$ rpki-client -vvf repo-rpki.idnic.net/repo/e717bf14-e49a-4acc-9c63-bf172797bcb2/0/6C7DA1DA96788F726F8FF892609842CE1220BCE0.mft File: 6C7DA1DA96788F726F8FF892609842CE1220BCE0.mft (raw, json) Hash identifier: b2NKV/dip4SOFNxrWJf/fecke+WRd1OYNc+LwNwVXp0= Subject key identifier: A0:1A:15:D7:E0:82:4D:87:90:03:34:3F:0D:C2:3E:1E:0B:BA:20:E4 Authority key identifier: 6C:7D:A1:DA:96:78:8F:72:6F:8F:F8:92:60:98:42:CE:12:20:BC:E0 Certificate issuer: /CN=6C7DA1DA96788F726F8FF892609842CE1220BCE0 Certificate serial: 67D045FAB25A0EEFE99ED7CAC50E258C39ECDA10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C7DA1DA96788F726F8FF892609842CE1220BCE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e717bf14-e49a-4acc-9c63-bf172797bcb2/0/6C7DA1DA96788F726F8FF892609842CE1220BCE0.mft Manifest number: 0352 Signing time: Fri 09 May 2025 07:10:49 +0000 Manifest this update: Fri 09 May 2025 07:05:49 +0000 Manifest next update: Mon 12 May 2025 15:31:49 +0000 Files and hashes: 1: 6C7DA1DA96788F726F8FF892609842CE1220BCE0.crl (hash: ECk6HS9ZbHD2VFbp3m3+iOCpYKO27MnAP4d8qTXVd1I=) 2: 3130332e3136312e3230302e302f32332d3233203d3e20313431363632.roa (hash: 7XmlI6M+t6xtKlx+KMYMWeaUpbehxlLJ481tv0B736o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e717bf14-e49a-4acc-9c63-bf172797bcb2/0/6C7DA1DA96788F726F8FF892609842CE1220BCE0.crl rsync://repo-rpki.idnic.net/repo/e717bf14-e49a-4acc-9c63-bf172797bcb2/0/6C7DA1DA96788F726F8FF892609842CE1220BCE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C7DA1DA96788F726F8FF892609842CE1220BCE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 15:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d0:45:fa:b2:5a:0e:ef:e9:9e:d7:ca:c5:0e:25:8c:39:ec:da:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C7DA1DA96788F726F8FF892609842CE1220BCE0 Validity Not Before: May 9 07:05:49 2025 GMT Not After : May 12 15:31:49 2025 GMT Subject: CN=A01A15D7E0824D879003343F0DC23E1E0BBA20E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a7:f7:76:99:de:d6:1e:d0:2c:40:e3:22:68: fe:d5:a9:5d:30:70:44:59:fb:1f:9a:95:33:a0:d0: 58:ed:b1:40:cd:51:42:99:b0:4e:0d:a3:82:7c:b7: b1:1e:cb:6b:2d:75:aa:2b:b0:f9:9c:ec:23:8c:be: 3f:a5:bd:4b:f0:7c:52:60:a7:66:69:2b:b0:6f:65: 58:a3:0f:b9:92:5c:05:5a:3c:e9:95:e5:47:51:b6: 0d:f5:e5:92:17:47:4a:68:1e:4e:03:aa:90:32:13: 4e:bc:cb:5b:dd:0f:87:7d:04:b9:1a:9d:06:a2:2a: 1d:68:94:13:08:d3:2b:f1:24:74:01:b7:96:94:0a: 86:98:b9:a2:71:99:28:99:06:29:f8:70:ff:a7:bf: e5:75:c9:70:75:32:ef:d2:80:34:2f:8b:87:00:c1: 78:15:20:43:d3:2b:ae:e0:f4:cf:6d:75:40:5d:45: ec:4b:a5:72:5f:86:d9:5d:92:dd:77:24:47:44:f1: 0b:96:85:c6:51:1d:21:25:05:37:f5:82:49:b5:f8: 9b:dd:22:74:9a:ce:80:54:a1:97:7d:4e:c0:71:a9: fc:a6:cb:24:1c:7b:e2:9d:76:bd:51:9a:1e:25:43: 8e:62:4c:74:bf:b4:be:d0:a1:ed:11:53:c0:51:c4: 7b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1A:15:D7:E0:82:4D:87:90:03:34:3F:0D:C2:3E:1E:0B:BA:20:E4 X509v3 Authority Key Identifier: keyid:6C:7D:A1:DA:96:78:8F:72:6F:8F:F8:92:60:98:42:CE:12:20:BC:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e717bf14-e49a-4acc-9c63-bf172797bcb2/0/6C7DA1DA96788F726F8FF892609842CE1220BCE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C7DA1DA96788F726F8FF892609842CE1220BCE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e717bf14-e49a-4acc-9c63-bf172797bcb2/0/6C7DA1DA96788F726F8FF892609842CE1220BCE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:1a:33:7c:02:c7:8e:09:a3:44:ef:67:33:bf:27:1d:dc:e0: 36:ee:a2:dd:85:d1:0e:c3:c1:b6:5e:34:c5:66:e5:fe:f2:52: 54:00:ed:36:a0:13:eb:84:48:38:2d:47:ba:13:30:a8:95:e0: 15:3d:2e:95:dd:43:7f:ee:6e:5a:1a:fb:80:b7:e3:07:b6:91: b5:2c:18:0b:79:f7:fc:59:9d:a2:c0:36:c3:02:ea:4a:77:bb: db:3a:2a:61:e2:ac:26:7d:c7:27:75:c2:46:46:4b:a7:e3:60: b2:dc:7a:c0:5c:02:41:3a:c7:3c:c7:21:0a:75:a1:9f:9a:37: 2e:a8:72:57:38:c2:07:8e:50:15:23:f2:53:1a:e3:c9:4a:06: 66:ff:f6:d6:d8:11:53:40:95:1c:0c:11:05:b3:ae:8b:11:64: 4e:fe:1e:0d:6c:37:51:79:d6:5a:a1:3b:26:15:96:d7:00:3d: 0f:c7:18:dd:3b:9c:5e:82:0a:2d:f2:f6:25:c3:09:3b:93:f7: ba:50:41:d7:1d:ba:d2:4f:13:9a:a4:2c:43:f9:9f:c1:ea:b7: 83:bc:85:89:70:28:e9:de:e5:e8:78:ca:15:7c:cb:82:ce:2e: de:e9:c4:b3:30:1b:03:37:03:07:ad:01:9b:dc:d7:be:c1:96: 83:c2:0f:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ9BF+rJaDu/pntfKxQ4ljDns2hAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkM3REExREE5Njc4OEY3MjZGOEZGODkyNjA5ODQyQ0Ux MjIwQkNFMDAeFw0yNTA1MDkwNzA1NDlaFw0yNTA1MTIxNTMxNDlaMDMxMTAvBgNV BAMTKEEwMUExNUQ3RTA4MjREODc5MDAzMzQzRjBEQzIzRTFFMEJCQTIwRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCop/d2md7WHtAsQOMiaP7VqV0w cERZ+x+alTOg0FjtsUDNUUKZsE4No4J8t7Eey2stdaorsPmc7COMvj+lvUvwfFJg p2ZpK7BvZVijD7mSXAVaPOmV5UdRtg315ZIXR0poHk4DqpAyE068y1vdD4d9BLka nQaiKh1olBMI0yvxJHQBt5aUCoaYuaJxmSiZBin4cP+nv+V1yXB1Mu/SgDQvi4cA wXgVIEPTK67g9M9tdUBdRexLpXJfhtldkt13JEdE8QuWhcZRHSElBTf1gkm1+Jvd InSazoBUoZd9TsBxqfymyyQce+Kddr1Rmh4lQ45iTHS/tL7Qoe0RU8BRxHsBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoBoV1+CCTYeQAzQ/DcI+Hgu6IOQwHwYDVR0j BBgwFoAUbH2h2pZ4j3Jvj/iSYJhCzhIgvOAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzE3YmYxNC1lNDlhLTRhY2MtOWM2My1iZjE3Mjc5N2JjYjIvMC82QzdEQTFEQTk2 Nzg4RjcyNkY4RkY4OTI2MDk4NDJDRTEyMjBCQ0UwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkM3REExREE5Njc4OEY3MjZGOEZGODkyNjA5ODQyQ0UxMjIw QkNFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTcxN2JmMTQtZTQ5YS00YWNjLTlj NjMtYmYxNzI3OTdiY2IyLzAvNkM3REExREE5Njc4OEY3MjZGOEZGODkyNjA5ODQy Q0UxMjIwQkNFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIaM3wCx44Jo0TvZzO/Jx3c4Dbuot2F0Q7D wbZeNMVm5f7yUlQA7TagE+uESDgtR7oTMKiV4BU9LpXdQ3/ubloa+4C34we2kbUs GAt59/xZnaLANsMC6kp3u9s6KmHirCZ9xyd1wkZGS6fjYLLcesBcAkE6xzzHIQp1 oZ+aNy6oclc4wgeOUBUj8lMa48lKBmb/9tbYEVNAlRwMEQWzrosRZE7+Hg1sN1F5 1lqhOyYVltcAPQ/HGN07nF6CCi3y9iXDCTuT97pQQdcdutJPE5qkLEP5n8Hqt4O8 hYlwKOne5eh4yhV8y4LOLt7pxLMwGwM3AwetAZvc177BloPCD/4= -----END CERTIFICATE-----Generated at Fri May 9 20:00:32 2025 by rpki-client