$ rpki-client -vvf repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft File: 6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft (raw, json) Hash identifier: WT332pnEOpAsetFb6WyxFF0z6eT2mO2Gd8HHIKQ5AFs= Subject key identifier: 93:83:8D:F5:3F:D8:C9:61:CF:80:8B:37:7A:7F:A6:51:28:BD:84:46 Authority key identifier: 6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 Certificate issuer: /CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31 Certificate serial: 74BEE863D24A2B59BD7A7D2ACD22B7EC22F25E72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft Manifest number: 96 Signing time: Thu 05 Jun 2025 12:30:47 +0000 Manifest this update: Thu 05 Jun 2025 12:25:47 +0000 Manifest next update: Sun 08 Jun 2025 22:39:47 +0000 Files and hashes: 1: 3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa (hash: nPtUGKaHPiIgcmd7zVYYYWB0FNbLMK1i/rlw7h+2X4I=) 2: 3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa (hash: hNrDFdJZIJVijEPlIae7oRd0LDEkkVmTrltcwdQNZWQ=) 3: 6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl (hash: 6CAA/XL7vW0PGxWI9ON8/95uiUgqoeIw5eKmWZ7raTM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 22:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:be:e8:63:d2:4a:2b:59:bd:7a:7d:2a:cd:22:b7:ec:22:f2:5e:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31 Validity Not Before: Jun 5 12:25:47 2025 GMT Not After : Jun 8 22:39:47 2025 GMT Subject: CN=93838DF53FD8C961CF808B377A7FA65128BD8446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a9:b4:2a:80:16:86:ef:1e:de:ff:52:06:72: d8:c0:ef:21:ce:58:bf:58:0e:7c:46:2b:74:e1:32: 3d:29:15:b0:ad:f5:6a:ad:f8:26:f9:25:12:fa:9e: f7:15:ec:55:5b:7f:d7:05:fa:87:ae:65:7a:f3:84: bd:63:c0:29:cf:94:f5:11:fb:5c:f6:1f:0b:9b:17: 0e:6e:8b:39:54:8f:a8:e3:f3:da:a5:4c:26:80:2c: a3:59:9c:88:8a:af:67:19:5b:93:48:09:d9:f2:e6: 6b:29:0d:b3:6f:aa:f8:2f:11:30:66:5e:a7:dd:a6: 23:99:8c:64:bd:56:67:9d:bb:75:36:e6:a0:6c:2b: 18:ca:e9:d5:83:64:03:89:c1:73:e4:de:17:d8:35: 7f:4e:c1:34:6d:5f:28:41:a6:73:ae:1d:38:7d:05: 86:37:1a:96:cb:3a:72:0b:d6:08:22:f1:93:3f:c5: 04:2c:21:ee:08:42:3b:c8:53:a5:0a:4c:1d:d5:46: 45:20:dd:8d:2e:c2:14:9d:10:42:d3:d5:86:9d:62: 72:2c:66:67:c7:f7:aa:5b:4d:26:54:b2:0c:4a:45: 0d:85:ed:af:63:c4:27:ed:fb:7f:ab:b4:8a:3f:fc: f4:32:74:64:fe:d1:0c:46:1c:b9:37:0e:d5:5c:72: af:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:83:8D:F5:3F:D8:C9:61:CF:80:8B:37:7A:7F:A6:51:28:BD:84:46 X509v3 Authority Key Identifier: keyid:6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:59:57:1d:2b:f4:94:5e:93:ac:3d:25:cc:a8:25:08:8d:da: f6:a3:0d:2b:0e:a4:1e:21:55:77:b2:5d:20:83:fd:f5:ff:f3: f6:78:00:20:ba:d9:83:ea:73:fa:d3:79:29:65:71:30:43:b0: 45:b8:3d:ce:e2:ce:76:b9:ed:59:80:a5:a7:dc:25:f2:a0:76: 2a:b9:03:b5:5c:13:67:89:f7:b4:57:ba:08:31:b9:c3:08:09: 40:98:36:b0:f3:a7:13:3b:95:5c:ec:31:6e:d4:d7:3a:59:21: 76:dd:b8:19:22:10:98:17:24:8e:1f:5f:89:a8:e6:dc:4b:17: d1:42:08:17:aa:07:db:48:84:7f:f7:f2:8e:db:7e:de:1e:5b: d0:b4:ae:e3:b7:39:77:7e:19:a4:f6:75:dd:b7:3f:3e:1b:df: 2e:8a:26:7d:40:e3:2d:e8:c4:63:c1:47:8c:c9:19:8f:af:e4: 8d:d3:13:3c:2f:cf:9b:5c:a5:3f:08:30:5f:5f:5b:00:45:0e: 6f:07:be:ba:cf:2f:67:e0:43:69:d1:e0:63:5f:d1:80:90:e5: b1:dc:6d:41:7b:8c:5e:cd:24:66:d4:a5:44:0b:d3:63:07:5f: f8:c3:9b:f2:f5:2d:9f:5d:25:6c:fa:51:07:0b:04:60:b1:64: e2:88:55:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdL7oY9JKK1m9en0qzSK37CLyXnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFBRTlF M0QxOEQzMTAeFw0yNTA2MDUxMjI1NDdaFw0yNTA2MDgyMjM5NDdaMDMxMTAvBgNV BAMTKDkzODM4REY1M0ZEOEM5NjFDRjgwOEIzNzdBN0ZBNjUxMjhCRDg0NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzqbQqgBaG7x7e/1IGctjA7yHO WL9YDnxGK3ThMj0pFbCt9Wqt+Cb5JRL6nvcV7FVbf9cF+oeuZXrzhL1jwCnPlPUR +1z2HwubFw5uizlUj6jj89qlTCaALKNZnIiKr2cZW5NICdny5mspDbNvqvgvETBm XqfdpiOZjGS9Vmedu3U25qBsKxjK6dWDZAOJwXPk3hfYNX9OwTRtXyhBpnOuHTh9 BYY3GpbLOnIL1ggi8ZM/xQQsIe4IQjvIU6UKTB3VRkUg3Y0uwhSdEELT1YadYnIs ZmfH96pbTSZUsgxKRQ2F7a9jxCft+3+rtIo//PQydGT+0QxGHLk3DtVccq+dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk4ON9T/YyWHPgIs3en+mUSi9hEYwHwYDVR0j BBgwFoAUaizJ08cxSOJl6ZZhkpwa6ePRjTEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjJhOTE2YS1hZDIyLTQ5NzktYmU0My05NTFjNzZmMmY5MjAvMC82QTJDQzlEM0M3 MzE0OEUyNjVFOTk2NjE5MjlDMUFFOUUzRDE4RDMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFBRTlFM0Qx OEQzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2IyYTkxNmEtYWQyMi00OTc5LWJl NDMtOTUxYzc2ZjJmOTIwLzAvNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFB RTlFM0QxOEQzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK5ZVx0r9JRek6w9JcyoJQiN2vajDSsOpB4h VXeyXSCD/fX/8/Z4ACC62YPqc/rTeSllcTBDsEW4Pc7izna57VmApafcJfKgdiq5 A7VcE2eJ97RXuggxucMICUCYNrDzpxM7lVzsMW7U1zpZIXbduBkiEJgXJI4fX4mo 5txLF9FCCBeqB9tIhH/38o7bft4eW9C0ruO3OXd+GaT2dd23Pz4b3y6KJn1A4y3o xGPBR4zJGY+v5I3TEzwvz5tcpT8IMF9fWwBFDm8HvrrPL2fgQ2nR4GNf0YCQ5bHc bUF7jF7NJGbUpUQL02MHX/jDm/L1LZ9dJWz6UQcLBGCxZOKIVbo= -----END CERTIFICATE-----Generated at Fri Jun 6 19:44:40 2025 by rpki-client