$ rpki-client -vvf repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft File: 6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft (raw, json) Hash identifier: /Lv/QrjT/gm4zKVwqjPP1nRkirS8XuLVMlRomiLb6dk= Subject key identifier: B6:9D:66:16:9F:D3:42:0A:F7:6A:7E:EF:AB:E8:70:E7:2B:B7:36:5D Authority key identifier: 6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87 Certificate issuer: /CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187 Certificate serial: 58915EBF8A0E36BE4B481E76B8902B9CFD17703B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft Manifest number: 0153 Signing time: Sat 10 May 2025 17:01:07 +0000 Manifest this update: Sat 10 May 2025 16:56:07 +0000 Manifest next update: Wed 14 May 2025 02:47:07 +0000 Files and hashes: 1: 3130332e3234352e3232352e302f32342d3234203d3e20313331373635.roa (hash: /abYrA5yp8Nre7zAYDHYwFsGgEom3ZQxvMGjfmSiyZM=) 2: 3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa (hash: +wBbu1cMZCAeulSyWUHjp9S6buaiwbJ9EYT932oWUfk=) 3: 6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl (hash: ZA/sTHqtj/pAdiyfObYgOBW77SKNbJcbNfrVzOfi/8g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 02:47:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:91:5e:bf:8a:0e:36:be:4b:48:1e:76:b8:90:2b:9c:fd:17:70:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187 Validity Not Before: May 10 16:56:07 2025 GMT Not After : May 14 02:47:07 2025 GMT Subject: CN=B69D66169FD3420AF76A7EEFABE870E72BB7365D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:80:01:6d:ac:39:b6:db:5c:36:91:6f:fd:a0: 7c:85:aa:55:ef:d1:06:24:80:da:2d:80:a1:6f:2a: 8a:1c:57:5e:ed:c1:bb:30:c8:8a:f3:24:cb:9f:20: a5:24:05:a5:76:ea:b9:25:cb:63:5a:42:40:67:b7: 09:19:2d:5b:b9:74:c6:24:7a:de:09:d0:6b:b8:d4: af:af:10:d5:19:02:a5:42:57:dd:34:01:1a:2d:80: 2e:c2:f4:fd:fd:7f:57:00:28:bf:92:12:4d:1b:35: 40:86:68:f1:a1:c4:f9:4f:73:8b:34:13:dc:cd:97: d0:3f:97:04:fa:56:e0:4b:76:95:48:79:a4:42:ea: 06:a5:a9:35:15:f3:01:a3:df:e4:f4:d1:aa:cf:5e: a9:24:f8:2b:87:84:6d:e6:a7:93:a5:39:eb:02:53: 1f:17:ef:1d:85:ce:35:20:6c:2d:a5:a9:99:99:24: e6:d5:47:3d:77:a8:1e:45:be:3d:1b:1d:40:f9:08: cd:28:0e:e7:c5:b5:6c:b6:f1:ba:af:a8:07:17:19: 18:d3:af:e3:c2:6b:d7:bf:5c:df:cf:ab:2a:4d:d3: 0a:cb:ab:44:70:94:ca:4b:49:e6:b2:bd:a1:e2:21: 2a:3a:87:db:5c:76:d6:b5:04:25:c7:02:35:ee:b0: e1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9D:66:16:9F:D3:42:0A:F7:6A:7E:EF:AB:E8:70:E7:2B:B7:36:5D X509v3 Authority Key Identifier: keyid:6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:21:a1:01:43:00:0f:cb:f2:89:62:8e:1e:92:60:01:4a:b6: 35:6d:3c:c6:e1:37:76:96:3a:bb:40:d8:d1:1b:5c:54:6b:1f: d3:63:b5:62:7e:9d:ec:d7:3b:9d:89:71:c2:fe:f7:81:e9:aa: 7e:7d:d8:43:b4:d3:df:44:dc:1f:2e:76:ec:1b:18:a7:ce:83: 6c:40:fc:f4:18:e9:fb:b8:c1:52:a4:5b:c1:49:91:4b:65:68: ee:c3:81:b4:ec:5e:df:a4:87:83:d0:5b:6e:a7:4d:16:17:d4: fb:5c:df:3b:f6:48:1c:ab:a3:29:f9:59:ab:f0:52:59:4a:74: e7:d7:d9:f4:84:5c:59:36:05:26:f4:26:d3:e4:07:e2:6a:fa: 53:52:b1:36:f2:01:f3:50:0f:6f:bc:0e:37:a9:39:4f:4f:94: 92:e2:47:33:c1:c9:ac:e7:c3:67:59:cb:ea:af:b0:2b:bb:cf: 9e:c4:f0:40:aa:c4:f7:bf:c2:94:40:de:1f:c1:0c:e3:6f:af: 8e:f2:d0:45:a8:3f:09:f8:fa:c3:70:e5:47:29:1f:14:fe:0b: 40:f7:39:f1:42:0b:f5:01:0e:5c:07:d2:9d:0e:c1:44:c0:e4: a1:e5:d1:5f:04:2b:30:37:07:c6:0c:b5:ce:8f:bc:bf:6a:d8: 97:95:34:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWJFev4oONr5LSB52uJArnP0XcDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkzMzIz MkVDMjE4NzAeFw0yNTA1MTAxNjU2MDdaFw0yNTA1MTQwMjQ3MDdaMDMxMTAvBgNV BAMTKEI2OUQ2NjE2OUZEMzQyMEFGNzZBN0VFRkFCRTg3MEU3MkJCNzM2NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCagAFtrDm221w2kW/9oHyFqlXv 0QYkgNotgKFvKoocV17twbswyIrzJMufIKUkBaV26rkly2NaQkBntwkZLVu5dMYk et4J0Gu41K+vENUZAqVCV900ARotgC7C9P39f1cAKL+SEk0bNUCGaPGhxPlPc4s0 E9zNl9A/lwT6VuBLdpVIeaRC6galqTUV8wGj3+T00arPXqkk+CuHhG3mp5OlOesC Ux8X7x2FzjUgbC2lqZmZJObVRz13qB5Fvj0bHUD5CM0oDufFtWy28bqvqAcXGRjT r+PCa9e/XN/PqypN0wrLq0RwlMpLSeayvaHiISo6h9tcdta1BCXHAjXusOF1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtp1mFp/TQgr3an7vq+hw5yu3Nl0wHwYDVR0j BBgwFoAUb7Ta52sSygDgc0Sk3S+TMjLsIYcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmQ3MDM0Ni01YmRmLTQ5NjEtYTc0Zi01NWFlODU1NjcyYTEvMC82RkI0REFFNzZC MTJDQTAwRTA3MzQ0QTRERDJGOTMzMjMyRUMyMTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkzMzIzMkVD MjE4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkNzAzNDYtNWJkZi00OTYxLWE3 NGYtNTVhZTg1NTY3MmExLzAvNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkz MzIzMkVDMjE4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF8hoQFDAA/L8olijh6SYAFKtjVtPMbhN3aW OrtA2NEbXFRrH9NjtWJ+nezXO52JccL+94Hpqn592EO0099E3B8uduwbGKfOg2xA /PQY6fu4wVKkW8FJkUtlaO7DgbTsXt+kh4PQW26nTRYX1Ptc3zv2SByroyn5Wavw UllKdOfX2fSEXFk2BSb0JtPkB+Jq+lNSsTbyAfNQD2+8DjepOU9PlJLiRzPByazn w2dZy+qvsCu7z57E8ECqxPe/wpRA3h/BDONvr47y0EWoPwn4+sNw5UcpHxT+C0D3 OfFCC/UBDlwH0p0OwUTA5KHl0V8EKzA3B8YMtc6PvL9q2JeVNIQ= -----END CERTIFICATE-----Generated at Sun May 11 10:34:22 2025 by rpki-client