$ rpki-client -vvf repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft File: 6D2120D281865021E16D49A2451DC53A851B5BBD.mft (raw, json) Hash identifier: gcoAVi80hngPWwNo+HZMrqY4NLP2Z48KZ3Sxq6/wCKQ= Subject key identifier: 2A:1F:EE:A6:05:8C:F7:64:4C:66:97:1C:BE:6F:C5:2C:54:8B:D4:CF Authority key identifier: 6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD Certificate issuer: /CN=6D2120D281865021E16D49A2451DC53A851B5BBD Certificate serial: 69E16F77848702D546DA5C108BB9D53695B11F22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft Manifest number: 63 Signing time: Fri 06 Jun 2025 09:41:36 +0000 Manifest this update: Fri 06 Jun 2025 09:36:36 +0000 Manifest next update: Mon 09 Jun 2025 15:58:36 +0000 Files and hashes: 1: 3130332e3234352e31372e302f32342d3234203d3e203436303233.roa (hash: b+Xtzw+6na2a+xMS20wYCYPacvkf2l2PSoCEFblC4OY=) 2: 3130332e3234352e31362e302f32332d3234203d3e203436303233.roa (hash: r+Lb1druh87TuPBvbGkUhC/GpzU18DRigq7n/TRclBo=) 3: 3130332e3234352e31392e302f32342d3234203d3e203436303233.roa (hash: GFImrwcqsA1f+8jAtf3KA9NFE2jyS21niSNaMCPf864=) 4: 3130332e3234352e31382e302f32332d3234203d3e203436303233.roa (hash: LiUE5E5NP3y/9rJb+3iR5iXWUeVWyAD0Ol8W0BAVcIY=) 5: 3130332e3234352e31382e302f32342d3234203d3e203436303233.roa (hash: AShL+HPisPSiiNmtbZE+edgEgIJDv3kNOSZOwH9eeKo=) 6: 3130332e3234352e31362e302f32322d3234203d3e203436303233.roa (hash: PpALimtbBE16UsxvYAE3t7KXuw0rzaxc/sz7ukHKaaU=) 7: 6D2120D281865021E16D49A2451DC53A851B5BBD.crl (hash: keX4GaOus49i2KdHmcVvf9q0wPCvp5YvNj/gbBu6qhY=) 8: 3130332e3234352e31362e302f32342d3234203d3e203436303233.roa (hash: oc7a2yZBp9q1BdzfUR+tIB5Dtqa/efadojr7/o0DfQ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 12:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:e1:6f:77:84:87:02:d5:46:da:5c:10:8b:b9:d5:36:95:b1:1f:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D2120D281865021E16D49A2451DC53A851B5BBD Validity Not Before: Jun 6 09:36:36 2025 GMT Not After : Jun 9 15:58:36 2025 GMT Subject: CN=2A1FEEA6058CF7644C66971CBE6FC52C548BD4CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:08:eb:f8:9c:bf:c4:76:71:76:00:67:95:16: f6:30:9b:3f:7f:5a:24:af:8e:1c:28:75:7b:74:40: 9e:0b:85:ec:f9:0b:dc:26:57:4f:fd:11:8e:74:ac: 23:c7:64:3e:99:f6:43:aa:90:35:28:76:37:5a:9d: 2f:28:7f:54:b4:33:c5:de:66:53:90:b0:e2:93:9e: 24:1a:d3:b8:73:65:93:dc:3a:1f:ca:14:00:d7:d7: 13:ab:d9:c2:9c:b3:b7:20:dc:d0:24:2d:21:59:95: 50:0e:08:a9:03:62:26:5e:0a:1b:ef:4e:c8:0a:16: 12:c7:4d:5a:74:be:72:95:72:e0:60:14:c7:cc:b3: 78:fa:87:f3:e1:01:39:19:da:c4:36:b3:5e:e1:a9: b7:83:3f:60:18:a1:3a:a7:0e:6d:3d:d4:8a:94:75: a4:62:3e:d5:ca:5e:41:d4:15:b4:b2:04:05:1e:7d: 5a:e3:ca:40:a7:53:a6:dc:3e:46:53:c1:1c:54:91: eb:2f:a2:dd:9a:36:4c:a6:fa:b2:36:6b:b1:4e:a2: f1:75:f9:8c:89:ce:60:2a:92:1e:11:ec:23:1e:62: 