$ rpki-client -vvf repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft File: C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft (raw, json) Hash identifier: ZQAN5WLXox7o61WRsdM4nOf+2pSPUPyU97LTt4kEcXE= Subject key identifier: B9:C1:24:4C:76:4D:4A:3A:B5:DC:BF:42:2C:2D:CE:DB:9A:BD:C5:14 Authority key identifier: C6:E3:A2:28:17:CE:6E:09:8D:FC:67:4B:26:28:8C:83:D6:C3:F1:CE Certificate issuer: /CN=C6E3A22817CE6E098DFC674B26288C83D6C3F1CE Certificate serial: 4EA4C826BBC32C01C903A6BEAC3ECCD6C7719948 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft Manifest number: 0468 Signing time: Sun 01 Jun 2025 23:40:56 +0000 Manifest this update: Sun 01 Jun 2025 23:35:56 +0000 Manifest next update: Thu 05 Jun 2025 08:02:56 +0000 Files and hashes: 1: 3130332e3136302e3231332e302f32342d3234203d3e20313430333839.roa (hash: dllWVp999ICiCk9GUGXAOfj/bi8nHCufe19RYtM6+Zw=) 2: 3130332e3136302e3231322e302f32342d3234203d3e20313430333839.roa (hash: 2GAO2WKhJLUYMWxiP8tf/oiHTNGvRf7OUHdDN/T5hcE=) 3: C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl (hash: UkT8Ij6HaHHNOuk+PqaavInGVkdDTMU7A/kJZ6vPChw=) 4: 3130332e3136302e3231322e302f32332d3233203d3e20313430333839.roa (hash: 1JS7BDeBUPrlE38obX4/dOtxoMlb98tZXz73Js3EUv0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 08:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:a4:c8:26:bb:c3:2c:01:c9:03:a6:be:ac:3e:cc:d6:c7:71:99:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6E3A22817CE6E098DFC674B26288C83D6C3F1CE Validity Not Before: Jun 1 23:35:56 2025 GMT Not After : Jun 5 08:02:56 2025 GMT Subject: CN=B9C1244C764D4A3AB5DCBF422C2DCEDB9ABDC514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1a:cb:8e:4e:7c:d6:21:12:75:3e:1b:28:66: 96:3b:4d:61:3c:58:3e:e8:f6:78:1b:ed:3c:18:83: 45:0e:19:0d:a4:b6:19:9d:75:c7:50:76:33:92:e0: 25:9d:98:5f:0d:72:37:19:27:27:16:a4:99:86:2c: b5:fd:29:1e:3f:56:09:f7:c9:a1:8a:10:dd:2f:67: 50:eb:eb:41:2d:6b:8a:3b:8f:1d:59:6b:72:46:df: 7e:8e:38:69:f8:c6:16:94:ad:3c:e0:ac:a5:82:fd: fd:30:a2:6b:25:1c:b7:1e:cb:b1:e9:16:d9:ff:ef: ef:52:92:b5:8a:7e:46:1d:c7:da:5e:00:b0:66:d7: 11:b0:65:9d:50:d1:9a:82:2d:02:71:62:6c:ca:6b: 85:a4:4f:78:80:c0:6d:15:43:87:26:da:3e:00:9c: 00:da:b1:a8:49:d7:fd:3b:a7:45:5d:63:4e:8a:d8: 77:28:4e:25:7c:9b:0c:10:f3:8a:f9:7d:85:10:ac: 2d:13:81:28:d0:c3:6b:c4:4d:0d:00:66:0e:60:36: 52:c6:e5:b9:0d:0f:f8:f1:04:7b:17:0e:6d:49:b6: e2:85:4a:f2:8c:ff:5e:58:a8:c6:71:3e:7e:33:4a: 1d:c7:cc:a4:66:64:a7:48:a7:3c:7f:e9:34:45:b2: cb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C1:24:4C:76:4D:4A:3A:B5:DC:BF:42:2C:2D:CE:DB:9A:BD:C5:14 X509v3 Authority Key Identifier: keyid:C6:E3:A2:28:17:CE:6E:09:8D:FC:67:4B:26:28:8C:83:D6:C3:F1:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:bb:96:8c:d3:3f:fa:4d:e0:71:18:78:6f:df:47:f2:35:44: 2e:d6:44:94:ff:40:b0:63:1d:fd:27:63:3b:79:fc:94:36:b1: 7f:c0:86:92:46:93:b0:4f:c3:7b:ab:a0:0b:bc:6f:89:20:3a: a8:1e:47:54:c5:66:cb:e5:b8:a3:9e:21:78:2c:47:9a:5f:e6: ae:bf:05:71:f4:50:24:59:3f:f3:d9:b0:03:03:fb:eb:04:7c: 77:07:0e:e6:67:67:21:b1:ea:f3:71:71:6d:be:21:3a:03:69: 2c:f0:b4:d7:05:a7:4a:e2:3d:b3:03:34:f1:51:50:bd:fd:38: 1e:ca:17:82:3d:e9:e4:45:4f:a9:86:66:9d:07:96:c9:c1:50: 3d:50:67:14:ca:e3:e4:de:39:6f:72:b5:b7:b0:75:00:09:8d: b1:93:2d:da:b9:55:52:36:5d:d7:90:b2:a2:7a:2d:26:12:c9: 73:f4:77:92:0d:88:fd:4f:9c:77:a7:a8:2b:e2:4c:05:c8:a2: d7:a8:48:64:92:f0:a0:7c:fd:50:ae:a7:a2:c8:e8:e3:a5:4d: 85:01:ee:33:a8:ed:81:f4:8e:3e:ea:84:d9:fb:17:cc:fe:a0: 4a:1c:5a:da:6a:1a:3d:72:b5:18:57:36:a6:c3:f0:53:3f:76: 87:a5:de:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTqTIJrvDLAHJA6a+rD7M1sdxmUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZFM0EyMjgxN0NFNkUwOThERkM2NzRCMjYyODhDODNE NkMzRjFDRTAeFw0yNTA2MDEyMzM1NTZaFw0yNTA2MDUwODAyNTZaMDMxMTAvBgNV BAMTKEI5QzEyNDRDNzY0RDRBM0FCNURDQkY0MjJDMkRDRURCOUFCREM1MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMGsuOTnzWIRJ1PhsoZpY7TWE8 WD7o9ngb7TwYg0UOGQ2kthmddcdQdjOS4CWdmF8NcjcZJycWpJmGLLX9KR4/Vgn3 yaGKEN0vZ1Dr60Eta4o7jx1Za3JG336OOGn4xhaUrTzgrKWC/f0womslHLcey7Hp Ftn/7+9SkrWKfkYdx9peALBm1xGwZZ1Q0ZqCLQJxYmzKa4WkT3iAwG0VQ4cm2j4A nADasahJ1/07p0VdY06K2HcoTiV8mwwQ84r5fYUQrC0TgSjQw2vETQ0AZg5gNlLG 5bkND/jxBHsXDm1JtuKFSvKM/15YqMZxPn4zSh3HzKRmZKdIpzx/6TRFsssvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUucEkTHZNSjq13L9CLC3O25q9xRQwHwYDVR0j BBgwFoAUxuOiKBfObgmN/GdLJiiMg9bD8c4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmVlMWVlMS1hNWI1LTRjNjQtYmJiYi0yNjM2MzUyZGFjZmMvMC9DNkUzQTIyODE3 Q0U2RTA5OERGQzY3NEIyNjI4OEM4M0Q2QzNGMUNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzZFM0EyMjgxN0NFNkUwOThERkM2NzRCMjYyODhDODNENkMz RjFDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlZTFlZTEtYTViNS00YzY0LWJi YmItMjYzNjM1MmRhY2ZjLzAvQzZFM0EyMjgxN0NFNkUwOThERkM2NzRCMjYyODhD ODNENkMzRjFDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHu7lozTP/pN4HEYeG/fR/I1RC7WRJT/QLBj Hf0nYzt5/JQ2sX/AhpJGk7BPw3uroAu8b4kgOqgeR1TFZsvluKOeIXgsR5pf5q6/ BXH0UCRZP/PZsAMD++sEfHcHDuZnZyGx6vNxcW2+IToDaSzwtNcFp0riPbMDNPFR UL39OB7KF4I96eRFT6mGZp0HlsnBUD1QZxTK4+TeOW9ytbewdQAJjbGTLdq5VVI2 XdeQsqJ6LSYSyXP0d5INiP1PnHenqCviTAXIoteoSGSS8KB8/VCup6LI6OOlTYUB 7jOo7YH0jj7qhNn7F8z+oEocWtpqGj1ytRhXNqbD8FM/doel3vY= -----END CERTIFICATE-----Generated at Tue Jun 3 23:39:23 2025 by rpki-client