$ rpki-client -vvf repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft File: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft (raw, json) Hash identifier: fe3izksK4uCKzzddMlmmnYb+B2n6AUk6Dh6U3/FhMmg= Subject key identifier: B9:C4:49:D4:48:69:3D:4A:68:8B:AF:D2:DE:BA:D3:BD:CE:95:72:4C Authority key identifier: 62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 Certificate issuer: /CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Certificate serial: 7A72CAD4D75CE34547C4952B1B2F20034E5BFF5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft Manifest number: 4E Signing time: Mon 12 May 2025 11:41:18 +0000 Manifest this update: Mon 12 May 2025 11:36:18 +0000 Manifest next update: Thu 15 May 2025 21:30:18 +0000 Files and hashes: 1: 3136302e3139312e3138312e302f32342d3234203d3e20313533313530.roa (hash: R1Eo64irF2fqBU24QMOkIR4K/Db3F6prGasQKdzareI=) 2: 3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa (hash: lqWm7H1VLaNogQYDvPWFxyEVAtvNrhxj3L3hhsj87j0=) 3: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl (hash: r7D9/JQQj/kKjCnXzmdDFLUKIVRmdz9sxx8nsSSAJEM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 21:30:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:72:ca:d4:d7:5c:e3:45:47:c4:95:2b:1b:2f:20:03:4e:5b:ff:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Validity Not Before: May 12 11:36:18 2025 GMT Not After : May 15 21:30:18 2025 GMT Subject: CN=B9C449D448693D4A688BAFD2DEBAD3BDCE95724C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9f:85:87:a4:02:2b:f9:46:5e:ed:9e:62:49: 67:99:e5:fc:7a:03:08:61:09:79:c5:e9:3d:14:f9: 7f:64:dd:46:f7:fa:c4:14:d4:3e:f1:95:3c:82:46: df:5e:da:37:cc:f4:fe:bd:95:b4:d9:55:d4:53:11: 3d:04:e3:b8:b4:20:64:75:22:69:eb:1d:e3:64:59: c0:23:dc:61:aa:fb:5e:7e:2f:a5:4f:df:eb:92:ec: d5:aa:68:fb:f5:21:66:0d:bb:63:a4:f2:a5:0b:55: 5b:28:b8:fe:2e:48:69:67:ba:6a:db:a8:db:d3:27: fd:65:ca:bd:34:80:10:7d:72:cf:4d:12:47:ce:3c: 51:43:94:46:d4:d7:6e:9e:2f:4c:93:ce:3e:71:92: 30:dc:66:c3:11:bb:e9:3a:2c:94:f3:45:a8:6e:2d: 96:a0:c7:a6:6c:82:c1:f7:a7:d3:92:ca:66:9a:9c: 2c:00:6e:34:38:98:7b:85:ae:4c:53:b5:b4:5e:9b: 10:01:e2:80:9b:e0:48:d7:0f:86:fe:28:17:72:85: 5d:47:70:8c:b5:7b:6d:df:0a:8d:d2:05:70:28:24: 3c:60:eb:86:d6:e2:6c:0e:c9:6c:c5:6f:56:d4:61: 60:b9:ae:9a:34:85:49:d0:05:4b:8f:3b:74:a2:c6: b3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C4:49:D4:48:69:3D:4A:68:8B:AF:D2:DE:BA:D3:BD:CE:95:72:4C X509v3 Authority Key Identifier: keyid:62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:8f:37:ad:07:35:42:4e:b9:af:46:a6:8a:2c:b8:c4:bf:e2: d2:d3:bc:2b:70:f5:ce:70:dc:d8:af:03:74:92:73:57:11:f0: 63:33:25:c9:29:15:40:00:60:ec:d5:db:93:6f:da:f8:8b:1d: b8:9e:e4:27:4c:af:0d:bf:c1:f2:cf:6f:e9:f3:57:23:45:82: 62:d9:81:8d:5b:9f:ee:b3:bd:c0:bb:6a:3a:f6:9c:9b:fe:a8: 2c:05:6f:ef:58:2e:13:2d:ef:0e:f9:5c:55:92:7b:ba:1d:fb: d1:c7:e2:4a:fd:b5:a0:40:c7:10:f8:58:ba:4e:10:a3:c4:9b: 0f:63:b1:1b:c0:a5:c9:c2:15:49:b7:c1:e6:ac:64:ce:75:b4: eb:f1:7a:29:61:fc:c6:10:7d:a3:af:16:28:82:70:21:46:f8: 19:86:d2:4f:da:84:e9:07:ac:13:0d:a3:76:ec:9f:9b:31:39: 5a:c8:14:66:b0:d4:e5:aa:98:1a:77:a4:70:0c:5a:8e:4c:b8: fd:80:48:ce:08:82:4b:01:9c:92:17:1e:c4:c3:5b:da:1c:66: 88:08:56:28:1d:2f:9a:b6:39:9f:d3:3b:61:43:e6:67:76:9e: 04:a7:73:e8:40:12:ae:10:90:5a:e5:81:fc:01:10:82:85:db: 5e:ef:59:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUenLK1Ndc40VHxJUrGy8gA05b/10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAw Qjk0RjhBNDAeFw0yNTA1MTIxMTM2MThaFw0yNTA1MTUyMTMwMThaMDMxMTAvBgNV BAMTKEI5QzQ0OUQ0NDg2OTNENEE2ODhCQUZEMkRFQkFEM0JEQ0U5NTcyNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEn4WHpAIr+UZe7Z5iSWeZ5fx6 AwhhCXnF6T0U+X9k3Ub3+sQU1D7xlTyCRt9e2jfM9P69lbTZVdRTET0E47i0IGR1 ImnrHeNkWcAj3GGq+15+L6VP3+uS7NWqaPv1IWYNu2Ok8qULVVsouP4uSGlnumrb qNvTJ/1lyr00gBB9cs9NEkfOPFFDlEbU126eL0yTzj5xkjDcZsMRu+k6LJTzRahu LZagx6ZsgsH3p9OSymaanCwAbjQ4mHuFrkxTtbRemxAB4oCb4EjXD4b+KBdyhV1H cIy1e23fCo3SBXAoJDxg64bW4mwOyWzFb1bUYWC5rpo0hUnQBUuPO3SixrMlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUucRJ1EhpPUpoi6/S3rrTvc6VckwwHwYDVR0j BBgwFoAUYkfRqvOxW1DTpz5E5Z4sAAuU+KQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTk2MTJhMi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMC82MjQ3RDFBQUYz QjE1QjUwRDNBNzNFNDRFNTlFMkMwMDBCOTRGOEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAwQjk0 RjhBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzAvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJD MDAwQjk0RjhBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ6PN60HNUJOua9GpoosuMS/4tLTvCtw9c5w 3NivA3SSc1cR8GMzJckpFUAAYOzV25Nv2viLHbie5CdMrw2/wfLPb+nzVyNFgmLZ gY1bn+6zvcC7ajr2nJv+qCwFb+9YLhMt7w75XFWSe7od+9HH4kr9taBAxxD4WLpO EKPEmw9jsRvApcnCFUm3weasZM51tOvxeilh/MYQfaOvFiiCcCFG+BmG0k/ahOkH rBMNo3bsn5sxOVrIFGaw1OWqmBp3pHAMWo5MuP2ASM4IgksBnJIXHsTDW9ocZogI VigdL5q2OZ/TO2FD5md2ngSnc+hAEq4QkFrlgfwBEIKF217vWao= -----END CERTIFICATE-----Generated at Tue May 13 02:41:02 2025 by rpki-client