$ rpki-client -vvf repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft File: 6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft (raw, json) Hash identifier: 4ScyRQvrtIN0nqVHdPGpH2Yd8sm/mZDXkh2rBIfQAVs= Subject key identifier: F6:5B:1E:1A:0C:F1:AA:5B:04:F7:A6:E0:41:5C:31:AA:4E:FC:E6:EF Authority key identifier: 6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40 Certificate issuer: /CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40 Certificate serial: 2E5C7FDA10016CB7A4B1E1F510FAA7633C510CAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft Manifest number: 02AD Signing time: Mon 02 Jun 2025 23:51:20 +0000 Manifest this update: Mon 02 Jun 2025 23:46:19 +0000 Manifest next update: Fri 06 Jun 2025 11:34:19 +0000 Files and hashes: 1: 3131392e31302e3137362e302f32332d3233203d3e203234353330.roa (hash: oYKRgeAiMpYufzUDpAVrBlt6W1jyPeS9JOxxuQtOwZY=) 2: 3131392e31302e3137382e302f32342d3234203d3e203234353330.roa (hash: 3xHj2Za1UQ2hx7TMbM6D07YNJ7NH1FcliBdFRmqQm1g=) 3: 3131392e31302e3137372e302f32342d3234203d3e203234353330.roa (hash: YgVLRg3O7QRj5xGJQiVJq81SI0VTcACtqesTlVxXavs=) 4: 3131392e31302e3138332e302f32342d3234203d3e203234353330.roa (hash: 0TXvmS9XRzFPQg7VBjdDhocXuAjOCXrahzSe/hBS+kE=) 5: 3131392e31302e3137362e302f32342d3234203d3e203234353330.roa (hash: kLmEQPQ/od1FdskOnhWMMgPU8rf3JMAMKcmeKR1b8o8=) 6: 3131392e31302e3137392e302f32342d3234203d3e203234353330.roa (hash: QUgb+3auw+3QXbybWiXjJyrqBHMbQrgJpf1sSivTg0g=) 7: 323430313a643934303a3a2f33322d3332203d3e203234353330.roa (hash: 4+y7rjN8rrx24W4l4v0NhyPbAx+wxdh2Vyt9geBR9nM=) 8: 3131392e31302e3138302e302f32322d3232203d3e203234353330.roa (hash: nxdAn3jn+XYvc4duvxuDcKKQ6L/WvqrTreEgfRLbG3Y=) 9: 3131392e31302e3137362e302f32312d3231203d3e203234353330.roa (hash: US1SXV+hgdxuRQjfdZVl4UlTanx6B6V1We4A6nIE/aU=) 10: 3131392e31302e3138302e302f32332d3233203d3e203234353330.roa (hash: kHw5hH5+IfpLbksfP3QZEjTxkepAiasbWHMw4A7m3b0=) 11: 3131392e31302e3138312e302f32342d3234203d3e203234353330.roa (hash: naA5lUlBRat5ef0vI8voPPjFrMHR9bpoQ6w5VRUzIn0=) 12: 6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl (hash: KCfs8H5CYbZxs3kl2DVywF/OoG/cFN+vVaLKR5FVQ20=) 13: 3131392e31302e3137362e302f32312d3234203d3e203234353330.roa (hash: IsH3U/BHRUb2Qe5b502VK1K1N8x5p/BPRkAJxJWs0XM=) 14: 323430313a643934303a653066663a3a2f34382d3438203d3e203234353330.roa (hash: 7urOwCjdO2YZyXJHO3LKXR7humjd9mLf0bELAOmhNtc=) 15: 3131392e31302e3138322e302f32332d3233203d3e203234353330.roa (hash: VMgB9Kb4EVQHlb3VDwgkZg7RdNnVVkcFEhqcUkw3BMY=) 16: 3131392e31302e3137362e302f32322d3232203d3e203234353330.roa (hash: Jsc0sEwnIvfzafDdx5P/GKzvW0lqzmukEooIoZhkd4I=) 17: 3131392e31302e3138302e302f32342d3234203d3e203234353330.roa (hash: W7qMjGU5xZ9Oay/8WGxeZxhy9LWBi2AIkynmyghqxgo=) 18: 3131392e31302e3138322e302f32342d3234203d3e203234353330.roa (hash: TioKn3OEWrA5HJc/rJ0Sfo3o6zbghNv33aandwoul2U=) 19: 3131392e31302e3137382e302f32332d3233203d3e203234353330.roa (hash: 0z+M+MfV31ApunTcr4X9MYd8Du/BJdShdW8aFWf3OwA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 11:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:5c:7f:da:10:01:6c:b7:a4:b1:e1:f5:10:fa:a7:63:3c:51:0c:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40 Validity Not Before: Jun 2 23:46:19 2025 GMT Not After : Jun 6 11:34:19 2025 GMT Subject: CN=F65B1E1A0CF1AA5B04F7A6E0415C31AA4EFCE6EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e4:46:e4:2c:d8:d3:81:5d:51:56:b2:1e:53: 