$ rpki-client -vvf repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft File: 6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft (raw, json) Hash identifier: Z4uTPkhgauUskGRcFki1K2cQwCNdDWf02ggJfqlN90I= Subject key identifier: 2E:48:A9:62:26:23:1F:A4:A0:F8:A0:BE:9D:D8:A8:3F:20:86:8A:2D Authority key identifier: 6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67 Certificate issuer: /CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567 Certificate serial: 0D84F359DA733C8BD209A9167D0581E69AE4650C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft Manifest number: 52 Signing time: Thu 05 Jun 2025 06:11:22 +0000 Manifest this update: Thu 05 Jun 2025 06:06:22 +0000 Manifest next update: Sun 08 Jun 2025 14:04:22 +0000 Files and hashes: 1: 3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa (hash: TQYvew4a918dkXbQmghAnG3D/BGB9JTVAzjo9Xx8OFQ=) 2: 6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl (hash: lsFgJxBdXZSqVv2GM74Hf23gG525CnunSOmc+QJJMLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 14:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:84:f3:59:da:73:3c:8b:d2:09:a9:16:7d:05:81:e6:9a:e4:65:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567 Validity Not Before: Jun 5 06:06:22 2025 GMT Not After : Jun 8 14:04:22 2025 GMT Subject: CN=2E48A96226231FA4A0F8A0BE9DD8A83F20868A2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c9:4b:39:48:91:40:da:7a:a8:88:5c:18:dd: d4:1f:10:44:11:4b:58:11:63:3c:6e:16:db:b1:ff: db:21:c2:79:ad:ec:e2:24:9c:d7:58:a7:7b:08:32: 81:8d:b6:2c:82:90:44:0f:de:5d:21:04:bd:38:33: 07:4b:6d:bf:6c:a6:ae:ac:dc:e9:bd:c5:17:75:2f: f8:64:6f:34:7f:38:f7:13:dc:62:9a:0c:37:3c:31: 4a:dc:14:cb:95:10:3c:78:39:dc:a1:00:48:de:ff: 71:50:c1:90:72:8d:aa:7d:8b:ba:bd:48:2b:af:40: e5:59:df:c6:2c:0d:20:1f:01:c5:28:6b:8c:6b:4a: 2c:4d:d6:f2:c6:f9:3a:ea:f8:03:9e:a0:80:00:1d: 1a:73:7b:4b:21:36:6f:30:9a:c4:9f:86:85:41:39: bf:d3:9a:5e:b6:60:b2:25:94:f6:cb:08:4c:8e:65: e3:a3:09:5e:80:d6:c3:df:db:48:49:d6:dd:39:0d: ba:a0:9a:0e:d1:33:81:82:df:aa:bf:b0:d2:36:51: d3:98:93:89:66:b2:5b:2f:6f:83:22:5f:a2:3d:c9: 3f:f4:b6:88:ad:40:68:3b:ef:3e:2c:73:33:1a:e5: b9:1f:75:de:7e:3d:2b:6c:78:02:0e:30:a1:9d:98: 31:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:48:A9:62:26:23:1F:A4:A0:F8:A0:BE:9D:D8:A8:3F:20:86:8A:2D X509v3 Authority Key Identifier: keyid:6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:8b:c3:40:26:63:79:a8:07:a9:a3:03:7f:9e:fe:b3:8d:c0: 5b:ed:60:cc:23:bf:c0:b2:01:f2:38:6c:db:45:db:b5:5a:b1: 5b:7c:44:dc:88:f6:0e:bc:1c:01:6c:c4:3f:dc:00:03:55:c6: 2e:76:dd:02:28:1e:4c:0e:fa:e6:90:00:0b:28:2a:98:23:8a: 95:5a:24:bf:11:00:b1:58:22:90:62:57:cb:ec:79:5d:fd:a3: 3a:65:de:b1:67:51:bb:70:1d:1a:33:f8:f6:0e:a3:b7:11:e6: c5:ac:dc:b0:91:4d:43:4a:ed:e4:79:84:3a:fc:94:81:83:db: bb:5f:4a:e2:9c:d2:c2:0d:83:61:a3:98:29:32:d7:3f:ed:23: 7d:16:c1:56:e0:16:eb:28:c9:6d:9c:49:85:05:a9:f0:03:a1: 03:58:b2:36:46:90:5c:3b:06:83:4d:f4:ad:fb:7a:c9:db:09: e3:4e:3b:9f:43:dc:37:42:fc:cc:fa:90:95:53:98:72:96:8f: 7e:10:2f:4c:77:b4:0c:19:c6:a2:37:f1:e7:ea:b4:e5:d8:ed: 7d:c3:5d:16:a4:4d:95:d4:26:7a:39:8f:93:48:35:10:dd:08: 7b:1e:5f:fe:02:a4:98:51:cc:58:16:a1:4d:37:12:83:a3:db: dc:15:f4:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDYTzWdpzPIvSCakWfQWB5prkZQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIzOUNB MkJENDU2NzAeFw0yNTA2MDUwNjA2MjJaFw0yNTA2MDgxNDA0MjJaMDMxMTAvBgNV BAMTKDJFNDhBOTYyMjYyMzFGQTRBMEY4QTBCRTlERDhBODNGMjA4NjhBMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChyUs5SJFA2nqoiFwY3dQfEEQR S1gRYzxuFtux/9shwnmt7OIknNdYp3sIMoGNtiyCkEQP3l0hBL04MwdLbb9spq6s 3Om9xRd1L/hkbzR/OPcT3GKaDDc8MUrcFMuVEDx4OdyhAEje/3FQwZByjap9i7q9 SCuvQOVZ38YsDSAfAcUoa4xrSixN1vLG+Trq+AOeoIAAHRpze0shNm8wmsSfhoVB Ob/Tml62YLIllPbLCEyOZeOjCV6A1sPf20hJ1t05Dbqgmg7RM4GC36q/sNI2UdOY k4lmslsvb4MiX6I9yT/0toitQGg77z4sczMa5bkfdd5+PStseAIOMKGdmDETAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULkipYiYjH6Sg+KC+ndioPyCGii0wHwYDVR0j BBgwFoAUa9Rc2RLUGSvN659rc7AjnKK9RWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzU4ZmI3Yy02N2I4LTRiY2UtOTZkOS1iZTkxMmUzZjczZGQvMC82QkQ0NUNEOTEy RDQxOTJCQ0RFQjlGNkI3M0IwMjM5Q0EyQkQ0NTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIzOUNBMkJE NDU2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzAvNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIz OUNBMkJENDU2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKGLw0AmY3moB6mjA3+e/rONwFvtYMwjv8Cy AfI4bNtF27VasVt8RNyI9g68HAFsxD/cAANVxi523QIoHkwO+uaQAAsoKpgjipVa JL8RALFYIpBiV8vseV39ozpl3rFnUbtwHRoz+PYOo7cR5sWs3LCRTUNK7eR5hDr8 lIGD27tfSuKc0sINg2GjmCky1z/tI30WwVbgFusoyW2cSYUFqfADoQNYsjZGkFw7 BoNN9K37esnbCeNOO59D3DdC/Mz6kJVTmHKWj34QL0x3tAwZxqI38efqtOXY7X3D XRakTZXUJno5j5NINRDdCHseX/4CpJhRzFgWoU03EoOj29wV9Ag= -----END CERTIFICATE-----Generated at Sat Jun 7 11:30:44 2025 by rpki-client