$ rpki-client -vvf repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft File: 6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft (raw, json) Hash identifier: bCBWdJqfEtepG3mWJfL1FJBgGA77Za//FUOPWvAshiY= Subject key identifier: 54:AA:FF:AB:96:50:D6:9A:A9:AF:EB:20:D9:3E:DF:E2:26:C7:C5:DD Authority key identifier: 6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 Certificate issuer: /CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Certificate serial: 5E8C2137D28A661F825F5D6964E4B9B5B1955873 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft Manifest number: 0325 Signing time: Wed 07 May 2025 18:01:50 +0000 Manifest this update: Wed 07 May 2025 17:56:50 +0000 Manifest next update: Sat 10 May 2025 20:04:50 +0000 Files and hashes: 1: 3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa (hash: QReThr3L/8y8L/3AEdob8H7epOdOKEjss3T3HzyvfMI=) 2: 6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl (hash: bmONJgWMnS/aeLNiq9YX3A53266n+sjKWrqZ2CDZros=) 3: 3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa (hash: G1U9gODI47ty2yrLIvmBDS+xG1WkgDbqidFt5qR0lew=) 4: 3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa (hash: lkrHej4FZPJ4f2E40DosArf8hhkwpkjiPyYFXEzD3uU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 20:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:8c:21:37:d2:8a:66:1f:82:5f:5d:69:64:e4:b9:b5:b1:95:58:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Validity Not Before: May 7 17:56:50 2025 GMT Not After : May 10 20:04:50 2025 GMT Subject: CN=54AAFFAB9650D69AA9AFEB20D93EDFE226C7C5DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ce:8a:d9:1d:52:d3:50:5b:a8:c4:cc:9d:25: de:49:15:12:ac:c0:ae:1d:b6:14:26:53:6d:e8:ae: e8:a1:24:83:c3:74:63:07:3a:90:4f:d6:a3:5b:d3: 23:35:7f:5e:8a:88:45:b6:80:f0:26:98:19:15:98: 57:60:ba:1c:f4:1b:d1:7e:a0:70:b0:ad:a1:80:a8: 46:b3:3e:4a:e2:1b:09:a3:11:5d:b9:63:9b:ed:31: f4:98:b9:0d:36:4f:89:01:27:83:73:5c:ac:99:69: 27:14:c0:61:a6:5f:11:d6:5a:ad:1d:0d:24:d6:f6: 1b:fb:52:34:d8:61:61:a8:a8:4d:57:f3:32:7c:df: be:83:fa:93:ef:cc:ae:8a:3b:ff:07:fb:b9:e5:6c: 7f:5b:52:83:6b:69:55:1d:30:c9:f8:b7:ec:8f:97: 03:f1:f3:61:a6:4e:01:6f:e3:8f:ab:e0:5f:66:5c: 08:05:8a:e2:5a:74:e3:5e:97:ce:fc:ed:76:72:f5: b8:dc:7a:02:b4:61:f5:5f:33:a5:f7:e6:06:0c:fb: ec:e2:53:87:b4:e0:04:c9:7a:4a:7e:9f:90:34:3b: 43:5f:d6:49:b4:ae:35:ae:3f:3c:75:93:91:02:ea: 0b:07:44:e7:7a:c2:cd:1e:0a:76:69:99:86:d1:f6: 03:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AA:FF:AB:96:50:D6:9A:A9:AF:EB:20:D9:3E:DF:E2:26:C7:C5:DD X509v3 