$ rpki-client -vvf repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft File: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft (raw, json) Hash identifier: 6FoJTCSbzEpllwALg8MKi6+kaiurlVd8NvARKRVMmjI= Subject key identifier: B9:83:88:83:00:68:31:FB:30:89:60:DD:A2:A2:A1:2F:22:11:A5:3C Authority key identifier: 6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A Certificate issuer: /CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Certificate serial: 304183B7CEA230FA90D7B50DD07225B86D815B8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft Manifest number: 0207 Signing time: Thu 03 Apr 2025 17:00:55 +0000 Manifest this update: Thu 03 Apr 2025 16:55:55 +0000 Manifest next update: Mon 07 Apr 2025 02:13:55 +0000 Files and hashes: 1: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl (hash: iIw04HEKlV09tz7iZ6Z8kYRKmdbxqhdb5OmNF/rMBgQ=) 2: 3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa (hash: xf2I9h8KQwy/WwpQfY5CtYlpiMXIfz8b66L3e8+iRiw=) 3: 3130332e3136322e3231382e302f32342d3234203d3e20313331373433.roa (hash: fAK2te0TEqpzJhgXSb4XwSxQseg6/EYiZ8aBe9jp008=) 4: 3130332e3136322e3231382e302f32332d3233203d3e20313331373433.roa (hash: rN6d1jXWm1z/gjcEJrJ6azpXdwiJ6TxL4YRERmja/s8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 02:13:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:41:83:b7:ce:a2:30:fa:90:d7:b5:0d:d0:72:25:b8:6d:81:5b:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Validity Not Before: Apr 3 16:55:55 2025 GMT Not After : Apr 7 02:13:55 2025 GMT Subject: CN=B9838883006831FB308960DDA2A2A12F2211A53C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5e:f9:c6:e6:7d:47:bf:fd:77:aa:54:75:25: 2c:5d:6d:4b:70:4a:76:57:71:09:96:86:e2:ee:1d: 3f:f2:1e:95:9f:64:11:4f:d1:85:69:a6:cf:81:01: 46:99:6c:ee:cb:be:92:40:3d:63:b9:1e:b7:97:65: c1:f4:32:95:e1:e4:a4:f8:d2:e4:7c:09:ed:91:b5: 73:1f:34:1d:8a:a1:85:42:03:39:8d:dd:b7:69:22: ac:a5:49:fd:10:20:18:f0:6b:ec:77:09:a0:16:d9: ba:84:68:9e:62:e5:b3:91:44:2f:04:f9:93:cc:24: 1b:2a:72:82:ad:de:59:87:3d:68:cb:26:3d:f1:c7: 98:a0:4d:b5:7b:52:08:cc:57:10:d0:53:8e:9f:0a: 7d:8a:70:a5:9e:37:04:6e:d1:57:f4:ae:0a:05:69: 9d:7d:a0:04:9a:81:b6:6b:c7:40:ec:8d:3a:2e:98: c9:58:40:33:4b:68:4a:88:b6:74:fc:37:23:fc:22: 11:a1:76:c6:f0:de:fb:3c:93:8c:5c:05:b2:e8:4e: f5:c8:b7:5c:f1:95:1d:dc:66:c2:ad:ad:15:ca:82: 2e:b3:f4:1d:18:3a:b4:28:b8:79:60:34:d8:d6:26: 2c:f3:4a:de:99:37:53:44:c2:e8:9e:49:82:f6:e5: 51:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:83:88:83:00:68:31:FB:30:89:60:DD:A2:A2:A1:2F:22:11:A5:3C