$ rpki-client -vvf repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft File: 6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft (raw, json) Hash identifier: k+tjTp4RLZfR3BlV0Vk58/c6kFmHhh3tzKvuMW7wep8= Subject key identifier: 17:F8:18:54:CA:7A:52:02:BD:C0:62:60:C0:28:F4:41:C7:56:D1:39 Authority key identifier: 6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87 Certificate issuer: /CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187 Certificate serial: 4ED9821B46D679021CFBC24B025D4BC3358D19DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft Manifest number: 0143 Signing time: Fri 04 Apr 2025 16:51:06 +0000 Manifest this update: Fri 04 Apr 2025 16:46:06 +0000 Manifest next update: Mon 07 Apr 2025 20:25:06 +0000 Files and hashes: 1: 6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl (hash: VxMxwNKFmOUfur5jXdeyuHtcZQuhDoMeUEOkxbLA1VE=) 2: 3130332e3234352e3232352e302f32342d3234203d3e20313331373635.roa (hash: /abYrA5yp8Nre7zAYDHYwFsGgEom3ZQxvMGjfmSiyZM=) 3: 3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa (hash: +wBbu1cMZCAeulSyWUHjp9S6buaiwbJ9EYT932oWUfk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d9:82:1b:46:d6:79:02:1c:fb:c2:4b:02:5d:4b:c3:35:8d:19:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187 Validity Not Before: Apr 4 16:46:06 2025 GMT Not After : Apr 7 20:25:06 2025 GMT Subject: CN=17F81854CA7A5202BDC06260C028F441C756D139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:92:31:32:d8:10:78:65:f3:9f:67:f0:c6:98: 5a:ff:78:7c:68:c5:79:1e:f2:a0:51:06:c6:f8:88: 2a:df:b3:b5:79:78:d0:88:ac:9e:02:64:6e:8e:d5: 7f:f3:33:b9:7b:02:33:a2:bf:7f:8b:37:f1:f9:5f: c7:4d:99:96:7a:86:2e:e6:8e:be:e7:7e:16:1d:48: 5c:13:cb:2d:f6:b5:56:01:e2:d2:fd:69:35:dc:04: 3c:1a:92:74:40:a7:71:ef:a0:c8:4d:60:a9:b6:f5: ba:ca:93:9d:85:66:cc:f3:2a:de:ae:0c:74:3c:ea: 36:3d:29:a5:52:21:46:ba:44:9a:5d:fa:bf:3b:a3: 3a:45:33:4b:2b:0f:de:e1:8d:72:f5:81:4d:53:8c: 0f:1b:7d:f8:fe:de:cf:63:60:b2:fd:66:5d:98:87: c2:ca:04:d1:09:49:3b:8d:aa:c6:ad:1d:0f:05:53: 4c:ac:2c:25:8a:53:22:37:32:ce:ad:d8:8f:48:a3: 23:8a:b3:47:58:6b:2a:8d:6d:49:8f:e3:be:75:7a: 49:4b:09:51:9f:e9:c3:1f:1e:41:fa:81:71:30:7c: 10:6a:1b:51:81:2d:18:2e:d1:f6:63:aa:e8:c9:7b: b1:63:4a:10:7b:8f:d5:5b:a9:ab:c6:99:9f:00:d2: 40:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F8:18:54:CA:7A:52:02:BD:C0:62:60:C0:28:F4:41:C7:56:D1:39 X509v3 Authority Key Identifier: keyid:6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:53:0f:10:78:1f:e7:10:13:f6:07:f1:ef:3a:a1:67:d5:ee: 