$ rpki-client -vvf repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.mft File: C6F736EFBEBD1A0143DB0A57A143545915A18B33.mft (raw, json) Hash identifier: sD0wKmg4ZyqpFZaKkENmyinGD/s29YlQS3zk5Cz0dbY= Subject key identifier: EB:E8:C8:3C:20:A9:A9:AD:6B:18:69:3A:74:A9:01:11:8D:79:6A:4B Authority key identifier: C6:F7:36:EF:BE:BD:1A:01:43:DB:0A:57:A1:43:54:59:15:A1:8B:33 Certificate issuer: /CN=C6F736EFBEBD1A0143DB0A57A143545915A18B33 Certificate serial: 42FF4BC1B642BE6ECA054456D5259BE6E2BD4652 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6F736EFBEBD1A0143DB0A57A143545915A18B33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.mft Manifest number: 04C6 Signing time: Wed 23 Apr 2025 04:22:17 +0000 Manifest this update: Wed 23 Apr 2025 04:17:17 +0000 Manifest next update: Sat 26 Apr 2025 16:17:17 +0000 Files and hashes: 1: 3130332e31382e3133322e302f32322d3234203d3e203535363933.roa (hash: KNOoqjjkrTNpy3DcKvZM062fDeCTTo/8iFrxmSyM5ac=) 2: 3131362e3235342e3130302e302f32322d3234203d3e203535363933.roa (hash: 3xgpPf4YAqaADbs/UZTLq/18odwLGmvVH5X/9szIIKo=) 3: C6F736EFBEBD1A0143DB0A57A143545915A18B33.crl (hash: D7LpjNA5YrW3B1dMYUoKDXbgo1StroJBGVhBOWKh7OY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.crl rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6F736EFBEBD1A0143DB0A57A143545915A18B33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:ff:4b:c1:b6:42:be:6e:ca:05:44:56:d5:25:9b:e6:e2:bd:46:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6F736EFBEBD1A0143DB0A57A143545915A18B33 Validity Not Before: Apr 23 04:17:17 2025 GMT Not After : Apr 26 16:17:17 2025 GMT Subject: CN=EBE8C83C20A9A9AD6B18693A74A901118D796A4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e9:b9:ef:72:25:c5:b8:6c:ff:26:bd:27:7a: bf:0d:6d:fa:cd:ee:dc:c0:08:ae:c5:a0:48:df:f9: 6c:bc:44:4c:fb:04:1c:f1:98:1d:44:7e:20:c3:95: 98:a6:2b:b2:bc:8c:5b:b5:ab:fd:86:67:c4:82:15: 5b:f2:dc:ba:6b:22:51:a7:6d:04:d8:23:f2:57:63: ab:ad:15:f7:ac:d0:8b:72:65:09:c8:40:3e:25:f1: 59:29:1c:36:56:5d:49:2a:23:be:68:e5:b1:c0:8a: 9e:21:af:16:b3:0e:ed:ab:1f:94:37:c8:60:cb:d7: c4:97:a3:6b:b2:0b:0b:f0:b1:ab:73:8d:90:12:f9: ad:d0:74:64:3e:18:a8:bf:fd:36:b9:85:cd:0d:86: fe:6d:25:1a:16:73:34:9f:93:8f:9a:2e:5c:09:c3: 11:c2:58:e6:85:c1:2b:8f:e4:95:71:b8:28:c5:ea: b1:09:c6:10:28:1e:c5:66:81:93:67:ec:ad:a2:d5: 5f:54:45:c0:5f:08:1e:c3:be:09:7a:96:3e:00:7e: a8:e6:c8:5f:2d:4c:6b:92:03:67:66:0d:be:db:a8: 55:43:3d:1b:34:e9:87:22:10:07:75:52:00:bd:1c: 31:5d:93:45:83:cc:5b:9b:ff:6f:35:52:97:2e:33: 83:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E8:C8:3C:20:A9:A9:AD:6B:18:69:3A:74:A9:01:11:8D:79:6A:4B X509v3 Authority Key Identifier: keyid:C6:F7:36:EF:BE:BD:1A:01:43:DB:0A:57:A1:43:54:59:15:A1:8B:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6F736EFBEBD1A0143DB0A57A143545915A18B33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:cc:59:f1:b7:7f:64:75:be:e0:8b:2a:59:5b:84:7a:a0:c8: 82:ac:47:b2:15:22:92:3b:47:16:9e:07:9c:b4:d0:42:3a:8a: 5c:58:eb:15:24:0e:c0:21:80:02:5f:d3:7c:4a:60:2a:0e:0d: c6:23:7e:18:9b:21:aa:67:9d:15:86:e1:a3:50:83:74:ff:e1: ed:25:66:14:d2:1a:c9:b5:08:b1:ed:67:40:2e:f5:1c:fb:7d: 00:08:90:74:5e:fa:76:25:e5:d7:72:e9:51:3b:37:ea:de:5d: 72:3b:01:0e:ea:3a:92:93:22:12:72:a4:45:ff:e5:87:ad:0d: a7:44:67:02:13:bc:a4:ea:32:0b:df:7e:38:38:d1:2e:1d:87: 2f:f0:f4:dd:aa:d5:18:65:36:b4:25:8f:fa:17:4a:dd:e9:be: c8:57:bf:93:32:29:13:ab:b8:d0:21:e3:20:91:63:13:81:60: 99:3b:75:3c:f5:05:6e:61:00:cb:a6:90:33:69:46:43:ad:b7: f2:90:37:cb:50:76:fe:50:05:c2:00:26:d4:4f:9f:be:43:fd: 3e:c5:55:50:fc:d8:f4:10:82:25:02:fa:ec:6b:78:10:3e:03: 8f:ce:15:a4:d0:28:fc:b7:1e:a1:53:40:65:16:45:c0:2a:dd: 97:92:3d:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQv9LwbZCvm7KBURW1SWb5uK9RlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZGNzM2RUZCRUJEMUEwMTQzREIwQTU3QTE0MzU0NTkx NUExOEIzMzAeFw0yNTA0MjMwNDE3MTdaFw0yNTA0MjYxNjE3MTdaMDMxMTAvBgNV BAMTKEVCRThDODNDMjBBOUE5QUQ2QjE4NjkzQTc0QTkwMTExOEQ3OTZBNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC56bnvciXFuGz/Jr0ner8NbfrN 7tzACK7FoEjf+Wy8REz7BBzxmB1EfiDDlZimK7K8jFu1q/2GZ8SCFVvy3LprIlGn bQTYI/JXY6utFfes0ItyZQnIQD4l8VkpHDZWXUkqI75o5bHAip4hrxazDu2rH5Q3 yGDL18SXo2uyCwvwsatzjZAS+a3QdGQ+GKi//Ta5hc0Nhv5tJRoWczSfk4+aLlwJ wxHCWOaFwSuP5JVxuCjF6rEJxhAoHsVmgZNn7K2i1V9URcBfCB7Dvgl6lj4Afqjm yF8tTGuSA2dmDb7bqFVDPRs06YciEAd1UgC9HDFdk0WDzFub/281UpcuM4MDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6+jIPCCpqa1rGGk6dKkBEY15akswHwYDVR0j BBgwFoAUxvc27769GgFD2wpXoUNUWRWhizMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDU0YjRlMi0yZTU4LTQ2NWItYWZhYS0xYzk0NjVjODgyZTYvMC9DNkY3MzZFRkJF QkQxQTAxNDNEQjBBNTdBMTQzNTQ1OTE1QTE4QjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzZGNzM2RUZCRUJEMUEwMTQzREIwQTU3QTE0MzU0NTkxNUEx OEIzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ1NGI0ZTItMmU1OC00NjViLWFm YWEtMWM5NDY1Yzg4MmU2LzAvQzZGNzM2RUZCRUJEMUEwMTQzREIwQTU3QTE0MzU0 NTkxNUExOEIzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALPMWfG3f2R1vuCLKllbhHqgyIKsR7IVIpI7 RxaeB5y00EI6ilxY6xUkDsAhgAJf03xKYCoODcYjfhibIapnnRWG4aNQg3T/4e0l ZhTSGsm1CLHtZ0Au9Rz7fQAIkHRe+nYl5ddy6VE7N+reXXI7AQ7qOpKTIhJypEX/ 5YetDadEZwITvKTqMgvffjg40S4dhy/w9N2q1RhlNrQlj/oXSt3pvshXv5MyKROr uNAh4yCRYxOBYJk7dTz1BW5hAMumkDNpRkOtt/KQN8tQdv5QBcIAJtRPn75D/T7F VVD82PQQgiUC+uxreBA+A4/OFaTQKPy3HqFTQGUWRcAq3ZeSPTo= -----END CERTIFICATE-----Generated at Wed Apr 23 06:32:02 2025 by rpki-client on console.sobornost.net