$ rpki-client -vvf repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft File: 6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft (raw, json) Hash identifier: C3Oy+75AflSGZhIORFySSDw7gXBHpRPqEqHGU1EMJJo= Subject key identifier: F6:78:E6:D0:F9:A1:0E:30:8E:FF:C0:41:5D:41:32:0C:9F:D9:3E:92 Authority key identifier: 6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 Certificate issuer: /CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53 Certificate serial: 06D86F9D9D98D84FEA21A7FA7F4E704549FB6A8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer Subject info access: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft Manifest number: 4E Signing time: Wed 04 Jun 2025 19:42:23 +0000 Manifest this update: Wed 04 Jun 2025 19:37:23 +0000 Manifest next update: Sun 08 Jun 2025 05:00:23 +0000 Files and hashes: 1: 3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa (hash: b3FwlMsLVeDm7arhAC1MOxAg/+Ixy8Gs1MmwDRmmqco=) 2: 3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa (hash: 4xFtj009j2KyXApXnh4MToBnYNS6TXxPJe0g07ZPzfw=) 3: 3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa (hash: R+IkOnhEEkrZOxf8Y3xufcx4Q4z9+2sI/l2mQF5vKrU=) 4: 3130332e3133362e31322e302f32342d3234203d3e20313338383231.roa (hash: Lk7MgzxdNvFWTQC60iPK0vpuf42JvMwfykIHdcb6dFo=) 5: 6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl (hash: zLQgrYaePexnjRW620Qf7oHlDpUfLMRFZs8seHqfGag=) 6: 3130332e3133362e31322e302f32322d3234203d3e20313338383231.roa (hash: Cb5AEtlH1NnuqmCvEw1t1v8nRYfGeJ7DwpY/kiNXrBE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 05:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:d8:6f:9d:9d:98:d8:4f:ea:21:a7:fa:7f:4e:70:45:49:fb:6a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53 Validity Not Before: Jun 4 19:37:23 2025 GMT Not After : Jun 8 05:00:23 2025 GMT Subject: CN=F678E6D0F9A10E308EFFC0415D41320C9FD93E92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2e:ac:ea:b5:67:12:e4:fc:92:2f:08:da:66: 01:9e:ea:f8:35:78:a8:82:84:de:e3:fa:6d:7f:15: e1:21:a6:5e:fd:bf:7c:59:da:6a:19:53:29:75:f0: bb:0f:d8:74:81:51:d2:b2:cb:4a:36:5b:9f:e6:35: 71:77:36:c6:72:9d:20:c5:31:5b:c2:57:71:56:38: 5c:b6:f7:08:19:69:68:cd:92:bc:0c:b9:70:fb:b4: 43:30:f1:f4:32:4d:02:68:93:a5:c7:02:45:4a:d5: a2:74:5e:75:d1:51:84:09:6a:b9:2a:63:05:27:df: 7d:53:e3:33:a4:a7:04:f8:cc:1b:26:36:41:01:c5: 8d:ec:36:f8:5a:0c:e5:6c:e8:1d:cf:66:bb:9a:ab: d5:ff:12:06:bf:08:9f:b0:76:a4:e9:01:48:c9:1e: b6:c4:9a:53:39:ba:9b:fa:2b:71:8b:ca:94:d4:b1: ac:ac:ed:eb:69:bd:52:70:1f:39:1e:1f:f4:73:65: 3f:1e:fe:e7:8d:c8:8f:a6:c8:ee:7d:bd:b1:b9:2e: f8:35:6d:19:fc:43:eb:dd:66:62:b5:b1:a6:9a:93: 59:df:66:c3:57:03:f2:a3:1b:fa:e9:31:f4:36:61: 