$ rpki-client -vvf repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft File: 6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft (raw, json) Hash identifier: kemnsGp2i4CbzDhMunxpkPaRM8BejC8Sy9JSEyJr4Qs= Subject key identifier: 08:ED:96:98:4C:A1:5B:4E:77:A5:EE:D6:F0:2C:97:34:30:99:4E:2E Authority key identifier: 6B:3B:A2:8F:EC:36:89:C8:F8:8C:E4:13:7A:3D:64:5A:51:FE:6D:32 Certificate issuer: /CN=6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32 Certificate serial: 2411E732B98A42D9EE65F931826A803AC46AFA88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft Manifest number: F9 Signing time: Mon 02 Jun 2025 14:52:18 +0000 Manifest this update: Mon 02 Jun 2025 14:47:18 +0000 Manifest next update: Fri 06 Jun 2025 01:08:18 +0000 Files and hashes: 1: 6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl (hash: 3xgGipFzGM7ejkWgLSfICcpKoHL79m8o9/J3jU6kRgk=) 2: 3130332e3234352e3136382e302f32332d3234203d3e20313531353333.roa (hash: KkeDpJbJi4/SJuEv3vqbkyR6Y9e6oZK3Xf5VQFtyFSI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 01:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:11:e7:32:b9:8a:42:d9:ee:65:f9:31:82:6a:80:3a:c4:6a:fa:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32 Validity Not Before: Jun 2 14:47:18 2025 GMT Not After : Jun 6 01:08:18 2025 GMT Subject: CN=08ED96984CA15B4E77A5EED6F02C973430994E2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:38:38:e1:7b:7a:e3:8b:ce:54:9f:b2:8f:36: 11:ae:e5:c9:fe:2d:69:d6:8f:ef:c8:18:c0:a7:08: a6:43:79:eb:df:23:1c:23:0e:1f:5f:c3:cf:01:c2: 2b:34:ee:71:96:07:15:5f:e4:48:cb:e2:fb:15:41: 96:72:89:c9:b3:43:19:e6:e4:18:08:da:a2:22:95: bf:8d:f2:90:25:22:98:72:34:3b:39:dd:e3:02:0f: e2:58:a5:b8:c2:e8:6b:e4:ed:08:78:8c:dc:08:8b: 9b:41:68:51:35:1f:fd:69:e7:c4:c9:2f:52:ba:24: 21:7a:b0:77:a1:d1:a2:c6:85:97:98:75:44:2d:ca: e6:ac:06:43:98:3b:e6:6d:07:f0:7f:3a:d7:b3:46: 43:50:2a:60:12:54:b3:e1:30:1a:b4:c0:65:56:ac: 1a:85:f2:2c:10:22:ce:84:07:4a:46:dc:ba:70:13: 2a:90:7a:65:7d:e5:78:45:1a:d1:b9:bf:85:99:d1: 4c:4e:9f:d7:89:a0:5f:37:6a:50:b5:7f:fc:6e:92: 92:49:af:31:3b:07:76:3b:81:ff:71:a0:d3:b1:46: a7:7b:07:62:fb:05:ba:e8:24:1e:0d:5f:59:66:5d: 7a:d4:60:46:3c:be:a7:59:c4:71:d0:9b:bc:8b:ef: 28:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:ED:96:98:4C:A1:5B:4E:77:A5:EE:D6:F0:2C:97:34:30:99:4E:2E X509v3 Authority Key Identifier: keyid:6B:3B:A2:8F:EC:36:89:C8:F8:8C:E4:13:7A:3D:64:5A:51:FE:6D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:fa:3f:a7:b0:38:6d:1e:04:3b:fb:e3:7f:1e:85:f4:3b:b1: