$ rpki-client -vvf repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft File: D456F5EAD8D734455DAEF896A9055409FF4A078F.mft (raw, json) Hash identifier: 6GL4akYw9rNkJZIDXA6/cTGOAhnF/yfNNAKcjjuWbjs= Subject key identifier: EE:EC:6B:A7:6B:92:14:B3:44:37:AD:61:FB:E3:25:1E:0A:96:67:B9 Authority key identifier: D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F Certificate issuer: /CN=D456F5EAD8D734455DAEF896A9055409FF4A078F Certificate serial: 7964BD63E78469B8004A0E84AE28FDCCB55D4219 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft Manifest number: 013E Signing time: Sat 05 Apr 2025 06:00:55 +0000 Manifest this update: Sat 05 Apr 2025 05:55:55 +0000 Manifest next update: Tue 08 Apr 2025 09:08:55 +0000 Files and hashes: 1: D456F5EAD8D734455DAEF896A9055409FF4A078F.crl (hash: m0F49VUIxSyc3Y+T8veTIUbXt7bYfdQ4FCmoLt1AJss=) 2: 3130332e32312e36342e302f32342d3234203d3e20313530393832.roa (hash: yEfEIfYRzsgFdTFRadWVOvqbZaRYioWNk9NlZG+miqI=) 3: 3130332e32312e36352e302f32342d3234203d3e20313530393832.roa (hash: G0udRvsXHRRhLNPplYWvznvJttNcudpbxgcRCTJoJEc=) 4: 3130332e32312e36342e302f32332d3233203d3e20313530393832.roa (hash: mrSmw0lReummAnMj3GqGpFEiphyO6pKxSdT7HNPj4CY=) 5: 323030313a6466323a356434303a3a2f34382d3438203d3e20313530393832.roa (hash: aaTI5DoDn0m6HY51IbL0xWwP9olw3MDvU4KJjwdfj4s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:64:bd:63:e7:84:69:b8:00:4a:0e:84:ae:28:fd:cc:b5:5d:42:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D456F5EAD8D734455DAEF896A9055409FF4A078F Validity Not Before: Apr 5 05:55:55 2025 GMT Not After : Apr 8 09:08:55 2025 GMT Subject: CN=EEEC6BA76B9214B34437AD61FBE3251E0A9667B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7c:82:8e:45:ed:35:c4:84:67:50:1a:2a:26: d6:51:b1:a4:ef:18:7c:a5:bc:b9:ef:58:c5:25:b0: c4:11:33:1c:a9:b8:82:96:af:78:4b:2c:28:fd:df: a0:3e:e3:46:33:67:9c:5a:50:41:17:e8:03:13:75: 88:0c:79:45:43:66:73:40:27:8c:80:6e:3f:7d:b0: 81:56:44:83:82:98:73:c6:85:05:7f:c4:22:e2:5e: de:26:16:73:14:7d:5a:e3:4c:77:bc:01:1a:ca:5f: c6:8e:d4:df:68:b9:ef:c9:56:1d:88:4a:55:0b:24: 64:c3:9a:55:00:fe:a1:50:96:c9:a3:99:c5:5e:de: 42:53:a3:c4:2b:c5:b2:ea:28:b3:89:b8:e8:02:dc: c2:08:98:83:5c:6a:5f:d7:01:6f:f7:9c:49:63:03: b5:90:02:16:26:27:62:ea:34:24:73:b4:b7:0e:14: c5:a5:e7:fb:48:f1:ee:c9:82:d9:e3:b3:7e:a2:72: b8:94:3d:4b:f0:83:a7:37:69:7b:e7:43:5e:52:62: 0c:98:3e:b9:cc:72:fb:e2:eb:14:c9:f9:fc:86:29: 47:96:83:14:3f:ef:14:30:7c:a1:17:7c:0b:45:26: be:66:45:ae:2c:8d:d8:4a:76:51:9f:df:73:33:58: 16:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:EC:6B:A7:6B:92:14:B3:44:37:AD:61:FB:E3:25:1E:0A:96:67:B9 