$ rpki-client -vvf repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft File: 6D2120D281865021E16D49A2451DC53A851B5BBD.mft (raw, json) Hash identifier: 0S2sN8Ns8MgmmNNmF4RlDHRDgTjjuuUxMgQKgKgQvS8= Subject key identifier: A0:32:BB:08:98:61:C1:E5:2D:38:57:39:EC:B7:80:CC:F9:80:4C:16 Authority key identifier: 6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD Certificate issuer: /CN=6D2120D281865021E16D49A2451DC53A851B5BBD Certificate serial: 2A99F903920F723491D80CE474394B124D1D465F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft Manifest number: 32 Signing time: Sun 16 Feb 2025 16:31:36 +0000 Manifest this update: Sun 16 Feb 2025 16:26:36 +0000 Manifest next update: Thu 20 Feb 2025 04:10:36 +0000 Files and hashes: 1: 6D2120D281865021E16D49A2451DC53A851B5BBD.crl (hash: pTQ188BtZM0h1CzDJThqLXBFHVGM9bSgkLxHQb93AhA=) 2: 3130332e3234352e31392e302f32342d3234203d3e203436303233.roa (hash: GFImrwcqsA1f+8jAtf3KA9NFE2jyS21niSNaMCPf864=) 3: 3130332e3234352e31372e302f32342d3234203d3e203436303233.roa (hash: b+Xtzw+6na2a+xMS20wYCYPacvkf2l2PSoCEFblC4OY=) 4: 3130332e3234352e31362e302f32342d3234203d3e203436303233.roa (hash: oc7a2yZBp9q1BdzfUR+tIB5Dtqa/efadojr7/o0DfQ4=) 5: 3130332e3234352e31382e302f32332d3234203d3e203436303233.roa (hash: LiUE5E5NP3y/9rJb+3iR5iXWUeVWyAD0Ol8W0BAVcIY=) 6: 3130332e3234352e31362e302f32332d3234203d3e203436303233.roa (hash: r+Lb1druh87TuPBvbGkUhC/GpzU18DRigq7n/TRclBo=) 7: 3130332e3234352e31382e302f32342d3234203d3e203436303233.roa (hash: AShL+HPisPSiiNmtbZE+edgEgIJDv3kNOSZOwH9eeKo=) 8: 3130332e3234352e31362e302f32322d3234203d3e203436303233.roa (hash: PpALimtbBE16UsxvYAE3t7KXuw0rzaxc/sz7ukHKaaU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 04:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:99:f9:03:92:0f:72:34:91:d8:0c:e4:74:39:4b:12:4d:1d:46:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D2120D281865021E16D49A2451DC53A851B5BBD Validity Not Before: Feb 16 16:26:36 2025 GMT Not After : Feb 20 04:10:36 2025 GMT Subject: CN=A032BB089861C1E52D385739ECB780CCF9804C16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e8:e0:b3:de:31:b9:1a:98:31:35:5f:74:96: d2:df:20:24:1e:4b:a9:4a:ba:31:f7:f8:e6:f1:fb: 89:08:da:01:14:9c:0d:f9:42:43:3c:11:22:44:e9: a7:6e:a8:d7:be:49:05:2f:18:88:5d:95:db:ac:fb: 6b:68:0e:b0:17:74:5a:9a:5e:bf:cd:21:10:16:e8: 6e:c1:19:18:22:1c:56:e6:2a:a7:7b:67:0b:7e:4d: 19:d9:3f:8c:b1:1c:ba:25:5a:e4:12:fe:19:6b:c2: e7:d5:99:d4:0f:7c:41:6f:54:8b:8e:15:04:ce:a5: f6:ee:e4:de:da:23:92:92:8e:dc:54:83:48:45:d5: e4:75:3b:1a:ac:4d:40:99:a7:73:89:19:45:13:06: f5:54:9d:f0:e5:c3:3c:5e:47:7f:a9:55:3d:7b:5b: a7:db:55:5a:9e:da:c9:23:a9:78:02:20:25:41:fb: e0:4c:6e:aa:16:b0:26:29:cf:25:f7:92:90:d9:e1: d0:00:19:47:ea:c6:db:3d:01:a7:8d:0c:9a:7e:6a: 