$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft File: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft (raw, json) Hash identifier: kptqVVSaI10MnwwDL4ZsoJIPuz4GsrzMoOELZ1zFMVM= Subject key identifier: 1F:26:7A:04:61:60:BC:F3:7D:03:E0:88:7B:EB:60:16:43:A4:93:21 Authority key identifier: 69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E Certificate issuer: /CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Certificate serial: 0CF9107E5B7D02DC34AD82DECA7D5E38C69777FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft Manifest number: 01CF Signing time: Thu 05 Jun 2025 16:40:06 +0000 Manifest this update: Thu 05 Jun 2025 16:35:06 +0000 Manifest next update: Sun 08 Jun 2025 22:03:06 +0000 Files and hashes: 1: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl (hash: 8gnNvbJk2Bk4blZ1Wxn4FuLQ0V7w/WCIhLqdmTeXfXo=) 2: 3130332e31322e32382e302f32322d3234203d3e203438343635.roa (hash: 0OjoY+05zt8Z8400j80eRAcHaPBuMx39KYxLU+S/mlo=) 3: 3130312e302e342e302f32322d3234203d3e203438343635.roa (hash: 8mh8KupdLyWQUvBNib+4skF1x/A11Hrwfuz1jJcLVAs=) 4: 323430303a666230303a3a2f33322d3438203d3e203535363730.roa (hash: FVA48wGL4/cskX5JvDPv5QyssORBEsld3N+rmhCU4Gc=) 5: 3130312e302e342e302f32322d3234203d3e203535363730.roa (hash: 7ECSmeZAaiWw7xemuyw220yGHio1fDg8eukqs4CuhkU=) 6: 3130332e31322e32382e302f32322d3234203d3e203535363730.roa (hash: 56/u0yMrkC94FdPOEf+mn1+2joJi+oVC5l6/K3alTgQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 22:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:f9:10:7e:5b:7d:02:dc:34:ad:82:de:ca:7d:5e:38:c6:97:77:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Validity Not Before: Jun 5 16:35:06 2025 GMT Not After : Jun 8 22:03:06 2025 GMT Subject: CN=1F267A046160BCF37D03E0887BEB601643A49321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fa:03:65:05:81:03:97:20:19:4e:36:8a:1b: bd:f0:c9:a1:82:fa:52:a9:47:f0:d8:05:2f:3e:92: a9:9d:3e:f8:be:1f:7d:12:45:76:79:e1:81:78:16: 08:1f:c1:fb:76:eb:4f:2e:27:88:fe:f9:ca:19:71: 2f:2e:e6:f0:3f:1f:c9:56:a9:1d:c2:11:3a:1e:65: 6d:23:b5:52:48:a6:6d:46:48:c6:36:f1:3b:0c:bc: 5b:bd:0e:44:19:46:7a:eb:6b:df:e0:f1:d5:02:e3: 82:41:fe:63:12:5f:97:b6:73:34:52:f6:73:07:ba: ba:ac:aa:49:01:f1:ea:47:2c:43:4f:bc:4d:d4:02: e6:75:85:15:d8:25:f2:a6:bb:43:bf:7e:23:36:93: 2c:0f:5b:8f:f0:9e:44:78:67:8e:29:76:6b:78:63: ed:0d:03:60:d2:df:e3:e5:ac:79:fd:86:cc:4e:c4: 32:86:ae:d8:c6:67:52:7f:fc:f3:63:d6:79:60:e9: 05:6e:26:09:c2:a6:61:ef:e6:cc:0a:39:27:11:ef: b0:11:6e:aa:25:8c:e3:9a:a6:66:dc:88:94:d0:59: e0:49:f8:f3:e5:e8:3d:81:c8:33:ae:ca:6b:33:d9: cb:10:be:54:70:6d:0e:fc:c8:8b:a3:69:39:00:12: 40:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:26:7A:04:61:60:BC:F3:7D:03:E0:88:7B:EB:60:16:43:A4:93:21 X509v3 Authority Key Identifier: keyid:69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:56:ec:3f:e9:81:56:b3:cb:99:23:e7:6a:a4:d6:a1:f0:b2: 92:98:66:3b:04:af:01:d7:dc:0e:b9:f2:24:2c:55:8f:12:8d: a3:b2:1f:73:7a:a6:d0:b8:9d:c5:97:64:6b:9d:0d:1b:c9:44: d7:00:00:d2:b7:f5:af:aa:86:5b:5f:29:54:2c:56:6c:b1:c4: 2f:5f:08:d5:5d:69:1b:94:5d:3a:9e:69:99:74:84:0f:4f:84: 6e:3b:b4:23:83:a8:ba:16:50:ad:db:1a:09:bd:92:ae:49:7a: e4:d4:5a:f1:e0:0c:2f:c6:3d:82:5f:cb:82:bd:70:c9:61:29: aa:6b:06:2d:d8:04:de:7e:a9:76:06:9c:34:c7:7a:b4:46:07: d2:2d:9e:a0:f4:e8:78:8e:79:b4:ac:e1:45:ab:45:b0:6f:b2: ad:97:39:fe:eb:30:5d:c2:45:d8:3b:c2:d3:1c:2a:c3:76:95: a0:52:1b:de:96:3e:fa:b7:29:1b:20:6d:05:74:0a:10:37:72: bc:6e:b1:24:b8:85:11:09:b8:41:12:4c:29:14:01:0b:d5:5c: a1:29:79:6f:27:4a:a0:0b:a4:14:96:5e:5a:7d:3e:d2:ac:68: 89:f5:b6:de:63:db:d4:36:4a:aa:25:07:84:67:f2:25:c4:3a: 8f:07:66:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDPkQflt9Atw0rYLeyn1eOMaXd/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVG RTNFN0MzRTAeFw0yNTA2MDUxNjM1MDZaFw0yNTA2MDgyMjAzMDZaMDMxMTAvBgNV BAMTKDFGMjY3QTA0NjE2MEJDRjM3RDAzRTA4ODdCRUI2MDE2NDNBNDkzMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf+gNlBYEDlyAZTjaKG73wyaGC +lKpR/DYBS8+kqmdPvi+H30SRXZ54YF4Fggfwft2608uJ4j++coZcS8u5vA/H8lW qR3CEToeZW0jtVJIpm1GSMY28TsMvFu9DkQZRnrra9/g8dUC44JB/mMSX5e2czRS 9nMHurqsqkkB8epHLENPvE3UAuZ1hRXYJfKmu0O/fiM2kywPW4/wnkR4Z44pdmt4 Y+0NA2DS3+PlrHn9hsxOxDKGrtjGZ1J//PNj1nlg6QVuJgnCpmHv5swKOScR77AR bqoljOOapmbciJTQWeBJ+PPl6D2ByDOuymsz2csQvlRwbQ78yIujaTkAEkBXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHyZ6BGFgvPN9A+CIe+tgFkOkkyEwHwYDVR0j BBgwFoAUaWcBLvykNpjo4bckuR38Xv4+fD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDZlYTdmYS05NGQyLTRkZGMtYThlNi01ZGM2MjZjMjkxZDQvMC82OTY3MDEyRUZD QTQzNjk4RThFMUI3MjRCOTFERkM1RUZFM0U3QzNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVGRTNF N0MzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4 ZTYtNWRjNjI2YzI5MWQ0LzAvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZD NUVGRTNFN0MzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANtW7D/pgVazy5kj52qk1qHwspKYZjsErwHX 3A658iQsVY8SjaOyH3N6ptC4ncWXZGudDRvJRNcAANK39a+qhltfKVQsVmyxxC9f CNVdaRuUXTqeaZl0hA9PhG47tCODqLoWUK3bGgm9kq5JeuTUWvHgDC/GPYJfy4K9 cMlhKaprBi3YBN5+qXYGnDTHerRGB9ItnqD06HiOebSs4UWrRbBvsq2XOf7rMF3C Rdg7wtMcKsN2laBSG96WPvq3KRsgbQV0ChA3crxusSS4hREJuEESTCkUAQvVXKEp eW8nSqALpBSWXlp9PtKsaIn1tt5j29Q2SqolB4Rn8iXEOo8HZvg= -----END CERTIFICATE-----Generated at Fri Jun 6 16:25:33 2025 by rpki-client