$ rpki-client -vvf repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft File: 6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft (raw, json) Hash identifier: cY1gmgDlJd1pT698QRg99EofdlZWwfsd2BmxnFd5Kto= Subject key identifier: F0:5D:55:80:E4:C6:17:2E:CD:FC:C8:C2:26:B0:2E:24:FA:9B:EC:59 Authority key identifier: 6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19 Certificate issuer: /CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19 Certificate serial: 5844F45334A95E3D7A32C38AEDAD83F1B516C9EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft Manifest number: 04CA Signing time: Sun 04 May 2025 14:20:37 +0000 Manifest this update: Sun 04 May 2025 14:15:37 +0000 Manifest next update: Wed 07 May 2025 18:57:37 +0000 Files and hashes: 1: 6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl (hash: PiymN6I3+S98Ywa9qVy4+BktJjV7TFpHk+hBjIwOA2o=) 2: 323030313a6466333a6330303a3a2f34382d3438203d3e203633383732.roa (hash: 8Z0pSGSnkKlaMC3s0SAaLzt4eONtxvATdsVtNdjluzw=) 3: 3130332e3132372e3134342e302f32332d3233203d3e203633383732.roa (hash: WwxwZlv3TUa9yicqgZtEOiKWXTIZnKX9bVQhI95JUio=) 4: 3130332e35322e3137302e302f32332d3233203d3e203633383732.roa (hash: z2+zxRk+wf+jCSmrNsYyUGK/oYQNa8ev2JDVJrHXjrA=) 5: 3130332e35322e3137302e302f32342d3234203d3e203633383732.roa (hash: HepAw4B8lBUh/Y3MMVp/+7NfuqMoWhVFmRARv6c88zY=) 6: 3130332e3132372e3134352e302f32342d3234203d3e203633383732.roa (hash: Yby+RTbIG2/aiUB/1BTtxcxrbo0IJSyyRYPrIqcjGAI=) 7: 3130332e35322e3137312e302f32342d3234203d3e203633383732.roa (hash: VhIRSNOJ0LS9ugIXorAVroZ6Ii8ZakamTst0aaxHSug=) 8: 3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa (hash: iCtud+99K04t88wHjjWM0jAOS2yFCCNFegL4s/RxP6w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 18:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:44:f4:53:34:a9:5e:3d:7a:32:c3:8a:ed:ad:83:f1:b5:16:c9:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19 Validity Not Before: May 4 14:15:37 2025 GMT Not After : May 7 18:57:37 2025 GMT Subject: CN=F05D5580E4C6172ECDFCC8C226B02E24FA9BEC59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4f:81:35:80:37:24:77:20:ac:63:c3:00:b3: 31:ba:9f:f5:9e:5b:07:46:34:ce:59:1c:69:5e:36: 9e:5d:1f:3f:80:e4:3c:14:5c:40:b5:68:05:d7:ee: d9:e7:80:e6:39:04:b4:f8:e0:f8:39:6e:13:52:50: ef:2f:ea:c6:73:42:95:b1:33:10:09:a7:01:90:70: 86:32:da:c4:62:c3:73:d3:57:7a:36:cf:b5:80:f6: 1e:e4:f6:5e:5a:90:9c:5d:ba:e4:c7:a1:73:23:50: 1a:3e:7a:fc:59:9c:0f:8e:6c:fd:d8:5f:2c:52:5d: 30:24:d8:60:5f:5c:aa:c3:ed:98:c1:e9:58:4f:02: 43:44:fb:b3:65:5c:39:91:77:1f:eb:39:ac:05:6c: e9:0d:95:3d:93:45:6c:b7:91:2b:09:04:67:6f:f8: fb:54:3e:5d:85:18:ab:3a:19:14:a2:c9:f4:3d:22: 3d:e9:97:3d:3b:aa:ed:5f:bd:95:52:3a:4f:d0:ae: 8a:b0:01:1e:55:27:58:69:19:e4:33:b5:99:49:0a: 73:9c:cd:7f:0e:96:3d:53:c1:6a:e7:fa:2b:57:96: 