$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft File: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft (raw, json) Hash identifier: xWdwa68uZTLZTr97k6qkjTQEAaCpQ97jtQsmUUlEtr0= Subject key identifier: B9:A1:49:49:A1:DA:6C:73:E9:3F:99:69:21:BC:DF:D4:59:98:07:B5 Authority key identifier: 6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 Certificate issuer: /CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Certificate serial: 04E4BDC42B0BD8016862256FA3FC94BD55D4E164 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft Manifest number: 02B8 Signing time: Fri 04 Apr 2025 00:01:26 +0000 Manifest this update: Thu 03 Apr 2025 23:56:26 +0000 Manifest next update: Mon 07 Apr 2025 04:39:26 +0000 Files and hashes: 1: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl (hash: H12VIIV57xnJTqnlO2wX1mwYWmyKnkHMDWA+eEYsv1g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 04:39:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e4:bd:c4:2b:0b:d8:01:68:62:25:6f:a3:fc:94:bd:55:d4:e1:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Validity Not Before: Apr 3 23:56:26 2025 GMT Not After : Apr 7 04:39:26 2025 GMT Subject: CN=B9A14949A1DA6C73E93F996921BCDFD4599807B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f8:09:26:81:b0:4c:fc:ad:9e:78:2f:b7:be: ca:7d:f7:ec:40:ae:1d:80:fb:e7:83:34:04:9b:6d: 09:b8:83:04:78:51:60:ee:95:ae:30:78:f3:d2:5e: c3:98:a2:25:b3:02:f7:f2:95:02:00:50:63:7c:81: 2d:04:f0:d6:a3:ff:37:cf:1e:e9:c4:82:5a:99:71: 39:7f:a6:55:6d:ac:e4:ee:98:90:e6:8f:b7:26:f3: 9e:a6:b4:96:7b:2c:62:3c:e9:c0:2d:ee:d9:f2:ed: 93:44:40:bb:9b:6f:d8:47:00:b0:70:30:60:d0:38: c0:92:2b:ae:df:98:3d:56:c4:80:0a:d6:76:a1:cf: 3e:f2:56:c2:1f:bf:29:0f:c9:08:5c:7d:e4:64:f6: b3:57:92:f0:cc:9a:91:4c:22:55:ea:39:da:da:5f: a7:3d:e0:57:0c:95:22:6a:99:67:5d:22:c9:68:6a: 02:c3:c8:cb:10:fa:e9:ac:f9:91:a4:c2:d7:da:16: 57:1f:ae:56:27:91:06:db:67:93:7f:61:75:cd:c0: 66:f2:64:85:fe:8b:82:ea:4c:1d:ce:54:cf:b1:40: 9c:28:dd:9b:98:cd:f5:bd:6f:4b:54:47:58:4b:63: 1d:02:81:25:a1:a9:2b:b2:3f:05:6b:8b:7b:14:ca: fb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A1:49:49:A1:DA:6C:73:E9:3F:99:69:21:BC:DF:D4:59:98:07:B5 X509v3 Authority Key Identifier: keyid:6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:d6:64:20:c6:94:ff:b2:c6:3c:f2:2b:cc:aa:55:c3:23:e4: 87:43:a3:36:7c:57:0a:d9:52:24:43:97:8a:22:c5:b2:13:dd: 93:87:87:3c:5e:7c:70:8d:9a:fd:b4:2f:8c:85:2b:ae:72:77: bf:8c:ec:91:49:8a:3a:c9:91:24:51:d2:9f:3d:b7:b9:fb:20: db:21:f0:d8:df:84:db:8a:88:ec:0b:3a:30:11:ca:9e:4c:d5: e8:ec:47:24:90:76:77:ca:50:e7:32:3d:dc:c7:6c:de:00:bd: 04:d7:38:1e:5e:4a:58:9a:84:82:b2:be:33:1b:45:8b:e8:63: 38:e8:2b:bb:76:c1:8e:fe:49:da:a3:72:36:8b:22:9f:89:da: d8:6f:8a:a3:3f:33:6d:e8:f6:cc:f5:49:51:da:04:74:94:64: a2:d6:98:d9:da:19:9d:bd:62:4d:8f:3e:50:cc:7c:5f:a1:fc: 40:25:c0:8f:fc:1d:ef:70:f3:87:92:56:54:0e:34:d5:80:d3: 77:53:51:59:05:c6:45:90:23:14:ee:e3:a0:13:09:19:92:50: c9:71:da:11:7e:71:ca:85:47:32:db:89:d9:16:3c:d1:92:ef: c7:e9:bc:a7:9c:e8:ba:21:79:16:6f:38:24:3e:9b:6c:4c:42: 0e:d4:9f:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBOS9xCsL2AFoYiVvo/yUvVXU4WQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2MDAw RjI1NjFGNzAeFw0yNTA0MDMyMzU2MjZaFw0yNTA0MDcwNDM5MjZaMDMxMTAvBgNV BAMTKEI5QTE0OTQ5QTFEQTZDNzNFOTNGOTk2OTIxQkNERkQ0NTk5ODA3QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA+AkmgbBM/K2eeC+3vsp99+xA rh2A++eDNASbbQm4gwR4UWDula4wePPSXsOYoiWzAvfylQIAUGN8gS0E8Naj/zfP HunEglqZcTl/plVtrOTumJDmj7cm856mtJZ7LGI86cAt7tny7ZNEQLubb9hHALBw MGDQOMCSK67fmD1WxIAK1nahzz7yVsIfvykPyQhcfeRk9rNXkvDMmpFMIlXqOdra X6c94FcMlSJqmWddIsloagLDyMsQ+ums+ZGkwtfaFlcfrlYnkQbbZ5N/YXXNwGby ZIX+i4LqTB3OVM+xQJwo3ZuYzfW9b0tUR1hLYx0CgSWhqSuyPwVri3sUyvsfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuaFJSaHabHPpP5lpIbzf1FmYB7UwHwYDVR0j BBgwFoAUbeqbJ17M+5IOCoTQ0VjGAA8lYfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWI3N2QxZS0xNTg1LTQ2MDQtYjZiMS0wNzFmMGEyOTQwYzQvMC82REVBOUIyNzVF Q0NGQjkyMEUwQTg0RDBEMTU4QzYwMDBGMjU2MUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2MDAwRjI1 NjFGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiNzdkMWUtMTU4NS00NjA0LWI2 YjEtMDcxZjBhMjk0MGM0LzAvNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2 MDAwRjI1NjFGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPWZCDGlP+yxjzyK8yqVcMj5IdDozZ8VwrZ UiRDl4oixbIT3ZOHhzxefHCNmv20L4yFK65yd7+M7JFJijrJkSRR0p89t7n7INsh 8NjfhNuKiOwLOjARyp5M1ejsRySQdnfKUOcyPdzHbN4AvQTXOB5eSliahIKyvjMb RYvoYzjoK7t2wY7+SdqjcjaLIp+J2thviqM/M23o9sz1SVHaBHSUZKLWmNnaGZ29 Yk2PPlDMfF+h/EAlwI/8He9w84eSVlQONNWA03dTUVkFxkWQIxTu46ATCRmSUMlx 2hF+ccqFRzLbidkWPNGS78fpvKec6LoheRZvOCQ+m2xMQg7UnyY= -----END CERTIFICATE-----Generated at Sun Apr 6 00:24:10 2025 by rpki-client