$ rpki-client -vvf repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft File: 6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft (raw, json) Hash identifier: e4EK1n4/F54leAP2OOaM/2uMqyGg6X79srxTplP6vac= Subject key identifier: 64:FE:06:96:40:CD:1E:54:F6:E5:41:33:35:5F:87:C3:A1:52:DF:83 Authority key identifier: 6B:FD:65:6A:9F:A6:3F:B8:98:16:B1:7C:CE:D2:83:2B:43:FE:41:CD Certificate issuer: /CN=6BFD656A9FA63FB89816B17CCED2832B43FE41CD Certificate serial: 3F80DC8F1592AA1C541F0A47FC9E1DE60D38D9DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft Manifest number: E3 Signing time: Thu 05 Jun 2025 02:11:25 +0000 Manifest this update: Thu 05 Jun 2025 02:06:25 +0000 Manifest next update: Sun 08 Jun 2025 06:07:25 +0000 Files and hashes: 1: 6BFD656A9FA63FB89816B17CCED2832B43FE41CD.crl (hash: HrUjeq7y5T5wn8xcnDVd3k34Sc6lXkuYYBQXEBcGdlY=) 2: 323030313a6466333a356334303a3a2f34382d3438203d3e20313431313236.roa (hash: QBBO/FoYTyAYgTzseCUJPqnk8CnediRAVVQ9iko63Nk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.crl rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:80:dc:8f:15:92:aa:1c:54:1f:0a:47:fc:9e:1d:e6:0d:38:d9:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6BFD656A9FA63FB89816B17CCED2832B43FE41CD Validity Not Before: Jun 5 02:06:25 2025 GMT Not After : Jun 8 06:07:25 2025 GMT Subject: CN=64FE069640CD1E54F6E54133355F87C3A152DF83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a1:49:29:5f:1c:ae:54:a1:83:bf:db:52:36: cb:e3:94:df:09:73:fc:db:5d:f9:90:db:cc:3f:95: cd:6b:67:c2:7a:d3:ca:ac:ad:98:06:59:c3:97:69: dc:76:fb:8b:4a:f4:3d:f0:9a:13:52:39:c2:a9:be: 3d:61:49:91:6b:3d:36:f1:6f:b7:d4:4a:20:bd:cc: ff:4b:9a:d2:c9:24:bf:eb:d5:a2:3a:bb:f9:90:c9: 23:a4:5a:9d:55:34:4f:08:e1:f1:28:c7:ba:ce:ad: c0:ff:85:16:20:b7:c6:37:41:97:22:fe:d4:58:52: 1e:6f:ae:e3:d8:c8:5b:7d:e5:0b:92:a2:42:3c:c7: b7:9d:39:0f:29:8a:38:c7:0a:70:1e:89:a9:91:c8: 9e:6e:68:5a:fd:d4:2c:a1:21:a6:61:e3:0a:29:2d: 5a:0f:72:bd:3c:0e:9d:5b:95:b5:70:16:2c:f3:0b: 5b:55:cd:ce:28:3a:be:24:5b:10:0d:90:d9:fb:b7: d1:09:b0:ac:93:e1:72:88:16:d0:5c:29:31:05:62: ae:42:75:90:85:56:41:de:91:aa:97:9b:90:c6:31: e5:f0:b4:69:ea:88:be:fa:cc:b9:8f:b2:33:63:db: 86:2d:74:ae:16:59:cd:90:8b:ae:4b:db:e6:ad:9b: 33:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FE:06:96:40:CD:1E:54:F6:E5:41:33:35:5F:87:C3:A1:52:DF:83 X509v3 Authority Key Identifier: keyid:6B:FD:65:6A:9F:A6:3F:B8:98:16:B1:7C:CE:D2:83:2B:43:FE:41:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:2a:14:88:a2:10:6f:03:06:1d:c3:5a:bc:69:8c:f4:8c:c1: 