X509v3 Authority Key Identifier: keyid:6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:e3:9b:d7:40:12:c6:1a:12:03:2e:05:db:9e:0f:6d:32:ac: 42:6f:e8:79:c3:f3:14:9e:07:30:e6:17:34:e9:ad:a6:08:03: 99:42:7b:b9:cf:15:62:4b:fc:92:b5:e5:e7:ab:58:c3:17:5d: c3:d9:76:66:a2:2a:29:62:2d:b4:cd:20:74:5d:03:77:a6:e4: c2:5e:e7:b9:21:5f:cb:da:49:a6:ac:2d:90:fa:ea:f2:d9:b0: 15:f7:ea:1d:d4:81:d0:ab:b8:f3:b7:3a:f9:25:d8:82:fe:d2: 69:55:21:19:0e:4d:f1:72:01:93:1d:07:57:dd:c6:db:78:74: 77:74:28:99:92:82:df:59:45:64:42:a3:ee:37:c4:89:7c:ca: f2:e3:c5:36:1e:f8:0a:c0:9c:6d:9a:1e:98:ef:ee:2f:a7:1e: 76:d7:44:d3:22:80:3a:70:c9:e6:58:11:56:33:f3:72:ad:d2: 56:2f:b5:92:be:eb:0a:5d:af:21:eb:00:7d:a4:38:4e:10:31: fd:11:97:5b:ee:ce:eb:65:69:35:82:8f:81:ea:5f:a6:b1:64: d1:5e:16:57:c2:87:8e:16:da:cd:51:a8:d2:80:bd:f9:2c:3a: 8b:05:19:ab:99:4b:bd:2c:f6:b7:a4:2c:5d:e8:cf:e4:4f:22: d1:01:7c:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMEGDt86iMPqQ17UN0HIluG2BW44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1 MUY5NTg3QTAeFw0yNTA0MDMxNjU1NTVaFw0yNTA0MDcwMjEzNTVaMDMxMTAvBgNV BAMTKEI5ODM4ODgzMDA2ODMxRkIzMDg5NjBEREEyQTJBMTJGMjIxMUE1M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9XvnG5n1Hv/13qlR1JSxdbUtw SnZXcQmWhuLuHT/yHpWfZBFP0YVpps+BAUaZbO7LvpJAPWO5HreXZcH0MpXh5KT4 0uR8Ce2RtXMfNB2KoYVCAzmN3bdpIqylSf0QIBjwa+x3CaAW2bqEaJ5i5bORRC8E +ZPMJBsqcoKt3lmHPWjLJj3xx5igTbV7UgjMVxDQU46fCn2KcKWeNwRu0Vf0rgoF aZ19oASagbZrx0DsjToumMlYQDNLaEqItnT8NyP8IhGhdsbw3vs8k4xcBbLoTvXI t1zxlR3cZsKtrRXKgi6z9B0YOrQouHlgNNjWJizzSt6ZN1NEwuieSYL25VHNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuYOIgwBoMfswiWDdoqKhLyIRpTwwHwYDVR0j BBgwFoAUbN9c0f3f8sAkwTopJk1w+lH5WHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDI2NjUxMS02MzllLTRjMmItOTYzNC05Y2MxZTIyZmE3MDgvMC82Q0RGNUNEMUZE REZGMkMwMjRDMTNBMjkyNjRENzBGQTUxRjk1ODdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1MUY5 NTg3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QyNjY1MTEtNjM5ZS00YzJiLTk2 MzQtOWNjMWUyMmZhNzA4LzAvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcw RkE1MUY5NTg3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPjm9dAEsYaEgMuBdueD20yrEJv6HnD8xSe BzDmFzTpraYIA5lCe7nPFWJL/JK15eerWMMXXcPZdmaiKiliLbTNIHRdA3em5MJe 57khX8vaSaasLZD66vLZsBX36h3UgdCruPO3Ovkl2IL+0mlVIRkOTfFyAZMdB1fd xtt4dHd0KJmSgt9ZRWRCo+43xIl8yvLjxTYe+ArAnG2aHpjv7i+nHnbXRNMigDpw yeZYEVYz83Kt0lYvtZK+6wpdryHrAH2kOE4QMf0Rl1vuzutlaTWCj4HqX6axZNFe FlfCh44W2s1RqNKAvfksOosFGauZS70s9rekLF3oz+RPItEBfPA= -----END CERTIFICATE-----Generated at Sat Apr 5 19:08:50 2025 by rpki-client