$ rpki-client -vvf repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft File: 6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft (raw, json) Hash identifier: DhuwCfoVwj2GofJukJ2mx+P+njSP61bpSXDRV/Ej+t4= Subject key identifier: 35:B4:D1:6B:51:A0:00:FF:2F:5D:13:65:92:3F:53:74:27:1A:3B:42 Authority key identifier: 6D:CC:69:50:8E:F4:E6:70:EF:BC:5C:69:20:3D:6B:12:0F:A9:39:2F Certificate issuer: /CN=6DCC69508EF4E670EFBC5C69203D6B120FA9392F Certificate serial: 6A61083D7956EE5755A550495C6B8F87CF422C58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft Manifest number: 04D4 Signing time: Fri 09 May 2025 18:40:43 +0000 Manifest this update: Fri 09 May 2025 18:35:43 +0000 Manifest next update: Tue 13 May 2025 01:50:43 +0000 Files and hashes: 1: 3130332e3135322e3131392e302f32342d3234203d3e20313430343433.roa (hash: 5nsUaJsoHljodwn0u7F5BmbwvHAGQAdxB49YHcH+PVw=) 2: 3130332e3135322e3131382e302f32342d3234203d3e20313430343433.roa (hash: yhFwxGYSgpX9NxLtpkSVYLsiFIe9rD19hKsWw63qYc8=) 3: 6DCC69508EF4E670EFBC5C69203D6B120FA9392F.crl (hash: hDupamHROz/UF5wSTpIVwrifCgFFOtKBiZ/5QJqSPTU=) 4: 3130332e3135322e3131382e302f32332d3233203d3e20313430343433.roa (hash: gnXPIqK5MMiCa1ujBebDIgz1gVLhuLS9+UI8N5LQANY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.crl rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 01:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:61:08:3d:79:56:ee:57:55:a5:50:49:5c:6b:8f:87:cf:42:2c:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DCC69508EF4E670EFBC5C69203D6B120FA9392F Validity Not Before: May 9 18:35:43 2025 GMT Not After : May 13 01:50:43 2025 GMT Subject: CN=35B4D16B51A000FF2F5D1365923F5374271A3B42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f7:32:a9:62:60:2f:9f:5d:6e:7c:95:08:33: 93:dd:7b:7c:ed:4d:2e:62:7a:42:45:4e:c7:5c:1c: 6e:af:40:ed:7a:97:f6:69:6b:c0:1e:83:01:dc:a0: c4:ef:9e:c6:86:18:25:d2:0e:a6:04:17:ea:f3:a0: 09:da:76:65:06:4a:03:9e:48:0a:0b:1c:df:01:bc: 92:76:08:8f:e3:b7:ae:77:92:54:50:6e:2a:58:45: 85:24:42:52:26:ab:35:65:5a:16:90:ce:49:6f:88: 24:46:1d:a8:65:98:d8:8d:11:e7:89:04:ed:11:0a: 40:87:08:d8:ee:a4:0d:e7:50:20:be:5a:19:d5:31: 3c:a1:7a:e8:2c:07:da:53:19:2c:37:16:14:2c:56: e0:11:16:2b:43:ad:fd:29:ea:84:ca:ce:9d:92:61: 7b:5f:a0:9b:69:dd:9f:cb:6d:69:a5:9e:41:ce:a6: b7:eb:2a:00:3d:83:0d:77:5f:45:43:85:bc:b3:b9: 01:96:42:c6:d2:45:1d:1d:a3:00:96:79:1d:47:d6: 1f:cf:9d:9c:5d:f6:36:90:91:1b:08:15:50:03:35: 66:56:b3:c0:52:10:03:2f:d0:c8:b8:1d:2c:1d:82: bd:7c:1a:e8:ee:83:5b:10:1b:01:61:16:48:84:7d: b1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B4:D1:6B:51:A0:00:FF:2F:5D:13:65:92:3F:53:74:27:1A:3B:42 X509v3 Authority