$ rpki-client -vvf repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft File: 6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft (raw, json) Hash identifier: iDchiYYomg+d+H6dYqUiMd+va2QEnO0WunTTV9PLkF4= Subject key identifier: F4:4C:92:37:E1:58:95:B0:37:C8:52:51:CA:28:97:B7:3B:49:22:DF Authority key identifier: 6A:6C:81:36:54:E0:C2:93:39:E6:CA:F5:22:20:1F:8E:70:2F:EA:D3 Certificate issuer: /CN=6A6C813654E0C29339E6CAF522201F8E702FEAD3 Certificate serial: 13472A0F43C8BD28DE198DFEFD6CDBC4BB282D44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft Manifest number: 0422 Signing time: Fri 04 Apr 2025 06:32:02 +0000 Manifest this update: Fri 04 Apr 2025 06:27:02 +0000 Manifest next update: Mon 07 Apr 2025 09:46:02 +0000 Files and hashes: 1: 3130332e3136302e3138352e302f32342d3234203d3e20313431353938.roa (hash: 6rRFzhME6P86zn9rXyaucf5gPHmh+tZoSTy7dWKoWbM=) 2: 3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa (hash: 8AmYK5KC8hldB1muUmxdPCs0q6CgoH4COunOQq9ZmmY=) 3: 6A6C813654E0C29339E6CAF522201F8E702FEAD3.crl (hash: qs68FgdZbYjqYv/nwm9iMg8Qc+EVUHtIW9wlaJIHvDY=) 4: 3130332e3136302e3138342e302f32342d3234203d3e20313431353938.roa (hash: 6xG29ST0Tty2y2lHoFlo3B6yFkaFCAVaRODXgomUpB8=) 5: 3130332e3136302e3138352e302f32342d3234203d3e20313339393532.roa (hash: 4Nq+JxUfKWjr1BESTy40anbaM3Xf+v+a27YAvrUMBQ0=) 6: 3130332e3136302e3138342e302f32332d3233203d3e20313431353938.roa (hash: +5iQfae2lwfJtHF0cOlr2Gk29Amb8+u2o3UG7FztUJU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.crl rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 09:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:47:2a:0f:43:c8:bd:28:de:19:8d:fe:fd:6c:db:c4:bb:28:2d:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A6C813654E0C29339E6CAF522201F8E702FEAD3 Validity Not Before: Apr 4 06:27:02 2025 GMT Not After : Apr 7 09:46:02 2025 GMT Subject: CN=F44C9237E15895B037C85251CA2897B73B4922DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7e:45:18:76:7f:c6:ed:0d:9a:2f:f3:92:86: ef:84:2c:b3:44:19:48:95:4f:1f:31:37:f6:bc:83: bb:8a:09:9b:f4:c0:1f:d6:5b:52:2f:bd:32:72:35: 17:2b:ad:b0:92:73:3f:a8:7c:38:5f:89:a8:5f:22: 91:5a:c4:e8:c0:d5:b8:33:80:5c:62:18:33:55:21: 49:f2:a5:1f:a0:d2:d3:9b:4d:0e:9e:69:d3:52:8a: 45:93:70:7e:d9:bc:e5:03:3c:f7:f9:a0:ac:b4:2c: 00:60:a1:f5:37:41:df:3f:0f:c8:ac:90:d2:82:af: 90:7e:da:da:4f:be:2b:2f:26:55:a0:6d:a1:41:e9: 23:c5:72:bd:a3:e5:13:e7:1e:d0:39:fc:fb:5c:e4: a3:8e:f3:cd:be:cf:b2:87:a5:90:1f:66:c1:06:56: df:a2:75:d5:29:30:d3:e4:50:fd:a8:94:65:e3:01: ad:e4:69:bb:28:04:03:f4:11:da:69:fe:88:e6:7f: ff:52:93:60:54:43:d3:5e:98:17:7a:c9:c4:c0:35: 0c:6f:09:d1:cb:24:94:c8:3d:06:6e:5a:4b:9f:2a: fa:d0:9f:61:ee:32:ae:30:b8:e4:30:87:e4:d2:7b: 63:d8:21:4e:10:02:e2:97:3d:47:47:45:0e:dd:db: