$ rpki-client -vvf repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft File: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft (raw, json) Hash identifier: pB5SPx+kJqTNLa2+qdYqlXIdHkMFvq48QHOoOzHadhY= Subject key identifier: 35:C5:F5:D3:2F:2B:21:7B:34:57:AD:87:75:70:91:7B:A1:1D:A6:CB Authority key identifier: 6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E Certificate issuer: /CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Certificate serial: 0F86AE9B73443DC11A8F99D41B53B2A9AB128FD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft Manifest number: AF Signing time: Sun 01 Jun 2025 20:52:10 +0000 Manifest this update: Sun 01 Jun 2025 20:47:10 +0000 Manifest next update: Thu 05 Jun 2025 04:09:10 +0000 Files and hashes: 1: 33362e35302e3231362e302f32332d3233203d3e20313437313238.roa (hash: TzFqnwzzY9xia0s3waMLkiGG8A7BVi2jn0Tebn9ZTXg=) 2: 33362e35302e3231372e302f32342d3234203d3e20313437313238.roa (hash: suvA+Wk962jHlhC9+yItBsXmZi+V1BXvTufHDqbDzJE=) 3: 33362e35302e3231362e302f32342d3234203d3e20313437313238.roa (hash: knY/ggPl78wk2nvRxnL0Ik6PzIK0DYSQq15iPy2gM40=) 4: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl (hash: qJ2Q6xV1i8Xee69Eq4P0jnVP5xq/Q6+GzjATeurTK34=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 04:09:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:86:ae:9b:73:44:3d:c1:1a:8f:99:d4:1b:53:b2:a9:ab:12:8f:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Validity Not Before: Jun 1 20:47:10 2025 GMT Not After : Jun 5 04:09:10 2025 GMT Subject: CN=35C5F5D32F2B217B3457AD877570917BA11DA6CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5a:4b:85:18:76:ee:a4:ff:20:93:68:39:4f: 31:bb:6e:62:30:53:30:8b:3f:69:fd:21:5d:02:cb: 34:f4:a1:c1:b2:25:4b:0f:37:73:82:ae:da:57:b5: f1:ec:8f:05:4b:98:f8:22:f6:bd:b5:61:46:96:b0: bb:02:47:89:b9:77:9a:30:f2:5a:93:64:a3:18:69: 33:b2:11:f1:9f:db:77:c9:ac:6a:f0:a3:a6:e8:b0: 65:dd:9d:d0:79:32:c3:01:ac:80:65:26:08:d4:0a: 89:0c:3b:15:81:d0:ee:c5:c0:e4:08:81:96:b6:36: ce:51:82:96:37:82:b7:c2:82:4d:e4:b5:49:b8:d6: 79:34:2d:56:69:e2:ab:72:68:4b:c5:de:b9:02:86: c8:cc:7f:9b:90:fc:35:2b:6b:c4:77:4f:35:1d:13: a8:2b:31:09:22:c7:18:b7:f4:d2:6c:17:97:63:a6: b1:a4:93:9c:42:a7:a8:74:c7:62:4e:16:5c:22:02: 88:18:ef:bc:af:46:e2:b4:be:97:f9:1c:49:16:08: 7b:0f:71:7b:3e:e4:6a:65:23:32:b2:60:9e:66:27: bf:9c:ca:f4:b7:1f:d0:1c:23:0b:98:1b:a2:f5:ee: 61:39:4d:e9:6e:3c:30:94:b0:81:82:5e:3a:78:d4: 1c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C5:F5:D3:2F:2B:21:7B:34:57:AD:87:75:70:91:7B:A1:1D:A6:CB X509v3 