$ rpki-client -vvf repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft File: D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft (raw, json) Hash identifier: Bn1Fc4Xek3ukXYVMCHo4W0h2auuYI3nZXAS/LrVHibE= Subject key identifier: 96:DF:60:56:85:74:08:FB:6B:1A:96:39:1A:37:CC:33:96:42:2B:BE Authority key identifier: D6:9B:38:7E:6B:9C:AF:1B:D2:6B:28:6A:94:8D:5A:77:FB:85:F8:0A Certificate issuer: /CN=D69B387E6B9CAF1BD26B286A948D5A77FB85F80A Certificate serial: 3C107179E9498CAD2BCC208DDCE5BC2AEFFCAB18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft Manifest number: 6B Signing time: Sat 07 Jun 2025 22:52:12 +0000 Manifest this update: Sat 07 Jun 2025 22:47:12 +0000 Manifest next update: Wed 11 Jun 2025 09:52:12 +0000 Files and hashes: 1: D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl (hash: jAYGbU/E8spTtFB6vpw/27SnJXEnIqWmoEapu85D1kI=) 2: 3130332e36352e3134322e302f32332d3234203d3e20313432333333.roa (hash: ebv5717pdfrOCM6UKJpRU8pwWSSBsU7X9vMbWD9pgi8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:10:71:79:e9:49:8c:ad:2b:cc:20:8d:dc:e5:bc:2a:ef:fc:ab:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D69B387E6B9CAF1BD26B286A948D5A77FB85F80A Validity Not Before: Jun 7 22:47:12 2025 GMT Not After : Jun 11 09:52:12 2025 GMT Subject: CN=96DF6056857408FB6B1A96391A37CC3396422BBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ef:1f:57:51:08:7a:07:24:1e:3f:48:4b:9c: b2:77:77:bd:b5:a4:2e:bd:4e:ad:98:d5:84:8d:f8: 88:e1:22:36:0d:d8:de:23:05:29:f4:ed:70:42:f7: 24:99:12:77:45:da:91:4b:00:92:88:13:63:9c:4f: 69:77:c8:8f:41:19:01:21:bb:f7:44:ae:02:fc:d1: 79:2d:9e:e1:68:66:a1:f4:59:e3:e8:e1:81:fb:46: 5f:66:fd:8c:98:66:4c:f1:79:ed:7e:a7:ef:8d:15: d7:cf:ad:d4:d2:cd:70:44:67:04:50:ee:b4:9a:82: 25:92:de:4b:82:48:d4:c7:db:29:78:00:9b:ca:62: ca:9e:e2:15:0d:df:74:db:f2:17:6b:bc:17:76:16: d8:f2:9a:9f:2c:d3:4a:59:29:26:4d:0e:03:94:61: e2:38:e0:a7:0f:db:f3:0a:bb:f6:e0:2d:c3:17:42: e9:bf:fb:e1:ac:ad:de:f4:0f:e4:73:b4:12:19:24: 6a:e1:c9:11:b3:73:24:2d:4c:ab:18:f0:fc:f9:80: 48:be:d2:b3:b4:3d:d8:4a:0f:c0:57:a3:19:dd:2b: ed:bb:7a:83:71:9a:02:a8:c0:8c:f3:1d:49:fc:ae: cf:74:ae:27:02:a2:22:b5:72:3a:06:57:62:45:2b: 37:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DF:60:56:85:74:08:FB:6B:1A:96:39:1A:37:CC:33:96:42:2B:BE X509v3 Authority Key Identifier: keyid:D6:9B:38:7E:6B:9C:AF:1B:D2:6B:28:6A:94:8D:5A:77:FB:85:F8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:6d:76:09:52:86:77:81:78:73:39:e1:33:3f:02:2e:5b:64: af:58:07:60:85:d0:64:09:e9:b3:7e:6e:bb:d3:25:11:84:7f: b0:b0:a2:fa:01:50:cc:2f:db:3a:db:0b:5a:d2:fa:dd:89:01: 35:04:99:ac:0e:18:14:04:7c:bb:c5:79:d0:4d:55:4f:bb:3c: 97:18:1c:b4:0b:90:85:82:e5:a7:52:7b:18:cc:0f:04:c9:52: e4:a2:b2:7a:bb:6f:02:54:04:98:c8:63:df:84:29:52:1c:ff: 22:64:e2:6a:c9:f1:43:f6:2f:6d:6f:12:cf:bc:b7:e2:34:f9: 0c:cb:7f:d3:bb:9f:32:41:7d:6e:20:c4:4a:c1:6b:0e:17:ed: 74:cf:f5:b5:f0:30:d2:ea:b2:2d:f1:83:39:ad:f0:c7:9c:32: 8b:79:97:e1:28:86:5c:4f:a2:4c:c7:65:15:2d:06:7b:a9:9a: af:9e:96:36:19:3c:fa:71:e4:3e:86:82:0a:1c:7a:68:f2:45: c8:3f:38:53:4a:49:5b:1e:1a:84:2b:6a:aa:9a:1c:4a:af:5a: 40:6c:4e:3d:81:c7:76:4a:6f:cc:f3:6b:a9:32:50:bf:93:79: 72:34:3c:70:19:85:21:b4:7e:91:8c:aa:89:62:1e:dd:66:d0: ea:fc:15:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPBBxeelJjK0rzCCN3OW8Ku/8qxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVBNzdG Qjg1RjgwQTAeFw0yNTA2MDcyMjQ3MTJaFw0yNTA2MTEwOTUyMTJaMDMxMTAvBgNV BAMTKDk2REY2MDU2ODU3NDA4RkI2QjFBOTYzOTFBMzdDQzMzOTY0MjJCQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg7x9XUQh6ByQeP0hLnLJ3d721 pC69Tq2Y1YSN+IjhIjYN2N4jBSn07XBC9ySZEndF2pFLAJKIE2OcT2l3yI9BGQEh u/dErgL80XktnuFoZqH0WePo4YH7Rl9m/YyYZkzxee1+p++NFdfPrdTSzXBEZwRQ 7rSagiWS3kuCSNTH2yl4AJvKYsqe4hUN33Tb8hdrvBd2Ftjymp8s00pZKSZNDgOU YeI44KcP2/MKu/bgLcMXQum/++Gsrd70D+RztBIZJGrhyRGzcyQtTKsY8Pz5gEi+ 0rO0PdhKD8BXoxndK+27eoNxmgKowIzzHUn8rs90ricCoiK1cjoGV2JFKzcZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlt9gVoV0CPtrGpY5GjfMM5ZCK74wHwYDVR0j BBgwFoAU1ps4fmucrxvSayhqlI1ad/uF+AowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM4ZjNhMS1hYzBmLTRmN2MtOWM2Yy02YjI3NTY2ZmU3MGMvMC9ENjlCMzg3RTZC OUNBRjFCRDI2QjI4NkE5NDhENUE3N0ZCODVGODBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVBNzdGQjg1 RjgwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOGYzYTEtYWMwZi00ZjdjLTlj NmMtNmIyNzU2NmZlNzBjLzAvRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVB NzdGQjg1RjgwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJttdglShneBeHM54TM/Ai5bZK9YB2CF0GQJ 6bN+brvTJRGEf7CwovoBUMwv2zrbC1rS+t2JATUEmawOGBQEfLvFedBNVU+7PJcY HLQLkIWC5adSexjMDwTJUuSisnq7bwJUBJjIY9+EKVIc/yJk4mrJ8UP2L21vEs+8 t+I0+QzLf9O7nzJBfW4gxErBaw4X7XTP9bXwMNLqsi3xgzmt8MecMot5l+EohlxP okzHZRUtBnupmq+eljYZPPpx5D6GggocemjyRcg/OFNKSVseGoQraqqaHEqvWkBs Tj2Bx3ZKb8zza6kyUL+TeXI0PHAZhSG0fpGMqoliHt1m0Or8FYg= -----END CERTIFICATE-----Generated at Sun Jun 8 01:54:17 2025 by rpki-client