$ rpki-client -vvf repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft File: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft (raw, json) Hash identifier: C0haNnlqKu3uIrm1CWQB9TATZESduqgNeLJgHflxAAY= Subject key identifier: 54:23:62:FC:D6:69:0B:FE:8A:3C:8A:4A:45:80:CC:C2:81:11:B5:B7 Authority key identifier: 6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E Certificate issuer: /CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Certificate serial: 4EF8C570E804E45E2628EDB8D6C6C31C853CC6A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft Manifest number: 95 Signing time: Thu 03 Apr 2025 20:52:09 +0000 Manifest this update: Thu 03 Apr 2025 20:47:09 +0000 Manifest next update: Mon 07 Apr 2025 05:03:09 +0000 Files and hashes: 1: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl (hash: lhMoPm+I/QNpYPR01QN9f/NnP8MzuLm1nh+THTEkPs4=) 2: 33362e35302e3231362e302f32332d3233203d3e20313437313238.roa (hash: b6fZwvmtLaBbbvobz8/5GWV8iuq3VMQzkLs1xAq/Suw=) 3: 33362e35302e3231362e302f32342d3234203d3e20313437313238.roa (hash: 48gtd2a3AmFZ0XaPW6LTEm4KEplg/YMDBfcgWSzIRWo=) 4: 33362e35302e3231372e302f32342d3234203d3e20313437313238.roa (hash: Dh81cXDVuaj6dBnZvbvezQMx/a5Vk1rSL6DeD6afOjw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 05:03:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f8:c5:70:e8:04:e4:5e:26:28:ed:b8:d6:c6:c3:1c:85:3c:c6:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Validity Not Before: Apr 3 20:47:09 2025 GMT Not After : Apr 7 05:03:09 2025 GMT Subject: CN=542362FCD6690BFE8A3C8A4A4580CCC28111B5B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:52:7f:09:4c:f6:a7:d7:b0:6b:c6:6a:83:04: f3:86:d2:3c:e4:26:68:93:61:c4:e0:38:bd:10:b4: 42:2d:69:ad:2a:3c:ca:12:1b:73:09:1c:ab:65:67: 69:fa:80:08:af:9c:bb:bf:e8:11:22:ba:32:9b:35: 34:3f:58:8d:88:3d:a8:7b:dd:42:83:b1:81:30:88: ea:8b:d4:f5:b9:cf:6e:de:52:36:aa:e2:94:80:02: ca:38:d9:8f:eb:97:88:54:5c:e2:03:23:09:e0:24: d6:e8:54:2a:9a:ca:c5:95:5e:e3:3b:f7:ae:a4:aa: af:cd:7a:50:b9:79:55:d2:4d:1b:99:ce:47:5c:29: f4:9a:e7:42:7b:88:70:89:30:e1:6f:dd:96:56:3a: 07:cb:f5:75:76:73:90:75:ed:03:44:48:74:f4:80: aa:f4:5c:e1:4b:49:6e:f9:e5:84:f8:ed:99:51:8b: 15:e9:0a:a5:17:51:7e:60:88:43:c4:53:cc:76:88: 4e:3f:24:85:48:56:1b:32:8f:6d:81:e8:30:5e:1f: 51:bd:e3:f7:4e:25:ce:3c:d3:ef:f7:31:ae:1c:b9: 39:a3:a5:a1:56:07:48:09:ff:7b:80:79:bf:cd:ba: d3:fd:03:52:58:ba:a3:75:32:2e:42:ea:71:aa:58: 1c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:23:62:FC:D6:69:0B:FE:8A:3C:8A:4A:45:80:CC:C2:81:11:B5:B7 X509v3 