$ rpki-client -vvf repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft File: 6D958AAEBD8946E47C968284B2652E02A2017E9E.mft (raw, json) Hash identifier: 8/bfRaZ3qL7H1fjw6i+hAcaDhqE2sFI4y3PJsxO93m4= Subject key identifier: 22:01:65:E5:FE:65:D8:7D:86:EB:FC:09:51:58:2A:5C:AD:73:2F:FA Authority key identifier: 6D:95:8A:AE:BD:89:46:E4:7C:96:82:84:B2:65:2E:02:A2:01:7E:9E Certificate issuer: /CN=6D958AAEBD8946E47C968284B2652E02A2017E9E Certificate serial: 1D96B8FE8435B36CAFD5E99CCF807DAE0E3A11E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft Manifest number: 0156 Signing time: Thu 03 Apr 2025 15:10:04 +0000 Manifest this update: Thu 03 Apr 2025 15:05:04 +0000 Manifest next update: Mon 07 Apr 2025 00:52:04 +0000 Files and hashes: 1: 6D958AAEBD8946E47C968284B2652E02A2017E9E.crl (hash: SqUOXWUknzzbC0gS3qtyTo0rKQN93Yv+ICWjDBhkVKQ=) 2: 3130332e3136372e3135362e302f32342d3234203d3e20313530353534.roa (hash: q9Y/LW+GvgpQns3JaxXDJK5aiDeS3kCAGsXt4jOSFx0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.crl rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 00:52:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:96:b8:fe:84:35:b3:6c:af:d5:e9:9c:cf:80:7d:ae:0e:3a:11:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D958AAEBD8946E47C968284B2652E02A2017E9E Validity Not Before: Apr 3 15:05:04 2025 GMT Not After : Apr 7 00:52:04 2025 GMT Subject: CN=220165E5FE65D87D86EBFC0951582A5CAD732FFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3b:a6:3d:fc:9b:92:0c:0e:5f:69:7c:af:5d: 08:66:76:46:e5:0b:a4:2d:f8:8f:65:3c:1f:71:f6: 07:b7:b8:cb:17:8e:20:b6:fb:59:8f:bc:50:be:47: 1f:e3:4e:c1:ea:00:9c:7a:37:f0:45:2a:36:44:35: 4b:aa:22:64:fa:56:43:a2:2f:5a:a2:a1:f3:e9:b9: 06:70:7c:9a:1b:4f:a1:a3:34:67:78:92:6e:f6:4a: 9f:89:ad:4b:20:b1:be:e5:bf:c2:83:d2:ba:40:aa: 8c:a3:06:b7:df:b0:82:b0:6e:ce:8d:19:a5:24:88: 4e:5b:25:01:bf:5d:01:b6:a7:3f:83:b0:ff:0f:cf: f5:04:7f:16:ef:be:1d:4c:ac:62:cc:49:a3:19:14: 42:77:8d:35:7d:8a:fd:09:75:e4:25:73:e2:ab:0d: 1c:80:a1:c0:c6:4e:00:26:b7:86:10:3f:85:c0:76: 3f:17:ea:ba:e5:5d:67:c4:ae:a1:81:42:ff:da:d1: b0:ad:6f:e4:21:63:fb:21:1a:fb:ac:18:7d:4c:9a: 0b:1c:08:22:0b:13:5f:c8:e7:71:aa:1c:e8:5a:94: b8:42:2a:38:bb:b5:70:b8:5b:a2:f5:56:59:65:76: d6:3e:d4:5c:72:c9:f0:5c:87:e0:95:f9:ce:58:95: 00:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:01:65:E5:FE:65:D8:7D:86:EB:FC:09:51:58:2A:5C:AD:73:2F:FA X509v3 Authority Key Identifier: keyid:6D:95:8A:AE:BD:89:46:E4:7C:96:82:84:B2:65:2E:02:A2:01:7E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:97:7e:ba:5d:69:af:72:97:af:f0:f1:a1:f2:43:c2:62:4a: d7:04:5d:9f:3e:6f:84:b1:b1:b0:b4:3e:ab:27:b1:9d:83:30: a5:22:89:0c:10:ea:e7:fc:e6:d7:3d:5c:28:8f:a9:9b:69:5c: 8d:e8:d2:08:d7:85:47:51:98:90:1e:53:03:f2:aa:61:3f:fd: b6:37:5a:46:f5:91:42:66:9b:5b:04:47:df:f0:f2:dd:3c:5e: 51:71:11:98:0a:89:2e:47:ad:40:bb:87:2c:36:12:ad:49:6c: ae:69:71:23:6d:ca:1d:0d:d9:49:d9:5e:55:27:ab:e0:19:41: 22:3e:f0:22:75:ed:4a:99:74:96:ed:5d:37:41:6e:f0:cf:da: 64:7c:d0:7a:fb:84:60:0b:52:57:f0:00:29:26:f7:ef:bf:7e: d5:a6:0e:9c:98:51:d4:fc:c6:ec:29:d2:46:ff:92:77:fa:06: 13:30:96:ea:0c:63:29:17:46:b9:64:84:54:82:56:82:b6:94: 54:b2:aa:c0:00:88:5d:e1:37:89:ac:29:19:de:65:2f:a6:7b: 17:36:48:82:e5:d7:46:50:ff:c5:a0:f1:67:24:a7:df:d1:ab: 42:2a:19:1d:55:50:27:1e:62:5e:76:af:5f:2c:97:d7:ee:6c: c5:64:28:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHZa4/oQ1s2yv1emcz4B9rg46EekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJFMDJB MjAxN0U5RTAeFw0yNTA0MDMxNTA1MDRaFw0yNTA0MDcwMDUyMDRaMDMxMTAvBgNV BAMTKDIyMDE2NUU1RkU2NUQ4N0Q4NkVCRkMwOTUxNTgyQTVDQUQ3MzJGRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGO6Y9/JuSDA5faXyvXQhmdkbl C6Qt+I9lPB9x9ge3uMsXjiC2+1mPvFC+Rx/jTsHqAJx6N/BFKjZENUuqImT6VkOi L1qiofPpuQZwfJobT6GjNGd4km72Sp+JrUsgsb7lv8KD0rpAqoyjBrffsIKwbs6N GaUkiE5bJQG/XQG2pz+DsP8Pz/UEfxbvvh1MrGLMSaMZFEJ3jTV9iv0JdeQlc+Kr DRyAocDGTgAmt4YQP4XAdj8X6rrlXWfErqGBQv/a0bCtb+QhY/shGvusGH1Mmgsc CCILE1/I53GqHOhalLhCKji7tXC4W6L1VllldtY+1FxyyfBch+CV+c5YlQC1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIgFl5f5l2H2G6/wJUVgqXK1zL/owHwYDVR0j BBgwFoAUbZWKrr2JRuR8loKEsmUuAqIBfp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTgwMzEyNS1kNzc3LTQwNTYtODQ0ZC04ZDFiZWZkMDE2M2QvMC82RDk1OEFBRUJE ODk0NkU0N0M5NjgyODRCMjY1MkUwMkEyMDE3RTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJFMDJBMjAx N0U5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE4MDMxMjUtZDc3Ny00MDU2LTg0 NGQtOGQxYmVmZDAxNjNkLzAvNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJF MDJBMjAxN0U5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGXfrpdaa9yl6/w8aHyQ8JiStcEXZ8+b4Sx sbC0PqsnsZ2DMKUiiQwQ6uf85tc9XCiPqZtpXI3o0gjXhUdRmJAeUwPyqmE//bY3 Wkb1kUJmm1sER9/w8t08XlFxEZgKiS5HrUC7hyw2Eq1JbK5pcSNtyh0N2UnZXlUn q+AZQSI+8CJ17UqZdJbtXTdBbvDP2mR80Hr7hGALUlfwACkm9++/ftWmDpyYUdT8 xuwp0kb/knf6BhMwluoMYykXRrlkhFSCVoK2lFSyqsAAiF3hN4msKRneZS+mexc2 SILl10ZQ/8Wg8Wckp9/Rq0IqGR1VUCceYl52r18sl9fubMVkKAc= -----END CERTIFICATE-----Generated at Sat Apr 5 23:38:57 2025 by rpki-client