$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft File: 6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft (raw, json) Hash identifier: nTpAxGKXUh6inCKJ56/hUHuNho35FasMUf8DtLuol98= Subject key identifier: 7F:EE:76:D7:C1:FC:31:3D:0D:5C:96:AC:2F:09:EA:89:AD:80:4B:80 Authority key identifier: 6F:29:B5:AE:A0:FD:7E:C5:68:AA:45:A1:72:1D:8E:5D:EA:92:6C:0F Certificate issuer: /CN=6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F Certificate serial: 6203EE5AD6942A50AA4BA44DFEB2BE3733B763FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft Manifest number: 8D Signing time: Fri 04 Apr 2025 21:11:07 +0000 Manifest this update: Fri 04 Apr 2025 21:06:07 +0000 Manifest next update: Tue 08 Apr 2025 06:30:07 +0000 Files and hashes: 1: 6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl (hash: /X9u2FvIOM3XmI10whKv03sQjsIwPfCbI4yE3n7/Ye0=) 2: 323030313a6466333a636634303a3a2f34382d3438203d3e20313532373536.roa (hash: O3osoqSALgy9N+p0Rmg0e4ZPj2EyrgRcwmVuTtoTV+o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:03:ee:5a:d6:94:2a:50:aa:4b:a4:4d:fe:b2:be:37:33:b7:63:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F Validity Not Before: Apr 4 21:06:07 2025 GMT Not After : Apr 8 06:30:07 2025 GMT Subject: CN=7FEE76D7C1FC313D0D5C96AC2F09EA89AD804B80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b6:1f:d4:b0:b6:9d:46:26:28:7b:93:76:e0: d4:f7:48:12:6d:92:64:c5:66:69:6f:28:44:30:fd: c8:f5:f7:93:71:ab:10:39:26:8d:2e:da:1c:e8:77: 70:13:02:a6:ae:86:d7:51:f5:5e:f9:8b:2f:3e:25: d0:d8:9a:e5:83:22:46:65:73:7e:0d:15:ba:99:c3: 84:e8:51:5a:96:60:98:92:d8:62:fe:69:47:70:b6: c1:fa:0f:ef:68:6c:ac:1a:c9:b2:f0:25:55:6c:b5: 9b:36:f6:81:f5:e5:72:17:74:a7:3e:3c:1a:17:e3: 72:79:fe:58:39:ea:3d:2f:26:17:74:b3:0e:49:94: 6b:85:a5:7d:2c:64:c7:fa:32:0c:ee:c0:99:a9:4f: 20:b5:c4:e6:94:11:0d:2a:08:c0:8d:4a:e8:20:88: 96:c2:cc:a7:31:e3:53:b9:da:ea:38:be:53:8b:f5: c2:18:3c:98:fc:b3:e7:4c:92:87:a7:63:5a:40:62: 5d:41:33:ab:c9:ec:fb:d5:b6:9a:ba:9d:43:b7:00: d9:c2:21:05:aa:8a:4c:ae:c8:77:57:41:f7:2d:d4: c9:57:69:37:41:4f:9d:be:37:b4:97:7a:80:0f:da: dd:b0:b4:77:0e:fb:07:50:93:17:85:63:3c:b4:55: c2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EE:76:D7:C1:FC:31:3D:0D:5C:96:AC:2F:09:EA:89:AD:80:4B:80 X509v3 Authority Key Identifier: keyid:6F:29:B5:AE:A0:FD:7E:C5:68:AA:45:A1:72:1D:8E:5D:EA:92:6C:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:ab:af:ff:b2:55:23:01:81:c0:6e:9a:4e:b4:cf:50:08:c8: 