$ rpki-client -vvf repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft File: 6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft (raw, json) Hash identifier: uNcw5aXNOn2l20P4sEWPS7SVhGCw40IVTMPc15syctE= Subject key identifier: 56:26:66:0C:A2:C0:05:7A:2A:7E:E2:60:63:4B:F7:E5:D7:51:7F:EF Authority key identifier: 6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19 Certificate issuer: /CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19 Certificate serial: 6B95B3CA79E5E9262E95DE2CDE25CEFD494A94E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft Manifest number: 04D8 Signing time: Wed 04 Jun 2025 03:00:37 +0000 Manifest this update: Wed 04 Jun 2025 02:55:37 +0000 Manifest next update: Sat 07 Jun 2025 04:08:37 +0000 Files and hashes: 1: 3130332e35322e3137312e302f32342d3234203d3e203633383732.roa (hash: 8GeHpy3P984a7HFNxAJwy8wpU0ns8pabD1WKnP4tvuw=) 2: 3130332e35322e3137302e302f32332d3233203d3e203633383732.roa (hash: brSZ0m97l9z7YCV2zCWTUJDAsUOi5NNl8YP1n7Hn+04=) 3: 323030313a6466333a6330303a3a2f34382d3438203d3e203633383732.roa (hash: DbPoZnzVJDn8t1MnQ7X+537hTvhkD/yKBSWUNPseJA0=) 4: 3130332e3132372e3134352e302f32342d3234203d3e203633383732.roa (hash: MXaL0QCe5+IS+MABtk7XIsAr+HW38yfYtKBH23S5G78=) 5: 3130332e35322e3137302e302f32342d3234203d3e203633383732.roa (hash: Z+FoVz2t/bU9Oh29fvVmEj58qbcaPFxm8OsmszzE23M=) 6: 3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa (hash: dT1Ez91RELEcb3/us3FXp8X3LrIGPlHAyCw3ou4h/Pw=) 7: 6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl (hash: n2JJaL6CGhggfY3pH7t9mdua7vJMw5wRnb8RLLGB6B4=) 8: 3130332e3132372e3134342e302f32332d3233203d3e203633383732.roa (hash: ej36uL5q6V5lzJlk2/mVmLfbDb6eLchafID3r1d/Uc0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:95:b3:ca:79:e5:e9:26:2e:95:de:2c:de:25:ce:fd:49:4a:94:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19 Validity Not Before: Jun 4 02:55:37 2025 GMT Not After : Jun 7 04:08:37 2025 GMT Subject: CN=5626660CA2C0057A2A7EE260634BF7E5D7517FEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ef:34:7c:97:04:0b:b5:68:dd:4a:4c:9b:9b: ab:24:56:b5:d9:b1:34:1e:72:07:3c:e4:da:46:bd: 46:7a:15:35:38:00:11:17:4e:21:83:ab:e9:da:b8: 08:a9:49:9e:23:8d:a8:23:66:47:02:fc:a4:83:a0: 24:c8:45:ba:d7:82:e3:04:0a:6b:42:7f:33:a0:4b: 8c:ef:61:d3:60:f0:43:64:c4:23:3a:cd:ed:b3:e4: 5c:83:f5:41:60:b7:43:ed:f4:a4:96:b6:68:31:b0: 98:c9:e2:76:fd:56:95:b0:a2:1a:8f:bd:4f:e2:3d: 06:0d:c3:e5:cc:45:9e:0b:ed:3e:7a:18:3a:1f:59: 02:d1:9c:66:65:e0:f5:eb:f1:de:ba:13:c6:b6:90: b0:b0:09:07:8f:43:0a:ee:7b:c3:ed:35:8a:86:ea: 73:bc:b1:04:d5:e3:00:a6:2b:90:60:04:b7:31:d2: ee:00:9e:a9:bd:79:22:8f:93:31:ff:8c:96:7f:5c: b9:9f:70:20:fa:a7:9f:60:9d:6e:41:4f:4d:a6:ef: c8:81:db:a6:29:53:a8:7f:6d:11:7d:81:2b:fd:e7: 