$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft File: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft (raw, json) Hash identifier: 3qARuZXtNTd2J2eIC0YvUYMz39O883mcTL63uDl+fmg= Subject key identifier: A9:53:BD:D1:F6:F7:7D:E9:E5:4E:8C:46:EA:A7:F2:E0:64:1B:27:4A Authority key identifier: 69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E Certificate issuer: /CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Certificate serial: 58BB39CF970A5F91B8FF63D437C4A61F3E250F46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft Manifest number: 01B2 Signing time: Thu 03 Apr 2025 17:30:05 +0000 Manifest this update: Thu 03 Apr 2025 17:25:05 +0000 Manifest next update: Mon 07 Apr 2025 01:14:05 +0000 Files and hashes: 1: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl (hash: oSlihHb6vcJ2oFjbsBLyAEWuxKLHV+wYYGrmi6G/IJE=) 2: 3130332e31322e32382e302f32322d3234203d3e203438343635.roa (hash: 0OjoY+05zt8Z8400j80eRAcHaPBuMx39KYxLU+S/mlo=) 3: 3130332e31322e32382e302f32322d3234203d3e203535363730.roa (hash: RTKq+KNIMQtjHmaGcIFEI8O5xsHc+JbM4YVC1smExa8=) 4: 3130312e302e342e302f32322d3234203d3e203535363730.roa (hash: qmP+7iTwSq5yMJyaVS+S1MXqaf8L36fD59OGMbn8B/w=) 5: 323430303a666230303a3a2f33322d3438203d3e203535363730.roa (hash: lgxk4KiMeAbMInJr9CjWAOKKcw6Ql0u5vJeO30mSdIc=) 6: 3130312e302e342e302f32322d3234203d3e203438343635.roa (hash: 8mh8KupdLyWQUvBNib+4skF1x/A11Hrwfuz1jJcLVAs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 01:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:bb:39:cf:97:0a:5f:91:b8:ff:63:d4:37:c4:a6:1f:3e:25:0f:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Validity Not Before: Apr 3 17:25:05 2025 GMT Not After : Apr 7 01:14:05 2025 GMT Subject: CN=A953BDD1F6F77DE9E54E8C46EAA7F2E0641B274A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9b:8b:dd:15:1a:f3:fc:0a:d5:74:54:29:81: fc:50:73:31:1d:e8:e4:d5:5e:e2:90:7b:69:ed:02: 15:0c:c2:c4:88:93:fb:e1:4e:6b:48:8d:e5:a1:82: 04:fe:2c:6a:60:94:fc:da:df:f2:f0:8a:f7:34:51: 73:8e:6b:4d:a8:0e:35:8b:1d:f1:18:56:5c:6c:4c: 5a:15:72:59:6e:4a:97:cb:7a:8d:3f:d7:96:a7:66: 48:e9:b7:21:09:25:d2:7a:2b:6b:3a:94:5a:31:ce: 15:71:7a:fc:5a:66:22:c4:07:75:e3:a8:fc:45:81: 13:53:00:6d:74:7f:0f:79:0e:0c:f7:ed:90:8b:78: 2b:5f:6c:99:41:70:07:00:29:09:be:a8:a9:a0:e4: bb:dc:cf:fc:c4:97:02:9a:6e:dd:b9:55:f8:2c:30: cb:25:8f:a5:4e:ef:93:ca:a9:63:58:74:18:41:8c: 0f:5b:e1:f4:65:34:24:ec:51:20:0b:90:57:f9:36: 93:52:fe:0d:14:45:fc:e7:09:89:1b:18:2d:4a:1b: 44:60:45:85:51:47:e4:37:66:51:a3:12:c3:33:85: 5a:e8:7b:c1:c4:5c:86:ba:9f:b3:a8:b2:ba:2a:17: c6:3f:f6:a5:54:2c:3f:bf:17:f6:e4:b4:a1:24:8e: 86:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:53:BD:D1:F6:F7:7D:E9:E5:4E:8C:46:EA:A7:F2:E0:64:1B:27:4A X509v3 Authority Key Identifier: keyid:69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:2d:cf:8c:ae:3a:2c:6e:9c:a1:b8:c6:40:ba:e5:08:1e:33: d6:08:d2:89:17:a9:fc:a8:be:67:a1:ae:59:6c:57:a4:53:02: 44:5e:5c:9e:22:d6:87:4f:7d:04:63:20:7a:87:7e:70:ac:7d: e2:ed:b3:aa:cc:f4:ef:f1:9e:93:85:20:fc:a0:05:9e:1b:e9: 60:f3:c1:4b:61:47:ad:db:08:20:f5:e0:91:bf:c8:fc:d3:cd: 42:89:71:f9:2b:ec:c0:5b:f6:c1:3f:af:5d:f5:b8:c1:e0:b1: 52:7f:5a:8d:a2:3b:61:66:6b:af:62:30:84:63:36:d0:5c:e9: bd:6b:4f:35:13:db:60:6e:1f:a1:96:9d:0e:9e:25:c8:0e:67: 51:6a:cc:a4:56:4b:5d:74:55:fb:89:d1:8a:98:1e:40:50:4d: 09:9c:89:4a:dc:8a:1a:ef:60:ee:a6:33:c0:01:3e:e9:53:fd: 45:3a:9b:86:be:5f:1a:95:2c:f4:2f:d9:7e:c8:a8:17:7c:18: 68:ed:e9:43:4e:47:45:2c:17:23:8e:e5:1c:d1:89:eb:52:6c: 32:dd:c6:7b:da:d6:cc:1d:9e:d9:a6:49:c7:98:6f:04:f9:20: 66:93:4f:01:16:c3:fb:95:1c:2e:d5:74:63:68:8a:8c:57:09: e6:f0:6e:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWLs5z5cKX5G4/2PUN8SmHz4lD0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVG RTNFN0MzRTAeFw0yNTA0MDMxNzI1MDVaFw0yNTA0MDcwMTE0MDVaMDMxMTAvBgNV BAMTKEE5NTNCREQxRjZGNzdERTlFNTRFOEM0NkVBQTdGMkUwNjQxQjI3NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0m4vdFRrz/ArVdFQpgfxQczEd 6OTVXuKQe2ntAhUMwsSIk/vhTmtIjeWhggT+LGpglPza3/Lwivc0UXOOa02oDjWL HfEYVlxsTFoVclluSpfLeo0/15anZkjptyEJJdJ6K2s6lFoxzhVxevxaZiLEB3Xj qPxFgRNTAG10fw95Dgz37ZCLeCtfbJlBcAcAKQm+qKmg5Lvcz/zElwKabt25Vfgs MMslj6VO75PKqWNYdBhBjA9b4fRlNCTsUSALkFf5NpNS/g0URfznCYkbGC1KG0Rg RYVRR+Q3ZlGjEsMzhVroe8HEXIa6n7OosroqF8Y/9qVULD+/F/bktKEkjoZZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqVO90fb3fenlToxG6qfy4GQbJ0owHwYDVR0j BBgwFoAUaWcBLvykNpjo4bckuR38Xv4+fD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDZlYTdmYS05NGQyLTRkZGMtYThlNi01ZGM2MjZjMjkxZDQvMC82OTY3MDEyRUZD QTQzNjk4RThFMUI3MjRCOTFERkM1RUZFM0U3QzNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVGRTNF N0MzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4 ZTYtNWRjNjI2YzI5MWQ0LzAvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZD NUVGRTNFN0MzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACgtz4yuOixunKG4xkC65QgeM9YI0okXqfyo vmehrllsV6RTAkReXJ4i1odPfQRjIHqHfnCsfeLts6rM9O/xnpOFIPygBZ4b6WDz wUthR63bCCD14JG/yPzTzUKJcfkr7MBb9sE/r131uMHgsVJ/Wo2iO2Fma69iMIRj NtBc6b1rTzUT22BuH6GWnQ6eJcgOZ1FqzKRWS110VfuJ0YqYHkBQTQmciUrcihrv YO6mM8ABPulT/UU6m4a+XxqVLPQv2X7IqBd8GGjt6UNOR0UsFyOO5RzRietSbDLd xnva1swdntmmSceYbwT5IGaTTwEWw/uVHC7VdGNoioxXCebwblM= -----END CERTIFICATE-----Generated at Sat Apr 5 17:50:10 2025 by rpki-client