$ rpki-client -vvf repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft File: 6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft (raw, json) Hash identifier: hf7q23QrIuIwQwuWcJc3ow1OBuVl1WteSaiTz8TmjHI= Subject key identifier: E0:F1:D4:65:57:94:31:7E:01:18:F4:80:D8:80:D9:82:9E:4E:6A:7D Authority key identifier: 6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB Certificate issuer: /CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB Certificate serial: 5652B420D545146B16D995893ECE22CA9E3A5083 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft Manifest number: 039E Signing time: Fri 09 May 2025 08:31:43 +0000 Manifest this update: Fri 09 May 2025 08:26:43 +0000 Manifest next update: Mon 12 May 2025 16:27:43 +0000 Files and hashes: 1: 6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl (hash: w19tUh8WAbiHkm++u3BPa309Jm1ItoTEw8Fn/yAkqys=) 2: 3130332e3131362e3130382e302f32342d3234203d3e20313331373835.roa (hash: LY7WT+w7FguQLmfrSOP0mKv6BUNq2KCw3SGoAGK1WaA=) 3: 3130332e3232362e35352e302f32342d3234203d3e20313331373835.roa (hash: w25Hdja8cVcMSMfXbCo6MIHOJSikdvlBUIB8EBkQuqs=) 4: 3130332e31362e37392e302f32342d3234203d3e20313331373835.roa (hash: dq2C0qn2bszea5JrNdqQBrs3uxaP2+6us75MTw8i5Kc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 16:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:52:b4:20:d5:45:14:6b:16:d9:95:89:3e:ce:22:ca:9e:3a:50:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB Validity Not Before: May 9 08:26:43 2025 GMT Not After : May 12 16:27:43 2025 GMT Subject: CN=E0F1D4655794317E0118F480D880D9829E4E6A7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d4:f8:26:5b:86:60:0a:89:97:e1:fa:0c:03: a7:88:86:a5:ae:34:08:26:05:a1:be:08:70:4a:f1: a3:55:ba:a2:63:2b:4d:08:4f:f7:d4:1c:d3:22:e3: f8:b2:38:e0:f9:20:15:7d:a5:2f:12:e3:ad:10:0b: 5e:82:2d:9b:f1:8e:77:fe:e4:a6:d5:52:f9:f6:ca: 10:17:57:39:01:55:94:b7:71:7d:fc:46:7d:93:1c: ed:f3:58:fa:c5:b2:bc:0c:dc:8d:66:16:ee:37:ed: 0a:f8:2f:ca:7c:2b:fe:63:42:99:35:6c:8a:12:bb: 80:89:bb:fd:cc:fe:99:77:c9:6e:8b:96:da:97:10: 19:de:ab:a0:86:f1:b2:a1:75:a5:57:53:6f:e9:e2: 68:2b:ce:a4:bc:ed:c3:e2:2c:9e:b1:be:5a:ed:e1: 51:e3:29:54:51:0c:c9:8d:61:ae:96:3b:f0:9f:8a: aa:8e:62:60:53:42:08:7d:d7:c6:ca:87:b2:63:cb: 42:52:5d:e0:7e:e0:3c:41:be:bd:56:d8:13:84:51: 92:a4:e7:25:46:a1:bd:d2:1f:52:77:d7:60:76:24: e8:14:95:d5:44:9e:96:1a:df:51:3e:00:ee:f2:94: e9:42:48:ce:f7:d9:9c:b5:4f:55:89:67:38:cf:d2: 66:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F1:D4:65:57:94:31:7E:01:18:F4:80:D8:80:D9:82:9E:4E:6A:7D