$ rpki-client -vvf repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft File: 6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft (raw, json) Hash identifier: KCqIZwl89iGmMqZT+Y2VOHPxPDjj6KjL4zBCE9wp3DQ= Subject key identifier: 87:EB:76:23:B3:B7:7A:7E:93:3D:CB:67:CD:40:FA:F9:68:DB:4D:5B Authority key identifier: 6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92 Certificate issuer: /CN=6A200D6FC5434DAD6106CEE5439CA1270DDCBC92 Certificate serial: 2ACB5AF0BD6F9D77933C96688C81BA36B2D21A1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft Manifest number: 72 Signing time: Sat 10 May 2025 06:41:07 +0000 Manifest this update: Sat 10 May 2025 06:36:07 +0000 Manifest next update: Tue 13 May 2025 09:31:07 +0000 Files and hashes: 1: 6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl (hash: stoZn7Ld3i9icBfHguFm56G8xsusKhRBrHV8zcZ103k=) 2: 3130332e3130332e3138302e302f32332d3234203d3e20313336383437.roa (hash: z7JSBWPGJlOn/ZqqGa8az/lIZkw26RQslHPZ9GMpJ4M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 08:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:cb:5a:f0:bd:6f:9d:77:93:3c:96:68:8c:81:ba:36:b2:d2:1a:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A200D6FC5434DAD6106CEE5439CA1270DDCBC92 Validity Not Before: May 10 06:36:07 2025 GMT Not After : May 13 09:31:07 2025 GMT Subject: CN=87EB7623B3B77A7E933DCB67CD40FAF968DB4D5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:7a:cb:ac:83:ea:8c:8a:8f:32:b1:66:f3:75: d9:8e:da:5e:f7:14:2d:b2:22:73:be:c5:08:d3:47: 0a:83:f3:3e:d8:6f:c7:c5:ea:aa:d6:74:8c:d4:f9: ad:9b:8d:57:5d:d9:65:ed:29:f6:45:04:d9:5e:c2: 77:50:bc:df:49:fc:70:2a:75:36:05:88:8f:6f:1b: 4a:fe:fa:b8:50:31:4a:13:db:2b:28:62:06:6f:04: 05:1e:6d:03:a7:17:8f:dd:90:ab:49:62:c6:53:06: f1:aa:67:ae:b8:0c:9b:00:24:17:dc:29:36:1a:36: dc:f1:b5:4f:2c:4e:4b:ee:d5:d9:88:2f:0b:16:e7: e9:c5:86:14:e7:d9:38:6c:3c:3f:92:20:3f:b1:5d: cb:95:22:b7:88:14:0f:88:53:a3:98:bc:06:9d:c8: b1:30:68:40:82:4c:82:70:83:7c:80:1c:ec:d9:cb: 38:f3:f4:b9:cc:c1:78:73:b0:12:04:76:da:2b:76: ff:7d:c9:85:c7:6c:6a:f2:2e:8a:4e:fc:10:08:77: d7:fe:34:85:cf:3d:9f:a3:93:ea:de:66:11:e1:62: ad:eb:dc:41:93:18:fe:1c:01:ac:2b:9f:39:37:d6: 28:38:2e:53:86:58:dd:30:e4:05:d7:18:c4:36:2e: 5f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:EB:76:23:B3:B7:7A:7E:93:3D:CB:67:CD:40:FA:F9:68:DB:4D:5B X509v3 Authority Key Identifier: keyid:6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:45:f4:4c:df:e3:1a:b2:de:4b:0e:97:0b:3b:b7:97:76:f9: 