$ rpki-client -vvf repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft File: 6437999FD06F2C7F0F16F8160CD6145F775884A4.mft (raw, json) Hash identifier: yYzQns+0sAz2K5wUAWc2hXSJWw+0aHR/OzzbcavVlEc= Subject key identifier: 18:56:FE:22:F3:52:35:34:E8:6C:2C:42:08:ED:67:B1:20:38:A3:34 Authority key identifier: 64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 Certificate issuer: /CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Certificate serial: 5294DE8B309D9B27D7A666C3D642F3B975376925 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft Manifest number: 0207 Signing time: Fri 09 May 2025 17:20:03 +0000 Manifest this update: Fri 09 May 2025 17:15:03 +0000 Manifest next update: Mon 12 May 2025 20:05:03 +0000 Files and hashes: 1: 3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa (hash: b3wEoQmduATe2XsB1+5lzcIjLJ7k0E7+xb68g1ewVFQ=) 2: 6437999FD06F2C7F0F16F8160CD6145F775884A4.crl (hash: uXezZ16WkieTVAAS6wGnDiByRylldHktqBfc7TDIAUM=) 3: 3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa (hash: FtQ7YyJ/nXZZN06U1YB5sNs24X+l1RzMYb5gI1y1G9M=) 4: 3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa (hash: 6kBcLlz4I+EwiYd/zHv8YINF31MEROhjhbQ+A0qjPjE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 20:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:94:de:8b:30:9d:9b:27:d7:a6:66:c3:d6:42:f3:b9:75:37:69:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Validity Not Before: May 9 17:15:03 2025 GMT Not After : May 12 20:05:03 2025 GMT Subject: CN=1856FE22F3523534E86C2C4208ED67B12038A334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:59:0e:e7:d3:cb:62:de:54:9b:3d:e3:f6:14: 74:85:9c:61:77:f6:12:0b:b0:bc:b1:63:4a:b6:15: f7:2f:e6:d2:f0:6e:9d:29:ba:8a:6d:49:f4:b9:08: 4e:66:bf:bb:dd:5a:b1:47:a5:3c:3e:67:16:c2:bb: e9:30:2b:1c:65:a5:3e:c3:00:85:95:f7:65:b1:79: 25:e5:f4:6a:b1:e6:4a:b3:b6:35:4a:62:65:f3:fb: 47:ee:f7:4c:4a:a5:28:88:e7:f3:0a:cc:cd:16:bf: a1:89:41:54:f4:99:64:72:ac:94:0e:64:29:b5:5f: 00:92:1c:74:7f:05:db:df:1c:dd:42:e8:c5:df:86: 8a:ac:f3:58:56:6c:0e:20:31:45:5a:63:32:73:46: d2:2a:31:d0:23:8f:6d:cd:30:82:c7:32:43:90:75: 6a:02:63:f4:d0:22:81:1d:7d:27:b9:23:f4:f1:c1: b2:d3:a9:b4:63:7a:18:7b:9d:73:c2:93:3d:29:e1: 14:b6:15:fd:a5:ed:c4:03:44:b2:15:e2:b2:48:4e: 37:18:cb:8d:9e:93:6c:c1:f7:27:d3:2f:fd:2a:9d: d7:8b:2a:d5:9b:f6:25:bd:c7:63:aa:ea:0c:37:f6: fd:e3:7c:81:7b:25:c7:b3:f7:dc:7b:02:39:09:40: 1d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:56:FE:22:F3:52:35:34:E8:6C:2C:42:08:ED:67:B1:20:38:A3:34 X509v3 Authority Key