$ rpki-client -vvf repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft File: 6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft (raw, json) Hash identifier: 4SvnAveKMIWYdKuTZPS4HJ05ePiwg8oP4HTBD384HoQ= Subject key identifier: EC:5A:A7:23:0E:69:02:AF:F1:8D:04:5C:27:DC:0A:91:F5:F6:4C:F0 Authority key identifier: 6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7 Certificate issuer: /CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7 Certificate serial: 3F4AF08EF73A5E83178EE9BAAE01E586F944DA0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft Manifest number: 0258 Signing time: Thu 24 Jul 2025 21:51:30 +0000 Manifest this update: Thu 24 Jul 2025 21:46:30 +0000 Manifest next update: Mon 28 Jul 2025 01:37:30 +0000 Files and hashes: 1: 6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl (hash: y0ob02oEjIXDojuhVGmiFjKfVvBnHdQh5S00mRTqF1I=) 2: 323430363a386563303a3a2f33322d3332203d3e203435373031.roa (hash: HCJTfWuRFERa9sFGXrmRjthEJz1rc9WgcSUiJ3w41QM=) 3: 3130332e3135362e3232362e302f32342d3234203d3e203435373031.roa (hash: Pto1t/zWo/BTAn7DwBNKU7vR/ZyYh0xSxibr/QoeoHg=) 4: 3130332e3135362e3232372e302f32342d3234203d3e203435373031.roa (hash: /uuHBhafeaoCH+HOZHl14rc39vsEcoNz0FatbJ58vz8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:37:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:4a:f0:8e:f7:3a:5e:83:17:8e:e9:ba:ae:01:e5:86:f9:44:da:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7 Validity Not Before: Jul 24 21:46:30 2025 GMT Not After : Jul 28 01:37:30 2025 GMT Subject: CN=EC5AA7230E6902AFF18D045C27DC0A91F5F64CF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:50:db:11:c8:3c:ac:fd:a6:36:34:2d:e1:ca: 78:1a:ad:36:d3:dc:d1:00:16:51:62:f8:e6:0c:1d: 24:21:8f:f4:73:e8:a5:74:08:00:65:d8:64:c3:0c: 47:01:ec:46:89:04:2e:1d:84:e2:33:b7:40:25:ac: 07:61:a2:5f:5e:bd:74:ec:15:63:77:31:08:12:7e: 1a:18:bf:5f:09:8d:44:2e:22:36:25:43:e3:ce:26: 5a:ab:ba:87:92:43:52:8f:82:c7:ed:66:2a:79:33: 02:9f:ee:b8:be:3d:b6:e3:a9:c4:60:99:a9:44:bc: eb:c9:66:21:56:a6:74:67:f1:0e:71:86:bf:fb:ac: 4b:9e:0a:7a:83:53:ab:93:70:19:81:86:23:50:4c: b4:58:f1:97:44:8b:08:12:ca:09:7d:a8:a5:1a:3b: 72:ad:b4:d7:35:43:f5:c6:2a:ab:c7:28:98:98:9d: 8c:d2:f1:cd:77:a7:6b:53:e9:30:ed:6f:93:76:01: 1f:a4:85:94:2f:fb:1c:7f:fc:69:f6:72:07:b7:fa: c2:60:69:d3:79:89:af:de:e4:36:eb:9d:99:08:13: 84:9c:7e:34:bc:9b:45:b9:b7:3c:ea:e0:4a:6c:e2: 5f:63:8d:df:92:7f:30:f1:fc:33:82:e3:a3:22:0f: ae:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:5A:A7:23:0E:69:02:AF:F1:8D:04:5C:27:DC:0A:91:F5:F6:4C:F0 X509v3 Authority Key Identifier: keyid:6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:5d:0a:dc:f1:3a:46:7b:ed:8c:69:28:4f:74:2a:8c:8a:47: 22:1c:15:fa:e9:33:f8:24:c3:0f:6c:0f:78:fb:d6:32:36:df: 5c:2d:a2:24:87:64:72:79:6f:b3:02:0b:a2:ff:43:e5:11:76: 6e:65:c4:72:25:83:04:64:c4:23:57:ad:b0:78:dd:55:b1:3e: ce:c8:78:60:b2:d9:e5:d7:0f:4f:f3:1d:ee:d2:7a:ac:f2:3a: 54:8f:cc:41:6c:e5:48:3f:a3:e0:9c:a4:a4:e4:90:84:aa:2e: 54:09:34:b6:93:0d:91:9d:15:5d:36:b0:e5:06:68:f9:e0:bd: c4:95:4b:85:67:04:59:f2:c7:d1:5f:b8:57:79:2b:42:09:71: db:5c:bf:41:47:af:74:0c:e9:d8:40:a3:b9:49:56:ba:3f:17: db:79:17:a4:d5:6f:7d:5a:c8:52:df:83:59:9b:f2:38:31:cf: 7b:20:c4:a4:d8:ad:6e:5c:6c:3a:1a:e1:a2:45:a1:27:6b:39: 15:66:a4:b9:81:ea:14:78:91:67:48:ee:9b:a2:ba:f5:bf:4f: 8a:cc:7f:2e:ed:77:1d:4f:f1:4d:f2:35:33:72:cc:8b:d0:fa: 1d:6d:db:77:dc:4c:6e:54:ac:cb:d1:8a:26:7d:7e:bc:04:0c: ec:73:60:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP0rwjvc6XoMXjum6rgHlhvlE2g4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkUxMjM1QzhGQzNGMkVGNkQ5RDI0NUQwNjA3QUE2RDc2 M0M1RDRFNzAeFw0yNTA3MjQyMTQ2MzBaFw0yNTA3MjgwMTM3MzBaMDMxMTAvBgNV BAMTKEVDNUFBNzIzMEU2OTAyQUZGMThEMDQ1QzI3REMwQTkxRjVGNjRDRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsUNsRyDys/aY2NC3hyngarTbT 3NEAFlFi+OYMHSQhj/Rz6KV0CABl2GTDDEcB7EaJBC4dhOIzt0AlrAdhol9evXTs FWN3MQgSfhoYv18JjUQuIjYlQ+POJlqruoeSQ1KPgsftZip5MwKf7ri+PbbjqcRg malEvOvJZiFWpnRn8Q5xhr/7rEueCnqDU6uTcBmBhiNQTLRY8ZdEiwgSygl9qKUa O3KttNc1Q/XGKqvHKJiYnYzS8c13p2tT6TDtb5N2AR+khZQv+xx//Gn2cge3+sJg adN5ia/e5DbrnZkIE4ScfjS8m0W5tzzq4Eps4l9jjd+SfzDx/DOC46MiD66zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7FqnIw5pAq/xjQRcJ9wKkfX2TPAwHwYDVR0j BBgwFoAUbhI1yPw/LvbZ0kXQYHqm12PF1OcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTM1NWM1YS1lZmM4LTQ4ZjctOTAyZi02ZTMxZmM0Mjk5NWEvMC82RTEyMzVDOEZD M0YyRUY2RDlEMjQ1RDA2MDdBQTZENzYzQzVENEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkUxMjM1QzhGQzNGMkVGNkQ5RDI0NUQwNjA3QUE2RDc2M0M1 RDRFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjUzNTVjNWEtZWZjOC00OGY3LTkw MmYtNmUzMWZjNDI5OTVhLzAvNkUxMjM1QzhGQzNGMkVGNkQ5RDI0NUQwNjA3QUE2 RDc2M0M1RDRFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFdCtzxOkZ77YxpKE90KoyKRyIcFfrpM/gk ww9sD3j71jI231wtoiSHZHJ5b7MCC6L/Q+URdm5lxHIlgwRkxCNXrbB43VWxPs7I eGCy2eXXD0/zHe7SeqzyOlSPzEFs5Ug/o+CcpKTkkISqLlQJNLaTDZGdFV02sOUG aPngvcSVS4VnBFnyx9FfuFd5K0IJcdtcv0FHr3QM6dhAo7lJVro/F9t5F6TVb31a yFLfg1mb8jgxz3sgxKTYrW5cbDoa4aJFoSdrORVmpLmB6hR4kWdI7puiuvW/T4rM fy7tdx1P8U3yNTNyzIvQ+h1t23fcTG5UrMvRiiZ9frwEDOxzYEQ= -----END CERTIFICATE-----Generated at Fri Jul 25 03:54:32 2025 by rpki-client