8d:e9:f9:e9:1d:07:50:33:7d:2c:b4:95:13:99:f5:a8:02:e5: 00:33:3b:c2:f7:ae:ff:5f:e7:a1:89:2b:1a:f2:f5:07:25:e1: d9:6e:eb:cc:69:81:fa:4c:b6:d9:b1:0c:03:a4:ba:da:a5:db: fb:4c:19:71:c5:d1:54:3a:e1:1d:6b:29:80:9a:d2:f7:fc:84: 10:cb:29:66:b3:1d:bd:1d:be:1a:a3:68:5e:0a:6b:92:2c:ba: 3a:65:7d:1a:0e:b2:f2:9d:4a:2e:c8:d2:d7:1e:39:a4:d7:c2: 39:02:67:ac:a8:dd:5b:53:42:38:c5:d0:60:a0:27:46:b0:c4: 82:41:9d:a7:08:48:6b:92:0d:2f:77:1a:81:87:c6:32:2c:ae: bb:50:f2:22:0d:78:89:5a:d3:1a:79:66:9d:2e:22:8e:15:20: c5:e5:c4:6f:23:ba:1f:2c:d6:57:ba:7c:4c:80:f5:71:71:4d: ec:59:0f:2f:fa:22:f0:b4:d5:2f:19:92:b3:c8:0d:21:fd:25: d9:25:20:1a:13:18:41:41:b9:e7:28:eb:ad:22:87:18:72:08: 01:b5:c3:e3:38:d8:77:0f:ca:30:e3:39:52:1a:05:2f:44:fd: 5b:33:0b:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTtmCG0bWeQIc+8JLAl1LwzWNGd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkzMzIz MkVDMjE4NzAeFw0yNTA0MDQxNjQ2MDZaFw0yNTA0MDcyMDI1MDZaMDMxMTAvBgNV BAMTKDE3RjgxODU0Q0E3QTUyMDJCREMwNjI2MEMwMjhGNDQxQzc1NkQxMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDokjEy2BB4ZfOfZ/DGmFr/eHxo xXke8qBRBsb4iCrfs7V5eNCIrJ4CZG6O1X/zM7l7AjOiv3+LN/H5X8dNmZZ6hi7m jr7nfhYdSFwTyy32tVYB4tL9aTXcBDwaknRAp3HvoMhNYKm29brKk52FZszzKt6u DHQ86jY9KaVSIUa6RJpd+r87ozpFM0srD97hjXL1gU1TjA8bffj+3s9jYLL9Zl2Y h8LKBNEJSTuNqsatHQ8FU0ysLCWKUyI3Ms6t2I9IoyOKs0dYayqNbUmP4751eklL CVGf6cMfHkH6gXEwfBBqG1GBLRgu0fZjqujJe7FjShB7j9VbqavGmZ8A0kC3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF/gYVMp6UgK9wGJgwCj0QcdW0TkwHwYDVR0j BBgwFoAUb7Ta52sSygDgc0Sk3S+TMjLsIYcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmQ3MDM0Ni01YmRmLTQ5NjEtYTc0Zi01NWFlODU1NjcyYTEvMC82RkI0REFFNzZC MTJDQTAwRTA3MzQ0QTRERDJGOTMzMjMyRUMyMTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkzMzIzMkVD MjE4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkNzAzNDYtNWJkZi00OTYxLWE3 NGYtNTVhZTg1NTY3MmExLzAvNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkz MzIzMkVDMjE4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZTDxB4H+cQE/YH8e86oWfV7o3p+ekdB1Az fSy0lROZ9agC5QAzO8L3rv9f56GJKxry9Qcl4dlu68xpgfpMttmxDAOkutql2/tM GXHF0VQ64R1rKYCa0vf8hBDLKWazHb0dvhqjaF4Ka5IsujplfRoOsvKdSi7I0tce OaTXwjkCZ6yo3VtTQjjF0GCgJ0awxIJBnacISGuSDS93GoGHxjIsrrtQ8iINeIla 0xp5Zp0uIo4VIMXlxG8juh8s1le6fEyA9XFxTexZDy/6IvC01S8ZkrPIDSH9Jdkl IBoTGEFBueco660ihxhyCAG1w+M42HcPyjDjOVIaBS9E/VszC1g= -----END CERTIFICATE-----Generated at Sat Apr 5 16:48:05 2025 by rpki-client