$ rpki-client -vvf repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft File: 6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft (raw, json) Hash identifier: UtoT4WYYTT6Y82+tokjXr+mZ0444HM4YxcrmeCzhXtQ= Subject key identifier: 60:B9:2B:85:06:1F:1E:57:27:85:EE:4D:22:82:46:6A:12:63:46:E2 Authority key identifier: 6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40 Certificate issuer: /CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40 Certificate serial: 3EA9EB632EB284BE641D8D3C4EEAEE89C671F0B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft Manifest number: 02A1 Signing time: Wed 07 May 2025 01:00:38 +0000 Manifest this update: Wed 07 May 2025 00:55:38 +0000 Manifest next update: Sat 10 May 2025 10:31:38 +0000 Files and hashes: 1: 3131392e31302e3137362e302f32332d3233203d3e203234353330.roa (hash: oYKRgeAiMpYufzUDpAVrBlt6W1jyPeS9JOxxuQtOwZY=) 2: 3131392e31302e3137392e302f32342d3234203d3e203234353330.roa (hash: QUgb+3auw+3QXbybWiXjJyrqBHMbQrgJpf1sSivTg0g=) 3: 3131392e31302e3138302e302f32322d3232203d3e203234353330.roa (hash: nxdAn3jn+XYvc4duvxuDcKKQ6L/WvqrTreEgfRLbG3Y=) 4: 3131392e31302e3138332e302f32342d3234203d3e203234353330.roa (hash: 0TXvmS9XRzFPQg7VBjdDhocXuAjOCXrahzSe/hBS+kE=) 5: 3131392e31302e3137362e302f32312d3234203d3e203234353330.roa (hash: IsH3U/BHRUb2Qe5b502VK1K1N8x5p/BPRkAJxJWs0XM=) 6: 323430313a643934303a3a2f33322d3332203d3e203234353330.roa (hash: 4+y7rjN8rrx24W4l4v0NhyPbAx+wxdh2Vyt9geBR9nM=) 7: 3131392e31302e3137362e302f32342d3234203d3e203234353330.roa (hash: kLmEQPQ/od1FdskOnhWMMgPU8rf3JMAMKcmeKR1b8o8=) 8: 3131392e31302e3137382e302f32332d3233203d3e203234353330.roa (hash: 0z+M+MfV31ApunTcr4X9MYd8Du/BJdShdW8aFWf3OwA=) 9: 6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl (hash: sB0+w62JRewjIPn7PVOqZcdt/eoO2aYFmY6dSk6MqRU=) 10: 3131392e31302e3137362e302f32322d3232203d3e203234353330.roa (hash: Jsc0sEwnIvfzafDdx5P/GKzvW0lqzmukEooIoZhkd4I=) 11: 3131392e31302e3137372e302f32342d3234203d3e203234353330.roa (hash: YgVLRg3O7QRj5xGJQiVJq81SI0VTcACtqesTlVxXavs=) 12: 3131392e31302e3138302e302f32332d3233203d3e203234353330.roa (hash: kHw5hH5+IfpLbksfP3QZEjTxkepAiasbWHMw4A7m3b0=) 13: 3131392e31302e3138322e302f32332d3233203d3e203234353330.roa (hash: VMgB9Kb4EVQHlb3VDwgkZg7RdNnVVkcFEhqcUkw3BMY=) 14: 323430313a643934303a653066663a3a2f34382d3438203d3e203234353330.roa (hash: 7urOwCjdO2YZyXJHO3LKXR7humjd9mLf0bELAOmhNtc=) 15: 3131392e31302e3138322e302f32342d3234203d3e203234353330.roa (hash: TioKn3OEWrA5HJc/rJ0Sfo3o6zbghNv33aandwoul2U=) 16: 3131392e31302e3138302e302f32342d3234203d3e203234353330.roa (hash: W7qMjGU5xZ9Oay/8WGxeZxhy9LWBi2AIkynmyghqxgo=) 17: 3131392e31302e3137362e302f32312d3231203d3e203234353330.roa (hash: US1SXV+hgdxuRQjfdZVl4UlTanx6B6V1We4A6nIE/aU=) 18: 3131392e31302e3138312e302f32342d3234203d3e203234353330.roa (hash: naA5lUlBRat5ef0vI8voPPjFrMHR9bpoQ6w5VRUzIn0=) 19: 3131392e31302e3137382e302f32342d3234203d3e203234353330.roa (hash: 3xHj2Za1UQ2hx7TMbM6D07YNJ7NH1FcliBdFRmqQm1g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 10:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:a9:eb:63:2e:b2:84:be:64:1d:8d:3c:4e:ea:ee:89:c6:71:f0:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40 Validity Not Before: May 7 00:55:38 2025 GMT Not After : May 10 10:31:38 2025 GMT Subject: CN=60B92B85061F1E572785EE4D2282466A126346E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8e:f6:5a:61:fb:fa:16:71:41:a0:23:21:49: bd:95:cb:26:be:00:07:f4:a2:7a:f4:90:2c:6e:3f: 36:88:be:2f:cd:4e:bb:76:1c:6c:cb:82:87:3c:93: 24:d5:84:d2:09:2f:61:02:0c:bc:a8:ab:72:94:63: dd:b9:d4:e1:23:c7:dd:b2:e2:24:ee:b5:e2:3d:6d: 9b:c8:f3:d1:15:d1:01:13:20:13:41:e9:ae:0f:20: 97:fa:72:e7:ea:1a:47:cf:ed:34:12:5e:27:29:80: 35:fa:7a:b9:16:62:a0:25:79:ee:51:3e:85:a5:50: 4c:7d:de:db:47:3b:f3:5f:36:0d:04:f7:a0:b2:a3: d2:be:c5:a8:da:89:1c:34:32:a8:dc:3f:6d:2f:03: 3d:4e:94:75:45:95:fd:2a:1a:48:36:df:61:40:e1: 7b:eb:25:a8:ab:c3:66:67:5d:c4:a1:dc:84:78:86: fc:3e:bc:bb:a4:b8:68:ba:ca:c9:c0:ca:93:c9:1e: 9c:4f:67:55:8b:40:92:54:61:72:84:b8:09:5c:e6: 08:97:25:f3:1c:c6:39:71:20:f6:cb:e6:9f:7b:12: 97:8b:55:87:b2:60:78:dc:c1:25:e2:71:08:db:d1: 57:81:07:09:e4:35:29:7c:93:5c:f8:bd:69:43:6e: 98:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B9:2B:85:06:1F:1E:57:27:85:EE:4D:22:82:46:6A:12:63:46:E2 X509v3 Authority Key Identifier: keyid:6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ed:16:a4:34:e0:2d:84:a7:f0:d7:90:e1:f2:bc:17:a0:30: a1:95:55:e2:cf:1f:f0:cd:4d:da:59:fc:ad:b9:83:df:83:7e: 4c:8a:2c:0f:f7:53:7a:ce:80:94:9d:b9:33:35:81:fc:f3:9d: 74:f0:69:cc:cc:e7:5a:0c:34:d6:27:bc:ee:00:9a:f7:57:c9: 3f:bc:ae:af:8a:d5:51:ad:31:06:ee:97:74:7a:7a:23:86:e7: af:69:b1:82:95:ad:ff:d3:f9:55:2c:f9:1d:ea:37:6d:62:c4: 91:cb:99:cb:3c:1e:bc:9c:47:1e:1a:7e:61:61:1f:60:4d:81: 80:77:ea:3d:85:49:d9:17:9e:77:a1:d7:a3:b8:6e:b3:16:f4: ac:22:1c:dd:bc:3a:04:ce:50:a2:f6:e9:e0:59:9a:0c:c2:67: c3:9f:a3:6f:bd:44:1f:ff:05:66:ae:fd:2b:ba:ba:f3:c7:8f: 0a:d6:12:ac:0d:04:13:a8:22:89:9c:b9:c6:c0:a5:1e:14:0c: 88:e7:d8:b4:a4:00:a3:f5:82:a3:c2:e0:0f:80:5f:e5:dd:e9: 73:90:ff:cf:ad:7f:43:a5:f4:74:7c:29:51:f3:7f:f3:c5:32: 08:51:39:86:88:aa:85:58:13:48:ae:1d:a0:ab:72:ed:58:7d: 98:e1:8f:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPqnrYy6yhL5kHY08TuruicZx8LQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY2QTM1MzAxOThBOUI3NjU3QTYzNkZFQ0NGQjM5RjNC RjcxRkI0MDAeFw0yNTA1MDcwMDU1MzhaFw0yNTA1MTAxMDMxMzhaMDMxMTAvBgNV BAMTKDYwQjkyQjg1MDYxRjFFNTcyNzg1RUU0RDIyODI0NjZBMTI2MzQ2RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgjvZaYfv6FnFBoCMhSb2Vyya+ AAf0onr0kCxuPzaIvi/NTrt2HGzLgoc8kyTVhNIJL2ECDLyoq3KUY9251OEjx92y 4iTuteI9bZvI89EV0QETIBNB6a4PIJf6cufqGkfP7TQSXicpgDX6erkWYqAlee5R PoWlUEx93ttHO/NfNg0E96Cyo9K+xajaiRw0MqjcP20vAz1OlHVFlf0qGkg232FA 4XvrJairw2ZnXcSh3IR4hvw+vLukuGi6ysnAypPJHpxPZ1WLQJJUYXKEuAlc5giX JfMcxjlxIPbL5p97EpeLVYeyYHjcwSXicQjb0VeBBwnkNSl8k1z4vWlDbpilAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYLkrhQYfHlcnhe5NIoJGahJjRuIwHwYDVR0j BBgwFoAUb2o1MBmKm3ZXpjb+zPs5879x+0AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDIzNDRiZS1mOWZiLTQ2MzQtOTJkNi04OTRkZDUzOGNhZGYvMC82RjZBMzUzMDE5 OEE5Qjc2NTdBNjM2RkVDQ0ZCMzlGM0JGNzFGQjQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkY2QTM1MzAxOThBOUI3NjU3QTYzNkZFQ0NGQjM5RjNCRjcx RkI0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQyMzQ0YmUtZjlmYi00NjM0LTky ZDYtODk0ZGQ1MzhjYWRmLzAvNkY2QTM1MzAxOThBOUI3NjU3QTYzNkZFQ0NGQjM5 RjNCRjcxRkI0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAztFqQ04C2Ep/DXkOHyvBegMKGVVeLPH/DN TdpZ/K25g9+DfkyKLA/3U3rOgJSduTM1gfzznXTwaczM51oMNNYnvO4AmvdXyT+8 rq+K1VGtMQbul3R6eiOG569psYKVrf/T+VUs+R3qN21ixJHLmcs8HrycRx4afmFh H2BNgYB36j2FSdkXnneh16O4brMW9KwiHN28OgTOUKL26eBZmgzCZ8Ofo2+9RB// BWau/Su6uvPHjwrWEqwNBBOoIomcucbApR4UDIjn2LSkAKP1gqPC4A+AX+Xd6XOQ /8+tf0Ol9HR8KVHzf/PFMghROYaIqoVYE0iuHaCrcu1YfZjhjzs= -----END CERTIFICATE-----Generated at Thu May 8 00:13:30 2025 by rpki-client