$ rpki-client -vvf repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft File: B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft (raw, json) Hash identifier: JRHFwlZfzuyeJ+y0N4i901dBcXQm/MoqE4hSGOnfxJA= Subject key identifier: 93:6D:ED:73:F9:9E:D0:36:5D:C6:47:00:4C:4F:8B:6A:C3:F6:54:12 Authority key identifier: B6:82:9F:5E:7E:F7:B5:DF:33:97:CD:32:22:16:0B:E9:44:49:AC:6E Certificate issuer: /CN=B6829F5E7EF7B5DF3397CD3222160BE94449AC6E Certificate serial: 408249EF8DBDDAEE46B81CF03624A950115D8FF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft Manifest number: 02D8 Signing time: Tue 03 Jun 2025 11:34:43 +0000 Manifest this update: Tue 03 Jun 2025 11:29:43 +0000 Manifest next update: Fri 06 Jun 2025 20:28:43 +0000 Files and hashes: 1: 3130332e3137342e3131362e302f32342d3234203d3e20313437313030.roa (hash: T/avkK1K5KQqb3goD2eSalwCBXNjyLMnINGvgboUmkE=) 2: B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.crl (hash: oMEJrnt6tdPSB0nndR4WOMRt6l8G2ikv3YnFr8WrGbM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.crl rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:82:49:ef:8d:bd:da:ee:46:b8:1c:f0:36:24:a9:50:11:5d:8f:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6829F5E7EF7B5DF3397CD3222160BE94449AC6E Validity Not Before: Jun 3 11:29:43 2025 GMT Not After : Jun 6 20:28:43 2025 GMT Subject: CN=936DED73F99ED0365DC647004C4F8B6AC3F65412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2c:3d:3a:b0:20:49:0b:48:5b:00:e3:60:bf: e8:41:42:2b:81:d8:da:11:98:c6:f7:a0:cd:a2:a8: 80:a8:af:8b:cd:0f:4a:f7:3a:b1:48:d2:fe:38:fd: de:21:c0:44:0e:80:98:51:69:ce:85:b9:6c:00:79: 3b:81:8b:e0:a6:2a:4a:a3:30:23:f0:7b:c0:c6:5d: 2f:b9:6c:13:2a:cc:3d:d7:e1:76:31:8b:74:85:5d: c3:0b:7a:02:73:fa:5a:2f:2a:99:5d:5d:8b:61:6a: 86:d9:de:79:23:cc:92:49:91:ae:af:36:e1:55:4f: b5:4d:9d:a4:7f:07:61:66:b6:55:fb:98:43:50:e5: 00:90:e8:79:c2:a3:84:29:6f:5a:c9:60:42:c9:ce: e8:bc:bc:58:18:81:51:94:4d:cb:28:e3:43:6e:a0: f9:0a:4d:a7:e8:a0:d1:a1:62:b8:0c:ff:1b:e6:c6: 36:5b:2f:5e:36:16:61:44:ed:23:70:eb:81:ca:49: 53:3b:79:88:de:ad:08:c2:d8:1a:8c:42:a5:68:33: ea:31:0a:5d:0e:24:09:90:c9:47:b0:41:3e:3b:4a: dd:0a:99:9a:09:bb:62:76:ac:f0:29:25:a4:97:2f: 5d:ba:74:db:21:a1:63:49:17:05:cf:93:14:a1:1e: b6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:6D:ED:73:F9:9E:D0:36:5D:C6:47:00:4C:4F:8B:6A:C3:F6:54:12 X509v3 Authority Key Identifier: keyid:B6:82:9F:5E:7E:F7:B5:DF:33:97:CD:32:22:16:0B:E9:44:49:AC:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:98:19:bb:a7:2a:ad:7d:69:84:45:07:87:20:18:a1:58:94: 