$ rpki-client -vvf repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft File: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft (raw, json) Hash identifier: p6nMBCauT4lfBn3xShzp5RvZffWb37TxKsywdV6RoFc= Subject key identifier: 6C:C6:C3:00:E5:34:A2:4B:46:A2:47:E2:C9:90:F7:02:16:64:33:AB Authority key identifier: 6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 Certificate issuer: /CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Certificate serial: 4032BEF0373391342FEC2385531A62A1D1CF6A3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft Manifest number: 018B Signing time: Fri 11 Apr 2025 12:00:38 +0000 Manifest this update: Fri 11 Apr 2025 11:55:38 +0000 Manifest next update: Mon 14 Apr 2025 16:07:38 +0000 Files and hashes: 1: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl (hash: JMXjAiajuDoab7C7YLhGbHp0VWw+0NLDxdR2sJKl5NA=) 2: 3130332e3132362e3131362e302f32342d3234203d3e20313338313136.roa (hash: JQnrpdZbIEjOMrJ0gY+bWa1ZiQUgvaTVgcxr/pouQFw=) 3: 3130332e3132362e3131392e302f32342d3234203d3e20313339393732.roa (hash: nPlUaL9yF2n402rwq54ga4y4IA8tmh1JYztdhgr/yzQ=) 4: 3130332e3132362e3131372e302f32342d3234203d3e20313338313136.roa (hash: jIRxROaY+ZsyLOueu1pqPluvRpe9DT1746X5+JI8kKs=) 5: 3130332e3132362e3131382e302f32342d3234203d3e20313338313136.roa (hash: IZ8KmdFwK5i2F35Ti/yV73rwyTaK/R/VAzY82jFEZs8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 16:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:32:be:f0:37:33:91:34:2f:ec:23:85:53:1a:62:a1:d1:cf:6a:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Validity Not Before: Apr 11 11:55:38 2025 GMT Not After : Apr 14 16:07:38 2025 GMT Subject: CN=6CC6C300E534A24B46A247E2C990F702166433AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:72:51:55:43:4f:8b:bc:75:88:2a:32:26:3e: 22:93:f4:be:39:ba:3e:bb:f9:54:f6:31:21:9e:d0: 74:21:8d:b2:1f:a3:f2:16:19:10:85:52:1e:e9:09: b8:8f:03:7e:20:07:70:7a:87:c9:29:10:0e:cf:36: df:13:52:41:ff:6e:9a:a5:b0:22:db:0f:1e:30:08: 07:9e:4a:a2:d9:69:62:5b:21:29:2e:09:64:aa:95: ad:1f:33:ae:ec:2d:e0:a5:8e:75:0b:43:35:22:9b: 6c:12:b2:54:df:0b:1e:b4:e2:d5:39:c6:28:a4:90: 28:9f:13:6d:dd:8d:88:01:00:47:16:57:27:dc:b6: 96:f0:90:5b:0a:88:f9:3f:34:8f:84:83:67:34:2c: 74:f6:65:7d:57:83:b2:d7:6e:56:bf:7b:85:21:c3: f8:cf:36:f3:36:1a:37:a0:44:cd:47:ba:e9:64:ea: 32:cd:95:56:de:d8:01:c0:c2:88:6c:7f:90:b4:2b: 98:10:28:a9:73:5a:b1:d3:46:d5:60:06:1e:77:b7: f4:0f:9c:fa:26:0c:4c:b6:95:5c:c3:93:e0:ff:56: 60:b8:de:37:fb:49:03:42:ac:9b:f1:3f:a9:5e:58: 85:69:da:43:04:a6:7d:1c:69:11:d9:a5:3f:91:4e: d6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C6:C3:00:E5:34:A2:4B:46:A2:47:E2:C9:90:F7:02:16:64:33:AB X509v3 Authority Key Identifier: keyid:6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:b4:9d:d7:2f:b8:5c:a3:8c:b1:da:0e:a0:47:0e:01:f8:c4: 64:92:a2:35:a8:44:89:7c:25:95:71:3d:5d:dd:0c:9e:66:d0: 2f:2a:4d:72:3c:f3:58:b1:79:38:d1:59:33:22:ca:c4:87:76: 1c:2d:25:6f:0e:fc:10:31:d6:3a:ad:51:a2:b5:0f:73:0a:04: cd:b8:aa:c4:ff:a4:ca:39:c5:16:6b:81:c8:2c:b0:39:99:cb: 49:7b:c0:c2:0b:a4:02:33:16:98:75:05:a1:f5:e9:1e:34:8f: 16:67:d7:43:9a:17:ad:c1:f2:cf:85:55:3e:b6:a1:99:40:93: a1:69:7a:35:2d:76:a7:80:66:5d:f9:67:42:45:6d:93:fc:21: 75:cc:08:79:49:67:22:22:5d:67:b9:87:cf:70:6f:18:ea:e3: a7:e9:a6:a4:cf:e3:fc:19:c9:94:6f:32:6d:31:37:55:6d:bd: 40:c7:89:f3:fb:6d:2c:71:68:8b:52:fb:cf:32:97:42:0f:11: 9f:78:a2:f2:9b:19:c7:cd:cb:55:ab:f4:aa:74:91:30:e2:4e: 34:bc:cb:ce:e0:b4:48:79:d5:3f:03:f5:2e:96:d2:3b:9b:d0: 22:8e:d8:a1:63:ac:cf:34:56:24:03:f1:97:61:76:82:74:c4: 3f:82:04:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQDK+8DczkTQv7COFUxpiodHPaj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdE MDJGNDdFODAeFw0yNTA0MTExMTU1MzhaFw0yNTA0MTQxNjA3MzhaMDMxMTAvBgNV BAMTKDZDQzZDMzAwRTUzNEEyNEI0NkEyNDdFMkM5OTBGNzAyMTY2NDMzQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1clFVQ0+LvHWIKjImPiKT9L45 uj67+VT2MSGe0HQhjbIfo/IWGRCFUh7pCbiPA34gB3B6h8kpEA7PNt8TUkH/bpql sCLbDx4wCAeeSqLZaWJbISkuCWSqla0fM67sLeCljnULQzUim2wSslTfCx604tU5 xiikkCifE23djYgBAEcWVyfctpbwkFsKiPk/NI+Eg2c0LHT2ZX1Xg7LXbla/e4Uh w/jPNvM2GjegRM1Huulk6jLNlVbe2AHAwohsf5C0K5gQKKlzWrHTRtVgBh53t/QP nPomDEy2lVzDk+D/VmC43jf7SQNCrJvxP6leWIVp2kMEpn0caRHZpT+RTtZHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbMbDAOU0oktGokfiyZD3AhZkM6swHwYDVR0j BBgwFoAUbfioc7cLqMytoxqt2CFf99AvR+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 N2QyNmRlMC02OGNmLTQyOWMtOGIwZS04ZDY0Yjc2MmY4MjQvMC82REY4QTg3M0I3 MEJBOENDQURBMzFBQUREODIxNUZGN0QwMkY0N0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdEMDJG NDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTdkMjZkZTAtNjhjZi00MjljLThi MGUtOGQ2NGI3NjJmODI0LzAvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVG RjdEMDJGNDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIO0ndcvuFyjjLHaDqBHDgH4xGSSojWoRIl8 JZVxPV3dDJ5m0C8qTXI881ixeTjRWTMiysSHdhwtJW8O/BAx1jqtUaK1D3MKBM24 qsT/pMo5xRZrgcgssDmZy0l7wMILpAIzFph1BaH16R40jxZn10OaF63B8s+FVT62 oZlAk6FpejUtdqeAZl35Z0JFbZP8IXXMCHlJZyIiXWe5h89wbxjq46fppqTP4/wZ yZRvMm0xN1VtvUDHifP7bSxxaItS+88yl0IPEZ94ovKbGcfNy1Wr9Kp0kTDiTjS8 y87gtEh51T8D9S6W0jub0CKO2KFjrM80ViQD8ZdhdoJ0xD+CBAg= -----END CERTIFICATE-----Generated at Sat Apr 12 19:19:34 2025 by rpki-client