$ rpki-client -vvf repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft File: 6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft (raw, json) Hash identifier: 2Dsug8MkRZoH4dE66T+OzWoh7E0R5OvP3iitc9+XnVs= Subject key identifier: 9B:F1:18:83:5F:AE:D8:1C:5D:26:F7:5B:E0:F5:55:FE:AA:CB:38:44 Authority key identifier: 6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 Certificate issuer: /CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Certificate serial: 77B086303B332DC51D057539F631D38B134F4244 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft Manifest number: 0331 Signing time: Tue 03 Jun 2025 06:21:41 +0000 Manifest this update: Tue 03 Jun 2025 06:16:41 +0000 Manifest next update: Fri 06 Jun 2025 10:15:41 +0000 Files and hashes: 1: 3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa (hash: QReThr3L/8y8L/3AEdob8H7epOdOKEjss3T3HzyvfMI=) 2: 6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl (hash: oYo7A5AwE78fzrztvyEX66o8qYHnDpeqcLNsuJ84+kU=) 3: 3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa (hash: G1U9gODI47ty2yrLIvmBDS+xG1WkgDbqidFt5qR0lew=) 4: 3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa (hash: lkrHej4FZPJ4f2E40DosArf8hhkwpkjiPyYFXEzD3uU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 10:15:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:b0:86:30:3b:33:2d:c5:1d:05:75:39:f6:31:d3:8b:13:4f:42:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Validity Not Before: Jun 3 06:16:41 2025 GMT Not After : Jun 6 10:15:41 2025 GMT Subject: CN=9BF118835FAED81C5D26F75BE0F555FEAACB3844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:12:2c:e6:d1:cc:6d:3e:16:6c:96:71:f4:50: 1c:dc:04:ba:a7:16:20:1c:6d:59:1c:23:b5:60:aa: 9d:ab:59:19:35:bb:64:ee:ab:c8:15:36:ae:25:70: 02:7a:00:7f:7a:54:8f:b2:b1:1c:16:4c:85:fe:56: 07:03:e0:85:94:40:e2:41:db:58:87:c8:c8:4d:2a: 90:02:0f:9c:35:fa:3f:b6:05:5e:ed:b3:98:b1:11: 61:f3:79:04:61:fe:00:fe:31:b7:04:41:7a:dd:25: 82:56:68:69:e0:5d:bf:97:07:df:7b:e7:70:3a:f3: 9d:a9:10:eb:42:20:92:20:a9:9a:5f:e2:43:ba:e5: 8f:52:2e:5f:be:41:57:f1:7d:48:db:48:17:2b:ea: 13:62:35:72:69:12:e1:ba:bc:e9:0f:79:df:18:98: 7b:34:5b:16:74:a2:63:a1:96:81:74:f7:aa:8f:5e: eb:a7:27:1f:58:74:63:fe:9e:63:28:aa:25:0b:d8: c7:aa:63:63:9e:4b:56:ef:fc:4f:e4:70:ca:f9:78: 31:d3:e4:b2:e4:24:cf:51:7d:af:21:7f:0d:49:80: 9e:ea:db:9e:b0:f7:92:b5:1e:f0:f8:3a:d7:65:db: 6a:22:2b:b5:d2:f0:e5:9f:48:9f:a7:33:ba:e1:f8: d0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F1:18:83:5F:AE:D8:1C:5D:26:F7:5B:E0:F5:55:FE:AA:CB:38:44 X509v3 