$ rpki-client -vvf repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft File: 6D958AAEBD8946E47C968284B2652E02A2017E9E.mft (raw, json) Hash identifier: Keo8WLaX6JTvKqgwMRhjOvbcNlslL/RZw07xmwZe01Q= Subject key identifier: EE:A4:21:C2:10:BE:DA:C1:46:C4:C1:58:0F:2E:CB:0D:43:DE:F8:F1 Authority key identifier: 6D:95:8A:AE:BD:89:46:E4:7C:96:82:84:B2:65:2E:02:A2:01:7E:9E Certificate issuer: /CN=6D958AAEBD8946E47C968284B2652E02A2017E9E Certificate serial: 5A68476C9E01B2D9ABFC8131054CB53156B8D8BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft Manifest number: 0166 Signing time: Fri 09 May 2025 18:10:04 +0000 Manifest this update: Fri 09 May 2025 18:05:04 +0000 Manifest next update: Tue 13 May 2025 01:29:04 +0000 Files and hashes: 1: 3130332e3136372e3135362e302f32342d3234203d3e20313530353534.roa (hash: q9Y/LW+GvgpQns3JaxXDJK5aiDeS3kCAGsXt4jOSFx0=) 2: 6D958AAEBD8946E47C968284B2652E02A2017E9E.crl (hash: xOO7Kjv0Q+gaRanW+u67Uy1LJh7P3kd4X2BpJhwF/rI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.crl rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 01:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:68:47:6c:9e:01:b2:d9:ab:fc:81:31:05:4c:b5:31:56:b8:d8:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D958AAEBD8946E47C968284B2652E02A2017E9E Validity Not Before: May 9 18:05:04 2025 GMT Not After : May 13 01:29:04 2025 GMT Subject: CN=EEA421C210BEDAC146C4C1580F2ECB0D43DEF8F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c0:e8:34:b0:07:11:54:1d:dd:cb:36:2a:08: ce:af:8c:df:7a:93:09:92:84:a8:c7:a3:93:67:88: 05:f1:db:84:ee:c2:15:98:67:3b:32:43:e4:39:20: 80:6b:2b:2d:1f:cb:cb:87:21:f0:e6:7e:5d:f5:09: 24:42:38:32:c1:d3:ab:c4:82:61:aa:c8:5d:e5:1d: 04:4f:42:49:24:2e:a2:77:3d:74:e2:3d:74:77:68: 49:e8:64:83:86:28:9e:6d:6f:f0:8c:67:f5:10:74: 8d:4b:1f:8e:7d:f8:12:ea:15:bd:eb:e2:4e:67:b1: a9:b1:d0:96:2e:9d:d0:dd:c1:e5:79:a7:7c:6b:c7: c9:87:83:1d:c1:96:e7:15:41:60:5b:82:c0:40:4c: 4d:13:9d:42:8a:09:b4:23:a1:4e:3f:26:dd:02:9c: 1b:f0:d3:bd:5c:26:9f:29:b8:c4:1f:a5:d5:a6:73: 1f:c2:9f:4b:a2:f8:9f:bb:5a:1c:4b:32:43:ca:4d: 59:2a:7c:c4:70:97:fa:9a:f4:c8:82:63:ef:73:bb: 38:db:a2:1c:be:1f:d8:eb:d7:f4:d3:ec:49:53:a0: 3c:ca:7b:e8:c8:7a:36:dd:53:20:34:02:b2:bb:33: 65:4a:dd:25:b6:b3:b1:85:cd:cd:f1:68:75:35:35: 0d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A4:21:C2:10:BE:DA:C1:46:C4:C1:58:0F:2E:CB:0D:43:DE:F8:F1 X509v3 Authority Key Identifier: