$ rpki-client -vvf repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft File: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft (raw, json) Hash identifier: mtVLtGONO+sKzKwVjDrNSGpPOw8byXofFigId66C0JI= Subject key identifier: A1:BA:A7:69:AC:40:B7:5F:AF:8D:42:7F:4D:56:2D:E0:D4:3B:C2:2E Authority key identifier: 6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E Certificate issuer: /CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Certificate serial: 281E40E901DFB43816C3EF3F5A24D6CB99DCD5F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft Manifest number: A5 Signing time: Sat 10 May 2025 07:12:09 +0000 Manifest this update: Sat 10 May 2025 07:07:09 +0000 Manifest next update: Tue 13 May 2025 10:42:09 +0000 Files and hashes: 1: 33362e35302e3231362e302f32342d3234203d3e20313437313238.roa (hash: knY/ggPl78wk2nvRxnL0Ik6PzIK0DYSQq15iPy2gM40=) 2: 33362e35302e3231372e302f32342d3234203d3e20313437313238.roa (hash: suvA+Wk962jHlhC9+yItBsXmZi+V1BXvTufHDqbDzJE=) 3: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl (hash: Hs/ZgU/LLmrxkLWPGrPG+9/kC4zZCX25UG2t5z0s16o=) 4: 33362e35302e3231362e302f32332d3233203d3e20313437313238.roa (hash: TzFqnwzzY9xia0s3waMLkiGG8A7BVi2jn0Tebn9ZTXg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 10:42:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:1e:40:e9:01:df:b4:38:16:c3:ef:3f:5a:24:d6:cb:99:dc:d5:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Validity Not Before: May 10 07:07:09 2025 GMT Not After : May 13 10:42:09 2025 GMT Subject: CN=A1BAA769AC40B75FAF8D427F4D562DE0D43BC22E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:54:3f:bc:1c:1b:d0:4b:f1:af:14:8f:b0:56: 66:27:2d:c8:36:d0:8e:a0:77:9a:e7:bb:68:29:88: 65:ae:b9:0f:29:97:a4:74:2b:12:b7:a7:8a:ab:30: 28:8e:b5:64:76:e6:c8:be:10:1d:cd:a9:6a:e6:75: 94:e6:a4:a4:59:92:49:b4:7c:1a:ac:0d:da:a3:08: 40:35:8c:d0:5d:3b:fa:2b:8b:4b:00:ed:e0:87:1d: 47:70:50:c9:c6:8a:39:9e:05:e3:13:db:a6:4c:13: 38:0d:1a:6f:46:72:08:46:6b:c7:58:5e:15:ab:fa: 0c:37:55:b6:a9:c6:63:64:ee:91:2a:81:36:91:3d: 81:01:83:d7:77:f6:c9:c0:eb:b3:6e:cd:77:67:06: 3a:d0:06:d8:8c:df:4e:37:6f:26:7f:fe:26:bd:28: ea:63:e7:3c:88:8a:72:d2:c9:0e:11:ed:c4:df:cf: cb:84:2f:8e:c9:06:7e:83:8a:d3:60:30:6c:2e:c9: b6:9a:be:6f:7e:ae:86:3e:df:fe:46:91:9b:ee:95: 69:55:bc:a7:f4:4e:9e:87:a7:97:d3:ce:e6:c0:76: d6:66:85:46:2a:65:00:d6:bf:c4:b5:43:ca:1b:d7: 06:4f:f7:08:b7:87:95:16:f0:e1:ee:5e:2d:fe:33: ab:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:BA:A7:69:AC:40:B7:5F:AF:8D:42:7F:4D:56:2D:E0:D4:3B:C2:2E X509v3 