$ rpki-client -vvf repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft File: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft (raw, json) Hash identifier: XTakhnENjDJBl5Nbm/fFNcK7ReU2bzfYTilM8NkPO8s= Subject key identifier: 20:54:90:59:62:78:55:BB:86:64:BC:6C:A4:18:D2:D5:B5:CB:5A:A6 Authority key identifier: 6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 Certificate issuer: /CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Certificate serial: 7DA23BC586D18E0FAEF2894AFF5BFD6CE1296A5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft Manifest number: 01F8 Signing time: Sun 08 Jun 2025 05:00:52 +0000 Manifest this update: Sun 08 Jun 2025 04:55:52 +0000 Manifest next update: Wed 11 Jun 2025 15:23:52 +0000 Files and hashes: 1: 3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa (hash: 8i2rkzBjlPEti5Kr8Zm8/78pVX8xhxtJgE0QaB9hDOo=) 2: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl (hash: UcBirNDe2rcwKWQ04tX5Llsrg028boxeL8ZJ0fcY5DY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:a2:3b:c5:86:d1:8e:0f:ae:f2:89:4a:ff:5b:fd:6c:e1:29:6a:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Validity Not Before: Jun 8 04:55:52 2025 GMT Not After : Jun 11 15:23:52 2025 GMT Subject: CN=20549059627855BB8664BC6CA418D2D5B5CB5AA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2a:f7:64:0f:05:be:0a:98:bd:fc:98:62:d3: 0b:38:e9:b8:ea:ce:ca:3f:4b:9a:b3:cd:8b:7d:6d: 5e:9d:a3:ee:1d:db:bf:a6:6c:e1:ff:8d:e3:18:a8: 3f:86:36:fb:05:7a:9f:98:6c:0e:6a:da:11:f9:cf: 0c:75:7d:92:49:7f:21:eb:7a:03:fd:2a:c2:53:b9: 92:d2:36:a5:e4:1b:75:a2:2e:23:e1:68:24:df:7e: 8f:cd:53:79:9c:24:ef:fe:fc:63:11:49:ca:62:4f: bb:a2:78:d2:ac:87:a3:5d:ef:0b:cf:54:b5:fa:32: 24:d7:b2:02:9d:05:0c:cf:48:5c:c0:47:c8:52:44: 54:22:ac:c9:98:1b:10:61:50:4e:8e:12:2a:a8:b3: ee:b5:41:2b:c8:ba:53:3a:8c:13:2d:ff:33:4c:32: 92:c1:96:fb:d9:fe:cd:5b:3f:c5:c4:76:ec:15:02: c9:4b:a6:ac:2e:32:2d:41:83:3c:6d:e1:4f:6d:2c: 77:32:d8:26:1e:9a:44:d1:d3:2d:85:20:e1:c7:e2: 05:b0:3a:9b:a3:af:f5:ab:33:7f:df:da:83:5c:06: 2b:f0:f6:b9:d0:c6:93:5d:8b:7e:5f:b8:24:f2:00: d0:35:73:62:d3:cb:d5:b2:96:fb:91:01:b7:bf:78: f0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:54:90:59:62:78:55:BB:86:64:BC:6C:A4:18:D2:D5:B5:CB:5A:A6 X509v3 Authority Key Identifier: keyid:6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:06:5a:7a:ca:04:8e:7d:b5:ba:91:8a:7d:40:33:b3:58:8e: 2c:d4:36:5d:0d:78:8a:04:06:79:17:5f:f1:3b:11:22:32:68: ef:e3:93:7a:87:79:f9:bb:4a:95:4a:11:9d:07:8b:f0:79:27: cc:63:5e:85:09:42:84:cc:2d:a2:b0:28:2e:f8:0f:8e:41:e6: 71:ad:b7:84:79:ae:bb:42:e9:de:4a:18:8a:7d:08:23:ad:89: 4d:7c:b8:d3:1c:86:29:9f:d2:2a:a4:f8:bb:5c:60:ea:bb:a9: 46:27:6b:8d:ee:bf:f4:d7:fd:fc:f9:df:af:92:42:9e:98:b9: 6b:69:be:aa:68:07:b9:7c:60:b1:bc:c2:13:58:69:23:d6:83: 07:23:39:3d:bc:cc:97:47:42:d4:5e:41:e4:37:7f:af:0e:53: c5:bd:85:54:8d:c0:8c:df:a8:90:97:44:c2:e4:91:8e:d8:13: 38:36:c3:1c:36:4f:a2:71:ee:73:28:1f:8d:44:9e:11:76:20: 1d:7b:05:41:5b:6b:fc:b4:99:bd:f0:5c:32:15:57:76:8b:74: 5b:a8:ed:7d:98:e8:dd:ff:e4:d2:4c:85:79:27:75:38:c4:75: f1:f2:d8:76:b5:e4:53:b9:65:88:ae:15:f1:f6:2f:c6:81:d9: 44:5d:81:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfaI7xYbRjg+u8olK/1v9bOEpalwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1 RkUwQkUxMTAeFw0yNTA2MDgwNDU1NTJaFw0yNTA2MTExNTIzNTJaMDMxMTAvBgNV BAMTKDIwNTQ5MDU5NjI3ODU1QkI4NjY0QkM2Q0E0MThEMkQ1QjVDQjVBQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+KvdkDwW+Cpi9/Jhi0ws46bjq zso/S5qzzYt9bV6do+4d27+mbOH/jeMYqD+GNvsFep+YbA5q2hH5zwx1fZJJfyHr egP9KsJTuZLSNqXkG3WiLiPhaCTffo/NU3mcJO/+/GMRScpiT7uieNKsh6Nd7wvP VLX6MiTXsgKdBQzPSFzAR8hSRFQirMmYGxBhUE6OEiqos+61QSvIulM6jBMt/zNM MpLBlvvZ/s1bP8XEduwVAslLpqwuMi1Bgzxt4U9tLHcy2CYemkTR0y2FIOHH4gWw Opujr/WrM3/f2oNcBivw9rnQxpNdi35fuCTyANA1c2LTy9WylvuRAbe/ePD/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIFSQWWJ4VbuGZLxspBjS1bXLWqYwHwYDVR0j BBgwFoAUb8hX33/lNQpsBaHxE/PcLl/gvhEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTIzOGE2Mi02YTk2LTQzYmMtODdhZi0wMmRiNjQxZjcxMDkvMC82RkM4NTdERjdG RTUzNTBBNkMwNUExRjExM0YzREMyRTVGRTBCRTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1RkUw QkUxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGEyMzhhNjItNmE5Ni00M2JjLTg3 YWYtMDJkYjY0MWY3MTA5LzAvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RD MkU1RkUwQkUxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALMGWnrKBI59tbqRin1AM7NYjizUNl0NeIoE BnkXX/E7ESIyaO/jk3qHefm7SpVKEZ0Hi/B5J8xjXoUJQoTMLaKwKC74D45B5nGt t4R5rrtC6d5KGIp9CCOtiU18uNMchimf0iqk+LtcYOq7qUYna43uv/TX/fz536+S Qp6YuWtpvqpoB7l8YLG8whNYaSPWgwcjOT28zJdHQtReQeQ3f68OU8W9hVSNwIzf qJCXRMLkkY7YEzg2wxw2T6Jx7nMoH41EnhF2IB17BUFba/y0mb3wXDIVV3aLdFuo 7X2Y6N3/5NJMhXkndTjEdfHy2Ha15FO5ZYiuFfH2L8aB2URdgcE= -----END CERTIFICATE-----Generated at Sun Jun 8 23:24:16 2025 by rpki-client