34:cb:59:04:a4:71:5c:1d:b8:3c:27:0e:a7:f6:2d: 53:91:32:87:78:dc:c0:8f:0f:d4:68:ea:68:26:dd: b8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:26:66:0C:A2:C0:05:7A:2A:7E:E2:60:63:4B:F7:E5:D7:51:7F:EF X509v3 Authority Key Identifier: keyid:6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:5f:10:5b:25:ae:ea:f8:b6:7c:97:fb:24:ec:05:da:4a:7b: 73:ed:e4:5e:9d:8d:32:55:ae:51:92:80:f6:55:c5:7e:ef:d3: f9:12:60:5c:03:1e:90:40:bf:49:7d:54:7a:50:82:a2:a4:3b: f2:08:5a:9e:ed:cc:9c:93:a3:b9:f2:96:1e:cd:d9:45:86:4c: ce:95:1a:53:1b:e2:16:ff:0c:9c:5b:8f:89:7b:0d:6b:f8:89: af:38:fa:5b:e3:fe:4c:35:e6:e4:30:fa:ba:a9:ab:83:18:7e: bf:89:42:3d:c3:e2:17:59:f6:f0:b2:fc:07:63:69:bf:b5:bc: 02:62:c4:ae:0c:bf:be:77:12:88:62:ee:8b:97:89:ee:4f:08: f5:ba:d7:2d:23:39:13:25:da:1e:1c:ce:b4:4a:1f:f1:2f:93: 00:97:93:5a:8a:df:63:9f:1b:ab:91:4f:b6:c5:96:13:46:82: 5b:cd:f5:18:0e:3e:99:23:f1:1c:31:73:a8:10:4a:c0:81:b1: 0d:3f:4e:af:0c:18:eb:d8:52:bf:23:d4:35:15:69:ab:a0:a3: 6f:67:bf:7f:4c:75:b7:a0:e8:38:fd:5f:fe:38:ce:35:71:6f: ce:58:b6:d7:c4:8a:58:cc:34:60:b8:19:72:e5:fa:d7:6b:de: 9a:4d:ba:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa5Wzynnl6SYuld4s3iXO/UlKlOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3MTYy N0JFN0IxOTAeFw0yNTA2MDQwMjU1MzdaFw0yNTA2MDcwNDA4MzdaMDMxMTAvBgNV BAMTKDU2MjY2NjBDQTJDMDA1N0EyQTdFRTI2MDYzNEJGN0U1RDc1MTdGRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd7zR8lwQLtWjdSkybm6skVrXZ sTQecgc85NpGvUZ6FTU4ABEXTiGDq+nauAipSZ4jjagjZkcC/KSDoCTIRbrXguME CmtCfzOgS4zvYdNg8ENkxCM6ze2z5FyD9UFgt0Pt9KSWtmgxsJjJ4nb9VpWwohqP vU/iPQYNw+XMRZ4L7T56GDofWQLRnGZl4PXr8d66E8a2kLCwCQePQwrue8PtNYqG 6nO8sQTV4wCmK5BgBLcx0u4Anqm9eSKPkzH/jJZ/XLmfcCD6p59gnW5BT02m78iB 26YpU6h/bRF9gSv95zTLWQSkcVwduDwnDqf2LVORMod43MCPD9Ro6mgm3bj7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUViZmDKLABXoqfuJgY0v35ddRf+8wHwYDVR0j BBgwFoAUbWuu2/27qka/PaIYVXB3Fie+exkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NmJiMzMzYy05ODJiLTRmY2UtYWM4MS1iYzA2OTIyOWUyNDMvMC82RDZCQUVEQkZE QkJBQTQ2QkYzREEyMTg1NTcwNzcxNjI3QkU3QjE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3MTYyN0JF N0IxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTZiYjMzM2MtOTgyYi00ZmNlLWFj ODEtYmMwNjkyMjllMjQzLzAvNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3 MTYyN0JFN0IxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtfEFslrur4tnyX+yTsBdpKe3Pt5F6djTJV rlGSgPZVxX7v0/kSYFwDHpBAv0l9VHpQgqKkO/IIWp7tzJyTo7nylh7N2UWGTM6V GlMb4hb/DJxbj4l7DWv4ia84+lvj/kw15uQw+rqpq4MYfr+JQj3D4hdZ9vCy/Adj ab+1vAJixK4Mv753Eohi7ouXie5PCPW61y0jORMl2h4czrRKH/EvkwCXk1qK32Of G6uRT7bFlhNGglvN9RgOPpkj8Rwxc6gQSsCBsQ0/Tq8MGOvYUr8j1DUVaaugo29n v39Mdbeg6Dj9X/44zjVxb85YttfEiljMNGC4GXLl+tdr3ppNuj4= -----END CERTIFICATE-----Generated at Thu Jun 5 18:16:15 2025 by rpki-client