$ rpki-client -vvf repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft File: 6DA2B28F4391C01434B7229FD4D68E661BF13061.mft (raw, json) Hash identifier: sH2yySF05nZjHRSCTZxGqwojzVYJqoyxeK0OEDsJs44= Subject key identifier: 14:9E:E5:F3:A4:AD:34:E5:24:26:BD:32:84:6C:28:1F:7F:86:74:A3 Authority key identifier: 6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61 Certificate issuer: /CN=6DA2B28F4391C01434B7229FD4D68E661BF13061 Certificate serial: 5194EF00718E8BFDDD1E1F877ACD669E20215EF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft Manifest number: 024A Signing time: Tue 03 Jun 2025 12:43:04 +0000 Manifest this update: Tue 03 Jun 2025 12:38:04 +0000 Manifest next update: Fri 06 Jun 2025 22:14:04 +0000 Files and hashes: 1: 34392e3233362e3232332e302f32342d3234203d3e203535363638.roa (hash: 6Ss/J4jbsHWttbGBWZAXrFLeP7zMzLu10fV9oC9kRxs=) 2: 34392e3233362e3231372e302f32342d3234203d3e203535363638.roa (hash: SptXDMlN81cXVQItr4QSDBANvjvdA+fjiFu71V/b7e4=) 3: 34392e3233362e3231382e302f32342d3234203d3e203535363638.roa (hash: cndHnN7Y2CkZsc1bcXRUS17ntMjtPGamuBmM/0sBScA=) 4: 34392e3233362e3231392e302f32342d3234203d3e203535363638.roa (hash: 3dUHFOcTvL6SRCYfkh3xOumINLAjfoUSiaeyY80AmMU=) 5: 34392e3233362e3232312e302f32342d3234203d3e203535363638.roa (hash: P3qaAQS+9Hmz4InOLYsrCr6O0nuBDwpieqmijzpxLgQ=) 6: 34392e3233362e3232302e302f32342d3234203d3e203535363638.roa (hash: KZESdVYPyK5UDmppEqYu4UgDw6S2JiyC9Aylq3V7KK8=) 7: 34392e3233362e3231362e302f32342d3234203d3e203535363638.roa (hash: C1ful6krFD/D/NQklV2H82Wf+t1lC80LwN0uOUSrxSc=) 8: 6DA2B28F4391C01434B7229FD4D68E661BF13061.crl (hash: u/Rq/SiP+0c42z5D3wxAhNescfIPjJ10UoMZgv/Pgo8=) 9: 34392e3233362e3232322e302f32342d3234203d3e203535363638.roa (hash: 7nW2fdNzQ/pw6iueKs/nit/sd4D7nCLJjKMOnmFO3+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:94:ef:00:71:8e:8b:fd:dd:1e:1f:87:7a:cd:66:9e:20:21:5e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DA2B28F4391C01434B7229FD4D68E661BF13061 Validity Not Before: Jun 3 12:38:04 2025 GMT Not After : Jun 6 22:14:04 2025 GMT Subject: CN=149EE5F3A4AD34E52426BD32846C281F7F8674A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2e:98:fd:bf:7b:3b:b1:71:a0:8d:72:79:69: 3e:5f:04:79:17:e5:69:bd:e9:0f:bf:91:ba:bc:1c: 26:8a:f4:77:f0:81:4f:70:3f:81:8d:81:e2:d5:49: 00:83:87:5d:72:cf:7c:ed:62:50:f5:09:af:1d:b5: e3:ef:5e:90:67:08:42:f9:15:96:4f:f9:f5:cb:bc: b0:e1:fc:53:53:64:00:86:6d:b1:31:e6:35:ed:8a: 61:3a:0b:48:5f:1f:1b:a8:9f:5c:dc:d0:67:14:3a: c7:94:3a:26:d2:dd:c9:ea:9f:c0:dc:86:89:e2:77: c5:8a:36:ac:3a:0f:89:f4:74:3c:7b:88:c4:47:ab: 9b:e7:f2:ac:17:f2:aa:aa:2e:99:51:3c:c6:08:b1: 00:bf:f2:ac:97:d0:78:80:8a:b7:30:8b:41:36:99: 2e:5a:50:17:1e:84:54:18:26:10:b0:f6:04:f9:14: b1:ec:30:d4:c0:4c:46:c5:96:26:9d:f8:98:d8:f3: dd:1b:dd:10:b8:a1:d6:d8:71:c0:a2:04:15:77:a9: 