$ rpki-client -vvf repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft File: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft (raw, json) Hash identifier: sqOu35MIhwiCBL7nPg0lsacBTFZcPBFaX48YhG/Yaqk= Subject key identifier: CD:5A:B2:D8:8B:D9:7A:E8:F7:1C:2F:54:28:61:B2:09:FC:1C:12:94 Authority key identifier: 6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 Certificate issuer: /CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Certificate serial: 1EBE806C38A7026D320B3A29E637E2C46FA60323 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft Manifest number: 0197 Signing time: Thu 08 May 2025 20:00:40 +0000 Manifest this update: Thu 08 May 2025 19:55:40 +0000 Manifest next update: Sun 11 May 2025 21:14:40 +0000 Files and hashes: 1: 3130332e3132362e3131362e302f32342d3234203d3e20313338313136.roa (hash: JQnrpdZbIEjOMrJ0gY+bWa1ZiQUgvaTVgcxr/pouQFw=) 2: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl (hash: 2j8yR8d5YeOdsMLvY/BhzEN99ibk2KGo25tqF/7vjCM=) 3: 3130332e3132362e3131392e302f32342d3234203d3e20313339393732.roa (hash: nPlUaL9yF2n402rwq54ga4y4IA8tmh1JYztdhgr/yzQ=) 4: 3130332e3132362e3131382e302f32342d3234203d3e20313338313136.roa (hash: IZ8KmdFwK5i2F35Ti/yV73rwyTaK/R/VAzY82jFEZs8=) 5: 3130332e3132362e3131372e302f32342d3234203d3e20313338313136.roa (hash: jIRxROaY+ZsyLOueu1pqPluvRpe9DT1746X5+JI8kKs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 21:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:be:80:6c:38:a7:02:6d:32:0b:3a:29:e6:37:e2:c4:6f:a6:03:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Validity Not Before: May 8 19:55:40 2025 GMT Not After : May 11 21:14:40 2025 GMT Subject: CN=CD5AB2D88BD97AE8F71C2F542861B209FC1C1294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:44:8a:c6:fc:ce:9e:0e:75:bb:eb:41:b1:7c: 77:4b:e0:ba:79:13:e7:d5:24:b6:9c:b8:b6:0c:43: e9:7d:ef:56:a2:d6:d5:f3:7a:3f:de:03:e3:7e:1e: a6:46:d7:e8:48:3a:5c:08:94:56:f9:23:0d:6b:bf: 91:59:75:65:07:7c:78:a1:7f:68:6f:24:9f:e1:7c: 70:61:fc:a6:15:47:bf:14:a4:ef:a6:7c:b7:e4:7e: 33:f9:d9:6f:31:a7:8e:54:9a:3b:66:f3:cc:10:2e: a9:c6:ff:13:7b:f8:bf:23:28:5a:52:65:3d:3b:c7: c2:80:9f:1a:ce:81:f5:d7:40:43:81:01:9d:09:72: 64:db:ef:2c:fa:54:02:af:0c:b6:f5:30:ec:9f:76: 4b:b8:c8:a1:28:3e:0f:a4:3f:48:27:73:cd:33:61: 29:48:24:2f:58:45:0f:1d:14:3b:c2:fb:fc:f4:98: c1:d6:21:3a:bb:4e:8d:0d:08:d6:38:94:5e:56:af: a0:02:48:7d:c3:cb:2e:05:ee:8d:93:2f:e4:13:6d: 0a:93:4e:ce:8e:5f:a0:52:07:60:e7:52:ee:79:cc: 12:9f:39:b9:f2:42:0e:4f:a1:ad:06:87:c1:58:a4: 1f:5c:e1:4d:ce:9a:57:5e:3a:0a:ef:1b:4d:44:7c: ed:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5A:B2:D8:8B:D9:7A:E8:F7:1C:2F:54:28:61:B2:09:FC:1C:12:94 X509v3 Authority Key Identifier: keyid:6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:a9:14:48:24:44:40:a1:54:36:ec:0f:b7:f9:2d:da:ed:c4: 6d:a6:45:66:43:24:a0:54:aa:f2:ef:22:61:c7:51:d2:b0:1f: fc:51:72:bb:7e:05:1e:46:72:28:89:b4:8b:4d:15:40:9f:4e: 63:ce:c5:ae:2b:0b:48:e8:3a:3f:b5:7c:75:e5:4f:f8:43:4b: a0:f6:0d:b5:cb:f8:1e:6b:6a:29:e5:3f:1e:0a:a9:74:da:3c: 59:1f:a3:d8:85:6c:88:5a:94:84:73:9e:e6:05:26:9d:6a:29: 65:0d:40:81:dc:30:55:83:9e:5a:0f:e3:dd:72:03:e2:a5:ed: d1:c9:09:de:44:b9:55:aa:47:8a:e4:58:91:db:ef:24:d5:af: e8:ec:d4:89:a6:6c:f5:f9:4b:2e:4a:45:0c:05:79:7b:a4:8a: f6:d1:6a:e8:0e:d9:c0:a0:70:e6:9c:0d:a8:bd:b1:b4:6e:24: 23:fe:e0:8c:f5:8a:3a:9c:1e:ab:c1:5e:48:a0:a0:97:3a:fc: 90:67:ef:1d:7b:5f:2b:79:1d:5c:62:73:e9:1c:b9:0a:ae:81: 20:8e:dd:f7:4b:5c:63:cd:4c:66:a5:3c:55:d9:dc:31:9a:9f: 13:a5:1e:da:4b:d2:a4:f7:58:63:2f:87:c4:3f:a5:c5:d1:da: 13:8a:ce:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHr6AbDinAm0yCzop5jfixG+mAyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdE MDJGNDdFODAeFw0yNTA1MDgxOTU1NDBaFw0yNTA1MTEyMTE0NDBaMDMxMTAvBgNV BAMTKENENUFCMkQ4OEJEOTdBRThGNzFDMkY1NDI4NjFCMjA5RkMxQzEyOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqRIrG/M6eDnW760GxfHdL4Lp5 E+fVJLacuLYMQ+l971ai1tXzej/eA+N+HqZG1+hIOlwIlFb5Iw1rv5FZdWUHfHih f2hvJJ/hfHBh/KYVR78UpO+mfLfkfjP52W8xp45Umjtm88wQLqnG/xN7+L8jKFpS ZT07x8KAnxrOgfXXQEOBAZ0JcmTb7yz6VAKvDLb1MOyfdku4yKEoPg+kP0gnc80z YSlIJC9YRQ8dFDvC+/z0mMHWITq7To0NCNY4lF5Wr6ACSH3Dyy4F7o2TL+QTbQqT Ts6OX6BSB2DnUu55zBKfObnyQg5Poa0Gh8FYpB9c4U3OmldeOgrvG01EfO2FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzVqy2IvZeuj3HC9UKGGyCfwcEpQwHwYDVR0j BBgwFoAUbfioc7cLqMytoxqt2CFf99AvR+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 N2QyNmRlMC02OGNmLTQyOWMtOGIwZS04ZDY0Yjc2MmY4MjQvMC82REY4QTg3M0I3 MEJBOENDQURBMzFBQUREODIxNUZGN0QwMkY0N0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdEMDJG NDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTdkMjZkZTAtNjhjZi00MjljLThi MGUtOGQ2NGI3NjJmODI0LzAvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVG RjdEMDJGNDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHipFEgkREChVDbsD7f5LdrtxG2mRWZDJKBU qvLvImHHUdKwH/xRcrt+BR5GciiJtItNFUCfTmPOxa4rC0joOj+1fHXlT/hDS6D2 DbXL+B5rainlPx4KqXTaPFkfo9iFbIhalIRznuYFJp1qKWUNQIHcMFWDnloP491y A+Kl7dHJCd5EuVWqR4rkWJHb7yTVr+js1ImmbPX5Sy5KRQwFeXukivbRaugO2cCg cOacDai9sbRuJCP+4Iz1ijqcHqvBXkigoJc6/JBn7x17Xyt5HVxic+kcuQqugSCO 3fdLXGPNTGalPFXZ3DGanxOlHtpL0qT3WGMvh8Q/pcXR2hOKzjA= -----END CERTIFICATE-----Generated at Sat May 10 19:56:34 2025 by rpki-client