$ rpki-client -vvf repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft File: 6D2120D281865021E16D49A2451DC53A851B5BBD.mft (raw, json) Hash identifier: 6V4UGEOhhgMsGWsS/4sUDFqJF+/GgtTXZ/iSQ2OoiGw= Subject key identifier: 7B:59:C0:B4:D1:FE:63:7D:31:3B:97:48:4D:49:DB:C3:84:22:A0:ED Authority key identifier: 6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD Certificate issuer: /CN=6D2120D281865021E16D49A2451DC53A851B5BBD Certificate serial: 389696CD4007622EF1262F9C0BE895C8DBEEF71C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft Manifest number: 3D Signing time: Thu 13 Mar 2025 09:21:34 +0000 Manifest this update: Thu 13 Mar 2025 09:16:34 +0000 Manifest next update: Sun 16 Mar 2025 12:46:34 +0000 Files and hashes: 1: 3130332e3234352e31372e302f32342d3234203d3e203436303233.roa (hash: b+Xtzw+6na2a+xMS20wYCYPacvkf2l2PSoCEFblC4OY=) 2: 3130332e3234352e31392e302f32342d3234203d3e203436303233.roa (hash: GFImrwcqsA1f+8jAtf3KA9NFE2jyS21niSNaMCPf864=) 3: 6D2120D281865021E16D49A2451DC53A851B5BBD.crl (hash: u+6z3fkWTmcY7jPx6ZlZ4v/nku4E6zIItoESJkn7YOU=) 4: 3130332e3234352e31382e302f32332d3234203d3e203436303233.roa (hash: LiUE5E5NP3y/9rJb+3iR5iXWUeVWyAD0Ol8W0BAVcIY=) 5: 3130332e3234352e31362e302f32342d3234203d3e203436303233.roa (hash: oc7a2yZBp9q1BdzfUR+tIB5Dtqa/efadojr7/o0DfQ4=) 6: 3130332e3234352e31362e302f32332d3234203d3e203436303233.roa (hash: r+Lb1druh87TuPBvbGkUhC/GpzU18DRigq7n/TRclBo=) 7: 3130332e3234352e31362e302f32322d3234203d3e203436303233.roa (hash: PpALimtbBE16UsxvYAE3t7KXuw0rzaxc/sz7ukHKaaU=) 8: 3130332e3234352e31382e302f32342d3234203d3e203436303233.roa (hash: AShL+HPisPSiiNmtbZE+edgEgIJDv3kNOSZOwH9eeKo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Mar 2025 12:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:96:96:cd:40:07:62:2e:f1:26:2f:9c:0b:e8:95:c8:db:ee:f7:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D2120D281865021E16D49A2451DC53A851B5BBD Validity Not Before: Mar 13 09:16:34 2025 GMT Not After : Mar 16 12:46:34 2025 GMT Subject: CN=7B59C0B4D1FE637D313B97484D49DBC38422A0ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:95:cd:f4:1c:3b:13:4c:b5:70:8a:cd:6c:a2: c9:93:25:09:55:6a:fe:ea:0b:68:e5:82:59:f7:94: eb:3c:6e:ae:5e:80:76:81:87:19:34:4f:ca:ec:bc: e5:61:c3:a5:30:a6:1e:a8:07:75:8c:bc:78:ef:02: 38:d0:4a:ac:9a:d1:93:29:d4:09:1e:16:e0:a4:78: 96:35:b1:cb:3a:f4:f5:31:68:5b:88:95:e2:3d:76: ba:97:11:e5:e1:cb:ae:6a:17:01:15:1e:2c:0a:10: 1c:df:14:65:b1:56:f4:20:49:84:f5:28:06:b4:b7: da:62:3c:d8:05:86:ff:73:e8:31:00:00:7e:d1:b6: b7:e4:15:6b:34:52:ae:93:f6:c2:52:c4:9a:13:d1: 84:36:0a:40:92:b9:12:ee:3d:60:74:07:f7:92:3d: 4e:05:d4:bd:e2:e4:de:97:01:fd:19:d8:6c:fd:27: a9:50:3c:99:93:f5:6a:ce:55:f1:e0:55:66:88:eb: 3c:5f:3b:7a:95:e9:5e:e4:a8:d6:98:05:db:29:88: 