$ rpki-client -vvf repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft File: 6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft (raw, json) Hash identifier: dxJ5CdVKzrvqIEbl7o8MrpbeIeWVxrCXnyARqD89xLQ= Subject key identifier: 49:70:4C:0A:4C:D6:E5:B6:FE:A6:51:4B:4E:18:93:64:38:9C:87:29 Authority key identifier: 6C:FA:BB:BC:88:D3:9C:7F:78:09:5D:A7:D3:D3:5D:D3:AA:2E:95:67 Certificate issuer: /CN=6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567 Certificate serial: 4BEBFFA0E504F6557A453E6B94F20A436A8F7A08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft Manifest number: 02A4 Signing time: Tue 15 Apr 2025 07:01:06 +0000 Manifest this update: Tue 15 Apr 2025 06:56:06 +0000 Manifest next update: Fri 18 Apr 2025 11:19:06 +0000 Files and hashes: 1: 3130332e3137352e3135382e302f32332d3234203d3e20313331313131.roa (hash: 3KWxu9r2n6F1wE4c/OJESTppczRA3jrjk7WQMkJS/t0=) 2: 6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.crl (hash: i453cOUSFSqfjIYYeBt8LcRtmYTmSkp6UvYHrc+e/jo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.crl rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 11:19:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:eb:ff:a0:e5:04:f6:55:7a:45:3e:6b:94:f2:0a:43:6a:8f:7a:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567 Validity Not Before: Apr 15 06:56:06 2025 GMT Not After : Apr 18 11:19:06 2025 GMT Subject: CN=49704C0A4CD6E5B6FEA6514B4E189364389C8729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:82:7d:58:46:9b:c5:61:76:01:a7:ab:3f:dd: b1:2d:07:7c:c6:4d:c4:d8:43:9f:ad:00:b5:3e:29: 9e:74:3e:12:a0:b8:cd:59:64:74:b6:1e:1b:b6:56: 93:1f:42:c3:8e:6b:1f:8f:86:e9:9a:0a:32:02:f3: 1a:8d:fc:ac:0e:a9:be:5e:53:64:13:d3:e8:b4:4a: 9a:c0:1d:1f:ff:e5:49:6a:ee:8a:47:82:8a:4e:fe: 60:a0:6d:d2:66:b7:ef:4b:fa:92:46:dd:d6:6d:ed: f3:72:b3:fe:7e:47:1c:30:d3:60:36:6e:3a:f6:63: 45:55:6a:cd:14:fe:07:1f:7a:ae:cd:33:88:2e:ee: b5:c9:0a:b5:f4:24:77:ec:2b:f6:6c:d7:5d:68:25: 7e:b2:26:51:c4:3c:e5:a5:7d:ec:79:92:27:79:cb: 45:42:fe:76:5c:05:ce:e3:13:45:07:c3:b9:ec:a7: a1:09:4b:f0:78:5e:e0:90:98:cd:8f:f8:91:d7:34: a2:5e:3d:02:cb:d7:14:13:97:bd:65:31:28:5e:2a: fb:78:92:34:e5:da:c4:9c:93:02:2e:19:7a:ef:6c: 6a:2b:28:ae:f7:02:34:b2:4a:09:03:9b:f1:b7:fc: e7:38:29:f5:75:46:9a:72:9a:37:94:03:dc:5e:ff: 40:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:70:4C:0A:4C:D6:E5:B6:FE:A6:51:4B:4E:18:93:64:38:9C:87:29 X509v3 Authority Key Identifier: keyid:6C:FA:BB:BC:88:D3:9C:7F:78:09:5D:A7:D3:D3:5D:D3:AA:2E:95:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:bd:21:a9:38:e8:f5:a0:5b:e5:4a:42:58:8f:b9:3d:0e:5f: ff:b5:2e:56:5c:d0:af:dc:c1:3d:c3:62:58:5e:33:a8:49:8c: c0:ed:fc:88:dd:e5:1b:33:58:82:34:89:fa:27:77:ff:f9:e1: ec:5c:23:be:dc:1d:1e:05:ef:bd:bf:4b:7a:81:0e:95:98:67: 0e:ad:0a:96:d5:05:66:7f:6b:da:d5:94:35:c0:ba:70:f8:b5: e3:07:71:25:33:66:25:3c:b6:17:6b:99:68:05:6d:96:e6:f6: 52:ee:af:84:60:72:54:9b:4b:77:09:06:eb:db:65:04:be:88: 8d:d9:86:e7:27:83:1c:b3:3e:45:5d:4e:bb:f8:11:80:fd:f2: 84:b5:b3:d1:e2:6c:0f:14:5e:17:aa:44:df:c7:40:dc:17:de: d3:d1:0c:d5:a0:4b:61:ae:09:ae:14:00:a1:9f:0b:cf:00:26: 08:87:bd:45:d1:7d:3c:a4:f0:c7:14:27:4d:e5:0c:d3:f7:96: 9e:5c:4f:00:06:75:53:b6:52:b8:8f:74:ce:87:cd:a2:40:75: 81:aa:a0:1d:f7:d1:c6:46:01:65:f0:71:6b:e9:a0:7e:f0:26: b2:b2:cb:a2:85:07:e7:79:6b:2b:93:b4:6c:87:56:16:19:5c: a3:ec:ca:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS+v/oOUE9lV6RT5rlPIKQ2qPeggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNGQUJCQkM4OEQzOUM3Rjc4MDk1REE3RDNEMzVERDNB QTJFOTU2NzAeFw0yNTA0MTUwNjU2MDZaFw0yNTA0MTgxMTE5MDZaMDMxMTAvBgNV BAMTKDQ5NzA0QzBBNENENkU1QjZGRUE2NTE0QjRFMTg5MzY0Mzg5Qzg3MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+gn1YRpvFYXYBp6s/3bEtB3zG TcTYQ5+tALU+KZ50PhKguM1ZZHS2Hhu2VpMfQsOOax+PhumaCjIC8xqN/KwOqb5e U2QT0+i0SprAHR//5Ulq7opHgopO/mCgbdJmt+9L+pJG3dZt7fNys/5+Rxww02A2 bjr2Y0VVas0U/gcfeq7NM4gu7rXJCrX0JHfsK/Zs111oJX6yJlHEPOWlfex5kid5 y0VC/nZcBc7jE0UHw7nsp6EJS/B4XuCQmM2P+JHXNKJePQLL1xQTl71lMSheKvt4 kjTl2sSckwIuGXrvbGorKK73AjSySgkDm/G3/Oc4KfV1RppymjeUA9xe/0BvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSXBMCkzW5bb+plFLThiTZDichykwHwYDVR0j BBgwFoAUbPq7vIjTnH94CV2n09Nd06oulWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Mzg3NGNmMy1hZGIxLTQ5NDctYTdlNC1hMmQzMmM1NGVkMWYvMC82Q0ZBQkJCQzg4 RDM5QzdGNzgwOTVEQTdEM0QzNUREM0FBMkU5NTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNGQUJCQkM4OEQzOUM3Rjc4MDk1REE3RDNEMzVERDNBQTJF OTU2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzM4NzRjZjMtYWRiMS00OTQ3LWE3 ZTQtYTJkMzJjNTRlZDFmLzAvNkNGQUJCQkM4OEQzOUM3Rjc4MDk1REE3RDNEMzVE RDNBQTJFOTU2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFO9Iak46PWgW+VKQliPuT0OX/+1LlZc0K/c wT3DYlheM6hJjMDt/Ijd5RszWII0ifond//54excI77cHR4F772/S3qBDpWYZw6t CpbVBWZ/a9rVlDXAunD4teMHcSUzZiU8thdrmWgFbZbm9lLur4RgclSbS3cJBuvb ZQS+iI3ZhucngxyzPkVdTrv4EYD98oS1s9HibA8UXheqRN/HQNwX3tPRDNWgS2Gu Ca4UAKGfC88AJgiHvUXRfTyk8McUJ03lDNP3lp5cTwAGdVO2UriPdM6HzaJAdYGq oB330cZGAWXwcWvpoH7wJrKyy6KFB+d5ayuTtGyHVhYZXKPsyrQ= -----END CERTIFICATE-----Generated at Thu Apr 17 12:13:32 2025 by rpki-client