Authority Key Identifier: keyid:6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:e6:c8:bf:c3:ca:1d:47:b7:7a:48:85:4f:d9:ed:e4:13:3a: 3a:c7:12:d6:13:53:72:50:79:2e:ca:79:50:db:e9:e1:60:93: 4e:ee:8e:88:f8:27:7a:52:8e:44:b9:94:8d:37:94:9b:ba:c6: d3:55:be:fb:3c:7c:06:2a:ca:94:df:5c:6a:85:88:6c:a9:5a: 33:d7:65:f7:65:b8:4b:c0:96:11:b2:26:7c:51:4b:0b:e6:b2: e3:bf:fb:a5:ff:d1:ac:ce:07:b5:6a:3b:19:f6:db:a6:60:34: b7:c1:bb:fb:da:80:9c:a0:8f:52:2f:4c:e8:38:0a:c2:d1:3a: 1f:86:18:16:13:0c:1a:e5:6e:4b:fe:d2:0f:71:b4:9b:2b:6e: a0:66:d6:1a:2d:9e:3f:c2:94:86:de:56:d1:32:4f:d5:ca:0f: 3c:b6:4d:1f:de:f7:fd:e1:27:5a:f7:e3:70:69:56:e4:d7:6b: 88:a7:e9:14:b7:35:6b:98:89:19:d0:49:8d:28:e2:7c:5f:3a: 15:1d:a4:3b:cb:df:cf:90:c6:a5:5f:55:51:b0:53:84:38:b5: 38:a5:25:92:18:b4:d5:bc:59:52:53:bd:aa:02:32:f0:3f:cb: 8b:e5:25:7b:76:f8:93:3d:d0:e7:54:3d:3a:80:06:01:89:30: 44:36:ad:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD4aum3NEPcEaj5nUG1OyqasSj9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3 QTk4MDk5RTAeFw0yNTA2MDEyMDQ3MTBaFw0yNTA2MDUwNDA5MTBaMDMxMTAvBgNV BAMTKDM1QzVGNUQzMkYyQjIxN0IzNDU3QUQ4Nzc1NzA5MTdCQTExREE2Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlWkuFGHbupP8gk2g5TzG7bmIw UzCLP2n9IV0CyzT0ocGyJUsPN3OCrtpXtfHsjwVLmPgi9r21YUaWsLsCR4m5d5ow 8lqTZKMYaTOyEfGf23fJrGrwo6bosGXdndB5MsMBrIBlJgjUCokMOxWB0O7FwOQI gZa2Ns5RgpY3grfCgk3ktUm41nk0LVZp4qtyaEvF3rkChsjMf5uQ/DUra8R3TzUd E6grMQkixxi39NJsF5djprGkk5xCp6h0x2JOFlwiAogY77yvRuK0vpf5HEkWCHsP cXs+5GplIzKyYJ5mJ7+cyvS3H9AcIwuYG6L17mE5TeluPDCUsIGCXjp41By/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNcX10y8rIXs0V62HdXCRe6EdpsswHwYDVR0j BBgwFoAUbbsQDY1GaauKXH7gVyKO1nqYCZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTk4OWZhZi00OGZiLTRmNDAtOWU3Ny0yNDNkNzhhNWI1YzQvMC82REJCMTAwRDhE NDY2OUFCOEE1QzdFRTA1NzIyOEVENjdBOTgwOTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3QTk4 MDk5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU5ODlmYWYtNDhmYi00ZjQwLTll NzctMjQzZDc4YTViNWM0LzAvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhF RDY3QTk4MDk5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDmyL/Dyh1Ht3pIhU/Z7eQTOjrHEtYTU3JQ eS7KeVDb6eFgk07ujoj4J3pSjkS5lI03lJu6xtNVvvs8fAYqypTfXGqFiGypWjPX ZfdluEvAlhGyJnxRSwvmsuO/+6X/0azOB7VqOxn226ZgNLfBu/vagJygj1IvTOg4 CsLROh+GGBYTDBrlbkv+0g9xtJsrbqBm1hotnj/ClIbeVtEyT9XKDzy2TR/e9/3h J1r343BpVuTXa4in6RS3NWuYiRnQSY0o4nxfOhUdpDvL38+QxqVfVVGwU4Q4tTil JZIYtNW8WVJTvaoCMvA/y4vlJXt2+JM90OdUPTqABgGJMEQ2rdg= -----END CERTIFICATE-----Generated at Tue Jun 3 23:27:31 2025 by rpki-client