$ rpki-client -vvf repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft File: 6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft (raw, json) Hash identifier: H3cdR5Kal284eFRQ+/P9X0WAYfuRIeKnIKt/JYKcEQg= Subject key identifier: 42:D1:84:3C:A4:A2:8F:5D:6D:51:07:4A:20:47:4D:CB:F2:54:18:12 Authority key identifier: 6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9 Certificate issuer: /CN=6A75F95EA11C3F984C5C610FE9222026394BA8E9 Certificate serial: 1B2A51DBEC667F4B23EFB2A243B94E1B1D24EF4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft Manifest number: 04BE Signing time: Sat 05 Apr 2025 09:20:38 +0000 Manifest this update: Sat 05 Apr 2025 09:15:38 +0000 Manifest next update: Tue 08 Apr 2025 20:21:38 +0000 Files and hashes: 1: 6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl (hash: vugDh5NV1DpXjl+nErymOHE3YcaAzYJYnxx5z4MrIag=) 2: 323030313a6466333a623838303a3a2f34382d3438203d3e203137353338.roa (hash: qdWdsvIUCg9flRqMStTQ4oe1N2TKrSaY2SzVkpN3z2c=) 3: 3130332e3135312e39342e302f32342d3234203d3e203137353338.roa (hash: 6APR7Hv9TSOuXZpSsPHBjMrP1CKzIss5d9cN4qNnUI8=) 4: 3130332e3135312e39352e302f32342d3234203d3e203137353338.roa (hash: bGhluMXBlQ6D58wwD+73zV+Z0ql197un24tcoC8iLHI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:2a:51:db:ec:66:7f:4b:23:ef:b2:a2:43:b9:4e:1b:1d:24:ef:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A75F95EA11C3F984C5C610FE9222026394BA8E9 Validity Not Before: Apr 5 09:15:38 2025 GMT Not After : Apr 8 20:21:38 2025 GMT Subject: CN=42D1843CA4A28F5D6D51074A20474DCBF2541812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6c:bb:ff:29:ea:47:ac:7e:52:50:3b:9e:9b: 36:4a:19:bd:b1:81:01:c7:59:ee:4e:d4:e5:c1:0d: a8:8d:d1:25:5b:f0:10:b4:96:7d:69:44:d6:fd:ab: ab:c2:03:9c:71:94:2e:34:48:8a:77:bb:02:25:1f: 2b:20:50:4a:c0:14:d1:44:bc:09:9d:1f:c6:a7:ff: eb:73:a5:f7:88:88:a2:c1:ee:1e:5b:d3:77:0f:3b: e4:75:b6:d9:a0:fe:6b:39:a9:35:b5:44:e2:6e:97: 6f:7a:b3:17:57:30:f6:55:b4:b3:be:23:2a:97:34: f1:31:a7:b8:e6:69:d2:96:44:90:25:aa:c1:a1:ed: 7e:ce:4e:31:9c:b6:ba:f9:56:03:6e:a5:c4:45:d9: 2b:d5:f1:fe:77:5c:f4:4c:18:70:03:d4:0c:59:44: 3e:37:c4:04:69:b3:c7:a2:82:6f:ed:d1:4d:5a:f4: 92:63:7c:59:a0:c5:a1:6c:ad:a4:8b:13:c4:dd:17: b8:51:43:dd:63:aa:5b:6e:05:86:d0:b9:f5:a4:1d: 83:6f:2b:f8:c4:db:8c:c6:dc:f8:a2:98:ae:60:9c: ed:4d:f4:4d:2d:97:e0:45:a2:4d:03:e1:86:2c:72: 37:87:5b:dd:f9:9e:aa:bb:b4:f3:7c:66:a9:d7:17: 9e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D1:84:3C:A4:A2:8F:5D:6D:51:07:4A:20:47:4D:CB:F2:54:18:12 X509v3 Authority Key Identifier: keyid:6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:8e:95:42:a9:54:41:97:20:59:f5:c9:b2:c1:3f:54:9c:37: f5:86:7f:ba:03:3a:2d:a0:f3:1f:54:e2:85:b4:bb:5e:5d:8c: 4b:17:12:e9:f8:c8:73:00:e0:af:f3:d5:fd:08:97:e6:e2:b4: 3c:87:b1:d2:f9:b8:96:b5:19:ad:2e:1d:d0:54:95:7d:1d:cf: f6:5c:27:2b:b5:ed:68:51:de:a0:e2:a7:b0:d2:2b:7c:31:50: 34:b3:66:78:cb:e9:d2:fd:fa:0b:1b:c0:2d:e9:de:73:fd:b1: c1:df:35:59:6b:47:58:6b:48:b6:ee:74:4f:5b:c3:d2:6e:66: 8f:58:e5:6e:f8:24:49:95:df:2d:61:e4:9d:cd:65:36:17:10: 6a:48:7a:6e:79:19:fa:f3:39:f5:2f:8c:d2:80:76:fb:d2:da: 17:d0:08:2f:ea:03:39:ca:54:df:00:0d:7b:de:95:f8:19:3a: 34:d1:57:59:1e:9f:10:0d:54:00:b7:c4:b0:97:97:df:65:30: 82:78:21:d7:1a:16:74:3a:e6:3c:cb:be:ce:57:93:2c:b7:dd: f3:5e:1c:2b:ef:5d:6b:41:a9:a5:cd:b9:0b:b8:f9:4e:00:d2: 8a:01:ab:16:c1:43:45:9a:b6:6c:af:22:9d:d7:5e:bf:f1:8c: 59:c4:46:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGypR2+xmf0sj77KiQ7lOGx0k70owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE3NUY5NUVBMTFDM0Y5ODRDNUM2MTBGRTkyMjIwMjYz OTRCQThFOTAeFw0yNTA0MDUwOTE1MzhaFw0yNTA0MDgyMDIxMzhaMDMxMTAvBgNV BAMTKDQyRDE4NDNDQTRBMjhGNUQ2RDUxMDc0QTIwNDc0RENCRjI1NDE4MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqbLv/KepHrH5SUDuemzZKGb2x gQHHWe5O1OXBDaiN0SVb8BC0ln1pRNb9q6vCA5xxlC40SIp3uwIlHysgUErAFNFE vAmdH8an/+tzpfeIiKLB7h5b03cPO+R1ttmg/ms5qTW1ROJul296sxdXMPZVtLO+ IyqXNPExp7jmadKWRJAlqsGh7X7OTjGctrr5VgNupcRF2SvV8f53XPRMGHAD1AxZ RD43xARps8eigm/t0U1a9JJjfFmgxaFsraSLE8TdF7hRQ91jqltuBYbQufWkHYNv K/jE24zG3PiimK5gnO1N9E0tl+BFok0D4YYscjeHW935nqq7tPN8ZqnXF56LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQtGEPKSij11tUQdKIEdNy/JUGBIwHwYDVR0j BBgwFoAUanX5XqEcP5hMXGEP6SIgJjlLqOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTQzMzkzNC0zODQ0LTQ2NTMtOGZhYy0xODU4YjI4MjNkMWMvMC82QTc1Rjk1RUEx MUMzRjk4NEM1QzYxMEZFOTIyMjAyNjM5NEJBOEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE3NUY5NUVBMTFDM0Y5ODRDNUM2MTBGRTkyMjIwMjYzOTRC QThFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE0MzM5MzQtMzg0NC00NjUzLThm YWMtMTg1OGIyODIzZDFjLzAvNkE3NUY5NUVBMTFDM0Y5ODRDNUM2MTBGRTkyMjIw MjYzOTRCQThFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALuOlUKpVEGXIFn1ybLBP1ScN/WGf7oDOi2g 8x9U4oW0u15djEsXEun4yHMA4K/z1f0Il+bitDyHsdL5uJa1Ga0uHdBUlX0dz/Zc Jyu17WhR3qDip7DSK3wxUDSzZnjL6dL9+gsbwC3p3nP9scHfNVlrR1hrSLbudE9b w9JuZo9Y5W74JEmV3y1h5J3NZTYXEGpIem55GfrzOfUvjNKAdvvS2hfQCC/qAznK VN8ADXvelfgZOjTRV1kenxANVAC3xLCXl99lMIJ4IdcaFnQ65jzLvs5Xkyy33fNe HCvvXWtBqaXNuQu4+U4A0ooBqxbBQ0WatmyvIp3XXr/xjFnERqI= -----END CERTIFICATE-----Generated at Sat Apr 5 16:57:41 2025 by rpki-client