$ rpki-client -vvf repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft File: 6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft (raw, json) Hash identifier: rgazBWZ0MaTjawcpEM77UEghmWGLoSfPbOfkY1gZpMc= Subject key identifier: 34:13:F7:64:FD:2D:35:7E:E2:9F:FC:E8:78:1B:6A:6B:BD:F5:09:48 Authority key identifier: 6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92 Certificate issuer: /CN=6A200D6FC5434DAD6106CEE5439CA1270DDCBC92 Certificate serial: 32ADFC7F30A3B3790FC94ED2CFFE654465CFBFD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft Manifest number: 7D Signing time: Wed 04 Jun 2025 12:31:06 +0000 Manifest this update: Wed 04 Jun 2025 12:26:06 +0000 Manifest next update: Sat 07 Jun 2025 18:41:06 +0000 Files and hashes: 1: 6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl (hash: mC7w9rABBs+0ipnuPd23yai+JP+GcHl9TnaM0AwBfN4=) 2: 3130332e3130332e3138302e302f32332d3234203d3e20313336383437.roa (hash: z7JSBWPGJlOn/ZqqGa8az/lIZkw26RQslHPZ9GMpJ4M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:41:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ad:fc:7f:30:a3:b3:79:0f:c9:4e:d2:cf:fe:65:44:65:cf:bf:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A200D6FC5434DAD6106CEE5439CA1270DDCBC92 Validity Not Before: Jun 4 12:26:06 2025 GMT Not After : Jun 7 18:41:06 2025 GMT Subject: CN=3413F764FD2D357EE29FFCE8781B6A6BBDF50948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:00:9e:4d:a1:8b:2c:79:5a:91:c3:15:68:b6: d5:0e:22:05:5a:90:f1:85:97:34:ab:1f:f5:66:c5: f6:f8:f0:ca:0b:70:c2:62:37:6b:ad:08:78:0b:b1: e0:38:ad:9e:ea:85:4f:43:2a:ca:c0:d9:0c:12:f4: 74:52:f2:08:54:41:08:23:45:b0:2d:10:ad:fb:cb: d8:a6:45:ac:f2:b8:71:cf:5b:97:e3:3e:6e:65:9b: 28:03:d2:57:bf:7e:d6:58:45:64:2c:c8:71:d2:59: ed:ea:0b:87:f0:f9:e2:36:37:52:7e:45:7f:e2:e1: cc:a7:cb:e3:c5:da:a3:ac:8a:7c:61:46:8f:93:36: 20:fb:51:73:23:36:ea:06:40:4f:c8:82:54:a6:42: 7e:65:37:22:72:9b:33:1b:22:fb:66:7d:12:2b:95: 01:da:bd:5e:46:31:55:e6:27:1e:20:8f:c4:9b:08: b3:41:00:92:64:1d:ac:4c:b6:17:b8:a4:6f:94:f3: b5:07:55:99:ce:20:89:a4:43:95:c5:19:54:72:99: b4:36:7f:96:d8:e1:cd:04:e5:f9:ec:a0:54:5a:34: eb:cd:31:f2:11:b3:fe:70:39:2d:e7:6a:f9:cd:2d: ae:a2:41:e9:24:39:12:e6:dd:ef:00:b4:94:ec:eb: 27:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:13:F7:64:FD:2D:35:7E:E2:9F:FC:E8:78:1B:6A:6B:BD:F5:09:48 X509v3 Authority Key Identifier: keyid:6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:76:a8:9a:d2:57:0e:85:0e:c1:e8:dc:ad:ac:ee:c5:d2:9f: 