$ rpki-client -vvf repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft File: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft (raw, json) Hash identifier: cWdO7SIklr4VRDOpAOxxeL5M7D0wnGjPZ5M1nSg1FlU= Subject key identifier: 72:4E:EF:97:87:CD:42:57:09:F0:9B:1A:EC:04:11:66:F0:0E:CC:53 Authority key identifier: 6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21 Certificate issuer: /CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121 Certificate serial: 7B0EE2554C3AD51DE223B658B874FE09BF5C7294 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft Manifest number: 04DC Signing time: Wed 04 Jun 2025 03:10:51 +0000 Manifest this update: Wed 04 Jun 2025 03:05:51 +0000 Manifest next update: Sat 07 Jun 2025 12:26:51 +0000 Files and hashes: 1: 3130332e35302e32372e302f32342d3234203d3e203633383639.roa (hash: CMxLGqk+5iIxSLstgSUEPMheQZBFi/aQaQ40AR/6xck=) 2: 3130332e35302e32342e302f32342d3234203d3e203633383639.roa (hash: pjDRNdkxVNQAonOH/ajeQNBbErsBzCB65TjYTm/AV04=) 3: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl (hash: 98NgVf745NrMcnKp+oOIDIlQEbNiGu6XQmHH8Z5AEoU=) 4: 3130332e35302e32352e302f32342d3234203d3e203633383639.roa (hash: JbxABL76MkkqswIqSBjIy3QFwClw0Z/ylcfelmeq75g=) 5: 3130332e35302e32362e302f32342d3234203d3e203633383639.roa (hash: XC5DYejk2ouXNggePM7faKlSdJX+qPYu8hQvOlxyDok=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 12:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:0e:e2:55:4c:3a:d5:1d:e2:23:b6:58:b8:74:fe:09:bf:5c:72:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121 Validity Not Before: Jun 4 03:05:51 2025 GMT Not After : Jun 7 12:26:51 2025 GMT Subject: CN=724EEF9787CD425709F09B1AEC041166F00ECC53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:05:34:36:d7:96:7c:b9:b0:1b:e2:64:da:61: 21:9a:7a:37:f3:4a:54:2c:24:2d:f3:1d:fa:c2:6c: fa:56:ee:1c:11:74:6c:0a:5a:2a:6c:1a:1f:c1:05: 01:ef:a3:a9:68:b4:14:94:8e:0d:a7:4d:b3:90:82: 01:17:45:86:90:f6:65:79:bf:a6:a7:0a:52:72:f0: 05:a3:2e:18:c4:af:59:fb:6f:9b:49:35:f7:d9:ee: 02:a2:6b:7a:7f:79:f7:82:4a:19:d4:e3:e5:24:8f: 23:3e:37:b0:d5:a5:00:3b:41:28:fc:9f:66:c8:4c: 3c:8a:1a:d8:34:2a:65:09:cc:d1:4c:cf:52:44:de: f0:1c:a2:42:90:b4:6a:b0:cf:f5:0d:3e:c1:c1:3e: 84:d8:78:2a:63:cf:fd:c1:4f:97:78:d1:a3:c9:49: 18:07:13:dc:b4:e3:f2:20:73:b1:f1:60:0a:9c:ac: 6b:d1:d2:2c:0f:a1:ed:ae:13:30:67:1b:0e:d1:3b: b1:c5:64:74:c0:27:11:35:76:ce:48:05:ec:04:ff: 31:35:74:c9:9e:a3:73:7e:78:76:6f:b1:e4:48:b1: e1:e6:f8:88:ff:2e:22:37:53:2a:22:35:54:10:c3: 13:50:b5:26:91:ae:aa:30:f0:eb:e2:43:7a:0a:db: 58:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4E:EF:97:87:CD:42:57:09:F0:9B:1A:EC:04:11:66:F0:0E:CC:53 