9d:c7:27:1c:49:5a:3e:c4:93:c8:53:73:16:4c:4d: 76:8a:be:3d:eb:51:7c:bb:7e:98:e5:81:17:5e:bb: e1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:5D:55:80:E4:C6:17:2E:CD:FC:C8:C2:26:B0:2E:24:FA:9B:EC:59 X509v3 Authority Key Identifier: keyid:6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:8d:0d:84:cf:67:2b:4e:9e:9d:00:49:87:cf:c4:c7:22:56: 13:88:6c:03:4c:c4:45:ec:33:7c:eb:e5:e1:f5:88:cc:19:9d: c9:45:1b:6b:bd:f8:e9:0c:c4:1e:23:50:04:6f:f0:0b:0c:13: a9:c1:30:8b:42:e4:73:85:94:07:56:dd:9d:8e:71:2b:2c:4f: bf:0b:27:db:e0:21:76:1f:5a:40:10:bc:9e:5e:3c:62:e5:d9: 91:c5:7f:e1:c5:56:e2:6f:63:aa:88:8b:36:ee:9a:b8:46:84: 02:c4:d5:33:eb:1b:c3:15:03:93:aa:59:f3:a9:f0:a7:55:c3: 94:b8:f0:e7:92:62:1f:dd:b9:28:96:9c:15:af:68:c8:13:b7: 6f:09:2c:78:45:61:58:a9:6e:eb:c7:db:8b:a2:0b:32:ad:89: 06:a2:80:af:46:4a:bf:18:b3:10:a2:4f:9d:21:aa:f9:e5:d5: 3f:01:78:8e:76:3d:2d:a6:54:57:55:df:a3:59:84:69:c1:6f: 28:88:7f:5c:b9:d6:59:17:dd:27:fa:3c:e0:9f:0d:f6:ad:47: e6:56:d4:dd:11:74:fd:c3:14:89:27:8c:c7:ab:cf:34:3b:d6: 9b:58:0f:eb:6b:59:76:86:c7:73:59:55:d4:62:27:f5:2e:79: 3c:49:63:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWET0UzSpXj16MsOK7a2D8bUWyeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3MTYy N0JFN0IxOTAeFw0yNTA1MDQxNDE1MzdaFw0yNTA1MDcxODU3MzdaMDMxMTAvBgNV BAMTKEYwNUQ1NTgwRTRDNjE3MkVDREZDQzhDMjI2QjAyRTI0RkE5QkVDNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcT4E1gDckdyCsY8MAszG6n/We WwdGNM5ZHGleNp5dHz+A5DwUXEC1aAXX7tnngOY5BLT44Pg5bhNSUO8v6sZzQpWx MxAJpwGQcIYy2sRiw3PTV3o2z7WA9h7k9l5akJxduuTHoXMjUBo+evxZnA+ObP3Y XyxSXTAk2GBfXKrD7ZjB6VhPAkNE+7NlXDmRdx/rOawFbOkNlT2TRWy3kSsJBGdv +PtUPl2FGKs6GRSiyfQ9Ij3plz07qu1fvZVSOk/QroqwAR5VJ1hpGeQztZlJCnOc zX8Olj1TwWrn+itXlp3HJxxJWj7Ek8hTcxZMTXaKvj3rUXy7fpjlgRdeu+EdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8F1VgOTGFy7N/MjCJrAuJPqb7FkwHwYDVR0j BBgwFoAUbWuu2/27qka/PaIYVXB3Fie+exkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NmJiMzMzYy05ODJiLTRmY2UtYWM4MS1iYzA2OTIyOWUyNDMvMC82RDZCQUVEQkZE QkJBQTQ2QkYzREEyMTg1NTcwNzcxNjI3QkU3QjE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3MTYyN0JF N0IxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTZiYjMzM2MtOTgyYi00ZmNlLWFj ODEtYmMwNjkyMjllMjQzLzAvNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3 MTYyN0JFN0IxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGNDYTPZytOnp0ASYfPxMciVhOIbANMxEXs M3zr5eH1iMwZnclFG2u9+OkMxB4jUARv8AsME6nBMItC5HOFlAdW3Z2OcSssT78L J9vgIXYfWkAQvJ5ePGLl2ZHFf+HFVuJvY6qIizbumrhGhALE1TPrG8MVA5OqWfOp 8KdVw5S48OeSYh/duSiWnBWvaMgTt28JLHhFYVipbuvH24uiCzKtiQaigK9GSr8Y sxCiT50hqvnl1T8BeI52PS2mVFdV36NZhGnBbyiIf1y51lkX3Sf6POCfDfatR+ZW 1N0RdP3DFIknjMerzzQ71ptYD+trWXaGx3NZVdRiJ/UueTxJY+o= -----END CERTIFICATE-----Generated at Tue May 6 05:22:13 2025 by rpki-client