9e:70:cf:80:9c:d8:a5:35:cb:4c:7a:dc:ea:7e:b0: 52:44:09:cc:98:54:02:29:fa:20:d1:43:94:7d:0b: 90:e7:01:c3:99:13:cb:69:af:29:0b:99:ac:db:01: 6e:50:c5:5c:0d:c4:d4:b2:55:f2:11:06:15:bc:a1: 33:24:14:57:35:37:41:9f:a0:af:8f:ec:c0:e0:d8: 61:31:0f:27:f8:ad:06:11:f5:5e:6f:7b:10:ba:92: f7:2a:5a:e7:9b:b1:26:f7:5a:da:98:b9:4f:32:88: d3:a5:81:fe:7a:87:c8:e6:6f:f5:ff:1b:f5:d4:27: 2f:a2:43:23:5d:c2:dc:5b:65:1c:5c:c8:53:b6:28: cf:7a:07:81:e4:a3:e5:bc:80:31:a7:51:03:0d:b9: f0:2c:db:7e:71:e6:47:1c:20:e0:db:b8:f3:4a:27: e8:b8:dd:f5:66:4e:ba:f3:32:48:c8:42:f6:bb:9b: 7e:f9:12:72:02:b8:0d:59:a9:94:0f:60:bb:1c:d8: c9:e7:36:7e:15:01:3d:f2:a1:5c:06:90:c5:d7:ae: 2b:2b:75:11:9d:39:76:b2:db:92:26:35:15:0d:c2: 67:97:39:e7:8e:ec:3d:7e:f3:9d:4a:14:1b:17:12: a6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:5B:1E:1A:0C:F1:AA:5B:04:F7:A6:E0:41:5C:31:AA:4E:FC:E6:EF X509v3 Authority Key Identifier: keyid:6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:3e:1e:d3:23:ea:7b:49:cd:14:c1:22:e4:5c:4b:3b:fc:64: 06:84:14:0e:8e:fc:45:77:6f:28:03:b6:6a:09:ba:2a:0e:68: 5f:6a:33:da:53:a6:f6:1b:69:45:0c:24:79:0a:d9:b8:d5:5a: 47:2b:89:da:17:ba:38:1c:82:a1:65:a3:f6:97:41:4c:73:03: 9c:9a:5b:99:a7:1d:d7:c0:54:1f:29:f3:f6:48:3b:eb:67:7e: 04:18:16:89:e5:80:2f:cb:43:7b:48:33:57:70:c4:a4:16:1f: ef:b0:38:ba:e2:56:5c:d5:e1:84:90:9a:15:0f:0b:7f:73:d0: f7:37:59:b5:3c:9c:a1:88:8f:be:76:d5:6c:ab:ef:92:df:6e: 6f:b2:ae:2a:75:34:07:5a:05:a5:9b:6a:84:df:f7:94:5e:57: f2:f8:82:8a:72:d0:30:c4:e1:72:16:bc:39:d1:a1:5e:2b:6a: 75:68:e2:0b:93:24:38:0d:0a:c7:d2:98:ff:d2:4a:59:7e:9a: 6e:df:38:8e:47:d3:82:0a:08:2b:03:4e:ad:2a:2e:76:ec:cd: 1b:6b:fe:6e:a4:1d:0e:00:fe:70:cb:3a:fc:e6:fd:95:7d:94: 6d:fd:81:f1:9e:4d:88:13:43:86:4d:30:3b:af:e1:ef:9d:c9: 22:3e:26:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULlx/2hABbLekseH1EPqnYzxRDK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY2QTM1MzAxOThBOUI3NjU3QTYzNkZFQ0NGQjM5RjNC RjcxRkI0MDAeFw0yNTA2MDIyMzQ2MTlaFw0yNTA2MDYxMTM0MTlaMDMxMTAvBgNV BAMTKEY2NUIxRTFBMENGMUFBNUIwNEY3QTZFMDQxNUMzMUFBNEVGQ0U2RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq5EbkLNjTgV1RVrIeU55wz4Cc 2KU1y0x63Op+sFJECcyYVAIp+iDRQ5R9C5DnAcOZE8tprykLmazbAW5QxVwNxNSy VfIRBhW8oTMkFFc1N0GfoK+P7MDg2GExDyf4rQYR9V5vexC6kvcqWuebsSb3WtqY uU8yiNOlgf56h8jmb/X/G/XUJy+iQyNdwtxbZRxcyFO2KM96B4Hko+W8gDGnUQMN ufAs235x5kccIODbuPNKJ+i43fVmTrrzMkjIQva7m375EnICuA1ZqZQPYLsc2Mnn Nn4VAT3yoVwGkMXXrisrdRGdOXay25ImNRUNwmeXOeeO7D1+851KFBsXEqbPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9lseGgzxqlsE96bgQVwxqk785u8wHwYDVR0j BBgwFoAUb2o1MBmKm3ZXpjb+zPs5879x+0AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDIzNDRiZS1mOWZiLTQ2MzQtOTJkNi04OTRkZDUzOGNhZGYvMC82RjZBMzUzMDE5 OEE5Qjc2NTdBNjM2RkVDQ0ZCMzlGM0JGNzFGQjQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkY2QTM1MzAxOThBOUI3NjU3QTYzNkZFQ0NGQjM5RjNCRjcx RkI0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQyMzQ0YmUtZjlmYi00NjM0LTky ZDYtODk0ZGQ1MzhjYWRmLzAvNkY2QTM1MzAxOThBOUI3NjU3QTYzNkZFQ0NGQjM5 RjNCRjcxRkI0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQ+HtMj6ntJzRTBIuRcSzv8ZAaEFA6O/EV3 bygDtmoJuioOaF9qM9pTpvYbaUUMJHkK2bjVWkcridoXujgcgqFlo/aXQUxzA5ya W5mnHdfAVB8p8/ZIO+tnfgQYFonlgC/LQ3tIM1dwxKQWH++wOLriVlzV4YSQmhUP C39z0Pc3WbU8nKGIj7521Wyr75Lfbm+yrip1NAdaBaWbaoTf95ReV/L4gopy0DDE 4XIWvDnRoV4ranVo4guTJDgNCsfSmP/SSll+mm7fOI5H04IKCCsDTq0qLnbszRtr /m6kHQ4A/nDLOvzm/ZV9lG39gfGeTYgTQ4ZNMDuv4e+dySI+JrM= -----END CERTIFICATE-----Generated at Tue Jun 3 23:34:41 2025 by rpki-client