8c:64:d2:8a:d6:a2:fb:48:8a:0d:52:67:e5:57:be:19:6d:2e: 7f:c0:2d:7e:24:41:98:3f:b1:89:a7:84:40:a7:c4:cf:13:a2: 8e:5e:06:86:35:59:da:e3:5a:bc:aa:2c:c0:7b:1a:55:9b:14: 1a:41:e5:a5:03:d1:d9:63:86:19:ec:4a:62:bc:c0:90:80:6b: ef:d7:fe:e3:d4:53:32:ad:3e:1b:2b:25:29:74:9b:7b:2b:e8: 7d:94:c2:f1:93:11:7d:8a:c3:74:4a:19:b9:4d:19:60:c9:9d: 70:d0:fe:00:28:26:0d:40:55:46:b5:4a:96:58:1d:bc:92:f2: 33:0a:e4:3c:7e:39:23:bf:e8:77:2d:d5:12:06:88:73:79:6d: ed:5b:79:aa:ff:2e:41:a7:a6:4d:a0:ef:0a:e2:1c:82:d7:6a: ee:2a:76:78:ad:67:d5:e4:58:78:23:d0:75:c4:d3:9d:cf:07: f8:02:35:35:d6:ce:4c:1e:c9:71:07:3d:ae:71:45:4e:67:34: ff:96:42:02:07:7f:22:1e:94:4e:6e:c2:d3:87:aa:96:5b:ac: 47:27:91:18:e5:5f:ba:6f:f0:e3:dd:a2:bd:5c:83:f2:80:85: b7:fb:32:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP4DcjxWSqhxUHwpH/J4d5g042d8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkJGRDY1NkE5RkE2M0ZCODk4MTZCMTdDQ0VEMjgzMkI0 M0ZFNDFDRDAeFw0yNTA2MDUwMjA2MjVaFw0yNTA2MDgwNjA3MjVaMDMxMTAvBgNV BAMTKDY0RkUwNjk2NDBDRDFFNTRGNkU1NDEzMzM1NUY4N0MzQTE1MkRGODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzoUkpXxyuVKGDv9tSNsvjlN8J c/zbXfmQ28w/lc1rZ8J608qsrZgGWcOXadx2+4tK9D3wmhNSOcKpvj1hSZFrPTbx b7fUSiC9zP9LmtLJJL/r1aI6u/mQySOkWp1VNE8I4fEox7rOrcD/hRYgt8Y3QZci /tRYUh5vruPYyFt95QuSokI8x7edOQ8pijjHCnAeiamRyJ5uaFr91CyhIaZh4wop LVoPcr08Dp1blbVwFizzC1tVzc4oOr4kWxANkNn7t9EJsKyT4XKIFtBcKTEFYq5C dZCFVkHekaqXm5DGMeXwtGnqiL76zLmPsjNj24YtdK4WWc2Qi65L2+atmzMXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZP4GlkDNHlT25UEzNV+Hw6FS34MwHwYDVR0j BBgwFoAUa/1lap+mP7iYFrF8ztKDK0P+Qc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTBjYjYzMC02MzZhLTRiNmEtOTNkZi1iNWQ5MDhmZTZlZTcvMC82QkZENjU2QTlG QTYzRkI4OTgxNkIxN0NDRUQyODMyQjQzRkU0MUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkJGRDY1NkE5RkE2M0ZCODk4MTZCMTdDQ0VEMjgzMkI0M0ZF NDFDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmUwY2I2MzAtNjM2YS00YjZhLTkz ZGYtYjVkOTA4ZmU2ZWU3LzAvNkJGRDY1NkE5RkE2M0ZCODk4MTZCMTdDQ0VEMjgz MkI0M0ZFNDFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALgqFIiiEG8DBh3DWrxpjPSMwYxk0orWovtI ig1SZ+VXvhltLn/ALX4kQZg/sYmnhECnxM8Too5eBoY1WdrjWryqLMB7GlWbFBpB 5aUD0dljhhnsSmK8wJCAa+/X/uPUUzKtPhsrJSl0m3sr6H2UwvGTEX2Kw3RKGblN GWDJnXDQ/gAoJg1AVUa1SpZYHbyS8jMK5Dx+OSO/6Hct1RIGiHN5be1bear/LkGn pk2g7wriHILXau4qdnitZ9XkWHgj0HXE053PB/gCNTXWzkweyXEHPa5xRU5nNP+W QgIHfyIelE5uwtOHqpZbrEcnkRjlX7pv8OPdor1cg/KAhbf7MvA= -----END CERTIFICATE-----Generated at Thu Jun 5 18:13:27 2025 by rpki-client