$ rpki-client -vvf repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft File: 6490D3D85678E9C1587D21E9545EF730D21346B5.mft (raw, json) Hash identifier: VqfDMI/SXmx7r4i/dPbsf1B3EUvKuPec98yfeAz51hg= Subject key identifier: 05:52:12:F3:D3:DA:87:E9:4C:52:88:20:94:FB:07:BF:9C:F5:01:0C Authority key identifier: 64:90:D3:D8:56:78:E9:C1:58:7D:21:E9:54:5E:F7:30:D2:13:46:B5 Certificate issuer: /CN=6490D3D85678E9C1587D21E9545EF730D21346B5 Certificate serial: 014EB9694829AF322F5A829E407DFD028AAC9677 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft Manifest number: 73 Signing time: Sun 13 Apr 2025 14:10:43 +0000 Manifest this update: Sun 13 Apr 2025 14:05:43 +0000 Manifest next update: Wed 16 Apr 2025 23:39:43 +0000 Files and hashes: 1: 3136302e32302e3232302e302f32342d3234203d3e20313532373835.roa (hash: GDptFXCos4zkhK0BICLJWbr+aS8jyf1+uPPWMmueFX0=) 2: 6490D3D85678E9C1587D21E9545EF730D21346B5.crl (hash: zzYBKgk3GeN62Iw2bzmSmZm6NhtYO7A1Rf/h+Xfm4ao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.crl rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 22:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:4e:b9:69:48:29:af:32:2f:5a:82:9e:40:7d:fd:02:8a:ac:96:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6490D3D85678E9C1587D21E9545EF730D21346B5 Validity Not Before: Apr 13 14:05:43 2025 GMT Not After : Apr 16 23:39:43 2025 GMT Subject: CN=055212F3D3DA87E94C52882094FB07BF9CF5010C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5b:b6:ab:7f:cc:46:53:ba:5b:a0:ee:c7:73: 2e:82:5f:5b:cb:d2:bc:ca:fe:88:67:5a:a9:39:a8: ab:aa:81:3b:5d:21:fa:4c:90:4c:e9:0d:09:18:6e: c9:eb:f8:98:f6:83:97:fa:79:0a:3d:c2:55:09:d0: d9:61:ab:a0:2a:4d:c8:b7:10:25:95:61:a6:2c:11: 24:ca:f9:d4:0a:95:08:67:bc:a9:d8:7b:33:6f:a7: 57:e7:66:19:17:e5:63:8e:e5:21:7b:8d:91:29:86: b6:d1:dd:d4:cd:94:25:b1:d2:4b:6d:55:29:8c:87: af:fe:75:f4:71:94:a6:a9:7b:46:69:92:1d:d6:3d: 5a:10:3f:e5:38:4d:87:80:e7:f6:24:49:aa:af:ec: d2:3b:a9:5b:89:40:93:31:ac:3b:fc:78:00:bb:23: aa:fb:96:89:a0:5e:91:f6:00:e6:68:02:03:4e:1f: 8a:56:b4:6d:db:2b:95:84:7c:66:61:0a:c5:36:89: 2a:14:bd:fa:48:68:d7:6a:03:3c:5d:f8:92:78:53: f8:62:07:16:87:88:d3:11:bc:78:d9:28:82:ba:ef: 5d:88:0c:a9:64:60:e9:74:d8:9a:b1:64:d5:40:a1: 39:6c:d8:48:74:27:d6:cf:00:a2:38:8b:b6:66:9c: bb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:52:12:F3:D3:DA:87:E9:4C:52:88:20:94:FB:07:BF:9C:F5:01:0C X509v3 Authority Key Identifier: keyid:64:90:D3:D8:56:78:E9:C1:58:7D:21:E9:54:5E:F7:30:D2:13:46:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:32:81:17:47:0f:90:5f:87:73:05:96:4e:4e:b1:30:71:8f: c6:7b:cf:e5:5b:d2:68:c1:1e:d5:6a:1b:f6:2c:7f:7e:97:43: d7:3e:28:60:8d:8c:a3:12:f8:ba:07:f9:41:ac:03:34:5b:50: 40:eb:8c:c9:09:17:41:90:47:c2:ce:f0:28:ec:78:ef:96:7a: ae:f2:8d:1d:30:78:af:2b:82:2c:de:b8:00:c5:c8:43:b8:75: 30:b5:5a:b4:b9:1d:24:88:44:3b:58:26:2f:e3:73:12:b6:f6: 7a:19:7a:4d:21:17:56:08:ed:4e:f9:19:b8:d2:3f:0c:05:36: e0:53:43:84:93:bc:e2:76:ff:8a:26:65:63:20:ff:7f:12:2d: 19:ca:e5:32:5d:f2:ed:fa:21:2b:5d:ff:5e:5c:13:56:6f:d3: 1d:79:d8:b4:7a:38:73:c3:4a:41:07:c7:3c:9d:a5:ee:45:a4: df:e1:e6:a2:c4:af:e6:d2:ef:18:eb:d4:59:f0:26:48:f4:74: 37:22:62:89:22:2d:35:46:9e:27:30:18:f0:26:80:29:62:0f: b4:05:79:00:8e:37:b0:24:bf:ed:35:4a:5e:79:7f:b7:39:91: 61:22:e3:b4:65:10:85:32:9f:83:42:44:ac:5f:e4:f2:58:cb: 00:15:83:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAU65aUgprzIvWoKeQH39AoqslncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3MzBE MjEzNDZCNTAeFw0yNTA0MTMxNDA1NDNaFw0yNTA0MTYyMzM5NDNaMDMxMTAvBgNV BAMTKDA1NTIxMkYzRDNEQTg3RTk0QzUyODgyMDk0RkIwN0JGOUNGNTAxMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/W7arf8xGU7pboO7Hcy6CX1vL 0rzK/ohnWqk5qKuqgTtdIfpMkEzpDQkYbsnr+Jj2g5f6eQo9wlUJ0Nlhq6AqTci3 ECWVYaYsESTK+dQKlQhnvKnYezNvp1fnZhkX5WOO5SF7jZEphrbR3dTNlCWx0ktt VSmMh6/+dfRxlKape0Zpkh3WPVoQP+U4TYeA5/YkSaqv7NI7qVuJQJMxrDv8eAC7 I6r7lomgXpH2AOZoAgNOH4pWtG3bK5WEfGZhCsU2iSoUvfpIaNdqAzxd+JJ4U/hi BxaHiNMRvHjZKIK6712IDKlkYOl02JqxZNVAoTls2Eh0J9bPAKI4i7ZmnLtvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBVIS89Pah+lMUogglPsHv5z1AQwwHwYDVR0j BBgwFoAUZJDT2FZ46cFYfSHpVF73MNITRrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODg1NzVjOC01NGZlLTQ4MDEtYTdiMS01MTdkMGU2YjhiNzMvMC82NDkwRDNEODU2 NzhFOUMxNTg3RDIxRTk1NDVFRjczMEQyMTM0NkI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3MzBEMjEz NDZCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg4NTc1YzgtNTRmZS00ODAxLWE3 YjEtNTE3ZDBlNmI4YjczLzAvNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3 MzBEMjEzNDZCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4ygRdHD5Bfh3MFlk5OsTBxj8Z7z+Vb0mjB HtVqG/Ysf36XQ9c+KGCNjKMS+LoH+UGsAzRbUEDrjMkJF0GQR8LO8CjseO+Weq7y jR0weK8rgizeuADFyEO4dTC1WrS5HSSIRDtYJi/jcxK29noZek0hF1YI7U75GbjS PwwFNuBTQ4STvOJ2/4omZWMg/38SLRnK5TJd8u36IStd/15cE1Zv0x152LR6OHPD SkEHxzydpe5FpN/h5qLEr+bS7xjr1FnwJkj0dDciYokiLTVGnicwGPAmgCliD7QF eQCON7Akv+01Sl55f7c5kWEi47RlEIUyn4NCRKxf5PJYywAVgw8= -----END CERTIFICATE-----Generated at Mon Apr 14 19:11:40 2025 by rpki-client