$ rpki-client -vvf repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft File: 6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft (raw, json) Hash identifier: ymsTrvkpxhp0sOi6rxrs6eMD9jFP/O1Twc3gnqWWYfc= Subject key identifier: 4C:C1:21:70:8A:DC:AD:86:84:26:C4:41:03:C1:68:CB:AF:53:42:1C Authority key identifier: 6A:AF:6E:8D:1C:9A:80:94:46:CB:C0:76:FE:39:08:3A:F9:54:70:8E Certificate issuer: /CN=6AAF6E8D1C9A809446CBC076FE39083AF954708E Certificate serial: 04E34CCA78C72EA92CF2BB42E7D180B674C9D1FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft Manifest number: 0188 Signing time: Sun 11 May 2025 04:21:25 +0000 Manifest this update: Sun 11 May 2025 04:16:25 +0000 Manifest next update: Wed 14 May 2025 09:54:25 +0000 Files and hashes: 1: 3130332e33392e37342e302f32332d3234203d3e20313530323732.roa (hash: /jbCkGD1i8NyhuUnKVEmZYj4vCqIPPKrbQpk5MF5I1o=) 2: 6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl (hash: INJHUOXtayVfNYRO4DK5dWcVDwzxkhjAS+5GhgV1CMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 09:54:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e3:4c:ca:78:c7:2e:a9:2c:f2:bb:42:e7:d1:80:b6:74:c9:d1:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AAF6E8D1C9A809446CBC076FE39083AF954708E Validity Not Before: May 11 04:16:25 2025 GMT Not After : May 14 09:54:25 2025 GMT Subject: CN=4CC121708ADCAD868426C44103C168CBAF53421C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d9:6d:9d:4a:68:ea:6e:29:8f:4d:fb:64:e0: 07:2d:51:49:1b:0d:0c:b7:16:4e:43:f9:39:6b:03: ed:91:28:06:54:a5:ac:f6:4a:5b:89:ef:c8:18:d3: 71:a3:e3:7f:8f:84:77:52:03:41:ff:2d:ce:c5:97: 8d:dc:37:36:1e:ba:93:d4:77:1f:32:db:6a:ff:a5: 5e:37:92:fe:8c:37:c4:78:5a:be:dc:de:d5:7c:8b: 05:5f:8b:d6:ba:72:75:ad:b5:ef:b5:69:04:90:ee: 29:4b:09:19:35:a7:b8:c2:d2:e2:5a:37:24:31:4e: 36:84:d0:e6:89:af:b8:66:8d:9f:ed:b7:01:16:a6: 63:39:a0:12:0a:6b:83:b4:22:0d:d8:98:9b:e5:f3: 62:89:49:b0:2b:ff:69:ef:48:20:bf:27:ef:65:e8: 1e:f5:58:08:67:94:ec:a6:e9:bd:7b:aa:d0:68:5b: 18:2b:dc:66:56:d1:9c:84:fe:51:43:2e:72:29:2d: 6b:1d:4a:01:7f:5e:d5:92:ed:28:60:36:c4:bc:b0: 0f:2c:a3:55:d5:86:cb:69:74:35:5a:34:6f:bb:fa: 02:d4:1e:33:5f:0b:ff:00:20:34:3a:41:1d:ac:38: df:43:03:7e:c3:31:11:71:64:1d:3c:e0:a1:f9:dc: 02:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C1:21:70:8A:DC:AD:86:84:26:C4:41:03:C1:68:CB:AF:53:42:1C X509v3 Authority Key Identifier: keyid:6A:AF:6E:8D:1C:9A:80:94:46:CB:C0:76:FE:39:08:3A:F9:54:70:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:9c:1d:70:61:0e:3e:84:67:e8:92:c5:ab:1a:36:e6:8b:c9: 