39:27:36:29:93:f2:d6:1b:30:69:72:29:39:4b:a4: bc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:78:E6:D0:F9:A1:0E:30:8E:FF:C0:41:5D:41:32:0C:9F:D9:3E:92 X509v3 Authority Key Identifier: keyid:6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:0a:bc:24:75:a5:86:ae:7d:cb:1e:c2:98:31:01:fc:b0:90: e8:8e:67:90:3a:ae:9f:ae:ba:59:4a:1c:6f:06:09:b6:d7:e6: 7c:97:df:5e:d2:9a:eb:54:a2:a7:58:e3:3f:80:48:b9:0f:3c: 62:f1:8a:9a:09:af:ce:2c:23:f0:55:e6:c4:25:8d:76:0a:98: 13:83:7c:d4:7c:c3:d4:16:8b:ac:b7:8e:54:b1:8b:9f:45:d5: d3:7b:bb:17:de:d6:48:81:13:bf:05:5b:1c:68:05:aa:1b:c3: 2f:ea:7b:ec:f8:06:b1:91:e2:ef:1c:94:f9:22:fc:b6:01:4d: 86:16:a8:10:f3:d4:e6:dc:9b:51:44:5a:18:95:c7:70:2a:ec: 83:02:e6:45:99:2f:fe:ea:c6:7b:98:ed:65:16:8a:9d:67:8c: c8:2f:e8:b0:95:97:56:a3:e0:f8:f9:1b:a5:b6:e7:f7:e0:6a: 13:0d:0d:ae:cd:29:ec:8b:cf:ab:6d:79:c2:88:c5:4d:3e:16: 5d:71:b4:3e:3a:c5:67:88:8a:1f:d8:74:86:57:9b:59:ce:c0: b7:97:67:06:9d:65:39:81:4b:37:d8:81:4c:3f:0a:4f:4a:e3: ea:a6:50:50:67:8d:df:99:f9:8a:76:0f:69:7d:07:12:cd:48: 72:d8:22:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBthvnZ2Y2E/qIaf6f05wRUn7aoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNC RkIzN0I1MzAeFw0yNTA2MDQxOTM3MjNaFw0yNTA2MDgwNTAwMjNaMDMxMTAvBgNV BAMTKEY2NzhFNkQwRjlBMTBFMzA4RUZGQzA0MTVENDEzMjBDOUZEOTNFOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOLqzqtWcS5PySLwjaZgGe6vg1 eKiChN7j+m1/FeEhpl79v3xZ2moZUyl18LsP2HSBUdKyy0o2W5/mNXF3NsZynSDF MVvCV3FWOFy29wgZaWjNkrwMuXD7tEMw8fQyTQJok6XHAkVK1aJ0XnXRUYQJarkq YwUn331T4zOkpwT4zBsmNkEBxY3sNvhaDOVs6B3PZruaq9X/Ega/CJ+wdqTpAUjJ HrbEmlM5upv6K3GLypTUsays7etpvVJwHzkeH/RzZT8e/ueNyI+myO59vbG5Lvg1 bRn8Q+vdZmK1saaak1nfZsNXA/KjG/rpMfQ2YTknNimT8tYbMGlyKTlLpLw1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9njm0PmhDjCO/8BBXUEyDJ/ZPpIwHwYDVR0j BBgwFoAUamnvxciXkHx0yKHr3Z03/L+ze1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDFiMWMxYi02NTZjLTQ4OWQtOWVkMy1jY2M3N2M4MzAxOGQvMC82QTY5RUZDNUM4 OTc5MDdDNzRDOEExRUJERDlEMzdGQ0JGQjM3QjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNCRkIz N0I1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAxYjFjMWItNjU2Yy00ODlkLTll ZDMtY2NjNzdjODMwMThkLzAvNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3 RkNCRkIzN0I1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFQKvCR1pYaufcsewpgxAfywkOiOZ5A6rp+u ullKHG8GCbbX5nyX317SmutUoqdY4z+ASLkPPGLxipoJr84sI/BV5sQljXYKmBOD fNR8w9QWi6y3jlSxi59F1dN7uxfe1kiBE78FWxxoBaobwy/qe+z4BrGR4u8clPki /LYBTYYWqBDz1Obcm1FEWhiVx3Aq7IMC5kWZL/7qxnuY7WUWip1njMgv6LCVl1aj 4Pj5G6W25/fgahMNDa7NKeyLz6ttecKIxU0+Fl1xtD46xWeIih/YdIZXm1nOwLeX ZwadZTmBSzfYgUw/Ck9K4+qmUFBnjd+Z+Yp2D2l9BxLNSHLYItA= -----END CERTIFICATE-----Generated at Sat Jun 7 04:02:37 2025 by rpki-client