$ rpki-client -vvf repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft File: 6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft (raw, json) Hash identifier: cHRgYjh3ihCSyDfnaZUdvLQNuJLOeHSMZtlaikdS28Y= Subject key identifier: 18:C8:E6:96:4A:B7:44:E1:10:6A:FF:B6:38:0D:77:AE:E5:10:B6:E1 Authority key identifier: 6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87 Certificate issuer: /CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187 Certificate serial: 0FBF4DE533E67A69F57E1616E2BF65FA2115F776 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft Manifest number: 015D Signing time: Mon 02 Jun 2025 07:31:06 +0000 Manifest this update: Mon 02 Jun 2025 07:26:06 +0000 Manifest next update: Thu 05 Jun 2025 13:26:06 +0000 Files and hashes: 1: 3130332e3234352e3232352e302f32342d3234203d3e20313331373635.roa (hash: /abYrA5yp8Nre7zAYDHYwFsGgEom3ZQxvMGjfmSiyZM=) 2: 6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl (hash: TLkim1NCqKFAd0qBjPtTQr6fdWzOxXir0UQUOSnPlg4=) 3: 3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa (hash: +wBbu1cMZCAeulSyWUHjp9S6buaiwbJ9EYT932oWUfk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 13:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:bf:4d:e5:33:e6:7a:69:f5:7e:16:16:e2:bf:65:fa:21:15:f7:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187 Validity Not Before: Jun 2 07:26:06 2025 GMT Not After : Jun 5 13:26:06 2025 GMT Subject: CN=18C8E6964AB744E1106AFFB6380D77AEE510B6E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5b:a4:21:14:88:a8:37:e2:87:a9:73:9d:88: 5a:eb:62:eb:18:1f:b1:af:60:d5:b8:89:67:00:8b: 14:9f:b3:2b:c2:1a:cd:9b:fb:cd:12:e6:b1:34:30: 12:c5:6f:4e:d7:88:67:13:69:c8:01:17:bc:07:dc: e0:44:3a:f8:74:5d:41:36:a6:8c:e4:46:ab:b6:d5: 2a:27:24:11:cf:ef:8f:40:cd:07:79:88:54:4a:85: 11:df:6a:bc:48:b7:9b:f7:37:25:ed:8d:23:2f:43: bc:cd:06:0b:47:1e:c2:cf:30:2e:6e:c5:d1:5e:4b: 79:00:41:d9:10:d4:86:03:a1:69:8a:b6:7e:45:29: c1:e7:74:f8:8c:b3:70:5a:ac:f7:d1:3b:32:fc:2d: 10:be:be:98:4d:5e:60:a7:5d:58:43:e1:0c:6a:07: 85:c6:5f:16:f1:32:7d:a0:a4:88:61:09:fe:a6:03: c5:d4:c1:cf:cb:77:c7:f0:a3:17:1d:c9:41:cf:3f: 1a:9e:ed:b5:eb:c6:c7:e9:b5:25:4a:23:f6:12:0e: 43:10:ff:83:44:55:ad:51:81:76:8b:6c:d4:e5:55: b8:06:46:81:40:9a:bc:9c:ff:f3:f4:d6:1f:0d:3e: 47:99:d8:02:67:93:70:3f:4b:27:33:10:27:c6:99: ee:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C8:E6:96:4A:B7:44:E1:10:6A:FF:B6:38:0D:77:AE:E5:10:B6:E1 X509v3 Authority Key Identifier: