:c0:97:28:ae:ae:dd:45:14:04:29: 25:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:29:33:07:51:32:BC:CC:70:60:19:36:37:3E:13:94:55:80:39:C3 X509v3 Authority Key Identifier: keyid:6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:4c:10:1e:f5:ec:8b:6c:eb:3c:f2:ee:2b:99:bd:ef:f5:29: 96:2d:45:cc:1d:0d:70:c0:4a:c7:d6:35:35:e9:e0:36:3a:98: af:3f:c3:af:be:45:02:da:14:9e:84:24:14:73:64:00:90:58: 64:59:2d:fd:c9:ae:f5:8e:cd:e5:41:6c:22:41:56:4c:ab:c2: 11:25:22:48:0f:ed:4f:f2:09:a5:bc:de:42:ef:03:04:6c:99: 4a:ee:a3:48:eb:45:d3:33:90:b7:52:ba:69:f1:e1:62:91:18: 96:ae:58:10:47:c2:78:ca:f1:f7:d4:08:0d:c1:17:65:b8:7d: be:80:9e:5b:f3:3c:e1:22:d0:d0:eb:b3:2b:36:1f:bd:6c:7e: 6a:d4:1c:68:b5:c2:b8:c4:59:ed:93:15:7a:53:17:02:23:17: b1:74:58:3e:36:f0:c8:fe:23:c6:9f:4e:96:51:47:00:79:fc: f0:cf:11:24:2c:d1:aa:05:19:92:3c:34:56:16:38:4f:25:38: 8c:82:be:c1:c9:57:a4:1c:ac:34:1d:5a:c3:8b:f1:f0:0f:ea: 03:b7:8e:49:24:4b:75:5f:e6:3c:94:4b:9d:a0:51:8b:9b:55: 5c:93:c2:8c:f5:14:72:b3:f3:6a:f5:cd:a2:7f:11:0d:af:d2: 73:ec:c2:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUINHxrOnJSDZkbeFbrS0hsiq7GbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIzOUNB MkJENDU2NzAeFw0yNTA0MDcyMzE2MjZaFw0yNTA0MTEwODQyMjZaMDMxMTAvBgNV BAMTKEY0MjkzMzA3NTEzMkJDQ0M3MDYwMTkzNjM3M0UxMzk0NTU4MDM5QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJN6BxinxHW6ixJvtD8vVMe/3i tsQ9wVJSQRZNPNI/aL/PzmVpmp+LXBbQMIXEq4xhL80buyq1C+wANmXPebvfw4x6 +4NTU4lFOTlsH78pZprIDlE/T/kDkeIy8bIPnCSJivOjsdF32rbMNtvK6rvw7OjL oXmHKG5R1oFr0kb6aBcyC3nFqtlty4twvK24CjR3dHVTGVixhAzoKjP8NCHgi/QW wC4a0xIyMG4TWjE+V08X+Kzn7Ua6BGj1B3A/GHYNAumywciQoBZ8NrZK0+K5cUFL vRyLvdvlOuLHiLMv/KrvnkxeM1U1O9zpJ9qHHBmSB0ESwJcorq7dRRQEKSV3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9CkzB1EyvMxwYBk2Nz4TlFWAOcMwHwYDVR0j BBgwFoAUa9Rc2RLUGSvN659rc7AjnKK9RWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzU4ZmI3Yy02N2I4LTRiY2UtOTZkOS1iZTkxMmUzZjczZGQvMC82QkQ0NUNEOTEy RDQxOTJCQ0RFQjlGNkI3M0IwMjM5Q0EyQkQ0NTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIzOUNBMkJE NDU2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzAvNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIz OUNBMkJENDU2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1MEB717Its6zzy7iuZve/1KZYtRcwdDXDA SsfWNTXp4DY6mK8/w6++RQLaFJ6EJBRzZACQWGRZLf3JrvWOzeVBbCJBVkyrwhEl IkgP7U/yCaW83kLvAwRsmUruo0jrRdMzkLdSumnx4WKRGJauWBBHwnjK8ffUCA3B F2W4fb6AnlvzPOEi0NDrsys2H71sfmrUHGi1wrjEWe2TFXpTFwIjF7F0WD428Mj+ I8afTpZRRwB5/PDPESQs0aoFGZI8NFYWOE8lOIyCvsHJV6QcrDQdWsOL8fAP6gO3 jkkkS3Vf5jyUS52gUYubVVyTwoz1FHKz82r1zaJ/EQ2v0nPswtY= -----END CERTIFICATE-----Generated at Wed Apr 9 15:22:59 2025 by rpki-client