Key Identifier: keyid:6D:CC:69:50:8E:F4:E6:70:EF:BC:5C:69:20:3D:6B:12:0F:A9:39:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:21:25:8a:2e:93:27:6e:2f:2f:98:f4:d9:b4:e6:31:43:60: 40:5a:8a:a1:b1:ae:c4:fa:40:0d:4f:d5:f2:cf:d2:ba:e4:a2: e2:41:5d:71:23:43:86:d8:f9:d9:ef:05:10:fb:34:de:a3:6f: 87:22:50:ee:1e:8d:f0:e4:9c:14:d6:9f:14:35:69:7e:36:a4: 78:06:13:8e:10:68:58:53:d0:57:01:0a:24:3a:6b:09:e0:fb: 6a:65:39:40:2b:6b:90:af:30:b5:1f:eb:de:32:b2:3a:d8:0c: 18:0d:4d:ba:03:7d:72:67:65:66:23:b0:8c:59:36:da:6a:0f: e5:bd:ef:48:06:b2:d0:7b:a8:7d:0d:27:c0:7c:2c:0b:1c:52: 74:f6:eb:28:a5:8e:13:ec:e8:83:ab:12:90:b5:98:3f:23:06: e0:64:57:27:6b:58:5f:88:55:eb:0c:e5:55:43:3e:15:9f:06: 29:15:ea:c4:0c:ec:df:2a:5b:71:c7:70:ff:14:23:6c:7d:c1: d8:fc:6e:ad:ad:bf:eb:ad:5a:c7:a2:fc:32:36:86:72:68:a1: f5:19:b2:1e:fb:8a:97:01:21:fc:e3:2b:c4:5b:ba:f2:06:1b: 37:15:2d:25:72:e9:77:9d:ba:61:56:26:55:02:b1:8d:61:eb: 93:55:11:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUamEIPXlW7ldVpVBJXGuPh89CLFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRDQzY5NTA4RUY0RTY3MEVGQkM1QzY5MjAzRDZCMTIw RkE5MzkyRjAeFw0yNTA1MDkxODM1NDNaFw0yNTA1MTMwMTUwNDNaMDMxMTAvBgNV BAMTKDM1QjREMTZCNTFBMDAwRkYyRjVEMTM2NTkyM0Y1Mzc0MjcxQTNCNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi9zKpYmAvn11ufJUIM5Pde3zt TS5iekJFTsdcHG6vQO16l/Zpa8AegwHcoMTvnsaGGCXSDqYEF+rzoAnadmUGSgOe SAoLHN8BvJJ2CI/jt653klRQbipYRYUkQlImqzVlWhaQzklviCRGHahlmNiNEeeJ BO0RCkCHCNjupA3nUCC+WhnVMTyheugsB9pTGSw3FhQsVuARFitDrf0p6oTKzp2S YXtfoJtp3Z/LbWmlnkHOprfrKgA9gw13X0VDhbyzuQGWQsbSRR0dowCWeR1H1h/P nZxd9jaQkRsIFVADNWZWs8BSEAMv0Mi4HSwdgr18Gujug1sQGwFhFkiEfbG9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNbTRa1GgAP8vXRNlkj9TdCcaO0IwHwYDVR0j BBgwFoAUbcxpUI705nDvvFxpID1rEg+pOS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjA3M2FjZS1hNjkxLTQ4NjMtOWMxYy01OWIyZGI5Y2I0NjMvMC82RENDNjk1MDhF RjRFNjcwRUZCQzVDNjkyMDNENkIxMjBGQTkzOTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRDQzY5NTA4RUY0RTY3MEVGQkM1QzY5MjAzRDZCMTIwRkE5 MzkyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIwNzNhY2UtYTY5MS00ODYzLTlj MWMtNTliMmRiOWNiNDYzLzAvNkRDQzY5NTA4RUY0RTY3MEVGQkM1QzY5MjAzRDZC MTIwRkE5MzkyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAhJYoukyduLy+Y9Nm05jFDYEBaiqGxrsT6 QA1P1fLP0rrkouJBXXEjQ4bY+dnvBRD7NN6jb4ciUO4ejfDknBTWnxQ1aX42pHgG E44QaFhT0FcBCiQ6awng+2plOUAra5CvMLUf694ysjrYDBgNTboDfXJnZWYjsIxZ NtpqD+W970gGstB7qH0NJ8B8LAscUnT26yiljhPs6IOrEpC1mD8jBuBkVydrWF+I VesM5VVDPhWfBikV6sQM7N8qW3HHcP8UI2x9wdj8bq2tv+utWsei/DI2hnJoofUZ sh77ipcBIfzjK8RbuvIGGzcVLSVy6XedumFWJlUCsY1h65NVEXY= -----END CERTIFICATE-----Generated at Sun May 11 00:37:10 2025 by rpki-client