$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft File: 6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft (raw, json) Hash identifier: ecGMmfUqw5hoevD/ciE0+/xyXqtpWxzIn9qyX1TwXco= Subject key identifier: B0:42:B1:9F:6A:8A:AF:A6:3F:10:33:9E:35:6C:05:FD:83:6C:66:3E Authority key identifier: 6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8 Certificate issuer: /CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8 Certificate serial: 42EE19F0336E566480DC1AB07920E60FC2674F88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft Manifest number: 55 Signing time: Mon 05 May 2025 00:01:22 +0000 Manifest this update: Sun 04 May 2025 23:56:22 +0000 Manifest next update: Thu 08 May 2025 04:13:22 +0000 Files and hashes: 1: 323030313a6466343a353663303a3a2f34382d3438203d3e20313533313231.roa (hash: zTJG58E9CdtcpbOn2YccIUm1CoDteBuPCbelkCQEFPE=) 2: 6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl (hash: VVHHLky0dmSqGR79+Wf5qZPKRsY4/KUwpvXAkohNI4w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 04:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:ee:19:f0:33:6e:56:64:80:dc:1a:b0:79:20:e6:0f:c2:67:4f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8 Validity Not Before: May 4 23:56:22 2025 GMT Not After : May 8 04:13:22 2025 GMT Subject: CN=B042B19F6A8AAFA63F10339E356C05FD836C663E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:39:7d:e5:b2:7c:4a:2f:5e:2c:01:2d:6c:2d: a2:e3:20:be:04:37:9a:9b:6e:0b:d7:38:16:c9:b6: f2:ad:1d:50:43:60:b6:a3:2e:4e:c0:5e:e5:74:b8: 37:8b:c2:37:b1:95:c9:04:4b:c9:1f:30:60:71:72: 20:b5:9a:ab:e0:6b:89:e2:d8:df:87:07:f5:a2:32: 63:0f:32:82:3b:ae:92:f8:fd:65:9a:6d:71:a1:b8: 34:df:17:46:2e:9b:9d:f6:bd:5b:6c:b2:84:f6:45: 08:9a:50:d3:46:99:08:f4:37:fe:23:e3:ec:45:b9: c8:94:27:8f:78:2b:9e:16:39:30:2f:55:14:f3:e9: fa:20:65:d5:fd:54:50:5e:5c:38:a5:95:b9:e2:15: 74:c7:3e:1e:39:71:85:7d:b1:c6:1e:fa:dc:f1:5f: 13:e9:36:59:f8:00:97:c4:91:56:ba:6a:b1:7c:90: 12:0e:b7:80:a2:f8:a8:25:12:06:6c:27:8f:e0:85: 21:75:0d:f4:b8:ba:67:80:d2:f6:78:65:1e:0d:60: ef:7b:a6:19:99:27:c6:0e:ef:f6:08:f7:b5:88:9d: c1:4b:4b:50:99:7b:be:14:c7:71:a9:2d:00:4c:91: 0a:cd:c3:cc:f4:69:e9:93:c9:14:e2:4b:d0:a4:77: 19:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:42:B1:9F:6A:8A:AF:A6:3F:10:33:9E:35:6C:05:FD:83:6C:66:3E X509v3 Authority Key Identifier: keyid:6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f5:7a:16:5a:e5:49:b4:f8:0b:c4:52:a0:8f:6f:85:c0:c0: 