$ rpki-client -vvf repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft File: 6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft (raw, json) Hash identifier: DyGTv2rwCeQ4X4/42dElGyrCkzGqdzuYgcyITM3DCRg= Subject key identifier: 00:98:AB:51:E4:9C:FA:1A:D6:D7:0E:8F:FF:FE:E9:53:FE:F6:B6:BE Authority key identifier: 6A:9D:C5:66:C8:CB:F1:D7:CE:B1:7F:C9:91:7A:CD:58:2E:5C:0A:95 Certificate issuer: /CN=6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95 Certificate serial: 1C6F8B5CD98C7068303376C55029A6FD15D25247 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft Manifest number: 04DF Signing time: Sun 08 Jun 2025 17:02:04 +0000 Manifest this update: Sun 08 Jun 2025 16:57:04 +0000 Manifest next update: Wed 11 Jun 2025 18:18:04 +0000 Files and hashes: 1: 6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl (hash: HNQ88siKfHayHv2pQIRkzKesQo/y6FziLM/err/pmiY=) 2: 3130332e3130352e3235322e302f32322d3234203d3e20313336383835.roa (hash: 78aRtA03tdL6oV14dW3aN00qRLjvVDFQ6jhLRcjVdxc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 18:18:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:6f:8b:5c:d9:8c:70:68:30:33:76:c5:50:29:a6:fd:15:d2:52:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95 Validity Not Before: Jun 8 16:57:04 2025 GMT Not After : Jun 11 18:18:04 2025 GMT Subject: CN=0098AB51E49CFA1AD6D70E8FFFFEE953FEF6B6BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2c:72:89:5d:76:0c:bb:71:5a:37:0c:33:1b: 71:81:b2:3c:9a:d0:17:1c:e3:f2:a6:cf:af:71:44: ae:a7:3a:09:f6:66:3d:52:9d:21:1e:f9:91:5e:a7: 52:0a:c3:0b:62:16:22:9a:dc:70:ab:41:b9:e7:63: fe:a3:ea:8c:52:04:4b:ee:87:45:d0:79:c6:18:a6: e2:34:3c:6d:99:1e:d4:b5:2e:52:fd:ec:65:69:54: 53:b2:b0:5d:32:64:87:24:dc:cf:6c:10:72:bf:c0: 30:15:0f:f5:6b:1c:a3:15:59:01:d0:20:d5:42:58: b9:87:23:aa:2f:e8:23:e4:23:a7:a5:bb:cc:9b:56: da:6f:1c:92:72:f2:8b:82:6c:53:62:b2:19:b2:09: ac:68:33:4a:68:dd:36:98:94:a6:25:af:0a:5e:3b: 1d:fe:23:3c:05:67:30:62:99:cc:91:39:78:16:05: 57:bb:6b:31:da:64:75:41:90:11:e0:f1:41:5d:d1: bd:98:4d:4e:bf:24:00:8c:5a:dd:cb:e4:a2:94:e6: 9b:0c:61:53:73:70:e9:d0:67:1c:79:9a:5a:f3:1d: 8d:cb:63:2d:3f:bc:92:9e:7f:b2:a9:44:d8:53:bc: bf:e2:dc:27:ae:ed:e9:91:c2:fa:c3:6e:64:31:ed: 2c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:98:AB:51:E4:9C:FA:1A:D6:D7:0E:8F:FF:FE:E9:53:FE:F6:B6:BE X509v3 Authority Key Identifier: keyid:6A:9D:C5:66:C8:CB:F1:D7:CE:B1:7F:C9:91:7A:CD:58:2E:5C:0A:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:e9:de:ce:e6:8b:38:3e:7f:5f:cb:d2:64:05:a2:4c:b1:0e: 