keyid:6D:95:8A:AE:BD:89:46:E4:7C:96:82:84:B2:65:2E:02:A2:01:7E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:2e:da:9c:85:6f:7c:65:d5:4a:3b:76:87:96:8e:ee:c7:f5: e9:cf:eb:3e:7e:df:51:15:28:bf:7c:da:a0:1b:c5:49:77:5c: 3a:07:0c:c5:ff:8f:29:a6:f7:a7:55:e8:71:66:71:ce:6e:3d: b4:c9:a5:29:82:f9:16:fa:ed:92:2e:df:0b:d7:37:af:3b:ca: 05:f4:44:22:e6:c6:c3:5c:85:73:43:86:84:6f:e0:eb:14:40: 27:3b:ea:99:5d:9c:68:64:40:23:cd:d0:c0:26:43:2a:39:ed: 54:76:c5:b1:e3:d3:15:f9:24:fc:bf:83:80:07:c9:9b:a8:81: ff:13:55:83:2b:24:82:7d:bb:56:c4:1e:31:ce:cf:3e:8d:ff: 67:9c:72:ec:42:9c:0b:fd:20:db:47:59:b0:45:10:61:c9:36: da:8f:d5:b9:31:60:d1:44:8f:a4:63:2e:d1:3c:e7:60:07:46: 74:a3:79:a0:8f:39:aa:7a:86:62:15:91:1c:db:ab:78:18:ec: ac:6e:f9:4f:f2:b9:7a:03:f3:62:0b:87:0b:9e:fe:b9:25:11: 7c:4f:a9:a2:91:45:09:c3:49:2a:a7:27:2d:5e:ed:46:8d:6f: 98:2f:23:f6:75:93:fa:fb:bd:81:b7:1a:5a:ae:e6:24:b8:ca: 50:5e:1b:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWmhHbJ4Bstmr/IExBUy1MVa42L0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJFMDJB MjAxN0U5RTAeFw0yNTA1MDkxODA1MDRaFw0yNTA1MTMwMTI5MDRaMDMxMTAvBgNV BAMTKEVFQTQyMUMyMTBCRURBQzE0NkM0QzE1ODBGMkVDQjBENDNERUY4RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIwOg0sAcRVB3dyzYqCM6vjN96 kwmShKjHo5NniAXx24TuwhWYZzsyQ+Q5IIBrKy0fy8uHIfDmfl31CSRCODLB06vE gmGqyF3lHQRPQkkkLqJ3PXTiPXR3aEnoZIOGKJ5tb/CMZ/UQdI1LH459+BLqFb3r 4k5nsamx0JYundDdweV5p3xrx8mHgx3BlucVQWBbgsBATE0TnUKKCbQjoU4/Jt0C nBvw071cJp8puMQfpdWmcx/Cn0ui+J+7WhxLMkPKTVkqfMRwl/qa9MiCY+9zuzjb ohy+H9jr1/TT7ElToDzKe+jIejbdUyA0ArK7M2VK3SW2s7GFzc3xaHU1NQ17AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7qQhwhC+2sFGxMFYDy7LDUPe+PEwHwYDVR0j BBgwFoAUbZWKrr2JRuR8loKEsmUuAqIBfp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTgwMzEyNS1kNzc3LTQwNTYtODQ0ZC04ZDFiZWZkMDE2M2QvMC82RDk1OEFBRUJE ODk0NkU0N0M5NjgyODRCMjY1MkUwMkEyMDE3RTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJFMDJBMjAx N0U5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE4MDMxMjUtZDc3Ny00MDU2LTg0 NGQtOGQxYmVmZDAxNjNkLzAvNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJF MDJBMjAxN0U5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEu2pyFb3xl1Uo7doeWju7H9enP6z5+31EV KL982qAbxUl3XDoHDMX/jymm96dV6HFmcc5uPbTJpSmC+Rb67ZIu3wvXN687ygX0 RCLmxsNchXNDhoRv4OsUQCc76pldnGhkQCPN0MAmQyo57VR2xbHj0xX5JPy/g4AH yZuogf8TVYMrJIJ9u1bEHjHOzz6N/2eccuxCnAv9INtHWbBFEGHJNtqP1bkxYNFE j6RjLtE852AHRnSjeaCPOap6hmIVkRzbq3gY7Kxu+U/yuXoD82ILhwue/rklEXxP qaKRRQnDSSqnJy1e7UaNb5gvI/Z1k/r7vYG3Glqu5iS4ylBeG4U= -----END CERTIFICATE-----Generated at Sun May 11 12:40:54 2025 by rpki-client