3a:28:62:3a:79:a5:e4:e3:74:e2:77:6a:ae:31:5b:a4:41:c5: 48:3c:9c:f7:ab:32:40:f0:fc:30:e2:d2:6d:83:8a:37:34:5b: 1c:5b:d6:2e:30:11:b1:ac:90:46:83:88:7a:c0:83:47:71:ed: f8:68:31:36:d9:dd:ad:6e:18:27:27:c5:71:0c:3f:1b:63:df: 5b:4c:67:79:43:70:df:5b:d8:a3:b1:dc:ae:87:82:cf:24:ed: 30:3c:b1:15:fd:d6:6d:dc:a3:89:77:08:e7:e5:76:fd:19:4c: 58:04:48:8e:45:bc:b0:62:dc:d7:3c:a6:36:2a:7f:3b:32:b2: a5:e0:83:23:4f:45:b3:a9:d3:ea:ea:b2:a4:f5:bb:c3:89:f0: 8c:fe:ab:bd:58:79:73:e6:f5:4f:36:89:e1:43:2c:7a:dc:c2: f9:2b:87:e9:61:47:e3:2f:38:ca:3d:46:85:66:7d:8c:dc:e4: a0:63:53:37:e5:6e:fd:8a:ed:47:bd:0e:ba:62:7d:58:30:53: a3:25:fc:18:b5:22:0e:38:db:b2:5b:e0:cd:c2:be:70:36:1f: 19:ab:81:57:08:6b:8d:49:b2:b3:99:6c:2b:67:75:d1:cd:d4: 33:e0:1d:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMq38fzCjs3kPyU7Sz/5lRGXPv9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0ExMjcw RERDQkM5MjAeFw0yNTA2MDQxMjI2MDZaFw0yNTA2MDcxODQxMDZaMDMxMTAvBgNV BAMTKDM0MTNGNzY0RkQyRDM1N0VFMjlGRkNFODc4MUI2QTZCQkRGNTA5NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcAJ5NoYsseVqRwxVottUOIgVa kPGFlzSrH/Vmxfb48MoLcMJiN2utCHgLseA4rZ7qhU9DKsrA2QwS9HRS8ghUQQgj RbAtEK37y9imRazyuHHPW5fjPm5lmygD0le/ftZYRWQsyHHSWe3qC4fw+eI2N1J+ RX/i4cyny+PF2qOsinxhRo+TNiD7UXMjNuoGQE/IglSmQn5lNyJymzMbIvtmfRIr lQHavV5GMVXmJx4gj8SbCLNBAJJkHaxMthe4pG+U87UHVZnOIImkQ5XFGVRymbQ2 f5bY4c0E5fnsoFRaNOvNMfIRs/5wOS3navnNLa6iQekkORLm3e8AtJTs6yejAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNBP3ZP0tNX7in/zoeBtqa731CUgwHwYDVR0j BBgwFoAUaiANb8VDTa1hBs7lQ5yhJw3cvJIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGQwZmNhOC01YzJkLTRlMzUtYmQ3ZC1iNDQ4YWE3NWYyYmUvMC82QTIwMEQ2RkM1 NDM0REFENjEwNkNFRTU0MzlDQTEyNzBERENCQzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0ExMjcwRERD QkM5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhkMGZjYTgtNWMyZC00ZTM1LWJk N2QtYjQ0OGFhNzVmMmJlLzAvNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0Ex MjcwRERDQkM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALR2qJrSVw6FDsHo3K2s7sXSnzooYjp5peTj dOJ3aq4xW6RBxUg8nPerMkDw/DDi0m2Dijc0Wxxb1i4wEbGskEaDiHrAg0dx7fho MTbZ3a1uGCcnxXEMPxtj31tMZ3lDcN9b2KOx3K6Hgs8k7TA8sRX91m3co4l3COfl dv0ZTFgESI5FvLBi3Nc8pjYqfzsysqXggyNPRbOp0+rqsqT1u8OJ8Iz+q71YeXPm 9U82ieFDLHrcwvkrh+lhR+MvOMo9RoVmfYzc5KBjUzflbv2K7Ue9DrpifVgwU6Ml /Bi1Ig4427Jb4M3CvnA2HxmrgVcIa41JsrOZbCtnddHN1DPgHSk= -----END CERTIFICATE-----Generated at Thu Jun 5 18:20:18 2025 by rpki-client