$ rpki-client -vvf repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft File: 6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft (raw, json) Hash identifier: nyv2howaDIMpTs3ER2F5kNa+RAejMMTgN0pv/4rjnr4= Subject key identifier: F1:38:92:0E:03:42:5B:CA:58:AE:36:65:0E:1C:FE:3D:CF:0D:E7:8F Authority key identifier: 6D:DA:5C:1E:72:FD:CA:12:9B:06:9E:D9:C4:4B:8A:AE:08:BA:E6:40 Certificate issuer: /CN=6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640 Certificate serial: 3F7220CE8130F22399E3AE073383AF961520CAB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer Subject info access: rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft Manifest number: 04C9 Signing time: Sun 04 May 2025 17:51:06 +0000 Manifest this update: Sun 04 May 2025 17:46:06 +0000 Manifest next update: Wed 07 May 2025 19:51:06 +0000 Files and hashes: 1: 3130332e3233332e3130302e302f32342d3234203d3e20313333333537.roa (hash: H1YjqyvOwzw7OzP4d2hIp8LUaOzbpgTKg3oVsoXpZKQ=) 2: 6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl (hash: SBtbkGKL+V0HGHvwLl700H/JS/uLj90ncZH3FOkEwY8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 19:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:72:20:ce:81:30:f2:23:99:e3:ae:07:33:83:af:96:15:20:ca:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640 Validity Not Before: May 4 17:46:06 2025 GMT Not After : May 7 19:51:06 2025 GMT Subject: CN=F138920E03425BCA58AE36650E1CFE3DCF0DE78F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:16:03:ad:e4:3c:f3:8c:d0:5d:54:65:88:6a: d1:ab:cc:00:aa:d9:67:2a:d4:60:ea:f6:3f:d2:3f: ed:aa:f8:8b:b1:ff:54:04:2f:fd:05:51:c6:ae:50: 7a:cd:b0:33:a5:15:7b:8d:03:0b:8c:6c:ca:cd:d5: 40:f5:bd:c2:08:dc:5a:01:6d:63:b9:aa:a2:48:3e: 28:b1:da:3d:36:74:0f:35:6f:0f:c1:19:9e:e4:f1: 96:9b:3f:d8:c1:0d:58:4b:7b:4f:9f:f7:13:f3:a0: 51:1c:c0:df:ea:f3:e4:be:5a:20:c8:dc:de:0d:ea: ec:7f:cd:3e:b1:90:3a:7a:f4:a3:8d:af:c5:37:69: f9:aa:49:bf:05:52:92:b4:2e:d4:ec:8d:b0:56:bb: 54:01:dd:4c:1f:65:bc:95:3f:d8:8d:c4:a1:7f:d9: 25:1b:60:d5:ff:e9:15:bc:14:58:3f:02:cd:f6:ab: 2b:f8:b4:eb:0a:57:24:d0:37:84:cb:2e:5d:fb:da: fc:03:2d:95:96:e3:12:91:00:fd:95:be:eb:9a:e7: 5c:01:f5:f2:ec:1f:0c:d1:01:90:04:bc:96:66:af: f0:35:0d:46:32:c2:70:31:50:89:8d:71:1c:e0:ce: c3:89:6d:d5:5d:df:06:97:d4:86:75:8f:bd:8d:77: 56:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:38:92:0E:03:42:5B:CA:58:AE:36:65:0E:1C:FE:3D:CF:0D:E7:8F X509v3 Authority Key Identifier: