$ rpki-client -vvf repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft File: 6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft (raw, json) Hash identifier: cicJgG6T6cAKaiZzwmbrw8iQXddzzVdWqAPv43Zjb+w= Subject key identifier: 0C:F1:34:6C:42:AC:84:DF:ED:55:C4:6B:BC:F5:31:70:6A:B7:0F:BD Authority key identifier: 6D:CC:69:50:8E:F4:E6:70:EF:BC:5C:69:20:3D:6B:12:0F:A9:39:2F Certificate issuer: /CN=6DCC69508EF4E670EFBC5C69203D6B120FA9392F Certificate serial: 0D42D8BB0B66D99FAA024011A568C66808780A11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft Manifest number: 04C5 Signing time: Sat 05 Apr 2025 22:00:42 +0000 Manifest this update: Sat 05 Apr 2025 21:55:42 +0000 Manifest next update: Wed 09 Apr 2025 09:06:42 +0000 Files and hashes: 1: 3130332e3135322e3131382e302f32332d3233203d3e20313430343433.roa (hash: gnXPIqK5MMiCa1ujBebDIgz1gVLhuLS9+UI8N5LQANY=) 2: 6DCC69508EF4E670EFBC5C69203D6B120FA9392F.crl (hash: O2/G3kT9rPI0INv4kLZvNLRhVjN3aK38eKCYZ/aW9pI=) 3: 3130332e3135322e3131392e302f32342d3234203d3e20313430343433.roa (hash: 5nsUaJsoHljodwn0u7F5BmbwvHAGQAdxB49YHcH+PVw=) 4: 3130332e3135322e3131382e302f32342d3234203d3e20313430343433.roa (hash: yhFwxGYSgpX9NxLtpkSVYLsiFIe9rD19hKsWw63qYc8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.crl rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 09:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:42:d8:bb:0b:66:d9:9f:aa:02:40:11:a5:68:c6:68:08:78:0a:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DCC69508EF4E670EFBC5C69203D6B120FA9392F Validity Not Before: Apr 5 21:55:42 2025 GMT Not After : Apr 9 09:06:42 2025 GMT Subject: CN=0CF1346C42AC84DFED55C46BBCF531706AB70FBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6e:72:57:bb:47:82:15:a2:11:b7:0c:74:11: aa:34:89:f5:05:8d:5d:f6:b7:d0:74:fd:3a:d2:e5: 1a:86:e3:ca:32:85:b3:a4:20:a3:75:a8:db:2a:74: 02:89:d7:6a:99:79:db:bf:c9:a2:97:20:5b:45:99: c9:e1:03:9e:e9:a0:bd:fd:65:32:af:1b:36:ae:fe: c8:9b:35:a6:3a:fd:d5:d9:9a:8f:bc:dd:e6:0f:da: c8:c4:39:93:59:e5:4a:2a:15:f6:ae:71:64:e9:cd: 7f:7e:c0:db:52:cf:44:5a:76:19:96:35:4a:30:47: 4f:97:05:dc:a3:b6:40:36:1e:2d:83:da:a7:01:83: 71:97:5b:a9:1d:18:11:a3:a3:6b:71:0c:3e:f7:98: 9d:58:84:4d:cb:ff:7d:eb:05:cb:3e:d5:a7:87:b6: 57:f6:94:f2:60:3e:3c:8d:28:d0:71:19:e7:f1:cb: ed:2f:e5:68:9c:98:19:2c:a9:3b:50:00:08:50:b1: e0:04:46:d6:63:fd:ac:37:ab:9f:f6:64:bf:a6:3f: bd:11:8b:c8:0d:04:73:59:1a:23:9a:8b:7f:87:43: 64:c9:e1:16:85:ed:86:96:d5:30:9b:bc:ec:f8:8a: 47:8d:a7:4e:61:85:56:c5:20:f8:ba:f9:41:8e:92: f5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F1:34:6C:42:AC:84:DF:ED:55:C4:6B:BC:F5:31:70:6A:B7:0F:BD X509v3 Authority Key