Authority Key Identifier: keyid:6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:d7:24:f5:37:31:06:09:a3:22:15:80:de:fe:74:f0:f8:95: 3a:8e:34:1e:70:6d:6c:82:4a:af:74:65:99:72:a6:8a:8a:27: 10:1d:22:ce:bd:a4:48:b3:02:b1:86:e1:5b:70:d6:f4:12:ef: 3a:65:36:d9:14:31:02:c6:63:4f:8d:e7:48:36:5a:47:93:73: fa:58:d0:95:bb:42:c0:a8:84:73:31:5c:8a:82:8e:3c:c0:e4: 28:b6:d2:06:ba:33:05:d6:6b:48:b7:71:6a:4b:30:73:e4:33: 55:33:3e:7c:ee:22:33:66:88:53:ab:5c:00:93:f3:3e:6c:46: 4e:b1:7f:7a:f1:76:45:83:dc:d5:2e:c1:af:b2:85:9b:e8:51: 28:b4:93:7e:e3:84:da:ed:ae:3c:87:fa:cc:5b:e1:c0:29:a8: 7c:ea:11:ef:89:1d:dd:16:43:2a:f9:46:df:14:e0:8f:ad:05: fd:90:e6:fb:50:3e:f3:72:ff:eb:4d:48:8d:c0:0b:45:4c:19: 29:4b:32:04:2d:5b:a5:bd:80:83:ae:20:38:f9:8e:27:fd:6f: 7f:56:47:de:e0:50:31:41:b2:4f:d6:79:7f:6b:07:90:e5:aa: 00:ff:d1:41:07:d0:3c:d5:9e:59:6b:39:f4:77:45:a3:c2:d2: b5:39:4b:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKB5A6QHftDgWw+8/WiTWy5nc1fYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3 QTk4MDk5RTAeFw0yNTA1MTAwNzA3MDlaFw0yNTA1MTMxMDQyMDlaMDMxMTAvBgNV BAMTKEExQkFBNzY5QUM0MEI3NUZBRjhENDI3RjRENTYyREUwRDQzQkMyMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkVD+8HBvQS/GvFI+wVmYnLcg2 0I6gd5rnu2gpiGWuuQ8pl6R0KxK3p4qrMCiOtWR25si+EB3NqWrmdZTmpKRZkkm0 fBqsDdqjCEA1jNBdO/ori0sA7eCHHUdwUMnGijmeBeMT26ZMEzgNGm9GcghGa8dY XhWr+gw3VbapxmNk7pEqgTaRPYEBg9d39snA67NuzXdnBjrQBtiM3043byZ//ia9 KOpj5zyIinLSyQ4R7cTfz8uEL47JBn6DitNgMGwuybaavm9+roY+3/5GkZvulWlV vKf0Tp6Hp5fTzubAdtZmhUYqZQDWv8S1Q8ob1wZP9wi3h5UW8OHuXi3+M6tVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUobqnaaxAt1+vjUJ/TVYt4NQ7wi4wHwYDVR0j BBgwFoAUbbsQDY1GaauKXH7gVyKO1nqYCZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTk4OWZhZi00OGZiLTRmNDAtOWU3Ny0yNDNkNzhhNWI1YzQvMC82REJCMTAwRDhE NDY2OUFCOEE1QzdFRTA1NzIyOEVENjdBOTgwOTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3QTk4 MDk5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU5ODlmYWYtNDhmYi00ZjQwLTll NzctMjQzZDc4YTViNWM0LzAvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhF RDY3QTk4MDk5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILXJPU3MQYJoyIVgN7+dPD4lTqONB5wbWyC Sq90ZZlypoqKJxAdIs69pEizArGG4Vtw1vQS7zplNtkUMQLGY0+N50g2WkeTc/pY 0JW7QsCohHMxXIqCjjzA5Ci20ga6MwXWa0i3cWpLMHPkM1UzPnzuIjNmiFOrXACT 8z5sRk6xf3rxdkWD3NUuwa+yhZvoUSi0k37jhNrtrjyH+sxb4cApqHzqEe+JHd0W Qyr5Rt8U4I+tBf2Q5vtQPvNy/+tNSI3AC0VMGSlLMgQtW6W9gIOuIDj5jif9b39W R97gUDFBsk/WeX9rB5DlqgD/0UEH0DzVnllrOfR3RaPC0rU5S6g= -----END CERTIFICATE-----Generated at Mon May 12 10:49:43 2025 by rpki-client