keyid:6D:DA:5C:1E:72:FD:CA:12:9B:06:9E:D9:C4:4B:8A:AE:08:BA:E6:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:46:c8:92:1f:18:84:d0:6f:c1:69:ed:48:20:f6:57:b6:86: ea:4e:5e:1a:6a:1b:b5:9f:8a:eb:8a:99:70:f7:e6:18:0e:fa: 30:81:b6:3d:c7:f3:05:94:42:ac:4c:e7:9a:37:a0:2e:03:dc: 77:0f:1b:2d:c8:0f:5f:f1:cd:2c:4b:ce:92:44:19:78:eb:f8: 1c:6f:c7:1a:27:44:04:27:a9:48:87:72:6f:6b:f8:92:3f:d7: 8e:3a:26:f5:ff:71:c7:f6:cc:9d:46:e7:66:6e:a6:d7:3e:1f: 39:8e:3d:fc:ff:6a:d2:64:e5:3e:ea:8f:da:9a:13:d8:98:6e: a9:e0:76:8a:f3:01:a2:20:e9:b3:b2:30:79:b5:f8:c1:10:aa: fc:cf:d7:82:2b:4f:61:26:b0:06:55:7a:21:78:95:4f:e9:f5: e7:c0:a9:01:87:88:4e:c0:33:45:83:25:ee:b1:e1:4b:03:51: 6f:2a:40:43:78:39:3a:6d:ee:b7:45:e0:53:b5:74:41:44:9c: 6c:10:d0:d9:cf:fa:6e:15:84:8e:e5:9f:18:b7:3e:a6:51:2c: 69:17:37:a4:aa:49:ae:b5:74:b7:dd:ac:7e:0f:a1:fd:4f:28: 0f:b6:51:08:d2:a5:bc:dd:84:27:2e:e0:8d:66:f6:66:52:3a: d8:fb:90:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP3IgzoEw8iOZ464HM4OvlhUgyrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhBQUUw OEJBRTY0MDAeFw0yNTA1MDQxNzQ2MDZaFw0yNTA1MDcxOTUxMDZaMDMxMTAvBgNV BAMTKEYxMzg5MjBFMDM0MjVCQ0E1OEFFMzY2NTBFMUNGRTNEQ0YwREU3OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4FgOt5DzzjNBdVGWIatGrzACq 2Wcq1GDq9j/SP+2q+Iux/1QEL/0FUcauUHrNsDOlFXuNAwuMbMrN1UD1vcII3FoB bWO5qqJIPiix2j02dA81bw/BGZ7k8ZabP9jBDVhLe0+f9xPzoFEcwN/q8+S+WiDI 3N4N6ux/zT6xkDp69KONr8U3afmqSb8FUpK0LtTsjbBWu1QB3UwfZbyVP9iNxKF/ 2SUbYNX/6RW8FFg/As32qyv4tOsKVyTQN4TLLl372vwDLZWW4xKRAP2Vvuua51wB 9fLsHwzRAZAEvJZmr/A1DUYywnAxUImNcRzgzsOJbdVd3waX1IZ1j72Nd1aDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8TiSDgNCW8pYrjZlDhz+Pc8N548wHwYDVR0j BBgwFoAUbdpcHnL9yhKbBp7ZxEuKrgi65kAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTdjOGMwMS00YWY3LTQxYjAtODVhMy05ZDFmYTRlYjlmYmEvMC82RERBNUMxRTcy RkRDQTEyOUIwNjlFRDlDNDRCOEFBRTA4QkFFNjQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhBQUUwOEJB RTY0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE3YzhjMDEtNGFmNy00MWIwLTg1 YTMtOWQxZmE0ZWI5ZmJhLzAvNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhB QUUwOEJBRTY0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZGyJIfGITQb8Fp7Ugg9le2hupOXhpqG7Wf iuuKmXD35hgO+jCBtj3H8wWUQqxM55o3oC4D3HcPGy3ID1/xzSxLzpJEGXjr+Bxv xxonRAQnqUiHcm9r+JI/1446JvX/ccf2zJ1G52Zuptc+HzmOPfz/atJk5T7qj9qa E9iYbqngdorzAaIg6bOyMHm1+MEQqvzP14IrT2EmsAZVeiF4lU/p9efAqQGHiE7A M0WDJe6x4UsDUW8qQEN4OTpt7rdF4FO1dEFEnGwQ0NnP+m4VhI7lnxi3PqZRLGkX N6SqSa61dLfdrH4Pof1PKA+2UQjSpbzdhCcu4I1m9mZSOtj7kJg= -----END CERTIFICATE-----Generated at Wed May 7 02:43:12 2025 by rpki-client