Identifier: keyid:6D:CC:69:50:8E:F4:E6:70:EF:BC:5C:69:20:3D:6B:12:0F:A9:39:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:1f:20:7c:50:56:38:12:3a:0a:3a:35:e2:70:a6:66:53:1f: ae:cc:30:9a:3d:a4:20:99:6f:14:42:0b:cc:0f:01:bb:5b:1b: c4:d9:f0:96:82:6c:20:36:f0:59:4a:d0:b0:5d:4d:21:4a:1c: f3:1d:4b:ac:33:9f:55:df:e6:57:b4:16:bc:bc:70:fa:d5:b8: d6:f1:1a:ab:3f:e2:de:d2:c1:04:2f:94:f4:af:01:90:38:5d: a3:21:ae:3e:af:e3:c9:bf:db:90:ea:b4:05:cf:bb:cd:fb:7a: 61:85:36:77:a5:5f:f5:62:0c:8e:dc:b2:bb:f6:c8:56:22:0a: 7b:79:32:a0:25:c3:02:42:23:35:f8:26:62:eb:57:14:58:58: de:a3:27:b2:24:d5:b2:36:8c:ba:89:a7:d8:ae:6d:7a:6f:f5: 0e:69:e2:67:35:67:a4:39:52:70:2d:7a:1f:45:65:48:60:93: 31:d7:c7:1b:1f:91:bf:92:42:61:a6:d4:ee:4a:a9:cc:1e:a7: 45:2a:ba:61:56:09:07:d0:cb:9a:b4:45:c4:6f:4d:a5:f6:29: 3e:b0:17:bb:1f:91:f4:d1:fd:ef:5e:c7:08:59:66:55:75:f4: 51:e5:0a:e0:c8:e6:75:79:4e:d1:c2:db:f6:8a:64:5c:3c:42: 52:8e:81:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDULYuwtm2Z+qAkARpWjGaAh4ChEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRDQzY5NTA4RUY0RTY3MEVGQkM1QzY5MjAzRDZCMTIw RkE5MzkyRjAeFw0yNTA0MDUyMTU1NDJaFw0yNTA0MDkwOTA2NDJaMDMxMTAvBgNV BAMTKDBDRjEzNDZDNDJBQzg0REZFRDU1QzQ2QkJDRjUzMTcwNkFCNzBGQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhbnJXu0eCFaIRtwx0Eao0ifUF jV32t9B0/TrS5RqG48oyhbOkIKN1qNsqdAKJ12qZedu/yaKXIFtFmcnhA57poL39 ZTKvGzau/sibNaY6/dXZmo+83eYP2sjEOZNZ5UoqFfaucWTpzX9+wNtSz0RadhmW NUowR0+XBdyjtkA2Hi2D2qcBg3GXW6kdGBGjo2txDD73mJ1YhE3L/33rBcs+1aeH tlf2lPJgPjyNKNBxGefxy+0v5WicmBksqTtQAAhQseAERtZj/aw3q5/2ZL+mP70R i8gNBHNZGiOai3+HQ2TJ4RaF7YaW1TCbvOz4ikeNp05hhVbFIPi6+UGOkvXHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDPE0bEKshN/tVcRrvPUxcGq3D70wHwYDVR0j BBgwFoAUbcxpUI705nDvvFxpID1rEg+pOS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjA3M2FjZS1hNjkxLTQ4NjMtOWMxYy01OWIyZGI5Y2I0NjMvMC82RENDNjk1MDhF RjRFNjcwRUZCQzVDNjkyMDNENkIxMjBGQTkzOTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRDQzY5NTA4RUY0RTY3MEVGQkM1QzY5MjAzRDZCMTIwRkE5 MzkyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIwNzNhY2UtYTY5MS00ODYzLTlj MWMtNTliMmRiOWNiNDYzLzAvNkRDQzY5NTA4RUY0RTY3MEVGQkM1QzY5MjAzRDZC MTIwRkE5MzkyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG8fIHxQVjgSOgo6NeJwpmZTH67MMJo9pCCZ bxRCC8wPAbtbG8TZ8JaCbCA28FlK0LBdTSFKHPMdS6wzn1Xf5le0Fry8cPrVuNbx Gqs/4t7SwQQvlPSvAZA4XaMhrj6v48m/25DqtAXPu837emGFNnelX/ViDI7csrv2 yFYiCnt5MqAlwwJCIzX4JmLrVxRYWN6jJ7Ik1bI2jLqJp9iubXpv9Q5p4mc1Z6Q5 UnAteh9FZUhgkzHXxxsfkb+SQmGm1O5Kqcwep0UqumFWCQfQy5q0RcRvTaX2KT6w F7sfkfTR/e9exwhZZlV19FHlCuDI5nV5TtHC2/aKZFw8QlKOgeU= -----END CERTIFICATE-----Generated at Sun Apr 6 05:16:37 2025 by rpki-client