98:c3:98:6f:91:91:d9:10:b7:0b:25:73:23:07:8b:6c:5e:c9: 6d:87:1d:6d:22:d1:fe:7c:31:c8:47:87:fd:01:5f:8f:0e:67: 7f:7d:7e:0f:52:42:67:8a:30:18:34:f4:36:ed:2d:02:0d:2c: 71:87:94:5d:e6:7e:e7:20:ca:15:49:62:8f:33:3e:04:2a:7b: 3f:5a:2f:13:34:d9:99:01:50:53:77:8d:67:92:35:09:b7:e6: 2d:a7:8a:c0:58:74:f8:d7:1a:f1:21:14:ef:09:28:a2:6b:27: 53:28:5e:b7:3a:d5:27:b1:6d:c9:24:ed:f6:36:32:87:d7:65: 57:4d:ae:09:3c:67:85:bf:eb:2b:3d:cc:dd:b6:01:db:d8:da: 55:53:c6:62:51:ff:ba:0d:ba:66:b5:3d:16:5c:38:2c:46:83: 8e:5c:0a:1a:fe:1b:ac:4d:d0:e2:b0:f4:3f:f0:04:82:64:a0: 24:57:3c:f3:97:d4:c4:8d:c7:37:7c:96:2a:05:5d:f3:6d:ff: f8:c0:16:af:5a:97:79:bc:01:73:32:be:04:7e:5b:b1:e0:d9: 1d:47:fb:e5:28:3c:92:67:1e:a7:e8:51:77:a3:34:00:d7:d6: ef:f7:19:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQu4Z8DNuVmSA3BqweSDmD8JnT4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEzOTk2QUZFMTEzODIzODUzMEMyRkM5MkIyQUI2NzVG Q0QyMThDODAeFw0yNTA1MDQyMzU2MjJaFw0yNTA1MDgwNDEzMjJaMDMxMTAvBgNV BAMTKEIwNDJCMTlGNkE4QUFGQTYzRjEwMzM5RTM1NkMwNUZEODM2QzY2M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7OX3lsnxKL14sAS1sLaLjIL4E N5qbbgvXOBbJtvKtHVBDYLajLk7AXuV0uDeLwjexlckES8kfMGBxciC1mqvga4ni 2N+HB/WiMmMPMoI7rpL4/WWabXGhuDTfF0Yum532vVtssoT2RQiaUNNGmQj0N/4j 4+xFuciUJ494K54WOTAvVRTz6fogZdX9VFBeXDillbniFXTHPh45cYV9scYe+tzx XxPpNln4AJfEkVa6arF8kBIOt4Ci+KglEgZsJ4/ghSF1DfS4umeA0vZ4ZR4NYO97 phmZJ8YO7/YI97WIncFLS1CZe74Ux3GpLQBMkQrNw8z0aemTyRTiS9CkdxnhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsEKxn2qKr6Y/EDOeNWwF/YNsZj4wHwYDVR0j BBgwFoAUajmWr+ETgjhTDC/JKyq2dfzSGMgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTg5YjdkZC05OWE3LTQ1MGUtYmU4NC1iM2JmYzczNDBmMWYvMS82QTM5OTZBRkUx MTM4MjM4NTMwQzJGQzkyQjJBQjY3NUZDRDIxOEM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEzOTk2QUZFMTEzODIzODUzMEMyRkM5MkIyQUI2NzVGQ0Qy MThDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzEvNkEzOTk2QUZFMTEzODIzODUzMEMyRkM5MkIyQUI2 NzVGQ0QyMThDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEr1ehZa5Um0+AvEUqCPb4XAwJjDmG+RkdkQ twslcyMHi2xeyW2HHW0i0f58MchHh/0BX48OZ399fg9SQmeKMBg09DbtLQINLHGH lF3mfucgyhVJYo8zPgQqez9aLxM02ZkBUFN3jWeSNQm35i2nisBYdPjXGvEhFO8J KKJrJ1MoXrc61Sexbckk7fY2MofXZVdNrgk8Z4W/6ys9zN22AdvY2lVTxmJR/7oN uma1PRZcOCxGg45cChr+G6xN0OKw9D/wBIJkoCRXPPOX1MSNxzd8lioFXfNt//jA Fq9al3m8AXMyvgR+W7Hg2R1H++UoPJJnHqfoUXejNADX1u/3GYI= -----END CERTIFICATE-----Generated at Tue May 6 14:42:24 2025 by rpki-client