$ rpki-client -vvf repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft File: 6DA2B28F4391C01434B7229FD4D68E661BF13061.mft (raw, json) Hash identifier: 2YAIb1sleLTrOVlPcs1uqq9wxVek5/iKBCrmmq4swR0= Subject key identifier: 5D:39:0B:B0:10:0E:69:0D:DD:37:41:F7:B6:57:A9:7C:F8:F0:79:85 Authority key identifier: 6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61 Certificate issuer: /CN=6DA2B28F4391C01434B7229FD4D68E661BF13061 Certificate serial: 49638647D4E31A4161F30D5E93F2F50C8D8976FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft Manifest number: 0235 Signing time: Thu 17 Apr 2025 07:31:23 +0000 Manifest this update: Thu 17 Apr 2025 07:26:23 +0000 Manifest next update: Sun 20 Apr 2025 17:55:23 +0000 Files and hashes: 1: 34392e3233362e3232322e302f32342d3234203d3e203535363638.roa (hash: 7nW2fdNzQ/pw6iueKs/nit/sd4D7nCLJjKMOnmFO3+c=) 2: 6DA2B28F4391C01434B7229FD4D68E661BF13061.crl (hash: n0MwcH1ZaDA92cR3efLDNDSuSdz59C7SlQn7D3aMi/M=) 3: 34392e3233362e3231362e302f32342d3234203d3e203535363638.roa (hash: C1ful6krFD/D/NQklV2H82Wf+t1lC80LwN0uOUSrxSc=) 4: 34392e3233362e3231372e302f32342d3234203d3e203535363638.roa (hash: SptXDMlN81cXVQItr4QSDBANvjvdA+fjiFu71V/b7e4=) 5: 34392e3233362e3232332e302f32342d3234203d3e203535363638.roa (hash: 6Ss/J4jbsHWttbGBWZAXrFLeP7zMzLu10fV9oC9kRxs=) 6: 34392e3233362e3232312e302f32342d3234203d3e203535363638.roa (hash: P3qaAQS+9Hmz4InOLYsrCr6O0nuBDwpieqmijzpxLgQ=) 7: 34392e3233362e3231392e302f32342d3234203d3e203535363638.roa (hash: 3dUHFOcTvL6SRCYfkh3xOumINLAjfoUSiaeyY80AmMU=) 8: 34392e3233362e3231382e302f32342d3234203d3e203535363638.roa (hash: cndHnN7Y2CkZsc1bcXRUS17ntMjtPGamuBmM/0sBScA=) 9: 34392e3233362e3232302e302f32342d3234203d3e203535363638.roa (hash: KZESdVYPyK5UDmppEqYu4UgDw6S2JiyC9Aylq3V7KK8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 17:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:63:86:47:d4:e3:1a:41:61:f3:0d:5e:93:f2:f5:0c:8d:89:76:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DA2B28F4391C01434B7229FD4D68E661BF13061 Validity Not Before: Apr 17 07:26:23 2025 GMT Not After : Apr 20 17:55:23 2025 GMT Subject: CN=5D390BB0100E690DDD3741F7B657A97CF8F07985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a3:73:69:ec:a5:22:b8:f9:a8:59:36:3b:56: 9a:e8:3d:44:3f:54:6b:3f:70:45:99:80:22:96:06: be:63:e1:36:39:2f:ae:96:5a:b6:bd:67:33:09:d8: 9d:ee:9b:1b:50:5b:30:38:70:31:1b:34:51:f8:72: be:78:46:5c:f6:e8:97:8d:d6:71:9f:00:da:6b:f6: d5:12:88:41:a4:b8:85:21:1c:90:60:79:b1:f2:e5: e8:ea:e4:ce:c0:dc:f2:af:da:2b:d7:fc:38:09:32: 89:0c:8b:d3:1b:c4:5c:98:2d:d4:43:02:b2:f6:5b: b3:c0:8e:2b:1b:cc:9a:33:91:72:5c:86:57:77:a5: bd:24:b6:90:f2:6e:ac:2e:b4:8c:48:a2:4b:af:09: 93:b8:86:c7:c5:cc:89:77:9e:ae:89:ff:be:46:b1: ce:7d:71:ec:4a:5d:1c:1d:b4:73:41:af:dc:cc:75: 59:66:12:93:bf:fe:5c:4e:76:74:5d:fa:4d:0b:a7: 