X509v3 Authority Key Identifier: keyid:6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:2b:76:03:88:d3:14:9e:4d:1e:9d:4a:f2:74:93:50:13:d3: e3:e2:ab:9f:a0:4f:14:67:77:15:52:95:67:5f:15:6a:22:92: 14:4c:e5:8e:5b:c7:14:04:2b:a3:75:15:f6:36:df:dc:2a:04: 17:d5:f2:b1:84:3f:1e:15:49:29:83:2a:98:2e:69:c3:e0:dd: 20:79:3d:9f:15:20:c9:38:2a:16:1b:b6:7a:c8:64:c4:ea:8e: bb:fc:24:28:44:93:7a:09:22:59:1c:4a:9b:3f:ee:38:81:9d: 12:94:da:d4:a8:48:1f:00:33:4b:9c:b6:94:92:51:18:fe:00: 58:62:f1:b9:75:11:2a:74:e3:0d:70:76:92:56:9a:cc:23:79: d4:3a:31:09:23:a9:c2:2c:57:a4:34:29:f8:67:fe:8e:71:c4: e1:b8:99:c8:56:6f:79:e9:82:ae:17:23:51:9d:16:dd:70:3b: fe:79:62:63:16:67:35:c4:77:90:83:70:07:17:c8:b7:6a:3f: bf:47:3a:ba:80:9b:bb:6f:34:78:66:1d:04:a1:2c:19:df:00: 27:48:b7:30:7c:80:68:2b:14:75:f7:6b:83:cc:de:42:bc:f7: 24:b7:c8:f8:4a:2e:05:70:e6:05:12:cf:53:4a:33:b5:d3:f2: ae:e3:aa:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUew7iVUw61R3iI7ZYuHT+Cb9ccpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3 MUQyRDEyMTAeFw0yNTA2MDQwMzA1NTFaFw0yNTA2MDcxMjI2NTFaMDMxMTAvBgNV BAMTKDcyNEVFRjk3ODdDRDQyNTcwOUYwOUIxQUVDMDQxMTY2RjAwRUNDNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgBTQ215Z8ubAb4mTaYSGaejfz SlQsJC3zHfrCbPpW7hwRdGwKWipsGh/BBQHvo6lotBSUjg2nTbOQggEXRYaQ9mV5 v6anClJy8AWjLhjEr1n7b5tJNffZ7gKia3p/efeCShnU4+UkjyM+N7DVpQA7QSj8 n2bITDyKGtg0KmUJzNFMz1JE3vAcokKQtGqwz/UNPsHBPoTYeCpjz/3BT5d40aPJ SRgHE9y04/Igc7HxYAqcrGvR0iwPoe2uEzBnGw7RO7HFZHTAJxE1ds5IBewE/zE1 dMmeo3N+eHZvseRIseHm+Ij/LiI3UyoiNVQQwxNQtSaRrqow8OviQ3oK21gFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUck7vl4fNQlcJ8Jsa7AQRZvAOzFMwHwYDVR0j BBgwFoAUbBWXYHoMPqw+MM9I/zG6/XHS0SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzY2ODU0MS1kNmM2LTQwOWUtOGFkMS01ZTg5YTRiMjg1MGUvMC82QzE1OTc2MDdB MEMzRUFDM0UzMENGNDhGRjMxQkFGRDcxRDJEMTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3MUQy RDEyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc2Njg1NDEtZDZjNi00MDllLThh ZDEtNWU4OWE0YjI4NTBlLzAvNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJB RkQ3MUQyRDEyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEArdgOI0xSeTR6dSvJ0k1AT0+Piq5+gTxRn dxVSlWdfFWoikhRM5Y5bxxQEK6N1FfY239wqBBfV8rGEPx4VSSmDKpguacPg3SB5 PZ8VIMk4KhYbtnrIZMTqjrv8JChEk3oJIlkcSps/7jiBnRKU2tSoSB8AM0uctpSS URj+AFhi8bl1ESp04w1wdpJWmswjedQ6MQkjqcIsV6Q0Kfhn/o5xxOG4mchWb3np gq4XI1GdFt1wO/55YmMWZzXEd5CDcAcXyLdqP79HOrqAm7tvNHhmHQShLBnfACdI tzB8gGgrFHX3a4PM3kK89yS3yPhKLgVw5gUSz1NKM7XT8q7jqhE= -----END CERTIFICATE-----Generated at Thu Jun 5 18:13:47 2025 by rpki-client