01:f1:6f:a4:03:8d:7b:73:f7:13:3f:55:cc:b6:03:4d:22:78: e6:be:9b:82:79:b1:24:a8:5d:7b:ee:87:1c:6b:9a:db:3a:c3: 43:4d:e4:47:f1:ec:b9:39:45:16:8c:15:8d:79:79:5c:2e:0b: 05:8c:b5:c1:f5:29:53:2c:da:e9:d2:b9:b2:f7:2d:0c:1c:35: 78:37:46:89:ec:3a:cd:64:ba:c4:50:ce:1a:53:73:2b:f7:26: be:99:1a:97:f0:05:cd:d5:37:74:e1:f8:cd:c1:85:8f:aa:32: 58:df:6e:76:3b:b6:76:55:64:d1:b9:24:fc:8e:1a:5a:d1:cc: 43:fd:f5:9a:6b:22:bb:ae:70:15:d2:f9:67:bb:38:1a:39:0c: 7b:a5:aa:a9:22:9a:47:70:8e:81:42:ff:03:14:ce:08:94:d4: 07:e9:b7:5b:5d:61:05:45:3a:c4:59:cf:47:89:15:b2:3e:90: 97:d4:34:3a:54:c0:bb:cd:97:4f:a7:fb:8a:a4:02:b1:a0:38: 53:9e:cc:10:5b:b2:ac:ed:97:16:fb:b9:f6:51:94:c0:59:bb: cd:ed:02:32:eb:ff:a4:5a:be:56:db:f9:51:55:7d:05:06:d5: 41:b9:dd:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQIJJ74292u5GuBzwNiSpUBFdj/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4MjlGNUU3RUY3QjVERjMzOTdDRDMyMjIxNjBCRTk0 NDQ5QUM2RTAeFw0yNTA2MDMxMTI5NDNaFw0yNTA2MDYyMDI4NDNaMDMxMTAvBgNV BAMTKDkzNkRFRDczRjk5RUQwMzY1REM2NDcwMDRDNEY4QjZBQzNGNjU0MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2LD06sCBJC0hbAONgv+hBQiuB 2NoRmMb3oM2iqICor4vND0r3OrFI0v44/d4hwEQOgJhRac6FuWwAeTuBi+CmKkqj MCPwe8DGXS+5bBMqzD3X4XYxi3SFXcMLegJz+lovKpldXYthaobZ3nkjzJJJka6v NuFVT7VNnaR/B2FmtlX7mENQ5QCQ6HnCo4Qpb1rJYELJzui8vFgYgVGUTcso40Nu oPkKTafooNGhYrgM/xvmxjZbL142FmFE7SNw64HKSVM7eYjerQjC2BqMQqVoM+ox Cl0OJAmQyUewQT47St0KmZoJu2J2rPApJaSXL126dNshoWNJFwXPkxShHrY/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk23tc/me0DZdxkcATE+LasP2VBIwHwYDVR0j BBgwFoAUtoKfXn73td8zl80yIhYL6URJrG4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MTA5MDU3My02YWQzLTRlNjMtOGFmNC04YTJkNTgyYWEwY2QvMC9CNjgyOUY1RTdF RjdCNURGMzM5N0NEMzIyMjE2MEJFOTQ0NDlBQzZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY4MjlGNUU3RUY3QjVERjMzOTdDRDMyMjIxNjBCRTk0NDQ5 QUM2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzEwOTA1NzMtNmFkMy00ZTYzLThh ZjQtOGEyZDU4MmFhMGNkLzAvQjY4MjlGNUU3RUY3QjVERjMzOTdDRDMyMjIxNjBC RTk0NDQ5QUM2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqYGbunKq19aYRFB4cgGKFYlAHxb6QDjXtz 9xM/Vcy2A00ieOa+m4J5sSSoXXvuhxxrmts6w0NN5Efx7Lk5RRaMFY15eVwuCwWM tcH1KVMs2unSubL3LQwcNXg3RonsOs1kusRQzhpTcyv3Jr6ZGpfwBc3VN3Th+M3B hY+qMljfbnY7tnZVZNG5JPyOGlrRzEP99ZprIruucBXS+We7OBo5DHulqqkimkdw joFC/wMUzgiU1Afpt1tdYQVFOsRZz0eJFbI+kJfUNDpUwLvNl0+n+4qkArGgOFOe zBBbsqztlxb7ufZRlMBZu83tAjLr/6Ravlbb+VFVfQUG1UG53QA= -----END CERTIFICATE-----Generated at Thu Jun 5 18:11:53 2025 by rpki-client