$ rpki-client -vvf repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft File: 6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft (raw, json) Hash identifier: PNRMMgLwt8mmEn4eJJVJU40ojhhSQk6cErvvGCuAgzE= Subject key identifier: 39:79:56:FA:D1:72:BA:A1:66:68:66:6E:68:CA:4E:8D:4E:1A:BE:38 Authority key identifier: 6A:9D:C5:66:C8:CB:F1:D7:CE:B1:7F:C9:91:7A:CD:58:2E:5C:0A:95 Certificate issuer: /CN=6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95 Certificate serial: 65D8EFD61FB915E50B7004B607283F00D73B83B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft Manifest number: 04E0 Signing time: Tue 10 Jun 2025 18:22:04 +0000 Manifest this update: Tue 10 Jun 2025 18:17:04 +0000 Manifest next update: Sat 14 Jun 2025 05:37:04 +0000 Files and hashes: 1: 3130332e3130352e3235322e302f32322d3234203d3e20313336383835.roa (hash: 78aRtA03tdL6oV14dW3aN00qRLjvVDFQ6jhLRcjVdxc=) 2: 6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl (hash: rLlp90jo05ctGngAmBjVl262QG313SkKCDBBCVpVqGY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 05:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:d8:ef:d6:1f:b9:15:e5:0b:70:04:b6:07:28:3f:00:d7:3b:83:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95 Validity Not Before: Jun 10 18:17:04 2025 GMT Not After : Jun 14 05:37:04 2025 GMT Subject: CN=397956FAD172BAA16668666E68CA4E8D4E1ABE38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:78:5c:db:d4:1d:1a:66:85:36:4f:5e:aa:3a: 76:b1:33:05:b7:d0:f6:eb:c9:be:0a:2a:eb:b9:6c: 8d:0a:c0:6d:6b:90:9a:38:ea:2a:c3:4c:b1:e5:4d: 4b:f7:d3:b2:67:12:21:cd:f8:d6:0a:48:6b:1a:47: 24:ba:2d:b2:c6:5c:5f:9b:0c:15:a0:a3:ee:d2:bd: 0e:4e:cd:22:74:17:2c:45:b8:6b:6e:5b:57:53:39: e7:5f:0b:e5:8f:83:29:82:31:9c:a0:1f:46:c2:b2: eb:26:d9:db:6e:72:3a:37:7e:47:f0:1a:9d:a1:f3: 36:7e:22:57:a9:4c:4b:ce:a2:fc:63:10:60:64:cf: 34:97:70:32:a5:63:6f:67:b2:12:c6:fe:19:22:67: 45:98:ac:fa:26:41:65:f9:ef:70:df:b2:fc:69:f6: 68:5b:a6:00:5d:5a:d9:9c:17:d4:17:b8:09:aa:d5: 87:b8:81:dc:03:c6:78:51:66:7e:62:94:76:54:68: ad:1e:98:1f:c8:39:d6:fb:7f:5c:c0:24:90:c4:16: 50:d5:d8:1b:d2:28:7d:df:c5:49:e1:00:3b:ec:cf: d7:cc:fd:ad:a4:c4:53:b9:5f:f3:9c:dd:24:69:8f: 17:9e:86:78:c3:db:f8:ca:b8:33:6c:4e:a4:3e:2b: 81:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:79:56:FA:D1:72:BA:A1:66:68:66:6E:68:CA:4E:8D:4E:1A:BE:38 X509v3 Authority Key Identifier: keyid:6A:9D:C5:66:C8:CB:F1:D7:CE:B1:7F:C9:91:7A:CD:58:2E:5C:0A:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:95:46:91:0b:4a:a9:5a:d9:61:5d:e3:73:be:1c:e5:f4:16: 