$ rpki-client -vvf repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft File: 6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft (raw, json) Hash identifier: hPyymgeSCNnlDfTyK3n0qbvQxrG+6FCL6o36cZYx1Mc= Subject key identifier: E9:E7:85:34:04:72:1A:8F:9E:68:84:38:F3:A9:54:04:8C:21:B3:0C Authority key identifier: 6C:FA:BB:BC:88:D3:9C:7F:78:09:5D:A7:D3:D3:5D:D3:AA:2E:95:67 Certificate issuer: /CN=6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567 Certificate serial: 0531281844BAB8414BEA9F9A9C5BE4507D48AAA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft Manifest number: 02BA Signing time: Mon 02 Jun 2025 09:51:07 +0000 Manifest this update: Mon 02 Jun 2025 09:46:07 +0000 Manifest next update: Thu 05 Jun 2025 10:28:07 +0000 Files and hashes: 1: 6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.crl (hash: r0cCeP/nGdxmfed1F77wdw8vbjvYTIUkLCZkxyZvFCw=) 2: 3130332e3137352e3135382e302f32332d3234203d3e20313331313131.roa (hash: 3KWxu9r2n6F1wE4c/OJESTppczRA3jrjk7WQMkJS/t0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.crl rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 10:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:31:28:18:44:ba:b8:41:4b:ea:9f:9a:9c:5b:e4:50:7d:48:aa:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567 Validity Not Before: Jun 2 09:46:07 2025 GMT Not After : Jun 5 10:28:07 2025 GMT Subject: CN=E9E7853404721A8F9E688438F3A954048C21B30C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:11:2a:a8:12:71:80:08:cb:a4:8c:13:f2:d0: 81:0e:2a:6a:16:03:96:b2:3a:a0:9a:af:14:8b:93: 65:02:cf:64:96:ee:f8:3f:1a:98:b7:7c:a4:51:29: 1e:78:3c:4e:1a:be:79:f5:55:06:36:3b:fd:e7:06: a7:8c:94:f1:9a:f4:89:80:e6:dd:54:c5:ae:dc:79: 46:d0:6f:39:c0:9e:05:c0:1a:2b:78:44:f3:a5:df: 32:fe:cb:bc:79:99:b7:ea:48:24:23:d7:e3:11:08: 11:ea:67:a1:9e:56:7b:82:31:04:da:4c:ee:4f:56: 02:79:05:d6:3f:2d:31:d4:02:e1:19:4e:31:da:0d: 14:37:5d:d2:93:08:e9:a0:95:0e:77:a7:91:ad:c6: 55:ab:43:de:cb:a2:92:45:8c:31:df:11:cd:81:34: 62:05:40:65:db:65:ae:54:6b:b0:09:c4:c1:3d:aa: 4a:17:8d:51:d6:25:c2:da:09:7b:e9:b0:76:32:00: 45:2e:7e:6b:16:c9:02:aa:35:a9:dd:10:4b:7c:87: 1b:6d:c8:b0:05:20:91:4e:1d:56:02:16:d5:15:5b: fc:b6:7d:8d:91:b7:2f:55:ec:cd:25:d0:ed:ca:79: 46:b4:40:0f:84:6a:ee:ac:60:5d:ec:f8:a6:99:f3: d4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E7:85:34:04:72:1A:8F:9E:68:84:38:F3:A9:54:04:8C:21:B3:0C X509v3 Authority Key Identifier: keyid:6C:FA:BB:BC:88:D3:9C:7F:78:09:5D:A7:D3:D3:5D:D3:AA:2E:95:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:a4:e3:65:00:46:67:d2:2a:3a:97:a4:f1:41:78:4b:32:82: 