$ rpki-client -vvf repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft File: 6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft (raw, json) Hash identifier: a83nLzcnrHwq8ZXmX89zeP4r55nGSTvY+BsIdhT5RtI= Subject key identifier: 73:2C:05:9E:9E:DB:C1:7E:E0:F1:17:7F:4E:09:97:FD:7E:E0:40:D2 Authority key identifier: 6E:87:49:98:2F:80:EA:7E:AC:3A:4C:80:01:6F:AC:EC:04:9A:89:FB Certificate issuer: /CN=6E8749982F80EA7EAC3A4C80016FACEC049A89FB Certificate serial: 049AEC05F6FB68CDF63484FCE35E7F72980B5D1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft Manifest number: 0146 Signing time: Sun 06 Apr 2025 15:21:33 +0000 Manifest this update: Sun 06 Apr 2025 15:16:33 +0000 Manifest next update: Wed 09 Apr 2025 15:49:33 +0000 Files and hashes: 1: 6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl (hash: FCYHhOemGguq4ngMeZQb/B/b2cRfCQq9zk/kWa+KtIU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 15:49:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:9a:ec:05:f6:fb:68:cd:f6:34:84:fc:e3:5e:7f:72:98:0b:5d:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E8749982F80EA7EAC3A4C80016FACEC049A89FB Validity Not Before: Apr 6 15:16:33 2025 GMT Not After : Apr 9 15:49:33 2025 GMT Subject: CN=732C059E9EDBC17EE0F1177F4E0997FD7EE040D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c0:34:07:bc:17:1b:4a:83:30:ca:eb:7e:a5: 7f:4b:0e:3e:14:3e:a2:80:54:87:55:a1:83:48:ab: 40:8a:d2:67:85:23:ce:3c:48:ca:be:b6:74:6a:40: e5:13:3d:10:a2:66:c4:1f:4b:bc:78:a6:4b:c0:c3: 8a:ea:3f:0e:a5:52:f6:ba:d1:c4:14:18:7c:84:1e: 18:55:1c:86:b7:fa:14:43:c0:32:9b:59:b9:c2:53: 45:76:f7:07:68:67:48:bb:38:eb:0c:0a:65:c1:aa: 51:72:e2:57:b1:2d:43:86:ce:58:18:2f:e8:42:80: 34:6d:71:b8:62:a8:d2:28:e6:bc:51:1e:09:8f:a7: 7f:7f:06:00:ff:dd:71:73:39:94:f7:b7:ec:51:82: 9c:37:95:9a:a7:8f:40:1b:32:b7:c0:22:22:b2:c6: c5:4c:c4:1e:50:db:81:35:fb:6f:16:01:25:1b:58: 14:8a:96:a6:87:03:40:fb:10:b9:23:f1:e6:30:ee: 79:36:51:89:d4:e3:e1:e7:de:fd:c6:70:20:31:23: c7:a2:de:3f:57:5a:2f:b2:fe:2b:8a:41:73:6b:86: 92:85:5b:5e:19:0e:59:cb:58:05:0e:0a:db:c9:51: ab:08:a2:94:70:ab:14:84:5c:2f:ba:01:eb:5e:aa: ff:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2C:05:9E:9E:DB:C1:7E:E0:F1:17:7F:4E:09:97:FD:7E:E0:40:D2 X509v3 Authority Key Identifier: keyid:6E:87:49:98:2F:80:EA:7E:AC:3A:4C:80:01:6F:AC:EC:04:9A:89:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:aa:c4:be:63:ae:ad:ad:82:19:bc:c3:9f:c0:26:1b:b1:d1: 