3d:36:78:0c:70:32:5c:80:13:90:7b:5f:c9:e0:db:70:8a:9e: 68:1c:a1:c3:00:69:b7:d3:6b:f0:bf:2e:c7:47:57:e9:3f:44: 2c:2c:7f:9d:5c:3e:91:35:f7:9e:e3:3f:b3:de:f4:6f:1e:12: 73:0e:00:1e:c1:00:5f:d9:06:95:0f:2c:87:81:dc:0b:43:f1: ed:c9:f9:28:0f:7b:5f:0d:25:68:ff:66:6f:b8:4b:32:83:b7: 35:b8:79:35:a6:f6:88:c1:85:66:ca:6d:af:42:35:5f:4e:9f: 82:15:aa:d0:c3:92:8f:2b:a0:f9:76:57:4e:41:e9:e7:54:fb: ac:4f:db:02:be:4d:60:c3:b4:6d:ee:5f:9b:71:b8:e2:41:d2: 2c:f0:95:1c:e5:26:98:7a:4a:19:5e:aa:6c:38:59:7a:7b:3f: 98:3c:05:85:c4:0a:92:12:81:19:ea:63:19:34:08:14:2f:e5: 67:b5:b5:a9:bd:5c:07:54:f1:78:7e:89:b2:ee:2c:8c:7b:20: aa:36:3f:ec:ea:8f:9b:86:82:f7:f6:dd:7d:d7:58:66:5e:fd: 42:1e:1d:76:ae:f2:67:a7:91:a3:ae:6e:d1:2d:63:ae:25:6a: cf:77:cb:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZdjv1h+5FeULcAS2Byg/ANc7g7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE5REM1NjZDOENCRjFEN0NFQjE3RkM5OTE3QUNENTgy RTVDMEE5NTAeFw0yNTA2MTAxODE3MDRaFw0yNTA2MTQwNTM3MDRaMDMxMTAvBgNV BAMTKDM5Nzk1NkZBRDE3MkJBQTE2NjY4NjY2RTY4Q0E0RThENEUxQUJFMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCueFzb1B0aZoU2T16qOnaxMwW3 0Pbryb4KKuu5bI0KwG1rkJo46irDTLHlTUv307JnEiHN+NYKSGsaRyS6LbLGXF+b DBWgo+7SvQ5OzSJ0FyxFuGtuW1dTOedfC+WPgymCMZygH0bCsusm2dtucjo3fkfw Gp2h8zZ+IlepTEvOovxjEGBkzzSXcDKlY29nshLG/hkiZ0WYrPomQWX573Dfsvxp 9mhbpgBdWtmcF9QXuAmq1Ye4gdwDxnhRZn5ilHZUaK0emB/IOdb7f1zAJJDEFlDV 2BvSKH3fxUnhADvsz9fM/a2kxFO5X/Oc3SRpjxeehnjD2/jKuDNsTqQ+K4GBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOXlW+tFyuqFmaGZuaMpOjU4avjgwHwYDVR0j BBgwFoAUap3FZsjL8dfOsX/JkXrNWC5cCpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTZhYTU0Zi03MTU4LTQzYWYtYjMzNi1iZTQ3MTQ4MTZmYWQvMC82QTlEQzU2NkM4 Q0JGMUQ3Q0VCMTdGQzk5MTdBQ0Q1ODJFNUMwQTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE5REM1NjZDOENCRjFEN0NFQjE3RkM5OTE3QUNENTgyRTVD MEE5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE2YWE1NGYtNzE1OC00M2FmLWIz MzYtYmU0NzE0ODE2ZmFkLzAvNkE5REM1NjZDOENCRjFEN0NFQjE3RkM5OTE3QUNE NTgyRTVDMEE5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCVRpELSqla2WFd43O+HOX0Fj02eAxwMlyA E5B7X8ng23CKnmgcocMAabfTa/C/LsdHV+k/RCwsf51cPpE1957jP7Pe9G8eEnMO AB7BAF/ZBpUPLIeB3AtD8e3J+SgPe18NJWj/Zm+4SzKDtzW4eTWm9ojBhWbKba9C NV9On4IVqtDDko8roPl2V05B6edU+6xP2wK+TWDDtG3uX5txuOJB0izwlRzlJph6 Shleqmw4WXp7P5g8BYXECpISgRnqYxk0CBQv5We1tam9XAdU8Xh+ibLuLIx7IKo2 P+zqj5uGgvf23X3XWGZe/UIeHXau8menkaOubtEtY64las93yxI= -----END CERTIFICATE-----Generated at Wed Jun 11 10:05:19 2025 by rpki-client