keyid:6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:69:4e:2f:02:19:5c:bf:ae:68:a6:78:d3:a6:e1:b1:91:82: 36:a5:63:1f:94:c1:1a:e0:f6:28:ad:34:49:dd:71:db:fc:d3: e1:58:e0:e7:38:af:09:0f:4a:2e:d7:bb:81:55:7e:4e:ec:94: 9b:97:9e:6f:20:06:49:23:72:eb:7b:6a:8d:c4:5a:cd:76:12: 6f:a6:32:9a:eb:e6:5b:a4:0a:c6:7a:6d:5b:45:6e:43:c0:a3: da:57:5b:6f:52:51:b9:99:42:a4:e1:e1:65:c3:d5:17:4a:94: 68:a6:80:06:43:d3:f5:06:03:1f:ec:51:2e:76:59:6d:e8:f8: 2c:47:c7:78:7c:da:78:68:e0:e4:ba:a0:4f:01:e5:59:a5:7e: 73:9b:92:5f:2c:64:1e:d3:b0:53:fd:fa:30:4c:15:b3:7d:07: 1b:e7:86:f2:f6:02:03:1e:b6:3d:dc:cd:0a:08:16:11:f8:9c: ba:f4:62:79:44:48:80:59:8f:07:98:d0:a9:1d:99:b6:66:2c: 0b:4e:a3:af:09:66:f6:df:2d:3d:c7:b8:2b:31:88:92:6e:66: c4:86:f3:7d:05:48:53:7a:2c:7f:9d:44:f3:b6:61:7b:48:9d: f2:51:bf:46:a2:33:5f:0f:7d:88:58:00:d3:75:23:f7:4b:79: 26:ca:74:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD79N5TPmemn1fhYW4r9l+iEV93YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkzMzIz MkVDMjE4NzAeFw0yNTA2MDIwNzI2MDZaFw0yNTA2MDUxMzI2MDZaMDMxMTAvBgNV BAMTKDE4QzhFNjk2NEFCNzQ0RTExMDZBRkZCNjM4MEQ3N0FFRTUxMEI2RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfW6QhFIioN+KHqXOdiFrrYusY H7GvYNW4iWcAixSfsyvCGs2b+80S5rE0MBLFb07XiGcTacgBF7wH3OBEOvh0XUE2 pozkRqu21SonJBHP749AzQd5iFRKhRHfarxIt5v3NyXtjSMvQ7zNBgtHHsLPMC5u xdFeS3kAQdkQ1IYDoWmKtn5FKcHndPiMs3BarPfROzL8LRC+vphNXmCnXVhD4Qxq B4XGXxbxMn2gpIhhCf6mA8XUwc/Ld8fwoxcdyUHPPxqe7bXrxsfptSVKI/YSDkMQ /4NEVa1RgXaLbNTlVbgGRoFAmryc//P01h8NPkeZ2AJnk3A/SyczECfGme5lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGMjmlkq3ROEQav+2OA13ruUQtuEwHwYDVR0j BBgwFoAUb7Ta52sSygDgc0Sk3S+TMjLsIYcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmQ3MDM0Ni01YmRmLTQ5NjEtYTc0Zi01NWFlODU1NjcyYTEvMC82RkI0REFFNzZC MTJDQTAwRTA3MzQ0QTRERDJGOTMzMjMyRUMyMTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkzMzIzMkVD MjE4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkNzAzNDYtNWJkZi00OTYxLWE3 NGYtNTVhZTg1NTY3MmExLzAvNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkz MzIzMkVDMjE4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBpTi8CGVy/rmimeNOm4bGRgjalYx+UwRrg 9iitNEndcdv80+FY4Oc4rwkPSi7Xu4FVfk7slJuXnm8gBkkjcut7ao3EWs12Em+m Mprr5lukCsZ6bVtFbkPAo9pXW29SUbmZQqTh4WXD1RdKlGimgAZD0/UGAx/sUS52 WW3o+CxHx3h82nho4OS6oE8B5VmlfnObkl8sZB7TsFP9+jBMFbN9BxvnhvL2AgMe tj3czQoIFhH4nLr0YnlESIBZjweY0KkdmbZmLAtOo68JZvbfLT3HuCsxiJJuZsSG 830FSFN6LH+dRPO2YXtInfJRv0aiM18PfYhYANN1I/dLeSbKdOQ= -----END CERTIFICATE-----Generated at Tue Jun 3 23:44:26 2025 by rpki-client