83:ae:1e:fb:71:31:9b:97:bd:bf:58:f7:a9:6e:43: 58:95:46:03:1f:7c:24:af:1f:33:ec:24:7d:05:c5: 15:65:70:68:b0:41:5f:32:ca:e6:65:82:41:37:21: 3e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9E:E5:F3:A4:AD:34:E5:24:26:BD:32:84:6C:28:1F:7F:86:74:A3 X509v3 Authority Key Identifier: keyid:6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:bf:dc:ea:7b:0f:c4:09:20:6a:37:fc:23:80:f0:2f:80:23: f8:2d:ef:79:05:b6:7f:4d:22:ad:67:e8:cd:59:93:48:4c:9a: 92:6c:13:a1:1e:6f:0a:a1:82:ac:1a:94:8a:3d:5d:17:b0:cd: d4:a1:1b:e3:72:7c:7a:93:d9:40:e7:15:65:c5:66:8a:59:b9: ad:31:31:5d:9e:62:7e:fd:a5:cf:9c:c7:10:4b:f2:aa:77:04: b0:dc:7f:08:c0:8c:0a:25:44:7d:e3:b3:54:ec:08:e5:33:27: 0f:d1:9a:47:50:02:db:cb:70:2b:19:98:c1:f9:6e:c4:44:31: 35:5f:16:62:a0:21:84:8e:d9:58:2c:b0:2b:a4:51:9b:91:ce: 9a:03:fa:3e:ad:3f:1d:70:59:7b:2c:3a:58:8f:c2:2d:b6:33: 84:28:4e:af:86:ad:a5:c3:8a:08:11:42:c1:93:7c:6e:5d:3b: 51:56:bd:7d:e7:a0:13:33:db:02:1c:8c:e5:5f:0b:44:d2:50: 1e:91:fd:d9:0a:3e:28:2e:2f:a2:a4:1d:1c:6f:09:17:55:c2: 1b:ca:ad:87:09:f0:fe:c2:96:6e:04:54:37:b5:e1:30:e9:2f: db:53:b7:1b:a7:ae:8e:fe:8b:f5:75:b6:b3:cf:c4:67:9c:51: 48:7a:71:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUZTvAHGOi/3dHh+Hes1mniAhXvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhFNjYx QkYxMzA2MTAeFw0yNTA2MDMxMjM4MDRaFw0yNTA2MDYyMjE0MDRaMDMxMTAvBgNV BAMTKDE0OUVFNUYzQTRBRDM0RTUyNDI2QkQzMjg0NkMyODFGN0Y4Njc0QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfLpj9v3s7sXGgjXJ5aT5fBHkX 5Wm96Q+/kbq8HCaK9HfwgU9wP4GNgeLVSQCDh11yz3ztYlD1Ca8dtePvXpBnCEL5 FZZP+fXLvLDh/FNTZACGbbEx5jXtimE6C0hfHxuon1zc0GcUOseUOibS3cnqn8Dc honid8WKNqw6D4n0dDx7iMRHq5vn8qwX8qqqLplRPMYIsQC/8qyX0HiAircwi0E2 mS5aUBcehFQYJhCw9gT5FLHsMNTATEbFliad+JjY890b3RC4odbYccCiBBV3qYOu HvtxMZuXvb9Y96luQ1iVRgMffCSvHzPsJH0FxRVlcGiwQV8yyuZlgkE3IT5TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFJ7l86StNOUkJr0yhGwoH3+GdKMwHwYDVR0j BBgwFoAUbaKyj0ORwBQ0tyKf1NaOZhvxMGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDBmOTljMy1lNTY3LTQxYWUtYWEwMC0yNmNiOTc4MWZiZTkvMC82REEyQjI4RjQz OTFDMDE0MzRCNzIyOUZENEQ2OEU2NjFCRjEzMDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhFNjYxQkYx MzA2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwZjk5YzMtZTU2Ny00MWFlLWFh MDAtMjZjYjk3ODFmYmU5LzAvNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhF NjYxQkYxMzA2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJC/3Op7D8QJIGo3/COA8C+AI/gt73kFtn9N Iq1n6M1Zk0hMmpJsE6EebwqhgqwalIo9XRewzdShG+NyfHqT2UDnFWXFZopZua0x MV2eYn79pc+cxxBL8qp3BLDcfwjAjAolRH3js1TsCOUzJw/RmkdQAtvLcCsZmMH5 bsREMTVfFmKgIYSO2VgssCukUZuRzpoD+j6tPx1wWXssOliPwi22M4QoTq+GraXD iggRQsGTfG5dO1FWvX3noBMz2wIcjOVfC0TSUB6R/dkKPiguL6KkHRxvCRdVwhvK rYcJ8P7Clm4EVDe14TDpL9tTtxunro7+i/V1trPPxGecUUh6cdM= -----END CERTIFICATE-----Generated at Thu Jun 5 18:15:20 2025 by rpki-client