a9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:4C:92:37:E1:58:95:B0:37:C8:52:51:CA:28:97:B7:3B:49:22:DF X509v3 Authority Key Identifier: keyid:6A:6C:81:36:54:E0:C2:93:39:E6:CA:F5:22:20:1F:8E:70:2F:EA:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:69:9a:86:eb:fe:66:e2:40:74:d3:4d:05:ff:83:01:08:03: 5e:54:76:a7:40:1d:4b:ab:57:e1:84:90:3a:c3:d5:72:bd:2f: 8c:99:98:f9:5a:a5:0e:f7:76:09:c4:63:bb:6b:2b:81:86:2e: 06:76:77:5c:a8:45:6d:77:b0:bd:9d:cc:3f:0c:4d:60:50:77: 99:af:d9:16:7f:de:fc:78:77:b6:e1:92:6a:e1:d5:ae:24:7b: 77:f3:3a:09:7e:b8:65:27:fd:4e:fe:03:06:9d:56:2e:50:88: cd:1a:24:4e:b1:00:7f:df:b6:5c:a7:57:4c:28:2c:5c:6c:8b: 58:45:b0:0f:4d:34:e0:a8:cc:58:32:45:a4:2b:c8:37:c9:0c: 1e:c0:a8:7c:c1:02:6e:6b:dd:a5:93:43:32:cd:3a:08:de:dc: 8b:ab:f6:ad:fc:a7:9d:d4:3b:fa:2f:a3:2b:5c:a8:87:d5:84: e4:a2:c0:75:d5:f1:37:06:58:86:fd:fb:af:10:61:39:bb:30: 35:e2:bd:b6:a4:19:4f:53:32:a0:27:3d:bf:17:52:b6:53:21: ad:d1:99:15:5c:16:7f:e4:c8:4f:7a:97:62:33:33:9a:a1:50: 72:43:f1:f7:95:2b:11:3b:1d:c6:bb:7a:9f:9a:6e:dc:42:bb: 3c:1a:ab:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE0cqD0PIvSjeGY3+/WzbxLsoLUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE2QzgxMzY1NEUwQzI5MzM5RTZDQUY1MjIyMDFGOEU3 MDJGRUFEMzAeFw0yNTA0MDQwNjI3MDJaFw0yNTA0MDcwOTQ2MDJaMDMxMTAvBgNV BAMTKEY0NEM5MjM3RTE1ODk1QjAzN0M4NTI1MUNBMjg5N0I3M0I0OTIyREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyfkUYdn/G7Q2aL/OShu+ELLNE GUiVTx8xN/a8g7uKCZv0wB/WW1IvvTJyNRcrrbCScz+ofDhfiahfIpFaxOjA1bgz gFxiGDNVIUnypR+g0tObTQ6eadNSikWTcH7ZvOUDPPf5oKy0LABgofU3Qd8/D8is kNKCr5B+2tpPvisvJlWgbaFB6SPFcr2j5RPnHtA5/Ptc5KOO882+z7KHpZAfZsEG Vt+iddUpMNPkUP2olGXjAa3kabsoBAP0Edpp/ojmf/9Sk2BUQ9NemBd6ycTANQxv CdHLJJTIPQZuWkufKvrQn2HuMq4wuOQwh+TSe2PYIU4QAuKXPUdHRQ7d26nDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9EySN+FYlbA3yFJRyiiXtztJIt8wHwYDVR0j BBgwFoAUamyBNlTgwpM55sr1IiAfjnAv6tMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjgyYmNhMy1lODU4LTRkNTItYjFhMy0yZjRiYWU0N2M5ZjIvMC82QTZDODEzNjU0 RTBDMjkzMzlFNkNBRjUyMjIwMUY4RTcwMkZFQUQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE2QzgxMzY1NEUwQzI5MzM5RTZDQUY1MjIyMDFGOEU3MDJG RUFEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY4MmJjYTMtZTg1OC00ZDUyLWIx YTMtMmY0YmFlNDdjOWYyLzAvNkE2QzgxMzY1NEUwQzI5MzM5RTZDQUY1MjIyMDFG OEU3MDJGRUFEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1pmobr/mbiQHTTTQX/gwEIA15UdqdAHUur V+GEkDrD1XK9L4yZmPlapQ73dgnEY7trK4GGLgZ2d1yoRW13sL2dzD8MTWBQd5mv 2RZ/3vx4d7bhkmrh1a4ke3fzOgl+uGUn/U7+AwadVi5QiM0aJE6xAH/ftlynV0wo LFxsi1hFsA9NNOCozFgyRaQryDfJDB7AqHzBAm5r3aWTQzLNOgje3Iur9q38p53U O/ovoytcqIfVhOSiwHXV8TcGWIb9+68QYTm7MDXivbakGU9TMqAnPb8XUrZTIa3R mRVcFn/kyE96l2IzM5qhUHJD8feVKxE7Hca7ep+abtxCuzwaq/8= -----END CERTIFICATE-----Generated at Sat Apr 5 16:41:50 2025 by rpki-client