56:07:bc:74:d3:e8:71:69:83:d6:c0:73:9c:80:65: 31:bc:e7:c2:cb:14:80:76:a1:ee:09:11:d2:3b:0c: f5:d7:05:a2:00:65:45:a7:a4:49:d2:f4:bc:4f:8b: 11:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:32:BB:08:98:61:C1:E5:2D:38:57:39:EC:B7:80:CC:F9:80:4C:16 X509v3 Authority Key Identifier: keyid:6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:0c:a2:1c:c0:6c:b4:28:d5:69:c5:4b:15:f5:a2:bd:00:b5: 20:11:11:39:39:7c:e2:06:3d:e0:5c:81:61:22:05:32:63:4f: 58:03:83:76:82:b3:22:92:85:f0:81:95:29:71:4a:4d:9d:6a: d9:6e:68:ee:db:38:4f:c8:9e:e1:24:50:6b:6b:82:0d:df:8e: d2:59:e4:f6:e3:08:fc:12:4f:30:95:20:df:78:e4:54:a7:fb: f5:4c:07:8e:d4:47:61:f2:a5:a4:29:0f:40:66:26:53:b7:97: ca:73:24:9c:2b:33:b7:b8:3f:8f:46:d0:c2:38:aa:e6:ef:f1: 37:28:74:3d:4b:d5:78:61:e7:6b:e0:31:e6:b7:b2:c7:ad:c9: 4a:aa:ba:cb:4b:8e:e9:0e:26:02:04:28:f8:f7:a5:de:9a:dd: 9f:d3:13:79:e8:77:d9:31:2e:87:57:c7:29:ff:a2:bc:1e:2f: a6:2e:ac:bc:9c:ea:fc:39:75:1e:86:14:34:ec:d0:fb:6f:f6: 4f:83:d5:2b:1b:c4:90:b8:b2:b7:16:f6:ea:8a:45:d4:69:e6: 8d:83:0e:51:21:99:e7:a2:e1:3e:eb:48:1d:55:34:a8:5b:6c: 2b:d0:8a:13:c4:73:a1:c9:ae:e5:7e:4e:89:90:0a:31:d5:de: dd:d3:6a:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKpn5A5IPcjSR2AzkdDlLEk0dRl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4 NTFCNUJCRDAeFw0yNTAyMTYxNjI2MzZaFw0yNTAyMjAwNDEwMzZaMDMxMTAvBgNV BAMTKEEwMzJCQjA4OTg2MUMxRTUyRDM4NTczOUVDQjc4MENDRjk4MDRDMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC6OCz3jG5GpgxNV90ltLfICQe S6lKujH3+Obx+4kI2gEUnA35QkM8ESJE6aduqNe+SQUvGIhdldus+2toDrAXdFqa Xr/NIRAW6G7BGRgiHFbmKqd7Zwt+TRnZP4yxHLolWuQS/hlrwufVmdQPfEFvVIuO FQTOpfbu5N7aI5KSjtxUg0hF1eR1OxqsTUCZp3OJGUUTBvVUnfDlwzxeR3+pVT17 W6fbVVqe2skjqXgCICVB++BMbqoWsCYpzyX3kpDZ4dAAGUfqxts9AaeNDJp+alYH vHTT6HFpg9bAc5yAZTG858LLFIB2oe4JEdI7DPXXBaIAZUWnpEnS9LxPixFNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoDK7CJhhweUtOFc57LeAzPmATBYwHwYDVR0j BBgwFoAUbSEg0oGGUCHhbUmiRR3FOoUbW70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTI3MmY3Yi1kNjU2LTQwNTgtYTdiNi1mMjVhZGYzZWQxYmUvMC82RDIxMjBEMjgx ODY1MDIxRTE2RDQ5QTI0NTFEQzUzQTg1MUI1QkJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4NTFC NUJCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTUyNzJmN2ItZDY1Ni00MDU4LWE3 YjYtZjI1YWRmM2VkMWJlLzAvNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1 M0E4NTFCNUJCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMMohzAbLQo1WnFSxX1or0AtSARETk5fOIG PeBcgWEiBTJjT1gDg3aCsyKShfCBlSlxSk2datluaO7bOE/InuEkUGtrgg3fjtJZ 5PbjCPwSTzCVIN945FSn+/VMB47UR2HypaQpD0BmJlO3l8pzJJwrM7e4P49G0MI4 qubv8TcodD1L1Xhh52vgMea3ssetyUqqustLjukOJgIEKPj3pd6a3Z/TE3nod9kx LodXxyn/orweL6YurLyc6vw5dR6GFDTs0Ptv9k+D1SsbxJC4srcW9uqKRdRp5o2D DlEhmeei4T7rSB1VNKhbbCvQihPEc6HJruV+TomQCjHV3t3TapA= -----END CERTIFICATE-----Generated at Mon Feb 17 07:32:25 2025 by rpki-client