$ rpki-client -vvf repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft File: 6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft (raw, json) Hash identifier: QkyWfHpiUDpK3Rb6FbSp3wUKj59RcRT2VAhNkhkvW0M= Subject key identifier: A5:A3:C2:14:A6:56:AF:13:C3:8A:46:BB:56:19:10:24:1D:9B:27:D1 Authority key identifier: 6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB Certificate issuer: /CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB Certificate serial: 0294D3ED1585AD54CDBE8AD6CC4F5232D41F7FE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft Manifest number: 03A9 Signing time: Tue 03 Jun 2025 08:24:06 +0000 Manifest this update: Tue 03 Jun 2025 08:19:06 +0000 Manifest next update: Fri 06 Jun 2025 18:31:06 +0000 Files and hashes: 1: 3130332e31362e37392e302f32342d3234203d3e20313331373835.roa (hash: dq2C0qn2bszea5JrNdqQBrs3uxaP2+6us75MTw8i5Kc=) 2: 6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl (hash: 9Z7CXO6MxuDY7tjjDEkBZcAI3y52yBwIgfsk4Dl/gT8=) 3: 3130332e3232362e35352e302f32342d3234203d3e20313331373835.roa (hash: w25Hdja8cVcMSMfXbCo6MIHOJSikdvlBUIB8EBkQuqs=) 4: 3130332e3131362e3130382e302f32342d3234203d3e20313331373835.roa (hash: LY7WT+w7FguQLmfrSOP0mKv6BUNq2KCw3SGoAGK1WaA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:31:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:94:d3:ed:15:85:ad:54:cd:be:8a:d6:cc:4f:52:32:d4:1f:7f:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB Validity Not Before: Jun 3 08:19:06 2025 GMT Not After : Jun 6 18:31:06 2025 GMT Subject: CN=A5A3C214A656AF13C38A46BB561910241D9B27D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0e:bb:6d:18:3a:73:d7:eb:e9:1d:81:ec:b8: b5:d6:16:4a:a1:e0:b1:d7:3a:c4:7a:70:5e:1b:b4: 73:ea:ac:7b:10:e5:5d:85:22:76:3e:66:fb:e0:b0: 5e:f9:c1:95:14:dd:41:f6:59:34:88:c4:b8:bd:b4: 85:82:cc:fe:2f:6f:b7:2e:ff:8b:16:43:d6:19:df: 83:11:bf:68:2b:30:48:78:c0:9e:49:cd:97:e0:d0: d9:d1:49:2e:e5:db:10:7a:04:f4:0f:23:3f:61:0f: 99:61:d1:ae:24:45:88:59:0e:b8:a1:cb:31:c6:64: ea:e4:10:44:ee:d1:35:2c:35:3d:25:7d:99:29:51: a3:3e:89:03:a5:79:b7:e8:52:d9:44:c3:a6:aa:47: 25:68:20:73:95:8a:c9:d6:ec:35:da:76:65:1d:a9: e1:17:18:ab:f7:d6:db:9e:91:b1:39:bf:2d:3e:38: f9:99:ee:b9:69:24:31:cc:06:e0:54:42:a3:1f:ad: 42:d7:9d:ee:00:ea:cd:1b:d0:5a:7e:40:be:ad:9a: 21:dd:0b:65:a9:97:39:fe:94:39:15:c7:1c:82:e6: d8:b2:06:78:00:29:8d:d2:d8:27:96:f5:e7:68:fe: d4:f3:2a:05:45:59:66:96:c9:48:8e:30:3d:c6:2f: 32:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A3:C2:14:A6:56:AF:13:C3:8A:46:BB:56:19:10:24:1D:9B:27:D1 X509v3 