$ rpki-client -vvf repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft File: 6437999FD06F2C7F0F16F8160CD6145F775884A4.mft (raw, json) Hash identifier: qqANQt8C4hUOGMOj2McrKiOOHSBRovQ0ZSyzCGzTWBQ= Subject key identifier: 12:BE:E8:44:13:F8:4B:D8:4C:2E:FB:18:A2:9E:1C:C2:BA:6C:E0:BF Authority key identifier: 64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 Certificate issuer: /CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Certificate serial: 43F90C12526DB2BE73984B7753B93F5CD2889A69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft Manifest number: 0213 Signing time: Thu 05 Jun 2025 18:20:03 +0000 Manifest this update: Thu 05 Jun 2025 18:15:03 +0000 Manifest next update: Sun 08 Jun 2025 18:52:03 +0000 Files and hashes: 1: 6437999FD06F2C7F0F16F8160CD6145F775884A4.crl (hash: 4zWjbYIr+CHJZf1XB3psTOeq0fNr18dA/djAclEQpzo=) 2: 3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa (hash: FtQ7YyJ/nXZZN06U1YB5sNs24X+l1RzMYb5gI1y1G9M=) 3: 3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa (hash: 6kBcLlz4I+EwiYd/zHv8YINF31MEROhjhbQ+A0qjPjE=) 4: 3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa (hash: b3wEoQmduATe2XsB1+5lzcIjLJ7k0E7+xb68g1ewVFQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 18:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:f9:0c:12:52:6d:b2:be:73:98:4b:77:53:b9:3f:5c:d2:88:9a:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Validity Not Before: Jun 5 18:15:03 2025 GMT Not After : Jun 8 18:52:03 2025 GMT Subject: CN=12BEE84413F84BD84C2EFB18A29E1CC2BA6CE0BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:84:4b:69:40:5f:53:9b:db:80:00:51:28:ac: d9:c6:b0:59:09:02:5b:ee:31:d0:87:28:1d:4b:d0: 2a:44:8c:66:5a:8d:9e:a9:93:18:56:c3:81:72:7d: 88:19:93:de:7d:8b:96:2f:e8:b3:f1:8e:62:f3:5f: 7e:c2:a2:22:65:ec:3f:7b:ce:ac:1b:c4:05:a4:8c: b1:b9:e8:1f:3a:27:4d:c3:1a:94:54:21:a2:84:4d: 69:2c:4a:32:1c:6d:b6:e6:16:28:7f:d1:b7:3b:c1: 16:3f:53:d1:d1:67:b8:9f:d5:8f:d1:cc:03:2f:3e: b0:f4:7c:9e:53:e1:29:99:50:17:69:6f:0e:61:94: 2e:6f:c3:d9:eb:7a:a1:8e:0a:fa:f4:7a:63:a1:70: 9c:fe:3b:aa:1c:aa:a3:f9:4f:41:af:29:34:ff:69: 2b:c9:54:49:3f:db:2e:42:41:9e:05:ea:56:fc:0d: 35:57:33:ab:23:67:40:1b:e5:ea:8f:ff:e2:6a:80: 49:84:8e:f5:a3:90:e9:33:cd:58:f9:60:32:97:b4: 7e:32:dc:91:ed:b7:e7:06:63:af:cb:0c:a3:07:92: ee:64:01:b7:33:4c:8d:30:7b:f7:93:84:c5:6d:4a: db:b8:bf:e0:ae:bd:6c:4e:ca:74:4f:10:c1:85:db: a7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BE:E8:44:13:F8:4B:D8:4C:2E:FB:18:A2:9E:1C:C2:BA:6C:E0:BF X509v3 Authority Key