00:e7:74:7b:27:28:fa:d8:ee:91:b7:39:7f:8f:1e:ed:6c:37: 50:b4:66:73:58:fc:36:1d:fe:c3:66:5a:7a:f2:d4:92:a7:00: 5d:57:88:cb:3b:5e:ab:64:87:5d:4d:a2:13:4e:21:47:55:58: 29:2a:c2:0e:b3:46:aa:02:b1:04:fe:70:9c:8e:07:2d:74:1f: c7:c2:35:d6:c2:2b:89:a6:02:66:d5:fe:e1:63:4a:3f:06:5d: c5:8c:a9:3f:92:31:86:04:e0:0d:98:12:e1:a0:61:a1:1a:64: 2c:6a:2b:ec:4b:0a:42:e8:5c:b0:d7:74:a3:18:91:83:26:e3: 3a:6a:e3:2d:eb:99:d4:85:18:7e:ea:06:8d:4e:02:be:0a:12: 03:d6:27:a4:95:73:41:56:f2:70:fa:ad:c2:1e:10:5c:a2:b0: a5:57:af:95:82:ad:10:3f:16:f1:37:1e:89:2d:b6:f7:72:f2: 5a:a2:38:c5:db:98:a9:c8:8c:f5:3c:29:c8:b2:b0:57:60:d9: e3:7d:c8:80:fb:c2:d9:6c:9e:63:30:8d:c3:89:02:b5:02:9e: 67:8d:41:63:da:0c:60:af:75:09:c6:26:f1:eb:71:6d:ea:43: 8a:ae:8d:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBTEoGES6uEFL6p+anFvkUH1IqqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNGQUJCQkM4OEQzOUM3Rjc4MDk1REE3RDNEMzVERDNB QTJFOTU2NzAeFw0yNTA2MDIwOTQ2MDdaFw0yNTA2MDUxMDI4MDdaMDMxMTAvBgNV BAMTKEU5RTc4NTM0MDQ3MjFBOEY5RTY4ODQzOEYzQTk1NDA0OEMyMUIzMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCESqoEnGACMukjBPy0IEOKmoW A5ayOqCarxSLk2UCz2SW7vg/Gpi3fKRRKR54PE4avnn1VQY2O/3nBqeMlPGa9ImA 5t1Uxa7ceUbQbznAngXAGit4RPOl3zL+y7x5mbfqSCQj1+MRCBHqZ6GeVnuCMQTa TO5PVgJ5BdY/LTHUAuEZTjHaDRQ3XdKTCOmglQ53p5GtxlWrQ97LopJFjDHfEc2B NGIFQGXbZa5Ua7AJxME9qkoXjVHWJcLaCXvpsHYyAEUufmsWyQKqNandEEt8hxtt yLAFIJFOHVYCFtUVW/y2fY2Rty9V7M0l0O3KeUa0QA+Eau6sYF3s+KaZ89Q3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6eeFNARyGo+eaIQ486lUBIwhswwwHwYDVR0j BBgwFoAUbPq7vIjTnH94CV2n09Nd06oulWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Mzg3NGNmMy1hZGIxLTQ5NDctYTdlNC1hMmQzMmM1NGVkMWYvMC82Q0ZBQkJCQzg4 RDM5QzdGNzgwOTVEQTdEM0QzNUREM0FBMkU5NTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNGQUJCQkM4OEQzOUM3Rjc4MDk1REE3RDNEMzVERDNBQTJF OTU2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzM4NzRjZjMtYWRiMS00OTQ3LWE3 ZTQtYTJkMzJjNTRlZDFmLzAvNkNGQUJCQkM4OEQzOUM3Rjc4MDk1REE3RDNEMzVE RDNBQTJFOTU2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABak42UARmfSKjqXpPFBeEsyggDndHsnKPrY 7pG3OX+PHu1sN1C0ZnNY/DYd/sNmWnry1JKnAF1XiMs7Xqtkh11NohNOIUdVWCkq wg6zRqoCsQT+cJyOBy10H8fCNdbCK4mmAmbV/uFjSj8GXcWMqT+SMYYE4A2YEuGg YaEaZCxqK+xLCkLoXLDXdKMYkYMm4zpq4y3rmdSFGH7qBo1OAr4KEgPWJ6SVc0FW 8nD6rcIeEFyisKVXr5WCrRA/FvE3Hokttvdy8lqiOMXbmKnIjPU8KciysFdg2eN9 yID7wtlsnmMwjcOJArUCnmeNQWPaDGCvdQnGJvHrcW3qQ4qujSQ= -----END CERTIFICATE-----Generated at Tue Jun 3 23:09:42 2025 by rpki-client