$ rpki-client -vvf repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft File: 6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft (raw, json) Hash identifier: RS5JY4PRY1oZ+t8aMiBpRAeH7arwoRTfDuT2tClBiy4= Subject key identifier: A1:0F:2E:82:ED:6D:2A:79:38:BF:5B:A7:D8:AF:45:44:8F:75:C1:88 Authority key identifier: 6F:EA:E1:20:D8:CD:63:D6:82:4D:82:61:F7:B0:98:63:1E:F4:12:E0 Certificate issuer: /CN=6FEAE120D8CD63D6824D8261F7B098631EF412E0 Certificate serial: 2C918B59FE217CE209034DD914B26A6967668843 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft Manifest number: 0371 Signing time: Sun 11 May 2025 05:31:23 +0000 Manifest this update: Sun 11 May 2025 05:26:23 +0000 Manifest next update: Wed 14 May 2025 14:47:23 +0000 Files and hashes: 1: 3130332e3136332e3130332e302f32342d3234203d3e20313431363733.roa (hash: nbSzLxkTgg1Fhd955VZ38kl51XuK78f19xIlXEphedE=) 2: 3130332e3136332e3130322e302f32342d3234203d3e20313431363733.roa (hash: HBCSlYe9SztvZ5iSEatkCght6QFzU9643YFr0LJkHe0=) 3: 3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa (hash: GVGKM4eV+MMT2LsZ6I2vKHLbSn/15kKEM082mCeNaT8=) 4: 6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl (hash: A2AC2uK/88Xc0flHADnMT9HYcf0z7D5aiOyBx8G1M1M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 14:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:91:8b:59:fe:21:7c:e2:09:03:4d:d9:14:b2:6a:69:67:66:88:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FEAE120D8CD63D6824D8261F7B098631EF412E0 Validity Not Before: May 11 05:26:23 2025 GMT Not After : May 14 14:47:23 2025 GMT Subject: CN=A10F2E82ED6D2A7938BF5BA7D8AF45448F75C188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3c:4e:50:c5:20:44:01:d5:3c:52:2d:06:af: 78:44:76:72:c7:64:a5:58:18:1a:0b:48:d7:1c:6f: 1b:d3:cc:b8:b8:be:8e:58:f3:fc:00:6b:89:f4:48: 05:51:44:ab:71:10:d6:4e:46:d7:35:b0:a0:96:c8: fd:93:8a:30:e7:4b:e7:5b:a7:64:cf:bb:7d:96:84: fd:52:3e:c2:01:1f:3f:fb:a7:23:8b:40:97:31:78: 30:cf:66:1d:d9:0e:cc:55:62:99:5d:4e:d8:b3:a8: bf:91:64:10:80:67:05:93:9a:9e:44:14:42:3a:eb: 45:84:26:47:31:09:5c:a3:65:af:1d:c7:a0:dc:a2: 3a:1f:df:16:cc:65:9f:51:b1:8d:03:5c:2f:f5:d5: b7:d8:5c:c5:17:ff:cb:6e:6b:0f:39:41:fb:2a:86: ad:26:a8:8c:d4:a3:54:27:06:ca:be:bc:8b:a0:ef: f7:a2:1b:e3:30:bb:a6:93:87:e0:39:26:74:71:85: 52:2f:07:76:50:fa:da:b2:98:9d:1a:42:88:45:39: 21:3f:20:ea:7d:a5:f4:50:97:2d:a2:41:35:20:64: 4f:a2:d4:20:d8:f8:e1:a3:2c:fe:6d:4e:22:cf:55: e4:26:47:4e:be:45:98:42:10:98:b3:fb:65:ea:d6: 5b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:0F:2E:82:ED:6D:2A:79:38:BF:5B:A7:D8:AF:45:44:8F:75:C1:88 X509v3 Authority