3c:bf:58:b8:7f:06:41:74:a0:aa:ee:c5:41:66:93:78:6d:c4: bc:31:7d:d5:dd:1c:8f:32:1e:54:47:0d:18:bf:00:dd:b9:73: 3b:04:bd:80:dd:71:6c:d3:27:aa:39:05:88:df:aa:5e:84:b2: 15:f8:d6:26:c7:04:bc:b2:2e:27:0c:8f:4c:84:a3:24:80:a7: 96:7d:f8:f0:d8:57:62:16:63:96:d3:a6:21:50:dc:be:74:a9: a8:bd:c6:a9:38:d9:7d:84:79:0b:56:c3:a2:e5:27:07:ad:1c: c1:4b:15:c4:96:e0:0e:8b:0c:aa:3e:25:b4:84:1d:34:ff:26: 02:b2:47:8e:17:97:12:48:d7:9d:22:6d:53:bf:76:f5:db:55: 8f:ac:18:31:27:9f:1e:5f:2f:80:53:d6:b5:74:53:ed:96:84: f6:7a:ad:eb:18:d9:d7:ce:34:66:21:38:bc:3f:17:67:b2:0c: cb:57:a4:eb:ca:22:1f:1f:51:3b:58:4e:57:b0:9f:64:6c:08: 17:0a:c8:16:34:b9:02:0e:67:fa:eb:5e:10:65:df:6a:52:bf: 0f:cc:ac:73:23:b8:db:ea:33:29:f7:fa:6d:b3:70:6b:bb:4a: 13:13:45:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHG+LXNmMcGgwM3bFUCmm/RXSUkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE5REM1NjZDOENCRjFEN0NFQjE3RkM5OTE3QUNENTgy RTVDMEE5NTAeFw0yNTA2MDgxNjU3MDRaFw0yNTA2MTExODE4MDRaMDMxMTAvBgNV BAMTKDAwOThBQjUxRTQ5Q0ZBMUFENkQ3MEU4RkZGRkVFOTUzRkVGNkI2QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4LHKJXXYMu3FaNwwzG3GBsjya 0Bcc4/Kmz69xRK6nOgn2Zj1SnSEe+ZFep1IKwwtiFiKa3HCrQbnnY/6j6oxSBEvu h0XQecYYpuI0PG2ZHtS1LlL97GVpVFOysF0yZIck3M9sEHK/wDAVD/VrHKMVWQHQ INVCWLmHI6ov6CPkI6elu8ybVtpvHJJy8ouCbFNishmyCaxoM0po3TaYlKYlrwpe Ox3+IzwFZzBimcyROXgWBVe7azHaZHVBkBHg8UFd0b2YTU6/JACMWt3L5KKU5psM YVNzcOnQZxx5mlrzHY3LYy0/vJKef7KpRNhTvL/i3Ceu7emRwvrDbmQx7SyDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAJirUeSc+hrW1w6P//7pU/72tr4wHwYDVR0j BBgwFoAUap3FZsjL8dfOsX/JkXrNWC5cCpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTZhYTU0Zi03MTU4LTQzYWYtYjMzNi1iZTQ3MTQ4MTZmYWQvMC82QTlEQzU2NkM4 Q0JGMUQ3Q0VCMTdGQzk5MTdBQ0Q1ODJFNUMwQTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE5REM1NjZDOENCRjFEN0NFQjE3RkM5OTE3QUNENTgyRTVD MEE5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE2YWE1NGYtNzE1OC00M2FmLWIz MzYtYmU0NzE0ODE2ZmFkLzAvNkE5REM1NjZDOENCRjFEN0NFQjE3RkM5OTE3QUNE NTgyRTVDMEE5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDp3s7mizg+f1/L0mQFokyxDjy/WLh/BkF0 oKruxUFmk3htxLwxfdXdHI8yHlRHDRi/AN25czsEvYDdcWzTJ6o5BYjfql6EshX4 1ibHBLyyLicMj0yEoySAp5Z9+PDYV2IWY5bTpiFQ3L50qai9xqk42X2EeQtWw6Ll JwetHMFLFcSW4A6LDKo+JbSEHTT/JgKyR44XlxJI150ibVO/dvXbVY+sGDEnnx5f L4BT1rV0U+2WhPZ6resY2dfONGYhOLw/F2eyDMtXpOvKIh8fUTtYTlewn2RsCBcK yBY0uQIOZ/rrXhBl32pSvw/MrHMjuNvqMyn3+m2zcGu7ShMTRd0= -----END CERTIFICATE-----Generated at Mon Jun 9 13:24:36 2025 by rpki-client