X509v3 Authority Key Identifier: keyid:6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:4f:bc:3d:c4:af:85:f6:08:23:59:ca:5f:10:01:7f:fe:73: 57:54:0a:d0:7b:af:c9:0a:11:fc:df:c1:ab:08:d9:48:df:10: 36:b3:ff:be:bc:38:5e:57:48:c6:29:a8:33:1b:97:0e:e1:15: 77:1a:34:e2:52:d4:a3:a7:cf:0a:f1:6e:35:48:3a:b4:57:5f: 83:58:2e:0e:a1:a1:ec:78:55:48:19:d6:1f:4d:ab:d8:b6:aa: 5f:37:69:31:be:46:e1:b9:9f:6a:6b:96:f2:b1:a1:ca:09:64: e7:74:71:26:52:17:37:c1:10:3c:da:a5:c0:cd:19:49:f8:a2: 85:57:a6:cf:cb:94:77:7a:9f:de:e3:0c:75:7e:dd:6a:79:55: 30:8e:e2:a7:4a:79:16:4d:3d:3c:fe:1f:79:b6:d2:e3:a0:c5: be:c8:21:e7:1e:af:63:21:2a:20:b0:b1:de:a3:1e:72:f6:e8: ba:f9:cd:44:bf:0a:85:f9:01:7e:42:f8:95:aa:20:37:59:bc: 0d:7e:8d:14:6d:21:fb:e0:37:a0:9b:45:dd:a7:64:1d:f1:3c: ca:2a:12:0d:f5:42:8e:38:ba:9e:77:e1:e4:af:35:39:3a:fd: f0:ad:0d:3d:95:4f:2a:d0:56:ee:78:bc:89:36:af:e7:68:1f: b1:dd:26:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVlK0INVFFGsW2ZWJPs4iyp46UIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhGN0M1 OEFDQThBQjAeFw0yNTA1MDkwODI2NDNaFw0yNTA1MTIxNjI3NDNaMDMxMTAvBgNV BAMTKEUwRjFENDY1NTc5NDMxN0UwMTE4RjQ4MEQ4ODBEOTgyOUU0RTZBN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/1PgmW4ZgComX4foMA6eIhqWu NAgmBaG+CHBK8aNVuqJjK00IT/fUHNMi4/iyOOD5IBV9pS8S460QC16CLZvxjnf+ 5KbVUvn2yhAXVzkBVZS3cX38Rn2THO3zWPrFsrwM3I1mFu437Qr4L8p8K/5jQpk1 bIoSu4CJu/3M/pl3yW6LltqXEBneq6CG8bKhdaVXU2/p4mgrzqS87cPiLJ6xvlrt 4VHjKVRRDMmNYa6WO/CfiqqOYmBTQgh918bKh7Jjy0JSXeB+4DxBvr1W2BOEUZKk 5yVGob3SH1J312B2JOgUldVEnpYa31E+AO7ylOlCSM732Zy1T1WJZzjP0mZZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4PHUZVeUMX4BGPSA2IDZgp5Oan0wHwYDVR0j BBgwFoAUbUsXSN5S3OOXuGh3LhKPfFisqKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDIwNzUyMy1kNWY1LTRhY2MtYjBhYy1iZmIwOTU0ZmE0ZTAvMC82RDRCMTc0OERF NTJEQ0UzOTdCODY4NzcyRTEyOEY3QzU4QUNBOEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhGN0M1OEFD QThBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQyMDc1MjMtZDVmNS00YWNjLWIw YWMtYmZiMDk1NGZhNGUwLzAvNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhG N0M1OEFDQThBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpPvD3Er4X2CCNZyl8QAX/+c1dUCtB7r8kK EfzfwasI2UjfEDaz/768OF5XSMYpqDMblw7hFXcaNOJS1KOnzwrxbjVIOrRXX4NY Lg6hoex4VUgZ1h9Nq9i2ql83aTG+RuG5n2prlvKxocoJZOd0cSZSFzfBEDzapcDN GUn4ooVXps/LlHd6n97jDHV+3Wp5VTCO4qdKeRZNPTz+H3m20uOgxb7IIecer2Mh KiCwsd6jHnL26Lr5zUS/CoX5AX5C+JWqIDdZvA1+jRRtIfvgN6CbRd2nZB3xPMoq Eg31Qo44up534eSvNTk6/fCtDT2VTyrQVu54vIk2r+doH7HdJns= -----END CERTIFICATE-----Generated at Sun May 11 12:35:15 2025 by rpki-client