Authority Key Identifier: keyid:6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:66:3a:f4:4b:3f:2a:48:35:2c:a1:f7:67:14:f2:fe:8b:8b: 9b:39:e3:f1:51:59:05:d5:f2:97:3e:19:93:49:02:de:79:1e: dc:15:11:27:04:34:26:67:5b:cc:b3:91:24:ee:2b:ab:57:b7: c4:4a:2e:57:94:6c:77:e2:2f:54:5e:9b:61:cf:cf:d9:93:96: 0c:cd:33:99:1e:ab:9f:6f:23:4f:8b:cb:f5:b8:fe:61:99:d6: 97:c0:29:ac:fb:74:ed:a0:a5:97:24:e9:d6:73:9f:07:8d:33: c8:14:14:5e:a0:d3:ac:f9:1d:96:e8:f7:3d:8f:1d:cd:b1:5c: 88:ce:81:d7:72:6c:92:59:50:43:a4:5b:a8:48:f9:1a:0f:63: 4f:77:f6:9e:69:71:ec:e3:72:67:30:d6:f2:7b:77:f8:21:e6: 49:b9:fd:22:d7:22:54:ad:a5:6f:ae:7e:f8:57:6d:ef:aa:a7: 6c:ac:e1:0b:10:f7:fd:0f:f2:05:3d:e1:54:4b:e7:64:58:1c: 5a:dd:9b:c6:71:1b:fa:95:df:3a:09:85:3d:05:45:93:51:11: 37:6f:6b:e7:e3:42:79:e5:d9:b1:15:1b:fd:05:9c:53:0b:00: 07:e4:5e:56:e0:84:6e:a3:92:b7:4b:80:ad:0d:92:4f:23:f1: a8:e9:f3:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTvjFcOgE5F4mKO241sbDHIU8xqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3 QTk4MDk5RTAeFw0yNTA0MDMyMDQ3MDlaFw0yNTA0MDcwNTAzMDlaMDMxMTAvBgNV BAMTKDU0MjM2MkZDRDY2OTBCRkU4QTNDOEE0QTQ1ODBDQ0MyODExMUI1QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTUn8JTPan17BrxmqDBPOG0jzk JmiTYcTgOL0QtEItaa0qPMoSG3MJHKtlZ2n6gAivnLu/6BEiujKbNTQ/WI2IPah7 3UKDsYEwiOqL1PW5z27eUjaq4pSAAso42Y/rl4hUXOIDIwngJNboVCqaysWVXuM7 966kqq/NelC5eVXSTRuZzkdcKfSa50J7iHCJMOFv3ZZWOgfL9XV2c5B17QNESHT0 gKr0XOFLSW755YT47ZlRixXpCqUXUX5giEPEU8x2iE4/JIVIVhsyj22B6DBeH1G9 4/dOJc480+/3Ma4cuTmjpaFWB0gJ/3uAeb/NutP9A1JYuqN1Mi5C6nGqWBx5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVCNi/NZpC/6KPIpKRYDMwoERtbcwHwYDVR0j BBgwFoAUbbsQDY1GaauKXH7gVyKO1nqYCZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTk4OWZhZi00OGZiLTRmNDAtOWU3Ny0yNDNkNzhhNWI1YzQvMC82REJCMTAwRDhE NDY2OUFCOEE1QzdFRTA1NzIyOEVENjdBOTgwOTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3QTk4 MDk5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU5ODlmYWYtNDhmYi00ZjQwLTll NzctMjQzZDc4YTViNWM0LzAvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhF RDY3QTk4MDk5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdmOvRLPypINSyh92cU8v6Li5s54/FRWQXV 8pc+GZNJAt55HtwVEScENCZnW8yzkSTuK6tXt8RKLleUbHfiL1Rem2HPz9mTlgzN M5keq59vI0+Ly/W4/mGZ1pfAKaz7dO2gpZck6dZznweNM8gUFF6g06z5HZbo9z2P Hc2xXIjOgddybJJZUEOkW6hI+RoPY0939p5pcezjcmcw1vJ7d/gh5km5/SLXIlSt pW+ufvhXbe+qp2ys4QsQ9/0P8gU94VRL52RYHFrdm8ZxG/qV3zoJhT0FRZNRETdv a+fjQnnl2bEVG/0FnFMLAAfkXlbghG6jkrdLgK0Nkk8j8ajp8y4= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:31 2025 by rpki-client