10:2b:ab:59:9a:29:2b:e0:20:98:3a:1a:30:8a:29: bb:38:a5:c9:5a:87:99:e4:ca:2e:a6:dc:75:05:5b: 58:86:79:a7:88:ba:11:72:b3:99:85:07:71:91:d9: 35:55:68:1a:b7:fb:0f:79:de:5e:b1:1d:bb:de:18: c3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:39:0B:B0:10:0E:69:0D:DD:37:41:F7:B6:57:A9:7C:F8:F0:79:85 X509v3 Authority Key Identifier: keyid:6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:85:ec:4d:30:32:c6:da:81:eb:b0:57:94:51:53:8d:01:1c: ff:a2:ac:af:2d:70:01:38:6d:25:cc:f5:98:ed:5c:96:3e:fb: 9e:47:32:1a:51:5e:35:68:67:4d:a9:0d:ac:06:fe:ba:83:cc: 6a:d7:5b:d1:a4:c8:25:f9:a8:e4:2c:b7:97:d8:e0:46:55:b9: 4a:76:a8:f6:b1:cb:8b:34:a2:da:ca:69:0f:40:e2:f1:e6:37: bd:0c:2d:23:cc:24:60:98:95:6f:f0:68:17:45:c6:3b:70:c8: 5c:df:e5:eb:4f:be:a5:60:e9:f7:67:44:f5:15:a8:12:00:7d: fe:de:0d:ef:d7:5a:10:b3:18:81:c1:27:c3:23:f5:ea:58:82: c1:67:e3:30:96:6e:89:08:b1:b6:1a:0e:ae:8c:81:47:f4:78: 2d:b3:ef:31:19:15:5f:5a:20:82:c7:99:dd:b2:ab:12:33:cd: 51:9e:c0:f0:a2:30:31:6e:1d:85:21:5b:36:d2:b6:2d:60:8e: 91:6d:cb:14:07:8e:1a:4c:d8:10:08:4e:d3:92:03:3e:3d:33: 2e:c4:7d:98:69:b3:6f:3b:e2:77:0d:7f:70:d6:02:a3:ca:e3: 07:9c:dd:55:39:02:ef:58:7e:b5:68:63:6b:5f:f5:49:db:7c: eb:61:05:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSWOGR9TjGkFh8w1ek/L1DI2JdvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhFNjYx QkYxMzA2MTAeFw0yNTA0MTcwNzI2MjNaFw0yNTA0MjAxNzU1MjNaMDMxMTAvBgNV BAMTKDVEMzkwQkIwMTAwRTY5MERERDM3NDFGN0I2NTdBOTdDRjhGMDc5ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1o3Np7KUiuPmoWTY7VproPUQ/ VGs/cEWZgCKWBr5j4TY5L66WWra9ZzMJ2J3umxtQWzA4cDEbNFH4cr54Rlz26JeN 1nGfANpr9tUSiEGkuIUhHJBgebHy5ejq5M7A3PKv2ivX/DgJMokMi9MbxFyYLdRD ArL2W7PAjisbzJozkXJchld3pb0ktpDybqwutIxIokuvCZO4hsfFzIl3nq6J/75G sc59cexKXRwdtHNBr9zMdVlmEpO//lxOdnRd+k0LpxArq1maKSvgIJg6GjCKKbs4 pclah5nkyi6m3HUFW1iGeaeIuhFys5mFB3GR2TVVaBq3+w953l6xHbveGMO5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXTkLsBAOaQ3dN0H3tlepfPjweYUwHwYDVR0j BBgwFoAUbaKyj0ORwBQ0tyKf1NaOZhvxMGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDBmOTljMy1lNTY3LTQxYWUtYWEwMC0yNmNiOTc4MWZiZTkvMC82REEyQjI4RjQz OTFDMDE0MzRCNzIyOUZENEQ2OEU2NjFCRjEzMDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhFNjYxQkYx MzA2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwZjk5YzMtZTU2Ny00MWFlLWFh MDAtMjZjYjk3ODFmYmU5LzAvNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhF NjYxQkYxMzA2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEiF7E0wMsbageuwV5RRU40BHP+irK8tcAE4 bSXM9ZjtXJY++55HMhpRXjVoZ02pDawG/rqDzGrXW9GkyCX5qOQst5fY4EZVuUp2 qPaxy4s0otrKaQ9A4vHmN70MLSPMJGCYlW/waBdFxjtwyFzf5etPvqVg6fdnRPUV qBIAff7eDe/XWhCzGIHBJ8Mj9epYgsFn4zCWbokIsbYaDq6MgUf0eC2z7zEZFV9a IILHmd2yqxIzzVGewPCiMDFuHYUhWzbSti1gjpFtyxQHjhpM2BAITtOSAz49My7E fZhps2874ncNf3DWAqPK4wec3VU5Au9YfrVoY2tf9UnbfOthBSA= -----END CERTIFICATE-----Generated at Thu Apr 17 22:23:37 2025 by rpki-client