6c:8f:8c:f7:b4:85:c6:b7:51:03:65:22:0d:67:fe:61:5e:73: dd:ca:50:52:74:ae:72:a6:6d:8d:75:ab:b9:a0:5f:11:76:63: 1f:cf:02:a0:f5:2e:61:89:a9:44:4c:f7:8c:0b:6a:87:51:d4: 07:66:48:14:e4:32:df:60:ca:24:af:39:43:4f:37:c4:8d:c6: 61:62:9f:17:32:19:2e:fa:a3:37:ce:56:af:64:a0:c3:36:fe: e6:fe:76:f7:79:c8:63:71:de:90:bd:db:fe:30:b1:bf:b6:ad: 4d:a4:0e:39:3d:7a:90:e6:84:f2:1f:d2:ec:23:05:1d:3b:89: 41:72:8d:ae:fe:f5:5c:c1:a4:2f:c8:d0:91:7b:87:5e:35:90: 47:b9:9c:1a:c6:dd:cd:ec:14:a6:04:47:ea:2a:c5:51:b9:80: f3:65:32:0a:58:3f:96:c4:b0:38:3e:06:6a:07:8e:ae:3a:f3: 4d:c5:86:92:94:2c:ae:d7:33:75:3d:ea:fa:1e:b8:08:56:c3: 50:5b:41:81:e9:76:61:0e:bb:f2:b2:ef:6d:f7:88:09:f7:ac: 20:ee:f4:15:1b:49:89:91:97:74:16:9f:07:cd:23:ce:49:43: 3f:24:e6:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBJrsBfb7aM32NIT8415/cpgLXRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFDRUMw NDlBODlGQjAeFw0yNTA0MDYxNTE2MzNaFw0yNTA0MDkxNTQ5MzNaMDMxMTAvBgNV BAMTKDczMkMwNTlFOUVEQkMxN0VFMEYxMTc3RjRFMDk5N0ZEN0VFMDQwRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7wDQHvBcbSoMwyut+pX9LDj4U PqKAVIdVoYNIq0CK0meFI848SMq+tnRqQOUTPRCiZsQfS7x4pkvAw4rqPw6lUva6 0cQUGHyEHhhVHIa3+hRDwDKbWbnCU0V29wdoZ0i7OOsMCmXBqlFy4lexLUOGzlgY L+hCgDRtcbhiqNIo5rxRHgmPp39/BgD/3XFzOZT3t+xRgpw3lZqnj0AbMrfAIiKy xsVMxB5Q24E1+28WASUbWBSKlqaHA0D7ELkj8eYw7nk2UYnU4+Hn3v3GcCAxI8ei 3j9XWi+y/iuKQXNrhpKFW14ZDlnLWAUOCtvJUasIopRwqxSEXC+6Aeteqv9NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcywFnp7bwX7g8Rd/TgmX/X7gQNIwHwYDVR0j BBgwFoAUbodJmC+A6n6sOkyAAW+s7ASaifswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmU3ZGU5Zi1iZmQyLTQ4NWMtOGJhMi05MjRlZWQ1MmEzMDUvMC82RTg3NDk5ODJG ODBFQTdFQUMzQTRDODAwMTZGQUNFQzA0OUE4OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFDRUMwNDlB ODlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlN2RlOWYtYmZkMi00ODVjLThi YTItOTI0ZWVkNTJhMzA1LzAvNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFD RUMwNDlBODlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMeqxL5jrq2tghm8w5/AJhux0WyPjPe0hca3 UQNlIg1n/mFec93KUFJ0rnKmbY11q7mgXxF2Yx/PAqD1LmGJqURM94wLaodR1Adm SBTkMt9gyiSvOUNPN8SNxmFinxcyGS76ozfOVq9koMM2/ub+dvd5yGNx3pC92/4w sb+2rU2kDjk9epDmhPIf0uwjBR07iUFyja7+9VzBpC/I0JF7h141kEe5nBrG3c3s FKYER+oqxVG5gPNlMgpYP5bEsDg+BmoHjq46803FhpKULK7XM3U96voeuAhWw1Bb QYHpdmEOu/Ky7233iAn3rCDu9BUbSYmRl3QWnwfNI85JQz8k5g0= -----END CERTIFICATE-----Generated at Mon Apr 7 11:45:27 2025 by rpki-client