Authority Key Identifier: keyid:6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:4b:05:79:2a:c1:91:4d:39:2e:ef:a9:71:b2:05:ee:5c:b1: 27:f9:22:fa:70:2d:7c:0b:44:4b:fd:67:be:39:5a:2c:d2:fc: 2e:e5:e1:1a:c7:98:30:51:76:02:bb:bd:1f:f1:34:09:a4:8e: 54:a9:b7:4e:0b:20:7c:75:ad:a2:40:bf:52:22:48:ec:21:0a: 4c:af:ea:36:16:99:5f:0c:4c:1c:57:bb:2d:6b:e2:95:89:78: d8:f4:03:c1:b7:d4:56:bd:dc:5f:b3:fe:ed:7f:31:6f:2c:28: 69:8e:e4:bf:ad:de:39:5c:11:94:06:16:ac:2f:fa:9a:ab:f5: fd:0c:88:b2:a7:46:73:08:47:76:4a:7c:2d:77:8d:27:da:68: 9e:1a:bf:29:e0:73:f7:c1:1c:30:5a:da:38:3b:81:bc:11:4a: 90:fe:34:69:7f:fa:be:a4:18:41:ce:c4:33:67:97:96:eb:87: 67:8e:2d:b7:32:27:b7:eb:a8:3d:35:86:a6:fe:1b:10:6b:10: 7d:b5:94:37:63:94:1d:db:3b:a0:b5:f4:56:09:2d:4e:b2:21: 81:d2:d5:3d:81:be:f6:33:95:5f:4f:f6:5d:91:22:ff:4e:fd: e6:6f:d5:fa:d6:3e:1f:a1:18:0b:2c:b9:ee:50:15:59:3d:c8: 64:b0:bd:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd7CGMDszLcUdBXU59jHTixNPQkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlD MEYyRTNGNzAeFw0yNTA2MDMwNjE2NDFaFw0yNTA2MDYxMDE1NDFaMDMxMTAvBgNV BAMTKDlCRjExODgzNUZBRUQ4MUM1RDI2Rjc1QkUwRjU1NUZFQUFDQjM4NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoEizm0cxtPhZslnH0UBzcBLqn FiAcbVkcI7Vgqp2rWRk1u2Tuq8gVNq4lcAJ6AH96VI+ysRwWTIX+VgcD4IWUQOJB 21iHyMhNKpACD5w1+j+2BV7ts5ixEWHzeQRh/gD+MbcEQXrdJYJWaGngXb+XB997 53A6852pEOtCIJIgqZpf4kO65Y9SLl++QVfxfUjbSBcr6hNiNXJpEuG6vOkPed8Y mHs0WxZ0omOhloF096qPXuunJx9YdGP+nmMoqiUL2MeqY2OeS1bv/E/kcMr5eDHT 5LLkJM9Rfa8hfw1JgJ7q256w95K1HvD4Otdl22oiK7XS8OWfSJ+nM7rh+NC/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm/EYg1+u2BxdJvdb4PVV/qrLOEQwHwYDVR0j BBgwFoAUagLcEPQfzg60l5jdvPMfycDy4/cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTQ2YmRhZC1mMTMwLTQ4YTktODUzNC01NGJhM2U4ZWQ2MWYvMC82QTAyREMxMEY0 MUZDRTBFQjQ5Nzk4RERCQ0YzMUZDOUMwRjJFM0Y3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlDMEYy RTNGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE0NmJkYWQtZjEzMC00OGE5LTg1 MzQtNTRiYTNlOGVkNjFmLzAvNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFG QzlDMEYyRTNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVLBXkqwZFNOS7vqXGyBe5csSf5IvpwLXwL REv9Z745WizS/C7l4RrHmDBRdgK7vR/xNAmkjlSpt04LIHx1raJAv1IiSOwhCkyv 6jYWmV8MTBxXuy1r4pWJeNj0A8G31Fa93F+z/u1/MW8sKGmO5L+t3jlcEZQGFqwv +pqr9f0MiLKnRnMIR3ZKfC13jSfaaJ4avyngc/fBHDBa2jg7gbwRSpD+NGl/+r6k GEHOxDNnl5brh2eOLbcyJ7frqD01hqb+GxBrEH21lDdjlB3bO6C19FYJLU6yIYHS 1T2BvvYzlV9P9l2RIv9O/eZv1frWPh+hGAssue5QFVk9yGSwva0= -----END CERTIFICATE-----Generated at Tue Jun 3 23:38:45 2025 by rpki-client