$ rpki-client -vvf repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft File: 6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft (raw, json) Hash identifier: DuSYNfckDj5uykZzHE8I/7zPcL0NQbuPlKC4OBA+oDI= Subject key identifier: C8:5A:27:32:99:58:A9:80:D9:99:5C:D1:DA:09:B6:1D:D1:92:5E:38 Authority key identifier: 6E:87:49:98:2F:80:EA:7E:AC:3A:4C:80:01:6F:AC:EC:04:9A:89:FB Certificate issuer: /CN=6E8749982F80EA7EAC3A4C80016FACEC049A89FB Certificate serial: 2C2710BD02352C5A296B6D0FE370FD49C55760F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft Manifest number: 0153 Signing time: Sun 04 May 2025 14:51:31 +0000 Manifest this update: Sun 04 May 2025 14:46:31 +0000 Manifest next update: Thu 08 May 2025 02:01:31 +0000 Files and hashes: 1: 6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl (hash: RKiVCLX3aWmyJ6OwebbOVUFIVRgptBqxssbyGriclg0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 02:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:27:10:bd:02:35:2c:5a:29:6b:6d:0f:e3:70:fd:49:c5:57:60:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E8749982F80EA7EAC3A4C80016FACEC049A89FB Validity Not Before: May 4 14:46:31 2025 GMT Not After : May 8 02:01:31 2025 GMT Subject: CN=C85A27329958A980D9995CD1DA09B61DD1925E38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5b:f2:5d:c3:93:9a:19:70:20:61:53:8a:fd: e8:4c:7f:c2:27:fa:fc:e3:73:13:8d:24:b3:a2:e8: 1c:b6:4d:36:04:85:a9:1a:9e:ba:f6:a4:71:67:c8: 07:08:d7:4b:a4:37:df:98:4b:df:b7:35:5f:dd:a7: 94:68:14:cf:1e:3b:0d:e5:1a:75:4b:d7:1b:88:cd: 91:83:20:79:20:db:3c:bc:53:91:62:0f:ab:57:58: 44:dc:94:fe:f4:89:02:2d:6c:b3:b6:a7:7a:54:20: f1:23:ab:c3:f0:0e:a9:ce:00:30:b1:33:e4:65:cc: fa:d5:da:27:92:00:2e:ee:88:20:f3:ee:16:b2:ba: 68:ef:fd:2d:42:ac:d1:fc:58:e5:04:df:63:02:07: c0:dd:49:86:d0:5f:d6:82:8c:54:98:96:84:26:c4: 30:c9:46:d4:40:7d:47:e5:d8:ce:1f:28:6d:9c:88: df:d2:4f:7f:cd:5c:07:61:4e:3f:66:88:e1:4d:1e: 9f:70:d4:a5:61:5e:44:e9:c2:e2:43:02:2e:a0:4e: fc:76:8d:48:5f:9b:9b:4b:d9:00:79:9f:9b:a5:7d: 35:88:36:41:03:11:9e:ed:51:db:f2:32:98:f5:87: 8d:43:dd:61:53:5a:56:47:69:a1:a2:30:78:d8:6d: e4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:5A:27:32:99:58:A9:80:D9:99:5C:D1:DA:09:B6:1D:D1:92:5E:38 X509v3 Authority Key Identifier: keyid:6E:87:49:98:2F:80:EA:7E:AC:3A:4C:80:01:6F:AC:EC:04:9A:89:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:f5:4e:ba:b1:ca:16:26:bb:8e:87:ee:e8:c6:4f:d9:43:3c: 