Identifier: keyid:64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:84:6b:fe:35:b3:a6:3d:ee:7f:63:48:13:39:94:eb:5b:21: f7:47:b4:57:81:c7:cc:25:09:79:8e:e4:ad:ba:b2:b1:bc:52: 85:49:34:47:02:6c:73:90:ee:cd:8f:31:db:aa:28:94:9c:8c: f8:43:0b:25:7f:14:be:95:db:54:c8:95:f3:d8:e7:32:da:54: 9d:65:9d:67:f1:e1:12:59:29:f1:5a:a5:97:e6:9b:01:1a:09: a1:c3:dd:88:e8:86:a2:07:6e:3c:f3:6e:67:7e:a2:51:1c:54: 81:3c:94:2a:79:d5:eb:38:6c:41:33:09:6c:47:3f:a2:f1:c1: 63:9d:6b:fb:40:c3:b9:06:51:bc:92:f2:2d:02:64:a2:30:56: 44:a3:5f:92:50:e0:6a:d1:89:6b:dc:82:bb:83:43:d0:eb:7c: ed:f7:4d:c8:e2:10:c6:f3:b8:6b:8e:81:4a:1d:15:9a:22:b1: bd:18:32:00:78:77:33:05:5c:3d:bd:60:1c:f7:5e:dc:85:25: 7e:03:fa:ac:cf:97:29:f7:d6:54:4c:4f:75:63:68:e8:d0:b8: f3:b5:8b:04:df:03:96:7a:68:bf:52:b2:ce:96:dc:d7:4b:94: 8d:93:43:bf:95:17:b5:7e:73:eb:a3:84:e8:7f:3a:10:81:b3: 01:82:e6:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ/kMElJtsr5zmEt3U7k/XNKImmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3 NzU4ODRBNDAeFw0yNTA2MDUxODE1MDNaFw0yNTA2MDgxODUyMDNaMDMxMTAvBgNV BAMTKDEyQkVFODQ0MTNGODRCRDg0QzJFRkIxOEEyOUUxQ0MyQkE2Q0UwQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjhEtpQF9Tm9uAAFEorNnGsFkJ AlvuMdCHKB1L0CpEjGZajZ6pkxhWw4FyfYgZk959i5Yv6LPxjmLzX37CoiJl7D97 zqwbxAWkjLG56B86J03DGpRUIaKETWksSjIcbbbmFih/0bc7wRY/U9HRZ7if1Y/R zAMvPrD0fJ5T4SmZUBdpbw5hlC5vw9nreqGOCvr0emOhcJz+O6ocqqP5T0GvKTT/ aSvJVEk/2y5CQZ4F6lb8DTVXM6sjZ0Ab5eqP/+JqgEmEjvWjkOkzzVj5YDKXtH4y 3JHtt+cGY6/LDKMHku5kAbczTI0we/eThMVtStu4v+CuvWxOynRPEMGF26cPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEr7oRBP4S9hMLvsYop4cwrps4L8wHwYDVR0j BBgwFoAUZDeZn9BvLH8PFvgWDNYUX3dYhKQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzZmZGM2MC04MDIzLTQwY2QtYWFhNC1jZDZlZDIyYzRkNDUvMC82NDM3OTk5RkQw NkYyQzdGMEYxNkY4MTYwQ0Q2MTQ1Rjc3NTg4NEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3NzU4 ODRBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc2ZmRjNjAtODAyMy00MGNkLWFh YTQtY2Q2ZWQyMmM0ZDQ1LzAvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0 NUY3NzU4ODRBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2Ea/41s6Y97n9jSBM5lOtbIfdHtFeBx8wl CXmO5K26srG8UoVJNEcCbHOQ7s2PMduqKJScjPhDCyV/FL6V21TIlfPY5zLaVJ1l nWfx4RJZKfFapZfmmwEaCaHD3YjohqIHbjzzbmd+olEcVIE8lCp51es4bEEzCWxH P6LxwWOda/tAw7kGUbyS8i0CZKIwVkSjX5JQ4GrRiWvcgruDQ9DrfO33TcjiEMbz uGuOgUodFZoisb0YMgB4dzMFXD29YBz3XtyFJX4D+qzPlyn31lRMT3VjaOjQuPO1 iwTfA5Z6aL9Sss6W3NdLlI2TQ7+VF7V+c+ujhOh/OhCBswGC5rY= -----END CERTIFICATE-----Generated at Sat Jun 7 04:48:31 2025 by rpki-client