$ rpki-client -vvf repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft File: 6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft (raw, json) Hash identifier: eEl9lOFWwHVGdbPZUeZaEF+YxXAny8NXIBUMLxbC9Cs= Subject key identifier: 70:31:D5:46:FD:E9:D1:CF:17:1E:C8:DC:CB:76:67:ED:09:81:33:D6 Authority key identifier: 6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7 Certificate issuer: /CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7 Certificate serial: 32187C0DBB758B93B4C5B52E0D833D0757F980BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft Manifest number: 0228 Signing time: Tue 08 Apr 2025 03:31:28 +0000 Manifest this update: Tue 08 Apr 2025 03:26:28 +0000 Manifest next update: Fri 11 Apr 2025 06:59:28 +0000 Files and hashes: 1: 323430363a386563303a3a2f33322d3332203d3e203435373031.roa (hash: HCJTfWuRFERa9sFGXrmRjthEJz1rc9WgcSUiJ3w41QM=) 2: 3130332e3135362e3232372e302f32342d3234203d3e203435373031.roa (hash: /uuHBhafeaoCH+HOZHl14rc39vsEcoNz0FatbJ58vz8=) 3: 6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl (hash: NYVNJdd1GxjXK/vlwkuTxnwJoPHdC+aRCAdhYDK51Ng=) 4: 3130332e3135362e3232362e302f32342d3234203d3e203435373031.roa (hash: Pto1t/zWo/BTAn7DwBNKU7vR/ZyYh0xSxibr/QoeoHg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 06:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:18:7c:0d:bb:75:8b:93:b4:c5:b5:2e:0d:83:3d:07:57:f9:80:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7 Validity Not Before: Apr 8 03:26:28 2025 GMT Not After : Apr 11 06:59:28 2025 GMT Subject: CN=7031D546FDE9D1CF171EC8DCCB7667ED098133D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ee:67:17:99:d8:00:42:04:73:b9:e4:a6:c4: 8b:45:af:87:1d:1d:4f:69:de:b4:11:d5:c0:ea:2d: 86:f9:0d:7c:7a:96:50:e6:56:e7:dd:0b:6e:bf:30: 86:56:7f:64:4b:51:29:a3:de:b5:8b:13:7b:8c:91: 6b:2f:b3:c3:4e:89:f1:79:d9:5d:75:2d:4e:9e:10: 33:6d:69:d5:95:a6:26:61:6f:30:ce:4e:21:59:4a: bc:ee:7c:79:70:8f:82:ca:d4:5c:58:12:ef:16:ac: bb:fe:1b:62:f4:1d:a9:46:56:0c:3b:20:61:00:b6: 5d:a7:d0:5b:c4:db:7b:eb:1f:1e:49:e9:ec:a7:8f: 35:28:7b:c1:45:9c:0d:93:d5:f7:20:81:42:3c:4a: de:44:57:46:13:8a:dc:97:58:96:8d:0f:94:13:90: a8:89:fb:46:5b:98:c1:34:19:a0:62:26:9c:f6:43: 20:c6:c2:00:b8:39:14:cb:7f:5f:c1:e3:1e:49:d6: 71:01:15:fe:59:07:ce:0a:26:bb:db:e1:4c:4a:ee: 07:03:66:b9:ee:5b:56:ad:6f:2b:02:e1:93:6d:36: ab:27:4b:0e:44:ed:b3:de:22:e3:90:25:5e:b1:0b: 85:28:30:43:9e:46:a2:07:51:e7:30:10:5c:40:7a: 60:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:31:D5:46:FD:E9:D1:CF:17:1E:C8:DC:CB:76:67:ED:09:81:33:D6 X509v3 Authority Key Identifier: keyid:6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:9d:e7:4f:c8:cd:73:7d:31:d0:f1:bf:7d:ae:0b:5e:1d:21: 48:ad:8f:e4:8c:a7:c7:18:6e:cb:44:00:fb:e9:0d:6c:63:fe: 24:5a:e1:6c:d4:6a:29:93:36:ff:d9:44:3f:15:71:44:9c:86: 66:75:dd:6f:a3:d1:09:27:f5:46:14:e4:4e:8d:cb:f3:52:d3: 05:bf:b7:b8:c8:fe:00:b6:4c:cb:e5:e1:a0:bb:3d:e6:32:60: a5:74:61:f6:2d:2d:e9:3f:30:1e:3f:7f:d5:25:09:ef:91:28: 0b:3f:36:b0:32:42:32:1e:43:39:fe:2b:9d:0d:e3:51:15:fe: 8c:8d:23:b9:4d:82:e5:f6:90:7b:c7:f1:25:67:69:96:34:84: 1d:a2:2b:56:65:2e:c8:c3:64:5b:2c:eb:f7:1e:70:a4:f9:57: d0:fc:ce:43:da:76:b4:0a:d4:22:5f:1f:ef:0b:c2:56:c1:b9: 57:bd:ff:dd:26:e4:7e:73:91:c8:8b:27:c8:fc:fd:43:9a:14: 30:10:da:3b:e6:0c:6c:14:47:48:38:e9:00:f4:03:a6:f6:44: 1c:32:34:75:14:3c:7a:0a:98:e9:17:6d:6c:e6:ae:43:56:92: c9:1b:13:99:89:4a:72:9f:48:97:d4:52:73:10:3d:64:cd:0b: 02:12:ff:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMhh8Dbt1i5O0xbUuDYM9B1f5gL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkUxMjM1QzhGQzNGMkVGNkQ5RDI0NUQwNjA3QUE2RDc2 M0M1RDRFNzAeFw0yNTA0MDgwMzI2MjhaFw0yNTA0MTEwNjU5MjhaMDMxMTAvBgNV BAMTKDcwMzFENTQ2RkRFOUQxQ0YxNzFFQzhEQ0NCNzY2N0VEMDk4MTMzRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP7mcXmdgAQgRzueSmxItFr4cd HU9p3rQR1cDqLYb5DXx6llDmVufdC26/MIZWf2RLUSmj3rWLE3uMkWsvs8NOifF5 2V11LU6eEDNtadWVpiZhbzDOTiFZSrzufHlwj4LK1FxYEu8WrLv+G2L0HalGVgw7 IGEAtl2n0FvE23vrHx5J6eynjzUoe8FFnA2T1fcggUI8St5EV0YTityXWJaND5QT kKiJ+0ZbmME0GaBiJpz2QyDGwgC4ORTLf1/B4x5J1nEBFf5ZB84KJrvb4UxK7gcD ZrnuW1atbysC4ZNtNqsnSw5E7bPeIuOQJV6xC4UoMEOeRqIHUecwEFxAemD1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcDHVRv3p0c8XHsjcy3Zn7QmBM9YwHwYDVR0j BBgwFoAUbhI1yPw/LvbZ0kXQYHqm12PF1OcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTM1NWM1YS1lZmM4LTQ4ZjctOTAyZi02ZTMxZmM0Mjk5NWEvMC82RTEyMzVDOEZD M0YyRUY2RDlEMjQ1RDA2MDdBQTZENzYzQzVENEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkUxMjM1QzhGQzNGMkVGNkQ5RDI0NUQwNjA3QUE2RDc2M0M1 RDRFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjUzNTVjNWEtZWZjOC00OGY3LTkw MmYtNmUzMWZjNDI5OTVhLzAvNkUxMjM1QzhGQzNGMkVGNkQ5RDI0NUQwNjA3QUE2 RDc2M0M1RDRFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADad50/IzXN9MdDxv32uC14dIUitj+SMp8cY bstEAPvpDWxj/iRa4WzUaimTNv/ZRD8VcUSchmZ13W+j0Qkn9UYU5E6Ny/NS0wW/ t7jI/gC2TMvl4aC7PeYyYKV0YfYtLek/MB4/f9UlCe+RKAs/NrAyQjIeQzn+K50N 41EV/oyNI7lNguX2kHvH8SVnaZY0hB2iK1ZlLsjDZFss6/cecKT5V9D8zkPadrQK 1CJfH+8LwlbBuVe9/90m5H5zkciLJ8j8/UOaFDAQ2jvmDGwUR0g46QD0A6b2RBwy NHUUPHoKmOkXbWzmrkNWkskbE5mJSnKfSJfUUnMQPWTNCwIS/5s= -----END CERTIFICATE-----Generated at Tue Apr 8 18:18:25 2025 by rpki-client