da:be:53:2e:78:7e:da:0c:db:17:7f:98:39:24:a3:7e:88:21: 74:06:36:ca:5c:14:6f:d7:29:5d:36:f5:f6:4b:a7:94:af:7d: d2:ab:3a:54:df:93:82:e8:ae:b2:e3:41:06:2c:20:42:3d:88: 87:2c:93:84:86:60:f8:ab:82:12:c4:64:06:5d:6f:3a:b8:c7: c2:93:1c:6e:3b:65:35:b6:5e:4a:99:b2:d6:f9:22:c4:b3:38: 81:43:c7:4d:46:4c:8f:29:d3:29:1f:31:4c:80:50:f5:dd:b9: 3a:33:7b:8e:79:4e:b1:e6:83:f3:d7:16:07:a1:cb:73:91:c8: 3b:c7:c0:75:9b:b8:0c:c5:2c:25:4d:81:fb:6a:3a:91:fa:ca: fa:28:29:7b:83:f5:65:67:e4:96:b8:41:e7:76:85:27:5c:e4: 97:b2:15:9b:0a:3e:8d:c9:6c:9f:21:b0:89:e1:49:ab:d3:6b: 6e:60:70:e1:80:9f:1b:9f:0e:fe:bc:0f:20:21:38:48:88:d8: 75:e5:74:b0:0e:a4:b1:e1:8b:02:a5:e1:5a:03:5c:15:1c:53: d5:b2:ad:43:68:1b:99:fd:e6:60:6f:36:a4:45:e5:83:3c:eb: b1:c9:49:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJBHnMrmKQtnuZfkxgmqAOsRq+ogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzQkEyOEZFQzM2ODlDOEY4OENFNDEzN0EzRDY0NUE1 MUZFNkQzMjAeFw0yNTA2MDIxNDQ3MThaFw0yNTA2MDYwMTA4MThaMDMxMTAvBgNV BAMTKDA4RUQ5Njk4NENBMTVCNEU3N0E1RUVENkYwMkM5NzM0MzA5OTRFMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVODjhe3rji85Un7KPNhGu5cn+ LWnWj+/IGMCnCKZDeevfIxwjDh9fw88Bwis07nGWBxVf5EjL4vsVQZZyicmzQxnm 5BgI2qIilb+N8pAlIphyNDs53eMCD+JYpbjC6Gvk7Qh4jNwIi5tBaFE1H/1p58TJ L1K6JCF6sHeh0aLGhZeYdUQtyuasBkOYO+ZtB/B/OtezRkNQKmASVLPhMBq0wGVW rBqF8iwQIs6EB0pG3LpwEyqQemV95XhFGtG5v4WZ0UxOn9eJoF83alC1f/xukpJJ rzE7B3Y7gf9xoNOxRqd7B2L7BbroJB4NX1lmXXrUYEY8vqdZxHHQm7yL7yhFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCO2WmEyhW053pe7W8CyXNDCZTi4wHwYDVR0j BBgwFoAUazuij+w2icj4jOQTej1kWlH+bTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTFkZWI5My1jMTkwLTQ2ZWUtYmE4My0yZDkxOTMwYTQzOTUvMC82QjNCQTI4RkVD MzY4OUM4Rjg4Q0U0MTM3QTNENjQ1QTUxRkU2RDMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkIzQkEyOEZFQzM2ODlDOEY4OENFNDEzN0EzRDY0NUE1MUZF NkQzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2UxZGViOTMtYzE5MC00NmVlLWJh ODMtMmQ5MTkzMGE0Mzk1LzAvNkIzQkEyOEZFQzM2ODlDOEY4OENFNDEzN0EzRDY0 NUE1MUZFNkQzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGb6P6ewOG0eBDv7438ehfQ7sdq+Uy54ftoM 2xd/mDkko36IIXQGNspcFG/XKV029fZLp5SvfdKrOlTfk4LorrLjQQYsIEI9iIcs k4SGYPirghLEZAZdbzq4x8KTHG47ZTW2XkqZstb5IsSzOIFDx01GTI8p0ykfMUyA UPXduToze455TrHmg/PXFgehy3ORyDvHwHWbuAzFLCVNgftqOpH6yvooKXuD9WVn 5Ja4Qed2hSdc5JeyFZsKPo3JbJ8hsInhSavTa25gcOGAnxufDv68DyAhOEiI2HXl dLAOpLHhiwKl4VoDXBUcU9WyrUNoG5n95mBvNqRF5YM867HJSZE= -----END CERTIFICATE-----Generated at Tue Jun 3 23:44:19 2025 by rpki-client