02:da:f6:0d:e2:22:35:00:9f:c9:c2:b9:b8:32:9c: 83:47:48:2e:22:9d:de:fd:9e:b4:85:1c:4f:1d:3f: 55:7d:4b:4c:6c:03:5b:de:f2:0a:f3:ba:2c:0d:7a: 56:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:59:C0:B4:D1:FE:63:7D:31:3B:97:48:4D:49:DB:C3:84:22:A0:ED X509v3 Authority Key Identifier: keyid:6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:85:84:01:d0:6b:8b:77:0e:7b:62:20:da:fe:65:29:23:a0: ae:02:0c:1e:06:29:a4:f5:21:3d:30:38:0b:82:8f:58:45:1d: 94:f9:9f:b5:9c:c8:f8:ee:e8:a2:13:38:d6:7a:71:f4:24:f2: 17:86:00:24:f2:1c:44:0c:7e:fb:b5:e4:17:70:aa:a0:2e:cd: b3:d8:70:44:c7:3a:ad:6f:10:49:e9:c6:ca:7f:43:b8:dd:b8: 0a:05:fa:4c:84:7f:2e:39:08:10:c7:c9:d8:1a:b2:1f:a7:03: fd:b0:6e:4c:1f:c9:98:eb:5e:65:2b:62:36:26:28:86:58:c4: 65:79:db:c1:37:9c:8e:76:ab:0f:ef:b2:b1:af:35:cc:d6:4b: 87:9e:ee:39:24:28:b8:aa:de:e9:d5:3f:3b:ed:c1:50:41:ff: 87:05:6f:6a:b6:ef:e3:c9:b1:a9:6a:da:c2:ed:c8:0c:09:e8: 1e:b0:4b:b9:91:bd:43:2d:0a:3c:d3:a3:95:61:79:3e:11:98: cf:11:01:a8:bf:b8:13:df:59:04:03:ec:c3:95:2b:ee:45:23: 2a:f5:7b:9f:ed:83:c2:1c:ee:58:94:54:2a:5f:ba:64:f1:11: 93:11:c7:9b:f6:38:d8:04:a7:24:d4:dc:a5:66:01:bd:43:23: 49:41:9e:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOJaWzUAHYi7xJi+cC+iVyNvu9xwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4 NTFCNUJCRDAeFw0yNTAzMTMwOTE2MzRaFw0yNTAzMTYxMjQ2MzRaMDMxMTAvBgNV BAMTKDdCNTlDMEI0RDFGRTYzN0QzMTNCOTc0ODRENDlEQkMzODQyMkEwRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCulc30HDsTTLVwis1sosmTJQlV av7qC2jlgln3lOs8bq5egHaBhxk0T8rsvOVhw6Uwph6oB3WMvHjvAjjQSqya0ZMp 1AkeFuCkeJY1scs69PUxaFuIleI9drqXEeXhy65qFwEVHiwKEBzfFGWxVvQgSYT1 KAa0t9piPNgFhv9z6DEAAH7RtrfkFWs0Uq6T9sJSxJoT0YQ2CkCSuRLuPWB0B/eS PU4F1L3i5N6XAf0Z2Gz9J6lQPJmT9WrOVfHgVWaI6zxfO3qV6V7kqNaYBdspiALa 9g3iIjUAn8nCubgynINHSC4ind79nrSFHE8dP1V9S0xsA1ve8grzuiwNela5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe1nAtNH+Y30xO5dITUnbw4QioO0wHwYDVR0j BBgwFoAUbSEg0oGGUCHhbUmiRR3FOoUbW70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTI3MmY3Yi1kNjU2LTQwNTgtYTdiNi1mMjVhZGYzZWQxYmUvMC82RDIxMjBEMjgx ODY1MDIxRTE2RDQ5QTI0NTFEQzUzQTg1MUI1QkJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4NTFC NUJCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTUyNzJmN2ItZDY1Ni00MDU4LWE3 YjYtZjI1YWRmM2VkMWJlLzAvNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1 M0E4NTFCNUJCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKiFhAHQa4t3DntiINr+ZSkjoK4CDB4GKaT1 IT0wOAuCj1hFHZT5n7WcyPju6KITONZ6cfQk8heGACTyHEQMfvu15BdwqqAuzbPY cETHOq1vEEnpxsp/Q7jduAoF+kyEfy45CBDHydgash+nA/2wbkwfyZjrXmUrYjYm KIZYxGV528E3nI52qw/vsrGvNczWS4ee7jkkKLiq3unVPzvtwVBB/4cFb2q27+PJ salq2sLtyAwJ6B6wS7mRvUMtCjzTo5VheT4RmM8RAai/uBPfWQQD7MOVK+5FIyr1 e5/tg8Ic7liUVCpfumTxEZMRx5v2ONgEpyTU3KVmAb1DI0lBnoI= -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:34 2025 by rpki-client