X509v3 Authority Key Identifier: keyid:D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:9c:81:c2:52:9f:9a:91:af:18:c4:7c:49:bf:1b:6c:e2:c7: f6:72:50:36:ee:d5:a7:91:e0:70:d8:16:44:79:39:b1:72:79: 84:f7:b9:88:bf:64:2c:76:7e:74:1e:07:c1:93:59:70:4c:5b: 9c:4c:4f:0f:43:cd:c9:bb:28:73:49:cb:4d:95:04:d8:eb:20: 0e:49:80:dc:84:49:82:04:90:79:ab:8e:8e:a3:1c:c5:2f:0d: 44:a3:36:28:97:3e:2b:3e:5d:8f:51:38:94:d9:89:d9:10:32: 3a:2d:47:b5:88:89:f9:1f:28:68:43:03:8d:ed:27:62:1d:2d: 3a:8e:2a:cb:35:80:a7:49:16:7b:ee:73:e3:78:ea:c5:09:7a: 34:4a:d4:21:4d:ad:22:7e:0b:04:d1:c0:14:e8:09:83:d1:30: 80:75:6d:18:07:1e:8d:6c:96:5e:5d:8c:ad:04:2a:8a:06:5e: 37:5b:4f:7f:4b:bb:6e:5b:55:04:d5:38:b2:28:06:96:35:77: 65:b6:1f:bd:7c:bd:bc:83:42:3f:67:c6:e4:35:12:8a:3e:02: 7b:9b:3f:a3:fb:29:3f:9b:ae:61:44:95:94:0a:0e:6e:a5:98: bc:a1:37:60:e9:b4:78:ba:ba:60:aa:b4:69:46:76:9b:ec:5a: 4d:f1:48:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeWS9Y+eEabgASg6Erij9zLVdQhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0MDlG RjRBMDc4RjAeFw0yNTA0MDUwNTU1NTVaFw0yNTA0MDgwOTA4NTVaMDMxMTAvBgNV BAMTKEVFRUM2QkE3NkI5MjE0QjM0NDM3QUQ2MUZCRTMyNTFFMEE5NjY3QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdfIKORe01xIRnUBoqJtZRsaTv GHylvLnvWMUlsMQRMxypuIKWr3hLLCj936A+40YzZ5xaUEEX6AMTdYgMeUVDZnNA J4yAbj99sIFWRIOCmHPGhQV/xCLiXt4mFnMUfVrjTHe8ARrKX8aO1N9oue/JVh2I SlULJGTDmlUA/qFQlsmjmcVe3kJTo8QrxbLqKLOJuOgC3MIImINcal/XAW/3nElj A7WQAhYmJ2LqNCRztLcOFMWl5/tI8e7Jgtnjs36icriUPUvwg6c3aXvnQ15SYgyY PrnMcvvi6xTJ+fyGKUeWgxQ/7xQwfKEXfAtFJr5mRa4sjdhKdlGf33MzWBarAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7uxrp2uSFLNEN61h++MlHgqWZ7kwHwYDVR0j BBgwFoAU1Fb16tjXNEVdrviWqQVUCf9KB48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmJlYzhlOS02NTY4LTQ3OGQtYmQyNi1mNmU3Nzc4NzU1MTEvMC9ENDU2RjVFQUQ4 RDczNDQ1NURBRUY4OTZBOTA1NTQwOUZGNEEwNzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0MDlGRjRB MDc4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZiZWM4ZTktNjU2OC00NzhkLWJk MjYtZjZlNzc3ODc1NTExLzAvRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0 MDlGRjRBMDc4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOcgcJSn5qRrxjEfEm/G2zix/ZyUDbu1aeR 4HDYFkR5ObFyeYT3uYi/ZCx2fnQeB8GTWXBMW5xMTw9Dzcm7KHNJy02VBNjrIA5J gNyESYIEkHmrjo6jHMUvDUSjNiiXPis+XY9ROJTZidkQMjotR7WIifkfKGhDA43t J2IdLTqOKss1gKdJFnvuc+N46sUJejRK1CFNrSJ+CwTRwBToCYPRMIB1bRgHHo1s ll5djK0EKooGXjdbT39Lu25bVQTVOLIoBpY1d2W2H718vbyDQj9nxuQ1Eoo+Anub P6P7KT+brmFElZQKDm6lmLyhN2DptHi6umCqtGlGdpvsWk3xSGc= -----END CERTIFICATE-----Generated at Sat Apr 5 16:40:19 2025 by rpki-client