$ rpki-client -vvf repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft File: D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft (raw, json) Hash identifier: ct7e0OG6PfN98ZbkBTd6tJUf40JmRrDmSXgP/4BXVA0= Subject key identifier: 60:3B:3F:11:C5:A0:E0:42:BE:67:67:A8:14:16:D7:4D:14:BA:BE:74 Authority key identifier: D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 Certificate issuer: /CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Certificate serial: 424D8EBE52C17B600F26706A44EB4451107D38F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft Manifest number: 0298 Signing time: Wed 07 May 2025 00:50:00 +0000 Manifest this update: Wed 07 May 2025 00:45:00 +0000 Manifest next update: Sat 10 May 2025 10:50:00 +0000 Files and hashes: 1: D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl (hash: wgAuFJVVAkl3Ls5YApLifp1mf64lZePBrtNydUV1rzE=) 2: 3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa (hash: EWRSldncuijDwUH5kmTIxzgLmknYFLpjI5NK+K1R4Fw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 10:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:4d:8e:be:52:c1:7b:60:0f:26:70:6a:44:eb:44:51:10:7d:38:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Validity Not Before: May 7 00:45:00 2025 GMT Not After : May 10 10:50:00 2025 GMT Subject: CN=603B3F11C5A0E042BE6767A81416D74D14BABE74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:76:03:97:7c:00:9d:07:6f:1b:67:77:24:96: d7:f4:05:b1:f9:59:ce:cd:43:74:01:54:51:77:9f: 3d:b8:ea:67:00:8f:77:08:43:bc:2d:9d:99:8a:c6: 4e:8a:ea:1a:1a:9a:51:e5:d3:af:ff:06:44:f9:3b: 14:4e:06:7d:a7:4d:38:de:e3:62:ba:be:9b:a1:8a: 2b:44:a7:4d:b0:b6:79:9e:6a:e3:79:87:dc:b1:3b: 81:ad:ee:b2:d4:27:1d:88:81:33:7f:93:f1:6d:fe: 3c:86:57:d1:7a:26:d0:15:13:37:71:ed:45:85:58: a5:26:bb:7f:34:34:b8:1a:70:09:b4:ba:43:57:bb: 73:02:a1:15:00:21:94:14:9d:fd:bc:58:11:a3:48: 17:c7:f5:70:7c:3c:95:d7:5b:e4:58:4a:c6:c1:24: 8d:75:d0:68:53:6e:23:2b:a2:36:4a:c1:2d:47:c5: 0a:7f:54:3f:3d:95:d8:f8:bc:f1:b4:c0:2e:21:c7: e3:6e:be:27:3c:07:d3:0c:a9:b4:e4:23:78:cd:3d: 57:78:bf:ba:05:6e:7c:eb:c1:a0:42:c7:ea:de:49: 4b:77:d8:a5:59:e9:ba:d6:b9:33:ff:61:d2:75:80: fe:a2:cd:b5:39:67:a7:af:42:40:e5:16:cb:be:ca: 03:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:3B:3F:11:C5:A0:E0:42:BE:67:67:A8:14:16:D7:4D:14:BA:BE:74 X509v3 Authority Key Identifier: keyid:D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:a7:38:6f:df:b5:26:e0:3b:93:c1:51:27:e3:70:82:07:cf: a8:b7:e8:5b:64:1f:26:b3:7a:33:3d:fa:6a:24:6b:ec:3d:26: a5:b3:a0:14:fd:04:61:ab:5d:04:52:57:18:f3:f5:44:de:3e: 88:74:81:82:14:9f:3e:94:71:b5:bc:7d:55:31:97:30:54:d2: ed:18:89:c0:97:ff:8c:2a:13:9f:7b:0b:24:a8:22:5a:da:9f: 8b:10:be:22:46:4f:69:3a:0d:64:b6:05:a0:b9:d1:5d:8e:cb: ef:2f:45:f1:21:94:c5:db:2d:ea:bc:f1:1c:4b:6c:a5:de:d1: 66:26:1b:9f:dc:26:69:b7:8e:48:6b:47:dd:8e:64:6a:e4:70: 61:c7:32:7a:d9:02:66:f9:9d:85:97:5a:2e:f0:32:d3:e8:64: e8:52:1a:32:78:51:72:c3:ca:8b:ef:3d:63:85:ae:e7:82:bc: 4d:96:86:fc:19:85:88:a2:d0:3a:41:34:7e:ae:63:05:97:87: 23:c5:64:f0:46:a9:bf:c6:93:c3:23:53:68:4a:ce:c5:d4:44: 2f:51:90:bc:aa:50:cb:ff:40:74:f8:35:9f:93:20:00:6b:31: b7:8e:37:c5:0a:05:cc:ea:89:97:25:1d:18:e9:6b:90:70:0d: d4:ec:40:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQk2OvlLBe2APJnBqROtEURB9OPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVB M0ZDRUI2NjAeFw0yNTA1MDcwMDQ1MDBaFw0yNTA1MTAxMDUwMDBaMDMxMTAvBgNV BAMTKDYwM0IzRjExQzVBMEUwNDJCRTY3NjdBODE0MTZENzREMTRCQUJFNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPdgOXfACdB28bZ3ckltf0BbH5 Wc7NQ3QBVFF3nz246mcAj3cIQ7wtnZmKxk6K6hoamlHl06//BkT5OxROBn2nTTje 42K6vpuhiitEp02wtnmeauN5h9yxO4Gt7rLUJx2IgTN/k/Ft/jyGV9F6JtAVEzdx 7UWFWKUmu380NLgacAm0ukNXu3MCoRUAIZQUnf28WBGjSBfH9XB8PJXXW+RYSsbB JI110GhTbiMrojZKwS1HxQp/VD89ldj4vPG0wC4hx+Nuvic8B9MMqbTkI3jNPVd4 v7oFbnzrwaBCx+reSUt32KVZ6brWuTP/YdJ1gP6izbU5Z6evQkDlFsu+ygNTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYDs/EcWg4EK+Z2eoFBbXTRS6vnQwHwYDVR0j BBgwFoAU1sHxPGfNAlRd66qEbrKPbqP862YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2EyZTBkYi1lMjkzLTQxYzUtODU4My0zODAxNTc1ODQyMWMvMC9ENkMxRjEzQzY3 Q0QwMjU0NURFQkFBODQ2RUIyOEY2RUEzRkNFQjY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVBM0ZD RUI2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NhMmUwZGItZTI5My00MWM1LTg1 ODMtMzgwMTU3NTg0MjFjLzAvRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhG NkVBM0ZDRUI2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMGnOG/ftSbgO5PBUSfjcIIHz6i36FtkHyaz ejM9+moka+w9JqWzoBT9BGGrXQRSVxjz9UTePoh0gYIUnz6UcbW8fVUxlzBU0u0Y icCX/4wqE597CySoIlran4sQviJGT2k6DWS2BaC50V2Oy+8vRfEhlMXbLeq88RxL bKXe0WYmG5/cJmm3jkhrR92OZGrkcGHHMnrZAmb5nYWXWi7wMtPoZOhSGjJ4UXLD yovvPWOFrueCvE2WhvwZhYii0DpBNH6uYwWXhyPFZPBGqb/Gk8MjU2hKzsXURC9R kLyqUMv/QHT4NZ+TIABrMbeON8UKBczqiZclHRjpa5BwDdTsQBg= -----END CERTIFICATE-----Generated at Wed May 7 23:25:20 2025 by rpki-client