96:be:bd:a8:05:81:79:35:1d:57:e6:8c:41:f2:6e:2e:fe:32: 07:ee:ea:2c:8f:ed:ad:8d:be:28:32:4f:c1:46:bb:0b:cb:48: c9:54:4e:9c:28:77:b7:5d:a2:e7:5e:f0:0b:30:14:fc:12:1c: 3f:6e:da:8d:5c:22:9d:73:95:7f:0e:5e:eb:bd:34:6b:d7:a1: cf:57:1d:9a:27:ef:40:8b:b0:b2:67:30:94:4d:14:42:a6:69: bd:77:54:4d:a6:31:6d:03:8a:df:17:80:3f:10:ed:c3:4c:63: 8c:a0:07:32:47:84:28:59:48:e4:a4:48:cb:57:57:16:3a:c5: 48:9f:30:00:2b:8d:38:6c:04:e2:f8:ce:a0:eb:02:5b:9b:aa: 65:99:85:ea:f1:6d:c6:98:6e:c5:a4:ef:72:f1:73:8c:04:81: 20:96:79:04:45:6d:6a:17:26:37:67:43:2c:0f:8a:a9:11:1b: c3:46:e1:a9:53:03:a0:b7:21:ef:98:3e:35:69:e6:29:d5:f3: 45:72:89:db:0c:38:b1:33:b0:13:6e:94:2c:52:bc:8a:5d:e5: c4:e1:f9:2a:3c:22:6f:a5:fe:55:6d:15:9a:d8:d6:33:87:1c: 78:bd:9e:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULCcQvQI1LFopa20P43D9ScVXYPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFDRUMw NDlBODlGQjAeFw0yNTA1MDQxNDQ2MzFaFw0yNTA1MDgwMjAxMzFaMDMxMTAvBgNV BAMTKEM4NUEyNzMyOTk1OEE5ODBEOTk5NUNEMURBMDlCNjFERDE5MjVFMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSW/Jdw5OaGXAgYVOK/ehMf8In +vzjcxONJLOi6By2TTYEhakanrr2pHFnyAcI10ukN9+YS9+3NV/dp5RoFM8eOw3l GnVL1xuIzZGDIHkg2zy8U5FiD6tXWETclP70iQItbLO2p3pUIPEjq8PwDqnOADCx M+RlzPrV2ieSAC7uiCDz7hayumjv/S1CrNH8WOUE32MCB8DdSYbQX9aCjFSYloQm xDDJRtRAfUfl2M4fKG2ciN/ST3/NXAdhTj9miOFNHp9w1KVhXkTpwuJDAi6gTvx2 jUhfm5tL2QB5n5ulfTWINkEDEZ7tUdvyMpj1h41D3WFTWlZHaaGiMHjYbeSPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyFonMplYqYDZmVzR2gm2HdGSXjgwHwYDVR0j BBgwFoAUbodJmC+A6n6sOkyAAW+s7ASaifswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmU3ZGU5Zi1iZmQyLTQ4NWMtOGJhMi05MjRlZWQ1MmEzMDUvMC82RTg3NDk5ODJG ODBFQTdFQUMzQTRDODAwMTZGQUNFQzA0OUE4OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFDRUMwNDlB ODlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlN2RlOWYtYmZkMi00ODVjLThi YTItOTI0ZWVkNTJhMzA1LzAvNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFD RUMwNDlBODlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAH1TrqxyhYmu46H7ujGT9lDPJa+vagFgXk1 HVfmjEHybi7+Mgfu6iyP7a2NvigyT8FGuwvLSMlUTpwod7ddoude8AswFPwSHD9u 2o1cIp1zlX8OXuu9NGvXoc9XHZon70CLsLJnMJRNFEKmab13VE2mMW0Dit8XgD8Q 7cNMY4ygBzJHhChZSOSkSMtXVxY6xUifMAArjThsBOL4zqDrAlubqmWZherxbcaY bsWk73Lxc4wEgSCWeQRFbWoXJjdnQywPiqkRG8NG4alTA6C3Ie+YPjVp5inV80Vy idsMOLEzsBNulCxSvIpd5cTh+So8Im+l/lVtFZrY1jOHHHi9nj4= -----END CERTIFICATE-----Generated at Tue May 6 23:02:46 2025 by rpki-client