$ rpki-client -vvf repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft File: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft (raw, json) Hash identifier: QPVTirUmE82ncD7T7xnFib/Kqu9oiTJ1ZTBYxME1YE4= Subject key identifier: 5E:D4:D8:13:71:7E:33:F0:16:09:DD:EB:2D:50:F2:C2:F8:68:41:5B Authority key identifier: 6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA Certificate issuer: /CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Certificate serial: 775C046432B8FA67CBC49B4A83BD3F9E14CA9172 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft Manifest number: 01DE Signing time: Thu 05 Jun 2025 14:50:02 +0000 Manifest this update: Thu 05 Jun 2025 14:45:02 +0000 Manifest next update: Sun 08 Jun 2025 21:29:02 +0000 Files and hashes: 1: 3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa (hash: jcYNuwq5tBbtUM+5LFf+gih2lHYu/silWmdWErgVy5M=) 2: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl (hash: 4jEfa065zHTOed9LKYSqPA0jB8/8OMeTSWmpAbUGVK8=) 3: 3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa (hash: XLXbrSM75a4OOhdIFSVSWGya3QA7TZER3P7tGhI+wW0=) 4: 3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa (hash: R1C6O4ul1Ppozfaiesg+Uhn8MwDAOfzdAmq+sSEet2w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 21:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:5c:04:64:32:b8:fa:67:cb:c4:9b:4a:83:bd:3f:9e:14:ca:91:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Validity Not Before: Jun 5 14:45:02 2025 GMT Not After : Jun 8 21:29:02 2025 GMT Subject: CN=5ED4D813717E33F01609DDEB2D50F2C2F868415B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1f:ac:db:f1:1a:2e:a8:cf:0a:b9:e8:8e:5c: c6:e8:e5:16:0f:45:3a:37:ed:f4:59:0d:93:ba:b0: 6b:f9:9c:48:37:19:c5:81:80:62:aa:19:0b:df:19: e3:cf:70:e6:bd:e5:42:22:0f:1b:18:a5:59:96:5e: 38:73:61:41:b8:cf:a8:32:ac:3b:08:9c:e7:f9:d6: 1a:f6:8b:9c:b4:ea:16:a8:a1:7e:92:c0:55:10:6e: ca:e8:4d:72:1e:11:72:23:c8:f6:a7:4f:93:e4:80: 08:b0:96:2f:3a:ee:5a:78:c7:13:f0:2d:f5:af:cf: 90:70:9b:b5:7a:14:8e:64:18:eb:a5:30:d9:f4:36: 91:dd:4e:47:17:c9:92:79:5c:12:aa:0c:ca:11:f5: 1e:71:f0:8e:68:f2:9a:17:e1:7a:30:ed:03:e1:cb: 4e:49:32:52:50:f0:26:2c:4c:27:0e:da:8a:c5:2a: 40:f1:d8:7c:d2:61:29:76:cc:b3:7c:d8:7b:98:10: 29:84:6a:77:c8:ad:77:07:4b:b9:a2:f2:34:7b:d7: 2f:2d:2f:1c:fd:d6:f7:7b:6e:93:95:58:bd:34:a7: 0d:87:df:bb:0f:3c:0a:c4:ef:4c:7a:e7:93:8f:7b: 54:bb:b9:78:3e:de:9d:39:b6:70:7a:4e:bb:45:ef: 75:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D4:D8:13:71:7E:33:F0:16:09:DD:EB:2D:50:F2:C2:F8:68:41:5B X509v3 