$ rpki-client -vvf repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft File: 6176447D40001B20E000D73A3B5E66B74A431374.mft (raw, json) Hash identifier: wAdVB6PheAO71FxDGLJUc/6Rr/yjGiL+IyWGqGIBtaY= Subject key identifier: C4:2E:69:98:67:F9:F8:03:6E:8E:BE:1F:DE:63:B0:01:02:43:33:70 Authority key identifier: 61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74 Certificate issuer: /CN=6176447D40001B20E000D73A3B5E66B74A431374 Certificate serial: 6749E5073C6EBABB0229DAAD12137C7B0D10B3FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft Manifest number: 86 Signing time: Wed 09 Apr 2025 08:31:19 +0000 Manifest this update: Wed 09 Apr 2025 08:26:19 +0000 Manifest next update: Sat 12 Apr 2025 17:10:19 +0000 Files and hashes: 1: 6176447D40001B20E000D73A3B5E66B74A431374.crl (hash: JjYDI5FTWfdJnjs6aZIQ2JilExNw22C2sBA8fQ+8VVw=) 2: 3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa (hash: uR53pbwW9P8hqVOeVN0hgPpqYO4PeD2g8LQ/VFiv7kA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.crl rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 12:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:49:e5:07:3c:6e:ba:bb:02:29:da:ad:12:13:7c:7b:0d:10:b3:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6176447D40001B20E000D73A3B5E66B74A431374 Validity Not Before: Apr 9 08:26:19 2025 GMT Not After : Apr 12 17:10:19 2025 GMT Subject: CN=C42E699867F9F8036E8EBE1FDE63B00102433370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c2:e1:a8:dd:74:b8:64:b5:f2:7a:97:81:16: 25:21:3b:15:1d:c9:b6:c9:07:49:ba:5b:e9:ec:83: c6:1a:5d:90:e0:b0:89:fa:35:2d:bf:40:de:a0:b4: e9:59:b9:40:a4:c5:c8:aa:21:cb:0e:39:50:90:81: 01:0f:66:b9:e9:b5:3b:3f:2f:fb:79:a5:39:51:21: d9:06:ad:9c:53:71:ca:e4:45:3f:f7:bf:83:c9:6c: 8f:31:e4:a5:0f:2a:62:e6:f5:1e:84:7c:1e:f3:2f: 9f:a6:85:e4:10:67:04:dc:81:e7:73:77:8f:f8:01: f1:39:e0:32:52:08:0f:a2:dc:77:dd:a2:0e:8c:f5: 5a:5d:12:df:ed:11:3a:45:fb:8f:36:23:e3:75:45: ba:a8:2e:01:a7:dc:53:57:cf:d9:51:61:62:79:5f: 31:64:61:5a:33:81:b9:7f:f2:9b:98:de:7d:74:61: 2c:50:8e:b7:60:d1:c1:7f:0d:99:89:50:a6:85:62: cc:ce:86:57:41:84:9f:0e:6d:b2:a1:55:8b:6f:52: 14:4a:4c:fa:21:c5:5b:bf:af:38:9d:37:0c:0b:3d: 94:b6:c4:26:0d:e5:79:b1:c6:b6:d6:c5:e5:db:b2: 8a:4a:d2:8b:81:89:92:bf:ef:ee:d1:04:8c:7c:0c: f4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2E:69:98:67:F9:F8:03:6E:8E:BE:1F:DE:63:B0:01:02:43:33:70 X509v3 Authority Key Identifier: keyid:61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:6e:13:76:55:4a:d6:fd:b3:b2:32:f8:43:26:f1:bd:17:4c: c2:e6:a0:50:f5:76:d5:b7:d8:ca:3c:46:b4:fb:50:a9:1d:48: 96:42:e2:83:98:10:c8:5e:3f:da:96:90:e8:08:23:a5:93:a4: e6:b9:b2:76:53:a9:b8:cd:92:04:e1:f5:f9:d5:df:f1:11:4e: 6b:e2:6e:fe:6c:4f:16:36:89:0e:e6:ab:bf:b4:8a:3c:fe:b2: 1e:8b:ff:31:8a:9a:9e:9c:bc:0f:bd:4b:ed:23:6c:74:48:fa: 0a:38:82:a9:06:b3:85:f6:ba:91:3c:42:cf:ff:be:e8:6c:d6: 77:46:37:5d:e9:6a:08:c1:7c:a8:31:08:d2:91:97:1d:0e:f6: a5:5d:77:f8:85:30:80:aa:76:6e:29:66:88:7a:98:b7:8f:6d: 33:2c:2c:56:17:10:20:8a:5b:7b:20:87:82:5a:5d:e7:fb:91: 08:0a:22:a8:7f:65:98:88:16:c0:7a:d3:3d:79:ef:77:68:52: b7:4c:b4:79:7b:33:75:4c:b9:17:27:64:22:00:99:46:32:95: 83:eb:24:df:70:25:48:c6:78:db:c8:b2:b7:9e:f6:f5:ad:45: db:47:07:e6:93:e2:46:47:ed:47:d6:70:02:a8:4d:0b:57:8d: 45:c1:60:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ0nlBzxuursCKdqtEhN8ew0Qs/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2Qjc0 QTQzMTM3NDAeFw0yNTA0MDkwODI2MTlaFw0yNTA0MTIxNzEwMTlaMDMxMTAvBgNV BAMTKEM0MkU2OTk4NjdGOUY4MDM2RThFQkUxRkRFNjNCMDAxMDI0MzMzNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBwuGo3XS4ZLXyepeBFiUhOxUd ybbJB0m6W+nsg8YaXZDgsIn6NS2/QN6gtOlZuUCkxciqIcsOOVCQgQEPZrnptTs/ L/t5pTlRIdkGrZxTccrkRT/3v4PJbI8x5KUPKmLm9R6EfB7zL5+mheQQZwTcgedz d4/4AfE54DJSCA+i3Hfdog6M9VpdEt/tETpF+482I+N1RbqoLgGn3FNXz9lRYWJ5 XzFkYVozgbl/8puY3n10YSxQjrdg0cF/DZmJUKaFYszOhldBhJ8ObbKhVYtvUhRK TPohxVu/rzidNwwLPZS2xCYN5XmxxrbWxeXbsopK0ouBiZK/7+7RBIx8DPRZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxC5pmGf5+ANujr4f3mOwAQJDM3AwHwYDVR0j BBgwFoAUYXZEfUAAGyDgANc6O15mt0pDE3QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDBiZDZlNC1iNGZiLTRmNDgtYjgzYS1hY2I4ZjJkNzQ1ODMvMC82MTc2NDQ3RDQw MDAxQjIwRTAwMEQ3M0EzQjVFNjZCNzRBNDMxMzc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2Qjc0QTQz MTM3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQwYmQ2ZTQtYjRmYi00ZjQ4LWI4 M2EtYWNiOGYyZDc0NTgzLzAvNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2 Qjc0QTQzMTM3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFuE3ZVStb9s7Iy+EMm8b0XTMLmoFD1dtW3 2Mo8RrT7UKkdSJZC4oOYEMheP9qWkOgII6WTpOa5snZTqbjNkgTh9fnV3/ERTmvi bv5sTxY2iQ7mq7+0ijz+sh6L/zGKmp6cvA+9S+0jbHRI+go4gqkGs4X2upE8Qs// vuhs1ndGN13pagjBfKgxCNKRlx0O9qVdd/iFMICqdm4pZoh6mLePbTMsLFYXECCK W3sgh4JaXef7kQgKIqh/ZZiIFsB60z1573doUrdMtHl7M3VMuRcnZCIAmUYylYPr JN9wJUjGeNvIsree9vWtRdtHB+aT4kZH7UfWcAKoTQtXjUXBYC0= -----END CERTIFICATE-----Generated at Wed Apr 9 16:38:33 2025 by rpki-client