$ rpki-client -vvf repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft File: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft (raw, json) Hash identifier: +I3W6H80/87VLrAh5+bo57uukyIfriYkJhGoAT7EeEU= Subject key identifier: 15:D7:C1:E6:80:61:B0:DB:FE:C1:6D:50:42:49:68:D6:D1:7B:B8:EA Authority key identifier: 6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 Certificate issuer: /CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Certificate serial: 652F123086582F9F8A34308DC8F14F8020F31CAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft Manifest number: 01A3 Signing time: Wed 04 Jun 2025 23:10:38 +0000 Manifest this update: Wed 04 Jun 2025 23:05:38 +0000 Manifest next update: Sun 08 Jun 2025 09:59:38 +0000 Files and hashes: 1: 3130332e3132362e3131392e302f32342d3234203d3e20313339393732.roa (hash: nPlUaL9yF2n402rwq54ga4y4IA8tmh1JYztdhgr/yzQ=) 2: 3130332e3132362e3131362e302f32342d3234203d3e20313338313136.roa (hash: JQnrpdZbIEjOMrJ0gY+bWa1ZiQUgvaTVgcxr/pouQFw=) 3: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl (hash: +mCNzdVeBxLcPLEC0N5eTIeX3gs7nyao/U8hikdx/pw=) 4: 3130332e3132362e3131372e302f32342d3234203d3e20313338313136.roa (hash: jIRxROaY+ZsyLOueu1pqPluvRpe9DT1746X5+JI8kKs=) 5: 3130332e3132362e3131382e302f32342d3234203d3e20313338313136.roa (hash: IZ8KmdFwK5i2F35Ti/yV73rwyTaK/R/VAzY82jFEZs8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 09:59:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:2f:12:30:86:58:2f:9f:8a:34:30:8d:c8:f1:4f:80:20:f3:1c:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Validity Not Before: Jun 4 23:05:38 2025 GMT Not After : Jun 8 09:59:38 2025 GMT Subject: CN=15D7C1E68061B0DBFEC16D50424968D6D17BB8EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5c:14:51:cb:53:3c:34:ef:46:65:b6:92:3c: ff:a3:18:61:52:11:92:a0:b2:d5:4a:3a:8b:be:c7: 1e:ce:76:a4:04:17:a9:31:42:b7:08:0d:9a:06:fb: e6:5d:a7:7f:00:f0:3e:3e:f0:d7:4a:51:68:e1:1e: 22:91:41:04:8a:2c:d1:2b:60:0b:d4:5c:1f:ba:8f: e3:46:80:7d:cd:18:5e:98:5d:dd:da:88:fe:06:40: 26:5b:bc:ff:1c:29:03:ca:8f:1d:8d:90:2a:06:74: eb:52:74:96:c2:4d:c5:1c:e7:2e:e3:85:9d:1e:7e: 81:3d:af:70:b4:e6:bc:0b:19:52:01:c3:c4:df:64: cd:48:b1:53:4d:96:a7:7b:8b:13:03:7b:83:3a:2c: 83:73:b8:4b:b9:bb:df:8c:83:21:11:6a:64:36:17: d1:01:c4:41:e6:72:fd:a1:af:4b:85:4b:99:81:07: fb:9e:30:8c:5e:8b:2d:7a:5a:ab:92:b6:fd:12:98: 74:96:9e:2b:09:ae:6f:0d:d6:c9:38:f8:0a:78:53: cc:26:59:2b:06:f1:bb:39:9e:c8:a9:de:ca:60:c8: 5a:69:cb:99:86:01:1d:8e:ba:00:dd:79:f2:ef:fb: 4d:e4:f6:62:01:5b:e4:c2:e7:b2:3f:e8:5a:5a:45: 22:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D7:C1:E6:80:61:B0:DB:FE:C1:6D:50:42:49:68:D6:D1:7B:B8:EA X509v3 Authority Key Identifier: keyid:6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:60:08:0e:32:0f:2f:eb:64:14:61:37:74:0b:c0:7b:d2:18: 93:72:d9:20:88:2d:b6:f4:7e:08:41:a5:2a:f4:9f:44:00:f9: b9:e1:c6:b8:54:3b:9d:65:15:7f:04:36:a8:5e:33:3f:79:d3: ca:33:e0:bd:a4:a3:95:99:43:c1:29:2c:28:d8:6d:c8:b0:42: 80:21:43:ad:12:50:dd:a5:77:b8:61:61:7f:eb:a0:11:3e:af: 18:89:c8:b6:c4:36:50:d1:bc:45:21:15:63:56:9d:39:b3:9a: d5:dd:29:d5:86:f1:93:2e:07:21:07:b3:dd:af:65:95:46:68: 68:0f:c4:3a:1e:64:4f:6b:76:73:33:d6:6b:b8:3b:82:92:e5: 72:34:e5:d4:e1:f7:70:99:7f:85:b5:81:54:f4:f0:15:05:90: 14:07:75:49:49:75:b1:a9:41:65:45:af:36:08:e3:db:27:e8: 4e:f4:59:13:68:15:a1:78:a2:17:c3:fd:1e:fa:fa:06:8d:a1: 80:0f:48:69:74:ca:bd:90:f4:01:e9:67:29:5f:2c:95:8d:9e: ba:b8:6f:63:82:43:19:f1:a8:5c:1e:4b:ae:82:b1:50:61:e7: d6:18:7c:6b:26:20:d9:af:3b:ca:a6:1b:65:6a:23:ed:d1:24: cd:81:af:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZS8SMIZYL5+KNDCNyPFPgCDzHK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdE MDJGNDdFODAeFw0yNTA2MDQyMzA1MzhaFw0yNTA2MDgwOTU5MzhaMDMxMTAvBgNV BAMTKDE1RDdDMUU2ODA2MUIwREJGRUMxNkQ1MDQyNDk2OEQ2RDE3QkI4RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNXBRRy1M8NO9GZbaSPP+jGGFS EZKgstVKOou+xx7OdqQEF6kxQrcIDZoG++Zdp38A8D4+8NdKUWjhHiKRQQSKLNEr YAvUXB+6j+NGgH3NGF6YXd3aiP4GQCZbvP8cKQPKjx2NkCoGdOtSdJbCTcUc5y7j hZ0efoE9r3C05rwLGVIBw8TfZM1IsVNNlqd7ixMDe4M6LINzuEu5u9+MgyERamQ2 F9EBxEHmcv2hr0uFS5mBB/ueMIxeiy16WquStv0SmHSWnisJrm8N1sk4+Ap4U8wm WSsG8bs5nsip3spgyFppy5mGAR2OugDdefLv+03k9mIBW+TC57I/6FpaRSIdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFdfB5oBhsNv+wW1QQklo1tF7uOowHwYDVR0j BBgwFoAUbfioc7cLqMytoxqt2CFf99AvR+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 N2QyNmRlMC02OGNmLTQyOWMtOGIwZS04ZDY0Yjc2MmY4MjQvMC82REY4QTg3M0I3 MEJBOENDQURBMzFBQUREODIxNUZGN0QwMkY0N0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdEMDJG NDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTdkMjZkZTAtNjhjZi00MjljLThi MGUtOGQ2NGI3NjJmODI0LzAvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVG RjdEMDJGNDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9gCA4yDy/rZBRhN3QLwHvSGJNy2SCILbb0 fghBpSr0n0QA+bnhxrhUO51lFX8ENqheMz9508oz4L2ko5WZQ8EpLCjYbciwQoAh Q60SUN2ld7hhYX/roBE+rxiJyLbENlDRvEUhFWNWnTmzmtXdKdWG8ZMuByEHs92v ZZVGaGgPxDoeZE9rdnMz1mu4O4KS5XI05dTh93CZf4W1gVT08BUFkBQHdUlJdbGp QWVFrzYI49sn6E70WRNoFaF4ohfD/R76+gaNoYAPSGl0yr2Q9AHpZylfLJWNnrq4 b2OCQxnxqFweS66CsVBh59YYfGsmINmvO8qmG2VqI+3RJM2Br3k= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:38 2025 by rpki-client