Identifier: keyid:64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:7c:f1:7a:38:a8:ee:b2:e7:b7:34:cb:9c:b6:a6:70:d0:d6: 28:99:0a:d4:fb:59:8a:3d:0e:ad:6a:14:6f:03:77:1f:c0:de: 28:66:54:d1:ed:b8:f9:83:f8:1f:72:f1:89:44:fb:7b:c9:aa: be:f2:a6:49:73:b1:4b:b9:62:a1:c8:4f:76:c4:b6:7d:96:2d: 8f:66:e2:0d:3e:15:18:aa:0e:27:ea:65:41:07:6a:52:21:0e: d7:21:30:10:c5:f5:3f:8b:a9:50:ff:6e:bc:a0:bd:39:77:1f: 77:ad:d8:22:56:5e:e2:01:38:eb:b2:f5:ec:61:cf:41:7e:5e: ee:67:eb:44:0d:62:79:b9:a5:e8:43:fc:db:d8:a8:0b:4b:26: e7:af:36:38:dc:5e:32:7a:c1:97:69:86:29:dc:c3:e4:43:80: 1a:14:09:d6:d8:cf:4c:9e:eb:82:b3:ae:9e:fe:33:46:53:ab: 84:57:98:42:fc:63:c9:53:24:e2:87:b1:2e:4f:15:ca:c8:38: a0:99:cf:59:1c:fe:5f:5d:7a:5d:a8:25:be:08:0e:6f:43:76: ef:75:9a:be:8b:2f:16:88:99:0a:d9:5b:a7:73:a5:0e:cd:0e: 1f:c9:2a:b0:cb:4b:21:74:2b:f9:d8:68:a0:bd:0d:7a:c0:cb: c5:7d:07:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUpTeizCdmyfXpmbD1kLzuXU3aSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3 NzU4ODRBNDAeFw0yNTA1MDkxNzE1MDNaFw0yNTA1MTIyMDA1MDNaMDMxMTAvBgNV BAMTKDE4NTZGRTIyRjM1MjM1MzRFODZDMkM0MjA4RUQ2N0IxMjAzOEEzMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSWQ7n08ti3lSbPeP2FHSFnGF3 9hILsLyxY0q2Ffcv5tLwbp0puoptSfS5CE5mv7vdWrFHpTw+ZxbCu+kwKxxlpT7D AIWV92WxeSXl9Gqx5kqztjVKYmXz+0fu90xKpSiI5/MKzM0Wv6GJQVT0mWRyrJQO ZCm1XwCSHHR/BdvfHN1C6MXfhoqs81hWbA4gMUVaYzJzRtIqMdAjj23NMILHMkOQ dWoCY/TQIoEdfSe5I/TxwbLTqbRjehh7nXPCkz0p4RS2Ff2l7cQDRLIV4rJITjcY y42ek2zB9yfTL/0qndeLKtWb9iW9x2Oq6gw39v3jfIF7Jcez99x7AjkJQB17AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGFb+IvNSNTTobCxCCO1nsSA4ozQwHwYDVR0j BBgwFoAUZDeZn9BvLH8PFvgWDNYUX3dYhKQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzZmZGM2MC04MDIzLTQwY2QtYWFhNC1jZDZlZDIyYzRkNDUvMC82NDM3OTk5RkQw NkYyQzdGMEYxNkY4MTYwQ0Q2MTQ1Rjc3NTg4NEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3NzU4 ODRBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc2ZmRjNjAtODAyMy00MGNkLWFh YTQtY2Q2ZWQyMmM0ZDQ1LzAvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0 NUY3NzU4ODRBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADt88Xo4qO6y57c0y5y2pnDQ1iiZCtT7WYo9 Dq1qFG8Ddx/A3ihmVNHtuPmD+B9y8YlE+3vJqr7ypklzsUu5YqHIT3bEtn2WLY9m 4g0+FRiqDifqZUEHalIhDtchMBDF9T+LqVD/brygvTl3H3et2CJWXuIBOOuy9exh z0F+Xu5n60QNYnm5pehD/NvYqAtLJuevNjjcXjJ6wZdphincw+RDgBoUCdbYz0ye 64Kzrp7+M0ZTq4RXmEL8Y8lTJOKHsS5PFcrIOKCZz1kc/l9del2oJb4IDm9Ddu91 mr6LLxaImQrZW6dzpQ7NDh/JKrDLSyF0K/nYaKC9DXrAy8V9B9c= -----END CERTIFICATE-----Generated at Sat May 10 01:59:50 2025 by rpki-client