Key Identifier: keyid:6F:EA:E1:20:D8:CD:63:D6:82:4D:82:61:F7:B0:98:63:1E:F4:12:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:bb:04:1e:35:eb:21:79:1a:43:33:bd:01:a7:d0:6d:f8:ff: b5:a1:d1:bd:db:87:03:7f:f8:d9:c1:5a:d4:ed:15:59:88:95: 6d:a6:3d:a1:f1:af:0d:1b:3f:bf:2e:da:a7:f5:f7:cf:fc:bc: e1:07:6a:b4:6e:ec:9e:47:eb:2e:7e:c2:65:e0:da:18:4b:a9: 4e:b5:e1:3d:cc:3a:82:cb:84:d6:84:71:da:1c:5d:fa:f6:b7: c1:03:54:f1:9c:b7:02:93:bb:7c:8f:aa:b3:64:a8:cf:05:9a: 60:43:67:2c:f9:3c:42:d0:03:ce:f0:c2:cf:80:48:3c:db:17: 0e:97:03:63:19:f5:d4:1a:3e:bd:41:af:b7:e4:d9:60:25:7a: d4:d5:1a:58:3b:51:aa:e3:89:7a:ae:ef:e2:73:8e:93:fc:b5: f8:c9:74:ff:9e:a2:d1:ab:1e:70:e2:1c:19:ae:ac:f5:fd:fd: 5c:00:6c:02:d8:91:8a:74:c1:39:bc:4d:9f:27:9b:ca:b7:8b: af:86:06:93:00:34:a6:46:c0:5c:51:c8:56:b1:b5:2b:5c:13: 14:93:e7:ab:f0:2d:09:43:8e:82:0d:7f:e9:b2:50:89:2e:53: 21:3c:8d:98:c1:ca:4d:89:09:1f:1e:b0:0d:61:04:58:73:5f: 78:47:c2:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULJGLWf4hfOIJA03ZFLJqaWdmiEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4NjMx RUY0MTJFMDAeFw0yNTA1MTEwNTI2MjNaFw0yNTA1MTQxNDQ3MjNaMDMxMTAvBgNV BAMTKEExMEYyRTgyRUQ2RDJBNzkzOEJGNUJBN0Q4QUY0NTQ0OEY3NUMxODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHPE5QxSBEAdU8Ui0Gr3hEdnLH ZKVYGBoLSNccbxvTzLi4vo5Y8/wAa4n0SAVRRKtxENZORtc1sKCWyP2TijDnS+db p2TPu32WhP1SPsIBHz/7pyOLQJcxeDDPZh3ZDsxVYpldTtizqL+RZBCAZwWTmp5E FEI660WEJkcxCVyjZa8dx6Dcojof3xbMZZ9RsY0DXC/11bfYXMUX/8tuaw85Qfsq hq0mqIzUo1QnBsq+vIug7/eiG+Mwu6aTh+A5JnRxhVIvB3ZQ+tqymJ0aQohFOSE/ IOp9pfRQly2iQTUgZE+i1CDY+OGjLP5tTiLPVeQmR06+RZhCEJiz+2Xq1ltfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoQ8ugu1tKnk4v1un2K9FRI91wYgwHwYDVR0j BBgwFoAUb+rhINjNY9aCTYJh97CYYx70EuAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzFlNDlhYi01MGNhLTRiM2UtODIzYy04YjNkMzFiYTg1ZjIvMC82RkVBRTEyMEQ4 Q0Q2M0Q2ODI0RDgyNjFGN0IwOTg2MzFFRjQxMkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4NjMxRUY0 MTJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGMxZTQ5YWItNTBjYS00YjNlLTgy M2MtOGIzZDMxYmE4NWYyLzAvNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4 NjMxRUY0MTJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADa7BB416yF5GkMzvQGn0G34/7Wh0b3bhwN/ +NnBWtTtFVmIlW2mPaHxrw0bP78u2qf198/8vOEHarRu7J5H6y5+wmXg2hhLqU61 4T3MOoLLhNaEcdocXfr2t8EDVPGctwKTu3yPqrNkqM8FmmBDZyz5PELQA87wws+A SDzbFw6XA2MZ9dQaPr1Br7fk2WAletTVGlg7UarjiXqu7+JzjpP8tfjJdP+eotGr HnDiHBmurPX9/VwAbALYkYp0wTm8TZ8nm8q3i6+GBpMANKZGwFxRyFaxtStcExST 56vwLQlDjoINf+myUIkuUyE8jZjByk2JCR8esA1hBFhzX3hHwsA= -----END CERTIFICATE-----Generated at Mon May 12 05:09:16 2025 by rpki-client