7b:68:7e:48:e7:ad:ff:6d:a2:5d:3b:63:97:b8:6d:23:26:6a: e4:fb:25:5f:4a:fe:4d:d2:cc:e4:2e:aa:f6:6e:db:e6:9c:b1: 2a:ce:73:c0:ba:0c:b9:9e:35:ac:d9:80:3f:00:4e:38:9e:e8: 01:bd:c1:e4:40:d6:4c:16:da:6d:7d:c0:81:c1:59:5e:68:de: 61:af:91:ef:c2:ac:ce:87:01:9c:fa:12:57:07:c3:f0:c3:e0: 1a:78:50:99:f9:8c:06:a4:c9:74:00:ba:87:1c:2a:b4:70:7e: 3b:6c:8a:09:1a:89:1b:89:8f:b3:5a:df:e1:1e:b0:a3:42:bf: a5:2b:b3:bb:ef:eb:e5:4e:d9:7a:22:40:7b:90:fc:b7:b4:c5: e5:2a:3e:65:27:bc:4e:4f:54:ac:81:d2:51:9f:52:6e:91:fc: 5e:f9:98:c0:d0:b6:e2:8b:dd:fd:61:ef:23:6d:0f:cb:b9:88: 06:00:08:61:a6:ad:63:e3:49:0e:20:cf:2d:56:5a:f8:b8:b3: cf:ae:53:f1:84:2b:be:5a:7c:25:5d:e9:58:d4:1c:ab:78:ac: 68:ac:c8:65:f7:1b:e9:89:2e:ba:28:37:02:dd:cd:43:cc:06: 81:d8:99:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBONMynjHLqks8rtC59GAtnTJ0fswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4M0FG OTU0NzA4RTAeFw0yNTA1MTEwNDE2MjVaFw0yNTA1MTQwOTU0MjVaMDMxMTAvBgNV BAMTKDRDQzEyMTcwOEFEQ0FEODY4NDI2QzQ0MTAzQzE2OENCQUY1MzQyMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw2W2dSmjqbimPTftk4ActUUkb DQy3Fk5D+TlrA+2RKAZUpaz2SluJ78gY03Gj43+PhHdSA0H/Lc7Fl43cNzYeupPU dx8y22r/pV43kv6MN8R4Wr7c3tV8iwVfi9a6cnWtte+1aQSQ7ilLCRk1p7jC0uJa NyQxTjaE0OaJr7hmjZ/ttwEWpmM5oBIKa4O0Ig3YmJvl82KJSbAr/2nvSCC/J+9l 6B71WAhnlOym6b17qtBoWxgr3GZW0ZyE/lFDLnIpLWsdSgF/XtWS7ShgNsS8sA8s o1XVhstpdDVaNG+7+gLUHjNfC/8AIDQ6QR2sON9DA37DMRFxZB084KH53AKhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTMEhcIrcrYaEJsRBA8Foy69TQhwwHwYDVR0j BBgwFoAUaq9ujRyagJRGy8B2/jkIOvlUcI4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTE5YWJjOC04NTA3LTQxZWQtODI4OS03ZTNhYzdiMjQ5MzUvMC82QUFGNkU4RDFD OUE4MDk0NDZDQkMwNzZGRTM5MDgzQUY5NTQ3MDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4M0FGOTU0 NzA4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2UxOWFiYzgtODUwNy00MWVkLTgy ODktN2UzYWM3YjI0OTM1LzAvNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4 M0FGOTU0NzA4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEWcHXBhDj6EZ+iSxasaNuaLyXtofkjnrf9t ol07Y5e4bSMmauT7JV9K/k3SzOQuqvZu2+acsSrOc8C6DLmeNazZgD8ATjie6AG9 weRA1kwW2m19wIHBWV5o3mGvke/CrM6HAZz6ElcHw/DD4Bp4UJn5jAakyXQAuocc KrRwfjtsigkaiRuJj7Na3+EesKNCv6Urs7vv6+VO2XoiQHuQ/Le0xeUqPmUnvE5P VKyB0lGfUm6R/F75mMDQtuKL3f1h7yNtD8u5iAYACGGmrWPjSQ4gzy1WWvi4s8+u U/GEK75afCVd6VjUHKt4rGisyGX3G+mJLrooNwLdzUPMBoHYmes= -----END CERTIFICATE-----Generated at Sun May 11 15:09:41 2025 by rpki-client