Authority Key Identifier: keyid:6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:06:99:a1:29:7e:2e:89:35:24:06:06:99:9c:35:b5:4b:b0: 0b:f1:61:dc:f5:80:16:58:7d:f0:e2:93:d1:cb:31:a3:03:21: 78:f0:98:26:91:e6:1b:61:f5:ba:d9:9a:9e:8e:0f:5d:ff:8b: e8:64:d2:40:7d:9c:80:5f:94:78:e1:10:17:04:41:ca:af:89: 71:67:bd:82:63:67:9d:68:f9:78:b8:ad:dd:3d:53:38:e7:00: db:b0:a9:44:dd:10:9a:29:86:27:ed:15:85:39:1f:fa:5f:07: ae:07:71:f0:71:94:13:da:f0:43:4d:95:c2:c8:8d:50:fb:b2: 99:38:b7:e3:a4:8c:7c:fe:e4:88:e5:67:e9:ce:6e:3c:41:82: 82:b7:08:27:5d:8e:d7:55:c8:26:71:40:da:61:e9:56:eb:99: f9:28:e8:e2:1d:02:92:2f:c0:cc:0c:14:e6:8b:5a:33:6f:4e: 3f:eb:7e:fd:75:17:94:89:fb:36:29:0e:f6:6d:e8:df:3c:3f: 40:5e:69:fe:46:23:75:c1:d6:8c:b9:c7:4d:9d:e9:86:a5:c1: 44:fe:c5:7e:d6:08:08:70:1b:2c:41:7c:71:5d:a2:66:d0:b7: cd:1e:a3:ad:b1:4e:7b:e2:f2:19:d8:98:25:c1:1d:a3:ca:86: ea:c3:29:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXowhN9KKZh+CX11pZOS5tbGVWHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlD MEYyRTNGNzAeFw0yNTA1MDcxNzU2NTBaFw0yNTA1MTAyMDA0NTBaMDMxMTAvBgNV BAMTKDU0QUFGRkFCOTY1MEQ2OUFBOUFGRUIyMEQ5M0VERkUyMjZDN0M1REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDzorZHVLTUFuoxMydJd5JFRKs wK4dthQmU23oruihJIPDdGMHOpBP1qNb0yM1f16KiEW2gPAmmBkVmFdguhz0G9F+ oHCwraGAqEazPkriGwmjEV25Y5vtMfSYuQ02T4kBJ4NzXKyZaScUwGGmXxHWWq0d DSTW9hv7UjTYYWGoqE1X8zJ8376D+pPvzK6KO/8H+7nlbH9bUoNraVUdMMn4t+yP lwPx82GmTgFv44+r4F9mXAgFiuJadONel8787XZy9bjcegK0YfVfM6X35gYM++zi U4e04ATJekp+n5A0O0Nf1km0rjWuPzx1k5EC6gsHROd6ws0eCnZpmYbR9gM/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVKr/q5ZQ1pqpr+sg2T7f4ibHxd0wHwYDVR0j BBgwFoAUagLcEPQfzg60l5jdvPMfycDy4/cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTQ2YmRhZC1mMTMwLTQ4YTktODUzNC01NGJhM2U4ZWQ2MWYvMC82QTAyREMxMEY0 MUZDRTBFQjQ5Nzk4RERCQ0YzMUZDOUMwRjJFM0Y3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlDMEYy RTNGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE0NmJkYWQtZjEzMC00OGE5LTg1 MzQtNTRiYTNlOGVkNjFmLzAvNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFG QzlDMEYyRTNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcGmaEpfi6JNSQGBpmcNbVLsAvxYdz1gBZY ffDik9HLMaMDIXjwmCaR5hth9brZmp6OD13/i+hk0kB9nIBflHjhEBcEQcqviXFn vYJjZ51o+Xi4rd09UzjnANuwqUTdEJophiftFYU5H/pfB64HcfBxlBPa8ENNlcLI jVD7spk4t+OkjHz+5IjlZ+nObjxBgoK3CCddjtdVyCZxQNph6Vbrmfko6OIdApIv wMwMFOaLWjNvTj/rfv11F5SJ+zYpDvZt6N88P0Beaf5GI3XB1oy5x02d6YalwUT+ xX7WCAhwGyxBfHFdombQt80eo62xTnvi8hnYmCXBHaPKhurDKRo= -----END CERTIFICATE-----Generated at Thu May 8 07:49:52 2025 by rpki-client