$ rpki-client -vvf repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft File: 6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft (raw, json) Hash identifier: P4UWt25tO+AglF2AQeTxvjxEdpSjN/1ZGsmKZMtpUHo= Subject key identifier: 04:68:F8:6A:92:C2:00:B6:3B:4D:F7:03:9E:C2:7E:58:E8:6A:27:96 Authority key identifier: 6A:6C:81:36:54:E0:C2:93:39:E6:CA:F5:22:20:1F:8E:70:2F:EA:D3 Certificate issuer: /CN=6A6C813654E0C29339E6CAF522201F8E702FEAD3 Certificate serial: 55AE09E4F086459355D97E92DAE773BA7174A044 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft Manifest number: 0434 Signing time: Fri 09 May 2025 09:52:02 +0000 Manifest this update: Fri 09 May 2025 09:47:02 +0000 Manifest next update: Mon 12 May 2025 16:29:02 +0000 Files and hashes: 1: 3130332e3136302e3138352e302f32342d3234203d3e20313339393532.roa (hash: 4Nq+JxUfKWjr1BESTy40anbaM3Xf+v+a27YAvrUMBQ0=) 2: 3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa (hash: 8AmYK5KC8hldB1muUmxdPCs0q6CgoH4COunOQq9ZmmY=) 3: 6A6C813654E0C29339E6CAF522201F8E702FEAD3.crl (hash: xi34EqEJt1yABkfM/Ss+mHHjvENJ3Vukq9qZE65W6wA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.crl rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 16:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:ae:09:e4:f0:86:45:93:55:d9:7e:92:da:e7:73:ba:71:74:a0:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A6C813654E0C29339E6CAF522201F8E702FEAD3 Validity Not Before: May 9 09:47:02 2025 GMT Not After : May 12 16:29:02 2025 GMT Subject: CN=0468F86A92C200B63B4DF7039EC27E58E86A2796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:37:f7:64:fa:da:98:a2:09:7f:16:76:15:b6: 09:6d:2e:50:17:98:cb:7e:cc:fc:c2:a6:9d:80:5f: ca:12:b1:fa:10:4a:a7:1c:4f:c8:3e:d0:81:d7:fc: f1:a5:bc:75:76:06:88:6f:89:af:55:45:d8:a2:2a: 49:83:8f:87:70:30:cd:06:71:d2:89:03:2c:21:cc: 52:e3:3b:fa:6f:ea:d0:f9:8e:e2:47:9c:6d:2b:eb: 0c:43:04:98:99:a4:c5:c0:99:45:9a:e5:cb:1e:d9: 92:43:6e:24:9b:bb:d7:96:5a:68:0a:f9:b9:81:f6: 28:8f:fa:36:d9:36:65:eb:d2:cb:b9:3c:be:73:41: 84:4a:67:62:40:ff:b5:55:fb:54:1e:51:82:1a:1e: 62:03:1d:40:c5:41:80:98:d3:cf:ea:20:07:15:e5: cb:48:76:58:81:8c:83:11:e0:3c:9c:41:a3:ec:7f: 6f:dc:86:0e:e5:8c:50:45:d7:bd:23:6e:c0:7a:63: e7:20:77:06:9f:a2:63:e8:51:58:70:57:cf:91:ea: 46:98:44:2f:c1:62:4c:fa:2d:4f:03:16:66:74:05: cc:4e:2a:b2:9e:90:c5:d5:68:35:86:69:37:66:93: 01:e8:85:22:5c:bf:c3:29:05:1c:7b:0a:16:ad:f4: 5d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:68:F8:6A:92:C2:00:B6:3B:4D:F7:03:9E:C2:7E:58:E8:6A:27:96 X509v3 Authority Key Identifier: keyid:6A:6C:81:36:54:E0:C2:93:39:E6:CA:F5:22:20:1F:8E:70:2F:EA:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:7c:b6:04:ea:cc:0a:7b:35:c3:3f:50:28:3a:b4:3f:20:d1: a4:f6:1c:5a:fd:a6:6f:f2:bc:3d:f2:c0:1f:b1:3f:5e:fd:17: a2:a2:e9:0d:e1:0e:ee:52:f5:2a:f0:be:fb:71:63:41:d2:e9: c7:5d:6b:8f:d3:14:3c:e3:35:f4:de:b3:82:97:61:a6:31:27: 52:9a:fe:e2:a9:2a:c9:e3:cf:71:e8:1d:74:e8:b8:58:3a:f9: e7:9c:6a:ca:52:91:27:29:91:5e:31:29:d7:1a:96:94:b1:b5: ba:32:d1:ef:6d:a8:34:82:ef:7f:0b:bc:c3:9f:2a:a4:1b:1a: 4d:3c:de:fd:74:45:87:16:9f:7d:76:d7:e7:4e:ff:b4:bc:6d: 6f:2b:c0:2f:2b:00:3e:01:ed:6e:3f:60:f3:ae:ac:8d:c2:61: b1:8d:f9:c3:8a:c1:93:3f:2c:a4:6e:14:a6:d1:97:cd:ee:9f: b6:72:3d:6b:7c:e0:e9:b4:19:e8:8e:0c:d0:17:ed:b2:55:e4: 6f:b6:fe:d3:3d:e0:94:39:e2:da:5b:fd:56:bf:36:8c:91:fc: 81:07:95:aa:2f:dc:b1:60:e4:13:66:48:fd:c0:5b:63:d2:59: 47:73:97:48:9b:7c:2d:73:6d:f5:78:43:32:31:40:70:29:b4: 7f:01:7d:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVa4J5PCGRZNV2X6S2udzunF0oEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE2QzgxMzY1NEUwQzI5MzM5RTZDQUY1MjIyMDFGOEU3 MDJGRUFEMzAeFw0yNTA1MDkwOTQ3MDJaFw0yNTA1MTIxNjI5MDJaMDMxMTAvBgNV BAMTKDA0NjhGODZBOTJDMjAwQjYzQjRERjcwMzlFQzI3RTU4RTg2QTI3OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3N/dk+tqYogl/FnYVtgltLlAX mMt+zPzCpp2AX8oSsfoQSqccT8g+0IHX/PGlvHV2Bohvia9VRdiiKkmDj4dwMM0G cdKJAywhzFLjO/pv6tD5juJHnG0r6wxDBJiZpMXAmUWa5cse2ZJDbiSbu9eWWmgK +bmB9iiP+jbZNmXr0su5PL5zQYRKZ2JA/7VV+1QeUYIaHmIDHUDFQYCY08/qIAcV 5ctIdliBjIMR4DycQaPsf2/chg7ljFBF170jbsB6Y+cgdwafomPoUVhwV8+R6kaY RC/BYkz6LU8DFmZ0BcxOKrKekMXVaDWGaTdmkwHohSJcv8MpBRx7Chat9F1TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBGj4apLCALY7TfcDnsJ+WOhqJ5YwHwYDVR0j BBgwFoAUamyBNlTgwpM55sr1IiAfjnAv6tMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjgyYmNhMy1lODU4LTRkNTItYjFhMy0yZjRiYWU0N2M5ZjIvMC82QTZDODEzNjU0 RTBDMjkzMzlFNkNBRjUyMjIwMUY4RTcwMkZFQUQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE2QzgxMzY1NEUwQzI5MzM5RTZDQUY1MjIyMDFGOEU3MDJG RUFEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY4MmJjYTMtZTg1OC00ZDUyLWIx YTMtMmY0YmFlNDdjOWYyLzAvNkE2QzgxMzY1NEUwQzI5MzM5RTZDQUY1MjIyMDFG OEU3MDJGRUFEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACd8tgTqzAp7NcM/UCg6tD8g0aT2HFr9pm/y vD3ywB+xP179F6Ki6Q3hDu5S9SrwvvtxY0HS6cdda4/TFDzjNfTes4KXYaYxJ1Ka /uKpKsnjz3HoHXTouFg6+eecaspSkScpkV4xKdcalpSxtboy0e9tqDSC738LvMOf KqQbGk083v10RYcWn3121+dO/7S8bW8rwC8rAD4B7W4/YPOurI3CYbGN+cOKwZM/ LKRuFKbRl83un7ZyPWt84Om0GeiODNAX7bJV5G+2/tM94JQ54tpb/Va/NoyR/IEH laov3LFg5BNmSP3AW2PSWUdzl0ibfC1zbfV4QzIxQHAptH8BfU8= -----END CERTIFICATE-----Generated at Sat May 10 05:19:30 2025 by rpki-client