9b:bc:7c:48:62:a1:c2:df:84:72:be:9f:a2:6f:76:f2:47:fa: 88:af:5b:47:f8:a0:b8:fb:86:7c:f0:8a:8c:70:57:4e:0b:33: 40:ba:0d:af:9f:71:13:bc:2f:fd:1e:fc:7e:d7:18:d9:0c:fa: c5:06:c6:70:2d:03:99:c9:8c:66:a5:01:e0:a0:5a:a3:19:58: 1e:9b:37:f1:81:93:10:a0:61:2e:ae:7f:95:b7:ba:a3:c8:28: 71:d3:23:9a:31:ae:03:68:cc:dd:3f:64:2e:d4:f8:f6:b6:5a: b4:d1:20:86:5e:14:9b:b1:b6:1f:bb:b1:3e:1e:b5:03:45:a2: 3f:4e:5e:8b:e5:6a:44:2c:0e:d3:07:1f:ab:41:8e:b4:c3:c9: 1d:77:05:c5:c7:0e:32:8d:77:94:08:a2:c2:84:50:4e:2a:fe: e1:b4:58:98:9f:b1:04:44:c3:60:e5:41:3c:6e:14:24:23:98: 18:76:92:eb:99:8e:d5:47:ec:72:c4:2c:93:19:0c:b4:fa:56: 3f:8c:a1:db:50:d4:6d:3e:01:fa:09:34:fc:d1:64:1f:03:45: a3:d5:52:04:38:46:5e:62:fd:b5:a8:aa:10:68:99:b1:72:3c: e7:22:5f:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYgPuWtaUKlCqS6RN/rK+NzO3Y/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkYyOUI1QUVBMEZEN0VDNTY4QUE0NUExNzIxRDhFNURF QTkyNkMwRjAeFw0yNTA0MDQyMTA2MDdaFw0yNTA0MDgwNjMwMDdaMDMxMTAvBgNV BAMTKDdGRUU3NkQ3QzFGQzMxM0QwRDVDOTZBQzJGMDlFQTg5QUQ4MDRCODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRth/UsLadRiYoe5N24NT3SBJt kmTFZmlvKEQw/cj195NxqxA5Jo0u2hzod3ATAqauhtdR9V75iy8+JdDYmuWDIkZl c34NFbqZw4ToUVqWYJiS2GL+aUdwtsH6D+9obKwaybLwJVVstZs29oH15XIXdKc+ PBoX43J5/lg56j0vJhd0sw5JlGuFpX0sZMf6MgzuwJmpTyC1xOaUEQ0qCMCNSugg iJbCzKcx41O52uo4vlOL9cIYPJj8s+dMkoenY1pAYl1BM6vJ7PvVtpq6nUO3ANnC IQWqikyuyHdXQfct1MlXaTdBT52+N7SXeoAP2t2wtHcO+wdQkxeFYzy0VcIpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf+5218H8MT0NXJasLwnqia2AS4AwHwYDVR0j BBgwFoAUbym1rqD9fsVoqkWhch2OXeqSbA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWI0ZTE0ZC0wMjFkLTQwZGMtOTIzYS1jMTJkMWFmNDQzYjUvMS82RjI5QjVBRUEw RkQ3RUM1NjhBQTQ1QTE3MjFEOEU1REVBOTI2QzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkYyOUI1QUVBMEZEN0VDNTY4QUE0NUExNzIxRDhFNURFQTky NkMwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky M2EtYzEyZDFhZjQ0M2I1LzEvNkYyOUI1QUVBMEZEN0VDNTY4QUE0NUExNzIxRDhF NURFQTkyNkMwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK6rr/+yVSMBgcBumk60z1AIyJu8fEhiocLf hHK+n6JvdvJH+oivW0f4oLj7hnzwioxwV04LM0C6Da+fcRO8L/0e/H7XGNkM+sUG xnAtA5nJjGalAeCgWqMZWB6bN/GBkxCgYS6uf5W3uqPIKHHTI5oxrgNozN0/ZC7U +Pa2WrTRIIZeFJuxth+7sT4etQNFoj9OXovlakQsDtMHH6tBjrTDyR13BcXHDjKN d5QIosKEUE4q/uG0WJifsQREw2DlQTxuFCQjmBh2kuuZjtVH7HLELJMZDLT6Vj+M odtQ1G0+AfoJNPzRZB8DRaPVUgQ4Rl5i/bWoqhBombFyPOciX7w= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:39 2025 by rpki-client