Authority Key Identifier: keyid:6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:3f:5f:2b:ae:2c:ba:52:7f:18:29:d3:b0:b8:25:5e:bc:fa: ba:43:cc:ae:0f:7c:50:e2:e0:a3:95:b2:7d:23:62:cd:24:33: ba:ec:9c:63:b1:74:ab:86:d3:51:f7:03:f9:77:61:ee:67:73: f4:5a:c3:fa:d6:97:16:bb:4b:cf:5e:a9:79:86:6a:3f:76:0e: ec:a6:88:fd:da:97:d7:f1:df:2c:c2:29:bc:33:41:4f:ec:71: 1c:5e:ab:0f:3e:f1:a9:9e:12:5a:32:79:88:c9:98:3f:ac:93: ce:c7:85:c5:b5:33:bc:08:dc:d8:da:dd:54:3f:ec:f4:85:06: 2e:01:1c:58:e0:94:0b:6e:88:dc:ed:08:5a:a4:c6:9a:16:dc: 0d:d9:b6:43:49:f7:95:8d:6e:b6:4c:18:24:b3:9a:e7:2a:ef: bf:1f:66:95:78:bf:4a:e9:60:64:dd:a7:5d:bc:78:4c:e7:a4: 1e:13:bc:cd:02:7b:ef:f4:b1:39:e9:57:2d:78:93:a5:cf:82: d3:3e:cb:ca:e6:33:91:77:c1:dd:75:a8:85:d7:8b:84:77:e0: 16:87:50:cf:84:11:89:67:d8:ed:5b:66:04:50:7b:ab:38:14: 15:d0:7e:db:eb:cc:b7:07:0a:89:87:6f:24:dc:6d:a3:03:d0: a5:19:a0:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUApTT7RWFrVTNvorWzE9SMtQff+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhGN0M1 OEFDQThBQjAeFw0yNTA2MDMwODE5MDZaFw0yNTA2MDYxODMxMDZaMDMxMTAvBgNV BAMTKEE1QTNDMjE0QTY1NkFGMTNDMzhBNDZCQjU2MTkxMDI0MUQ5QjI3RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7DrttGDpz1+vpHYHsuLXWFkqh 4LHXOsR6cF4btHPqrHsQ5V2FInY+ZvvgsF75wZUU3UH2WTSIxLi9tIWCzP4vb7cu /4sWQ9YZ34MRv2grMEh4wJ5JzZfg0NnRSS7l2xB6BPQPIz9hD5lh0a4kRYhZDrih yzHGZOrkEETu0TUsNT0lfZkpUaM+iQOlebfoUtlEw6aqRyVoIHOVisnW7DXadmUd qeEXGKv31tuekbE5vy0+OPmZ7rlpJDHMBuBUQqMfrULXne4A6s0b0Fp+QL6tmiHd C2Wplzn+lDkVxxyC5tiyBngAKY3S2CeW9edo/tTzKgVFWWaWyUiOMD3GLzKlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpaPCFKZWrxPDika7VhkQJB2bJ9EwHwYDVR0j BBgwFoAUbUsXSN5S3OOXuGh3LhKPfFisqKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDIwNzUyMy1kNWY1LTRhY2MtYjBhYy1iZmIwOTU0ZmE0ZTAvMC82RDRCMTc0OERF NTJEQ0UzOTdCODY4NzcyRTEyOEY3QzU4QUNBOEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhGN0M1OEFD QThBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQyMDc1MjMtZDVmNS00YWNjLWIw YWMtYmZiMDk1NGZhNGUwLzAvNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhG N0M1OEFDQThBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKg/XyuuLLpSfxgp07C4JV68+rpDzK4PfFDi 4KOVsn0jYs0kM7rsnGOxdKuG01H3A/l3Ye5nc/Raw/rWlxa7S89eqXmGaj92Duym iP3al9fx3yzCKbwzQU/scRxeqw8+8ameEloyeYjJmD+sk87HhcW1M7wI3Nja3VQ/ 7PSFBi4BHFjglAtuiNztCFqkxpoW3A3ZtkNJ95WNbrZMGCSzmucq778fZpV4v0rp YGTdp128eEznpB4TvM0Ce+/0sTnpVy14k6XPgtM+y8rmM5F3wd11qIXXi4R34BaH UM+EEYln2O1bZgRQe6s4FBXQftvrzLcHComHbyTcbaMD0KUZoCY= -----END CERTIFICATE-----Generated at Tue Jun 3 23:45:32 2025 by rpki-client