$ rpki-client -vvf repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft File: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft (raw, json) Hash identifier: 8U0lzlGeogmm3HVDRGD27OJxK0/qo+nEzwvHioocwq4= Subject key identifier: 68:DD:52:B3:FE:0A:7B:75:81:63:78:14:F8:F2:DC:69:B1:8D:44:64 Authority key identifier: 62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 Certificate issuer: /CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Certificate serial: 3E603C4183F3A2E893206E6F2FB375779890C4B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft Manifest number: 5A Signing time: Sun 08 Jun 2025 04:51:19 +0000 Manifest this update: Sun 08 Jun 2025 04:46:19 +0000 Manifest next update: Wed 11 Jun 2025 05:17:19 +0000 Files and hashes: 1: 3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa (hash: lqWm7H1VLaNogQYDvPWFxyEVAtvNrhxj3L3hhsj87j0=) 2: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl (hash: dxlCEB8jx8OwR4bb1rMdNW7eLGh1oWYTUFNyK5ROIeg=) 3: 3136302e3139312e3138312e302f32342d3234203d3e20313533313530.roa (hash: R1Eo64irF2fqBU24QMOkIR4K/Db3F6prGasQKdzareI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 05:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:60:3c:41:83:f3:a2:e8:93:20:6e:6f:2f:b3:75:77:98:90:c4:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Validity Not Before: Jun 8 04:46:19 2025 GMT Not After : Jun 11 05:17:19 2025 GMT Subject: CN=68DD52B3FE0A7B7581637814F8F2DC69B18D4464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:93:e9:23:8b:9b:eb:70:4a:05:71:3e:37:83: ba:15:fd:0c:de:77:c1:9f:b5:ed:46:c2:9c:12:18: ab:e9:55:78:e0:7b:29:2c:dc:6c:ef:6d:f6:00:dd: 8f:3b:46:a5:6f:38:05:74:63:c8:59:92:42:d2:a6: 23:39:3f:5c:0c:d6:d1:4e:66:a4:dc:50:00:03:dc: 12:d6:be:ef:de:b3:84:c5:69:e3:e6:f0:5d:77:26: 8f:54:5a:4a:4b:cb:89:67:69:88:36:a0:ae:e7:3a: 23:7f:65:19:03:43:17:db:f0:8b:fd:6d:4a:bc:b0: 8f:97:28:30:39:e3:50:e5:55:d7:84:7e:34:63:c3: bd:6d:97:7c:f1:80:b7:af:9f:3b:9e:5b:56:3f:61: 3c:39:0a:58:18:cd:22:db:72:4b:58:26:34:a0:4c: fa:bb:bf:45:c4:59:9c:15:bf:fc:0a:40:d8:d5:6a: a7:88:bb:53:bc:01:4a:79:47:86:f9:76:35:a1:1f: b2:9a:8a:5c:3b:d5:e8:7c:52:f5:00:a3:5e:7e:8b: 99:04:04:3c:35:81:a9:93:b0:b6:84:76:29:a4:64: 40:60:a1:80:3f:90:6e:70:33:3c:c8:dc:90:42:06: 24:29:13:1e:8c:14:48:f4:89:24:08:d8:9a:53:ae: 6e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:DD:52:B3:FE:0A:7B:75:81:63:78:14:F8:F2:DC:69:B1:8D:44:64 X509v3 Authority Key Identifier: keyid:62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:e0:27:72:0a:28:25:73:35:04:03:a5:b0:17:3e:f7:d4:44: f3:0b:28:2e:f4:74:bc:2e:35:7f:91:4e:42:39:99:f2:a2:d7: cd:16:c9:ad:9f:39:96:d1:4a:88:6f:d7:7e:33:58:ff:b7:5e: 6e:67:00:2c:51:ab:29:78:85:bd:8e:d5:a2:4e:1a:3e:0a:46: 1e:61:09:2f:87:9e:1b:58:2e:78:46:4d:01:23:11:31:c3:5a: 36:b6:74:da:8f:ab:ea:09:18:ac:b8:a1:5b:2f:d2:ea:f3:e9: 71:40:bb:03:8e:14:27:14:08:1f:1f:c6:02:e7:28:90:fb:de: b7:ae:f8:e3:e0:56:9b:5d:53:ce:ea:07:4f:d2:bd:31:67:8e: 6c:74:f4:75:ea:8d:aa:63:2c:00:cf:f1:6f:11:e9:c5:34:11: 2f:96:48:b5:2c:56:10:6f:20:2a:85:b0:a7:13:2d:6b:70:06: bd:dd:4d:d5:30:55:6f:c3:4e:38:28:40:bf:99:b5:8c:3d:77: 5d:1d:14:ef:e0:61:6a:81:ab:82:b2:00:4e:49:c9:de:5f:91: fe:bf:01:2c:4c:ac:a2:72:88:df:7c:64:57:16:19:ed:b4:92: 29:8a:10:6e:d5:a0:cc:e3:9a:51:a5:ba:88:9a:87:26:9b:36: 4f:9a:64:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPmA8QYPzouiTIG5vL7N1d5iQxLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAw Qjk0RjhBNDAeFw0yNTA2MDgwNDQ2MTlaFw0yNTA2MTEwNTE3MTlaMDMxMTAvBgNV BAMTKDY4REQ1MkIzRkUwQTdCNzU4MTYzNzgxNEY4RjJEQzY5QjE4RDQ0NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtk+kji5vrcEoFcT43g7oV/Qze d8Gfte1GwpwSGKvpVXjgeyks3GzvbfYA3Y87RqVvOAV0Y8hZkkLSpiM5P1wM1tFO ZqTcUAAD3BLWvu/es4TFaePm8F13Jo9UWkpLy4lnaYg2oK7nOiN/ZRkDQxfb8Iv9 bUq8sI+XKDA541DlVdeEfjRjw71tl3zxgLevnzueW1Y/YTw5ClgYzSLbcktYJjSg TPq7v0XEWZwVv/wKQNjVaqeIu1O8AUp5R4b5djWhH7Kailw71eh8UvUAo15+i5kE BDw1gamTsLaEdimkZEBgoYA/kG5wMzzI3JBCBiQpEx6MFEj0iSQI2JpTrm77AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaN1Ss/4Ke3WBY3gU+PLcabGNRGQwHwYDVR0j BBgwFoAUYkfRqvOxW1DTpz5E5Z4sAAuU+KQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTk2MTJhMi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMC82MjQ3RDFBQUYz QjE1QjUwRDNBNzNFNDRFNTlFMkMwMDBCOTRGOEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAwQjk0 RjhBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzAvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJD MDAwQjk0RjhBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFXgJ3IKKCVzNQQDpbAXPvfURPMLKC70dLwu NX+RTkI5mfKi180Wya2fOZbRSohv134zWP+3Xm5nACxRqyl4hb2O1aJOGj4KRh5h CS+HnhtYLnhGTQEjETHDWja2dNqPq+oJGKy4oVsv0urz6XFAuwOOFCcUCB8fxgLn KJD73reu+OPgVptdU87qB0/SvTFnjmx09HXqjapjLADP8W8R6cU0ES+WSLUsVhBv ICqFsKcTLWtwBr3dTdUwVW/DTjgoQL+ZtYw9d10dFO/gYWqBq4KyAE5Jyd5fkf6/ ASxMrKJyiN98ZFcWGe20kimKEG7VoMzjmlGluoiahyabNk+aZKA= -----END CERTIFICATE-----Generated at Mon Jun 9 07:27:11 2025 by rpki-client