$ rpki-client -vvf repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft File: 6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft (raw, json) Hash identifier: S2+IIOswHQVzmy6QuoxT1VLVidh5D6kiMPa0q2Flcvk= Subject key identifier: FB:5F:70:3D:AE:79:7D:48:C1:6E:73:92:EF:ED:81:80:C4:64:B8:7F Authority key identifier: 6B:3B:A2:8F:EC:36:89:C8:F8:8C:E4:13:7A:3D:64:5A:51:FE:6D:32 Certificate issuer: /CN=6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32 Certificate serial: 6671E4D49A442979F817CA0B40A625EAA5653DA6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft Manifest number: EF Signing time: Sat 10 May 2025 05:52:16 +0000 Manifest this update: Sat 10 May 2025 05:47:16 +0000 Manifest next update: Tue 13 May 2025 13:20:16 +0000 Files and hashes: 1: 6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl (hash: Pq7MaI5jwviLWGl74FtleBmWhwdqbcC6XU6ONHDp5Yk=) 2: 3130332e3234352e3136382e302f32332d3234203d3e20313531353333.roa (hash: KkeDpJbJi4/SJuEv3vqbkyR6Y9e6oZK3Xf5VQFtyFSI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 13:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:71:e4:d4:9a:44:29:79:f8:17:ca:0b:40:a6:25:ea:a5:65:3d:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32 Validity Not Before: May 10 05:47:16 2025 GMT Not After : May 13 13:20:16 2025 GMT Subject: CN=FB5F703DAE797D48C16E7392EFED8180C464B87F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:44:e1:a5:7a:1f:c1:b0:17:5e:b0:59:99:52: 9c:b4:9e:b0:68:90:ca:6b:18:51:78:73:b0:50:e2: 13:aa:c3:e7:eb:81:dd:49:1a:5f:78:2b:f6:1c:f4: 9b:bf:3a:ea:17:56:9f:f4:29:3d:12:41:f1:34:0a: 11:ff:48:64:91:ca:0c:42:67:42:14:71:1d:85:73: 3c:fe:67:f1:99:97:12:e0:04:c4:f9:40:ae:e8:61: 8c:52:93:67:5a:93:47:8a:0e:0c:8b:41:d4:8b:8e: 7e:97:c4:32:0c:84:a8:66:9a:99:45:e0:70:c3:1d: 5f:c3:4c:55:70:08:b1:ac:8a:6a:f6:77:1a:32:7c: 12:ac:f9:d7:89:e4:3d:79:6b:12:4f:9e:c3:65:46: 4c:0c:b6:e9:7a:c5:04:7d:8c:d4:0e:e5:76:54:57: 8f:ea:3d:0f:81:dd:eb:fd:15:cc:74:97:a1:9a:c8: 0e:18:e1:a0:db:a2:e8:dd:00:1a:9a:ff:77:af:fa: aa:dc:12:69:50:4d:cf:aa:11:41:d2:5b:c9:e1:62: d8:2b:a4:6a:29:f5:47:f7:bb:41:5b:d1:76:cf:d2: 6c:dd:c3:7a:72:58:ea:a4:fb:1f:a7:48:91:3f:46: 51:30:5b:91:05:19:55:24:bb:21:de:44:51:4a:45: 50:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5F:70:3D:AE:79:7D:48:C1:6E:73:92:EF:ED:81:80:C4:64:B8:7F X509v3 Authority Key Identifier: keyid:6B:3B:A2:8F:EC:36:89:C8:F8:8C:E4:13:7A:3D:64:5A:51:FE:6D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:48:16:87:82:7f:90:81:32:bd:c6:d1:a7:90:bb:ef:f2:5c: b6:b1:23:4b:3f:61:b2:d3:91:7d:2b:2f:a4:1a:2a:98:47:aa: 83:8a:da:be:0a:dc:a4:00:aa:43:cd:21:d7:77:ab:48:f2:07: 25:c1:dc:8f:e2:5d:26:ec:e7:49:ac:c8:0a:79:90:5b:e0:8f: a3:a7:21:7d:15:09:1a:76:b6:2f:76:64:03:52:7c:0b:33:d2: ec:f0:19:77:aa:6d:8d:48:68:24:85:c2:0b:18:26:8f:0f:c4: bc:f7:b5:b8:55:2c:22:49:51:43:0e:d6:b7:b4:fa:d2:80:13: d2:8d:d2:5b:82:27:bd:bd:32:64:f8:14:e4:f7:42:80:bc:b4: f0:59:e8:d1:90:7b:ae:0c:19:a7:1e:1e:97:12:e6:19:11:b4: 33:e3:11:1e:88:f5:dc:84:07:b3:ac:9e:0a:1f:50:27:70:b2: 88:a2:6a:77:61:54:fc:82:91:03:d7:82:da:73:7e:6c:2f:00: d9:a0:31:36:d5:c8:bf:b8:5d:2f:45:96:d8:55:18:85:91:20: b8:bf:7b:63:12:f3:2f:e6:71:e4:3c:a4:7e:33:da:c3:54:4f: 08:9e:a5:39:a5:99:f5:51:e1:03:90:84:20:df:84:c4:bb:1a: 33:e4:b7:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZnHk1JpEKXn4F8oLQKYl6qVlPaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzQkEyOEZFQzM2ODlDOEY4OENFNDEzN0EzRDY0NUE1 MUZFNkQzMjAeFw0yNTA1MTAwNTQ3MTZaFw0yNTA1MTMxMzIwMTZaMDMxMTAvBgNV BAMTKEZCNUY3MDNEQUU3OTdENDhDMTZFNzM5MkVGRUQ4MTgwQzQ2NEI4N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYROGleh/BsBdesFmZUpy0nrBo kMprGFF4c7BQ4hOqw+frgd1JGl94K/Yc9Ju/OuoXVp/0KT0SQfE0ChH/SGSRygxC Z0IUcR2Fczz+Z/GZlxLgBMT5QK7oYYxSk2dak0eKDgyLQdSLjn6XxDIMhKhmmplF 4HDDHV/DTFVwCLGsimr2dxoyfBKs+deJ5D15axJPnsNlRkwMtul6xQR9jNQO5XZU V4/qPQ+B3ev9Fcx0l6GayA4Y4aDboujdABqa/3ev+qrcEmlQTc+qEUHSW8nhYtgr pGop9Uf3u0Fb0XbP0mzdw3pyWOqk+x+nSJE/RlEwW5EFGVUkuyHeRFFKRVB9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+19wPa55fUjBbnOS7+2BgMRkuH8wHwYDVR0j BBgwFoAUazuij+w2icj4jOQTej1kWlH+bTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTFkZWI5My1jMTkwLTQ2ZWUtYmE4My0yZDkxOTMwYTQzOTUvMC82QjNCQTI4RkVD MzY4OUM4Rjg4Q0U0MTM3QTNENjQ1QTUxRkU2RDMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkIzQkEyOEZFQzM2ODlDOEY4OENFNDEzN0EzRDY0NUE1MUZF NkQzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2UxZGViOTMtYzE5MC00NmVlLWJh ODMtMmQ5MTkzMGE0Mzk1LzAvNkIzQkEyOEZFQzM2ODlDOEY4OENFNDEzN0EzRDY0 NUE1MUZFNkQzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJFIFoeCf5CBMr3G0aeQu+/yXLaxI0s/YbLT kX0rL6QaKphHqoOK2r4K3KQAqkPNIdd3q0jyByXB3I/iXSbs50msyAp5kFvgj6On IX0VCRp2ti92ZANSfAsz0uzwGXeqbY1IaCSFwgsYJo8PxLz3tbhVLCJJUUMO1re0 +tKAE9KN0luCJ729MmT4FOT3QoC8tPBZ6NGQe64MGaceHpcS5hkRtDPjER6I9dyE B7OsngofUCdwsoiiandhVPyCkQPXgtpzfmwvANmgMTbVyL+4XS9FlthVGIWRILi/ e2MS8y/mceQ8pH4z2sNUTwiepTmlmfVR4QOQhCDfhMS7GjPkt8I= -----END CERTIFICATE-----Generated at Sun May 11 12:36:25 2025 by rpki-client