$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft File: 6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft (raw, json) Hash identifier: FBRcgJAXOJvCSZbI7DNh09rvycBRjAMdSi8hUk9zEV4= Subject key identifier: 8A:AA:10:27:8D:69:7F:D9:AA:FE:6B:8C:56:FA:04:E1:23:B3:6D:D8 Authority key identifier: 6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8 Certificate issuer: /CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8 Certificate serial: 24D43059EAE5985C54946A26011339DF83B0BCE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft Manifest number: 62 Signing time: Tue 03 Jun 2025 13:22:20 +0000 Manifest this update: Tue 03 Jun 2025 13:17:20 +0000 Manifest next update: Fri 06 Jun 2025 22:04:20 +0000 Files and hashes: 1: 323030313a6466343a353663303a3a2f34382d3438203d3e20313533313231.roa (hash: zTJG58E9CdtcpbOn2YccIUm1CoDteBuPCbelkCQEFPE=) 2: 6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl (hash: bD4KOIY+XHG4H8bOurxlRMB/UIZc1cCigDFXE9C9pvs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:d4:30:59:ea:e5:98:5c:54:94:6a:26:01:13:39:df:83:b0:bc:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8 Validity Not Before: Jun 3 13:17:20 2025 GMT Not After : Jun 6 22:04:20 2025 GMT Subject: CN=8AAA10278D697FD9AAFE6B8C56FA04E123B36DD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cb:d5:33:72:9d:d8:4d:bb:7b:dc:e0:2b:6c: 51:85:b8:c9:f8:64:d8:a3:1a:49:3c:1d:97:b9:90: 4d:44:c2:95:bd:f3:29:51:e9:74:fe:18:bb:cd:a6: fc:2f:6c:e1:85:a9:44:0d:bb:d9:91:6c:bc:61:7a: 66:c2:8d:17:04:65:60:23:f1:98:55:68:a0:54:3e: 6c:fa:8c:d1:72:da:e1:f1:75:10:f1:2d:c1:8e:98: 60:c8:ca:3f:fa:c4:4f:08:62:6a:cd:d9:44:76:9c: 6d:a7:6a:cb:c3:c5:e4:80:0f:c2:bb:d9:6e:09:d6: ba:b3:b1:70:44:4f:50:27:e4:39:b0:5f:de:16:73: ce:4d:d4:84:6e:e5:f9:73:44:2e:f8:ff:d2:d5:74: 91:7e:65:0a:d8:8b:34:73:01:ef:62:f3:ab:97:27: a6:17:94:19:7d:a4:78:17:28:3a:ce:e1:0d:cd:8b: cf:0b:12:db:7e:d5:19:91:c3:c2:53:82:c1:95:58: 65:8d:36:d9:a0:0f:aa:a4:1b:33:14:5b:b6:58:09: 64:cb:fb:3e:b0:89:49:ff:f8:0f:5f:1e:99:e7:fb: b8:93:90:86:6e:59:59:f5:82:c4:a5:51:d2:d2:ea: 4b:8d:1a:e3:db:13:f8:22:0d:90:9f:26:63:8e:47: e6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AA:10:27:8D:69:7F:D9:AA:FE:6B:8C:56:FA:04:E1:23:B3:6D:D8 X509v3 Authority Key Identifier: keyid:6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ec:3e:ce:b7:69:3b:c3:c4:53:7b:fa:2e:5a:8a:2c:8c:e6: d6:43:a3:74:9f:d6:db:ef:d9:1c:a3:62:75:91:90:af:81:15: 2a:04:c9:b0:98:70:ad:4a:2e:73:1f:54:49:1d:66:94:26:7c: df:7f:7d:96:27:e6:81:f6:b1:82:8a:0d:a0:76:6f:39:d5:c2: 75:8e:b0:ac:97:c5:c2:9d:fe:08:33:bd:0e:ab:95:fe:ff:15: c4:0d:a6:76:35:fb:97:73:15:9e:9a:fe:75:30:8b:de:b6:5e: b6:3f:9e:a2:cf:ff:10:ce:84:c9:1d:4b:70:a5:05:8a:e9:07: 7e:42:eb:a4:56:77:43:c5:dd:72:9e:2f:1d:04:0f:0d:47:6d: 2e:11:e8:fc:bd:6d:d5:a7:7b:ab:12:8e:80:88:c7:6c:23:de: 99:0b:93:60:a5:af:1a:9d:2c:64:85:fd:aa:6d:49:c5:b7:b4: 9d:bc:9c:ed:10:fa:a3:d2:2e:0b:c5:79:9f:6b:99:ae:8e:2c: 02:9b:00:e3:51:3b:56:c6:a4:0e:96:f8:47:ac:00:10:2c:5f: 19:70:a7:2a:b4:84:81:b9:d8:5f:be:c9:ff:f3:66:bd:93:9c: 2a:84:48:c4:9f:03:ea:07:01:83:6d:65:eb:4b:26:f0:e5:f6: 74:9e:01:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJNQwWerlmFxUlGomARM534OwvOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEzOTk2QUZFMTEzODIzODUzMEMyRkM5MkIyQUI2NzVG Q0QyMThDODAeFw0yNTA2MDMxMzE3MjBaFw0yNTA2MDYyMjA0MjBaMDMxMTAvBgNV BAMTKDhBQUExMDI3OEQ2OTdGRDlBQUZFNkI4QzU2RkEwNEUxMjNCMzZERDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4y9Uzcp3YTbt73OArbFGFuMn4 ZNijGkk8HZe5kE1EwpW98ylR6XT+GLvNpvwvbOGFqUQNu9mRbLxhembCjRcEZWAj 8ZhVaKBUPmz6jNFy2uHxdRDxLcGOmGDIyj/6xE8IYmrN2UR2nG2nasvDxeSAD8K7 2W4J1rqzsXBET1An5DmwX94Wc85N1IRu5flzRC74/9LVdJF+ZQrYizRzAe9i86uX J6YXlBl9pHgXKDrO4Q3Ni88LEtt+1RmRw8JTgsGVWGWNNtmgD6qkGzMUW7ZYCWTL +z6wiUn/+A9fHpnn+7iTkIZuWVn1gsSlUdLS6kuNGuPbE/giDZCfJmOOR+ZBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiqoQJ41pf9mq/muMVvoE4SOzbdgwHwYDVR0j BBgwFoAUajmWr+ETgjhTDC/JKyq2dfzSGMgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTg5YjdkZC05OWE3LTQ1MGUtYmU4NC1iM2JmYzczNDBmMWYvMS82QTM5OTZBRkUx MTM4MjM4NTMwQzJGQzkyQjJBQjY3NUZDRDIxOEM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEzOTk2QUZFMTEzODIzODUzMEMyRkM5MkIyQUI2NzVGQ0Qy MThDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzEvNkEzOTk2QUZFMTEzODIzODUzMEMyRkM5MkIyQUI2 NzVGQ0QyMThDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrsPs63aTvDxFN7+i5aiiyM5tZDo3Sf1tvv 2RyjYnWRkK+BFSoEybCYcK1KLnMfVEkdZpQmfN9/fZYn5oH2sYKKDaB2bznVwnWO sKyXxcKd/ggzvQ6rlf7/FcQNpnY1+5dzFZ6a/nUwi962XrY/nqLP/xDOhMkdS3Cl BYrpB35C66RWd0PF3XKeLx0EDw1HbS4R6Py9bdWne6sSjoCIx2wj3pkLk2Clrxqd LGSF/aptScW3tJ28nO0Q+qPSLgvFeZ9rma6OLAKbAONRO1bGpA6W+EesABAsXxlw pyq0hIG52F++yf/zZr2TnCqESMSfA+oHAYNtZetLJvDl9nSeAZ0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:13:03 2025 by rpki-client