Authority Key Identifier: keyid:6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:94:5d:70:40:25:aa:f8:a0:ba:07:da:e0:6d:30:7a:99:63: 5e:0a:47:26:f4:ea:31:05:12:b2:f6:2c:a3:7e:b2:af:d7:2b: b4:62:fb:d3:dd:67:dc:c0:24:e2:82:a4:2b:7f:8c:35:f8:ba: 03:ec:7b:92:26:ee:f7:a5:71:d9:04:c0:53:11:8f:97:45:76: f0:aa:87:1f:14:1c:dd:05:1a:2e:63:ac:ac:77:e2:df:df:fd: a7:40:5d:d1:07:df:5a:2e:31:38:81:e0:83:a2:b2:b3:84:e8: 7b:c6:a4:f4:a1:0b:55:7d:4a:8f:46:b8:13:20:b2:07:7d:74: 87:27:42:16:b0:e2:47:e5:61:ef:c8:74:80:06:15:b1:47:95: f5:d6:46:14:a5:e1:03:73:c9:ae:99:64:2f:98:46:fb:75:01: 1e:f5:6b:df:d4:68:be:7c:12:02:cf:d5:41:1f:cf:a6:c6:91: 68:1f:76:af:01:8d:b6:99:c8:6b:17:bb:17:73:99:45:f8:9d: 48:e4:35:64:7a:8f:cd:f0:6c:e6:b7:bf:2f:6e:11:0f:2a:f2: 07:f3:e6:92:ab:6a:0f:4f:ae:fa:4a:85:cd:43:93:46:a2:11: 52:f8:bf:74:f5:38:78:41:74:e1:2a:47:40:30:25:27:57:71: 6b:05:23:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd1wEZDK4+mfLxJtKg70/nhTKkXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMx REIwOEZEQTAeFw0yNTA2MDUxNDQ1MDJaFw0yNTA2MDgyMTI5MDJaMDMxMTAvBgNV BAMTKDVFRDREODEzNzE3RTMzRjAxNjA5RERFQjJENTBGMkMyRjg2ODQxNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9H6zb8RouqM8KueiOXMbo5RYP RTo37fRZDZO6sGv5nEg3GcWBgGKqGQvfGePPcOa95UIiDxsYpVmWXjhzYUG4z6gy rDsInOf51hr2i5y06haooX6SwFUQbsroTXIeEXIjyPanT5PkgAiwli867lp4xxPw LfWvz5Bwm7V6FI5kGOulMNn0NpHdTkcXyZJ5XBKqDMoR9R5x8I5o8poX4Xow7QPh y05JMlJQ8CYsTCcO2orFKkDx2HzSYSl2zLN82HuYECmEanfIrXcHS7mi8jR71y8t Lxz91vd7bpOVWL00pw2H37sPPArE70x655OPe1S7uXg+3p05tnB6TrtF73VzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXtTYE3F+M/AWCd3rLVDywvhoQVswHwYDVR0j BBgwFoAUb8DJM0D/c1k0NMjv/O2Osx2wj9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjY1OTkwNC0zNzAyLTQ3OTctYmQxYi00NDdhYjhjOTRlMGMvMC82RkMwQzkzMzQw RkY3MzU5MzQzNEM4RUZGQ0VEOEVCMzFEQjA4RkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMxREIw OEZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY2NTk5MDQtMzcwMi00Nzk3LWJk MWItNDQ3YWI4Yzk0ZTBjLzAvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhF QjMxREIwOEZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSUXXBAJar4oLoH2uBtMHqZY14KRyb06jEF ErL2LKN+sq/XK7Ri+9PdZ9zAJOKCpCt/jDX4ugPse5Im7velcdkEwFMRj5dFdvCq hx8UHN0FGi5jrKx34t/f/adAXdEH31ouMTiB4IOisrOE6HvGpPShC1V9So9GuBMg sgd9dIcnQhaw4kflYe/IdIAGFbFHlfXWRhSl4QNzya6ZZC+YRvt1AR71a9/UaL58 EgLP1UEfz6bGkWgfdq8BjbaZyGsXuxdzmUX4nUjkNWR6j83wbOa3vy9uEQ8q8gfz 5pKrag9PrvpKhc1Dk0aiEVL4v3T1OHhBdOEqR0AwJSdXcWsFIy0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:25 2025 by rpki-client