5a:4c:f1:42:a1:5a:ce:6a:a6:2b:88:01:c4:d5:d8: b5:c4:f8:f2:a2:2b:6b:1c:95:10:62:76:28:8e:26: 91:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1F:EE:A6:05:8C:F7:64:4C:66:97:1C:BE:6F:C5:2C:54:8B:D4:CF X509v3 Authority Key Identifier: keyid:6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:d4:ec:a1:3c:39:38:c7:0f:db:cb:a3:6a:6e:f0:99:95:02: 54:6a:49:08:e7:d8:6d:44:0a:2e:94:b1:49:b7:3b:0a:be:65: 70:f7:f4:6b:76:25:d8:cd:05:53:bb:10:85:6b:3f:c5:07:aa: dc:f5:db:2d:ac:fa:b1:00:ef:ad:ad:f6:5b:a1:e6:6d:0f:28: b6:56:62:19:b5:ec:2b:e2:6c:ed:ba:2c:7d:9b:72:d3:76:cb: d1:21:e4:d6:b4:a1:0f:e8:e5:bc:20:b3:d3:fd:74:32:dd:57: f7:86:06:00:6f:d1:d0:df:f8:c2:16:32:12:0f:c9:0e:44:64: 25:0d:0a:e2:6a:9d:a3:b1:51:5e:6c:28:01:12:2f:5c:96:43: 99:f5:d9:51:7e:84:4a:1a:90:f8:b7:cb:63:68:2c:80:6a:d4: 4c:69:69:79:7a:c5:67:d0:90:96:03:38:f3:09:eb:d7:d8:1e: fa:27:13:fb:f1:c4:c1:80:14:2c:54:ce:f9:55:92:e1:87:8c: f4:44:34:93:fb:fb:04:c8:94:e1:2c:7a:bf:f6:d8:51:1c:45: 88:7e:cf:f7:c7:58:cc:84:de:99:90:90:8e:a3:ac:a9:a4:8a: 1b:1e:06:6a:1b:0d:81:41:67:8d:3d:6c:5d:32:cc:53:fb:9a: ee:a1:60:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaeFvd4SHAtVG2lwQi7nVNpWxHyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4 NTFCNUJCRDAeFw0yNTA2MDYwOTM2MzZaFw0yNTA2MDkxNTU4MzZaMDMxMTAvBgNV BAMTKDJBMUZFRUE2MDU4Q0Y3NjQ0QzY2OTcxQ0JFNkZDNTJDNTQ4QkQ0Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCCOv4nL/EdnF2AGeVFvYwmz9/ WiSvjhwodXt0QJ4Lhez5C9wmV0/9EY50rCPHZD6Z9kOqkDUodjdanS8of1S0M8Xe ZlOQsOKTniQa07hzZZPcOh/KFADX1xOr2cKcs7cg3NAkLSFZlVAOCKkDYiZeChvv TsgKFhLHTVp0vnKVcuBgFMfMs3j6h/PhATkZ2sQ2s17hqbeDP2AYoTqnDm091IqU daRiPtXKXkHUFbSyBAUefVrjykCnU6bcPkZTwRxUkesvot2aNkym+rI2a7FOovF1 +YyJzmAqkh4R7CMeYlpM8UKhWs5qpiuIAcTV2LXE+PKiK2sclRBidiiOJpFxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKh/upgWM92RMZpccvm/FLFSL1M8wHwYDVR0j BBgwFoAUbSEg0oGGUCHhbUmiRR3FOoUbW70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTI3MmY3Yi1kNjU2LTQwNTgtYTdiNi1mMjVhZGYzZWQxYmUvMC82RDIxMjBEMjgx ODY1MDIxRTE2RDQ5QTI0NTFEQzUzQTg1MUI1QkJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4NTFC NUJCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTUyNzJmN2ItZDY1Ni00MDU4LWE3 YjYtZjI1YWRmM2VkMWJlLzAvNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1 M0E4NTFCNUJCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMjU7KE8OTjHD9vLo2pu8JmVAlRqSQjn2G1E Ci6UsUm3Owq+ZXD39Gt2JdjNBVO7EIVrP8UHqtz12y2s+rEA762t9luh5m0PKLZW Yhm17CvibO26LH2bctN2y9Eh5Na0oQ/o5bwgs9P9dDLdV/eGBgBv0dDf+MIWMhIP yQ5EZCUNCuJqnaOxUV5sKAESL1yWQ5n12VF+hEoakPi3y2NoLIBq1ExpaXl6xWfQ kJYDOPMJ69fYHvonE/vxxMGAFCxUzvlVkuGHjPRENJP7+wTIlOEser/22FEcRYh+ z/fHWMyE3pmQkI6jrKmkihseBmobDYFBZ409bF0yzFP7mu6hYKM= -----END CERTIFICATE-----Generated at Fri Jun 6 16:34:46 2025 by rpki-client