5e:60:a7:3b:51:2f:ad:b6:25:9b:f5:19:3c:8b:9c:9e:75:c3: d0:27:e7:f3:ec:c1:92:91:9a:ba:af:f7:63:b6:3a:2b:e4:44: b6:0d:2e:11:87:11:63:db:ed:60:5f:eb:aa:ab:7e:2b:7f:57: d6:54:85:63:06:bc:10:44:a4:af:d6:a3:28:22:05:7a:84:94: 2d:8a:1c:b2:a9:18:ed:b9:87:28:f1:21:da:2e:aa:61:5a:4a: ea:1d:c4:e8:0d:21:26:1d:84:d6:96:ca:a5:61:cc:30:84:f8: 81:8a:69:8f:c9:6e:6e:fa:08:eb:cb:69:47:53:56:b4:ba:89: b6:4f:9b:7d:a3:a6:8a:4c:64:c0:ec:97:dc:7a:e1:1c:3c:c2: b3:69:62:72:c1:e7:77:ae:c1:6b:ba:a6:09:54:de:a3:b2:2a: 2c:41:f1:4b:96:1d:7d:11:74:09:4f:3f:63:cf:62:b0:21:bb: c3:88:07:6a:4e:d5:93:99:06:84:42:ea:b0:34:7c:ea:30:68: a0:e1:86:2b:9e:6b:dc:f1:43:cf:68:ea:24:26:e1:17:82:74: d1:12:37:c1:ba:ec:bb:e7:71:12:e8:87:df:ba:b3:7a:4c:45: 54:39:79:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKsta8L1vnXeTPJZojIG6NrLSGhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0ExMjcw RERDQkM5MjAeFw0yNTA1MTAwNjM2MDdaFw0yNTA1MTMwOTMxMDdaMDMxMTAvBgNV BAMTKDg3RUI3NjIzQjNCNzdBN0U5MzNEQ0I2N0NENDBGQUY5NjhEQjRENUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyesusg+qMio8ysWbzddmO2l73 FC2yInO+xQjTRwqD8z7Yb8fF6qrWdIzU+a2bjVdd2WXtKfZFBNlewndQvN9J/HAq dTYFiI9vG0r++rhQMUoT2ysoYgZvBAUebQOnF4/dkKtJYsZTBvGqZ664DJsAJBfc KTYaNtzxtU8sTkvu1dmILwsW5+nFhhTn2ThsPD+SID+xXcuVIreIFA+IU6OYvAad yLEwaECCTIJwg3yAHOzZyzjz9LnMwXhzsBIEdtordv99yYXHbGryLopO/BAId9f+ NIXPPZ+jk+reZhHhYq3r3EGTGP4cAawrnzk31ig4LlOGWN0w5AXXGMQ2Ll+rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh+t2I7O3en6TPctnzUD6+WjbTVswHwYDVR0j BBgwFoAUaiANb8VDTa1hBs7lQ5yhJw3cvJIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGQwZmNhOC01YzJkLTRlMzUtYmQ3ZC1iNDQ4YWE3NWYyYmUvMC82QTIwMEQ2RkM1 NDM0REFENjEwNkNFRTU0MzlDQTEyNzBERENCQzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0ExMjcwRERD QkM5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhkMGZjYTgtNWMyZC00ZTM1LWJk N2QtYjQ0OGFhNzVmMmJlLzAvNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0Ex MjcwRERDQkM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtF9Ezf4xqy3ksOlws7t5d2+V5gpztRL622 JZv1GTyLnJ51w9An5/PswZKRmrqv92O2OivkRLYNLhGHEWPb7WBf66qrfit/V9ZU hWMGvBBEpK/WoygiBXqElC2KHLKpGO25hyjxIdouqmFaSuodxOgNISYdhNaWyqVh zDCE+IGKaY/Jbm76COvLaUdTVrS6ibZPm32jpopMZMDsl9x64Rw8wrNpYnLB53eu wWu6pglU3qOyKixB8UuWHX0RdAlPP2PPYrAhu8OIB2pO1ZOZBoRC6rA0fOowaKDh hiuea9zxQ89o6iQm4ReCdNESN8G67LvncRLoh9+6s3pMRVQ5ed8= -----END CERTIFICATE-----Generated at Sat May 10 20:04:16 2025 by rpki-client