$ rpki-client -vvf repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft File: 06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft (raw, json) Hash identifier: 30vZBPFYvg4lE0RYDJOXw1EfgtDJngBq2cUO9C7B6BI= Subject key identifier: 1E:B3:7F:E0:21:9B:38:32:6F:E2:0B:47:3B:FF:24:33:B5:DB:83:0F Authority key identifier: 06:A0:35:96:D6:FA:10:E3:F5:08:10:F5:86:E3:F6:3A:EE:96:F9:8E Certificate issuer: /CN=06A03596D6FA10E3F50810F586E3F63AEE96F98E Certificate serial: 2279E793A4A58375F51C50CAA514984BDA730B95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft Manifest number: B2 Signing time: Tue 06 May 2025 21:41:30 +0000 Manifest this update: Tue 06 May 2025 21:36:30 +0000 Manifest next update: Sat 10 May 2025 09:13:30 +0000 Files and hashes: 1: 06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl (hash: hhji/e72UEkeGrV1J1TGoF08K8zPNolgexsowLSJV1g=) 2: 3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa (hash: c4zKb4BC8Sb0059Tmuc8jeyTEWO85EjEdef3ktgt6EU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 09:13:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:79:e7:93:a4:a5:83:75:f5:1c:50:ca:a5:14:98:4b:da:73:0b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06A03596D6FA10E3F50810F586E3F63AEE96F98E Validity Not Before: May 6 21:36:30 2025 GMT Not After : May 10 09:13:30 2025 GMT Subject: CN=1EB37FE0219B38326FE20B473BFF2433B5DB830F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ab:79:6b:16:c7:b5:2b:a4:52:2d:94:be:14: 17:47:39:9a:7b:cd:2d:65:80:39:f0:f2:b9:51:6b: 31:de:8e:47:08:4d:09:bd:cd:21:18:02:b6:79:c4: 6b:cd:41:e4:48:f2:53:9f:dd:e4:09:65:5b:ff:8b: f4:9c:c9:f6:c7:65:e1:f0:60:61:7c:e1:67:dd:58: 71:74:3d:cb:04:bb:0a:bf:43:73:9b:94:70:2d:8a: 98:39:d4:d9:ac:d0:e1:7d:56:f3:b0:3c:04:79:dc: af:70:65:a1:81:47:38:14:2e:ed:50:06:db:db:82: 60:8b:6e:05:ed:2d:1c:fd:7c:f2:5e:37:e3:52:86: 4f:fa:7d:65:56:bd:f0:d8:f8:3a:ad:76:e1:9a:7f: b4:81:4d:8b:e0:d5:3e:7a:e3:f3:8a:26:2a:51:b4: ad:67:58:59:c1:18:15:b5:83:7a:25:a4:6e:8a:51: 88:66:5b:09:a7:1d:85:cc:5f:13:50:02:fb:84:dc: af:23:1c:b9:05:e1:d2:f9:9c:54:b3:42:2b:56:37: 30:b8:fa:69:5d:7c:59:e0:e4:35:d0:15:15:cd:27: 43:c1:11:79:65:ce:06:dc:18:aa:9e:8a:5c:5d:d6: 27:51:e4:5c:36:e4:fa:a2:d8:c7:d0:76:bc:3b:63: 55:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B3:7F:E0:21:9B:38:32:6F:E2:0B:47:3B:FF:24:33:B5:DB:83:0F X509v3 Authority Key Identifier: keyid:06:A0:35:96:D6:FA:10:E3:F5:08:10:F5:86:E3:F6:3A:EE:96:F9:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ce:10:cb:4d:fb:fc:38:aa:a5:5e:d4:3a:13:db:85:9e:05: b8:cc:b9:24:69:9c:37:2c:19:2d:47:ff:45:56:40:de:69:df: 13:3f:09:47:18:f9:76:7b:3c:6a:93:7d:8d:ca:0b:7d:e9:95: c0:4f:11:ff:64:cb:5e:35:6d:e8:7c:fc:0e:e0:4f:2d:6a:f7: 74:5e:4b:27:9c:b1:93:ff:81:44:55:f5:f7:d5:53:6b:a2:8b: 05:37:11:1c:54:69:3a:ad:e8:c9:fd:ff:52:3b:7e:61:d6:9b: 34:9e:cf:63:56:e1:a9:52:a1:6e:48:04:ee:9c:37:93:8a:6e: 71:ee:5a:f3:c7:93:f8:05:f3:a4:43:98:44:24:e3:e7:03:3d: 4f:4f:fd:56:b9:e9:67:b5:48:51:68:99:85:a5:32:a2:20:71: 4c:53:39:8e:26:56:8a:fe:79:bd:25:53:07:ba:55:1a:ca:63: e9:10:64:ff:59:1e:3b:9e:82:64:3c:cf:a0:7d:39:28:42:52: 95:59:c2:f8:23:88:de:23:a0:79:92:74:1a:26:1c:26:79:1a: 80:8c:7d:d0:90:d7:f4:09:ce:f7:7e:51:0a:b9:0d:e7:dc:e5: 5f:55:e7:1d:78:fa:74:29:88:cf:f7:14:52:34:6c:55:be:51: e3:56:b0:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUInnnk6Slg3X1HFDKpRSYS9pzC5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2M0FF RTk2Rjk4RTAeFw0yNTA1MDYyMTM2MzBaFw0yNTA1MTAwOTEzMzBaMDMxMTAvBgNV BAMTKDFFQjM3RkUwMjE5QjM4MzI2RkUyMEI0NzNCRkYyNDMzQjVEQjgzMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0q3lrFse1K6RSLZS+FBdHOZp7 zS1lgDnw8rlRazHejkcITQm9zSEYArZ5xGvNQeRI8lOf3eQJZVv/i/ScyfbHZeHw YGF84WfdWHF0PcsEuwq/Q3OblHAtipg51Nms0OF9VvOwPAR53K9wZaGBRzgULu1Q BtvbgmCLbgXtLRz9fPJeN+NShk/6fWVWvfDY+DqtduGaf7SBTYvg1T564/OKJipR tK1nWFnBGBW1g3olpG6KUYhmWwmnHYXMXxNQAvuE3K8jHLkF4dL5nFSzQitWNzC4 +mldfFng5DXQFRXNJ0PBEXllzgbcGKqeilxd1idR5Fw25Pqi2MfQdrw7Y1XXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHrN/4CGbODJv4gtHO/8kM7Xbgw8wHwYDVR0j BBgwFoAUBqA1ltb6EOP1CBD1huP2Ou6W+Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGY3Yzc5MC03NmI1LTQ5NjctYjZmZi0xMmRjNzU2YmJmN2QvMC8wNkEwMzU5NkQ2 RkExMEUzRjUwODEwRjU4NkUzRjYzQUVFOTZGOThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2M0FFRTk2 Rjk4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmN2M3OTAtNzZiNS00OTY3LWI2 ZmYtMTJkYzc1NmJiZjdkLzAvMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2 M0FFRTk2Rjk4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ7OEMtN+/w4qqVe1DoT24WeBbjMuSRpnDcs GS1H/0VWQN5p3xM/CUcY+XZ7PGqTfY3KC33plcBPEf9ky141beh8/A7gTy1q93Re SyecsZP/gURV9ffVU2uiiwU3ERxUaTqt6Mn9/1I7fmHWmzSez2NW4alSoW5IBO6c N5OKbnHuWvPHk/gF86RDmEQk4+cDPU9P/Va56We1SFFomYWlMqIgcUxTOY4mVor+ eb0lUwe6VRrKY+kQZP9ZHjuegmQ8z6B9OShCUpVZwvgjiN4joHmSdBomHCZ5GoCM fdCQ1/QJzvd+UQq5Defc5V9V5x14+nQpiM/3FFI0bFW+UeNWsM0= -----END CERTIFICATE-----Generated at Thu May 8 13:20:43 2025 by rpki-client