$ rpki-client -vvf repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft File: 6D958AAEBD8946E47C968284B2652E02A2017E9E.mft (raw, json) Hash identifier: jik3itw1s3GHm01DZP4G7jJgVwSYF2/sjOZrR7z8RG4= Subject key identifier: 5F:83:DE:1D:36:F5:14:D9:8E:0C:3C:EB:FE:5B:18:FC:67:0B:A1:D9 Authority key identifier: 6D:95:8A:AE:BD:89:46:E4:7C:96:82:84:B2:65:2E:02:A2:01:7E:9E Certificate issuer: /CN=6D958AAEBD8946E47C968284B2652E02A2017E9E Certificate serial: 779D86EC32A4CBB7FCA2B4584E931560ADE1D1E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft Manifest number: 0171 Signing time: Tue 03 Jun 2025 11:00:20 +0000 Manifest this update: Tue 03 Jun 2025 10:55:20 +0000 Manifest next update: Fri 06 Jun 2025 20:22:20 +0000 Files and hashes: 1: 3130332e3136372e3135362e302f32342d3234203d3e20313530353534.roa (hash: q9Y/LW+GvgpQns3JaxXDJK5aiDeS3kCAGsXt4jOSFx0=) 2: 6D958AAEBD8946E47C968284B2652E02A2017E9E.crl (hash: SGETXc93gU8LVC4Z1Azbwo2OP6Dxbhx0odr2o+i/Oe8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.crl rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:9d:86:ec:32:a4:cb:b7:fc:a2:b4:58:4e:93:15:60:ad:e1:d1:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D958AAEBD8946E47C968284B2652E02A2017E9E Validity Not Before: Jun 3 10:55:20 2025 GMT Not After : Jun 6 20:22:20 2025 GMT Subject: CN=5F83DE1D36F514D98E0C3CEBFE5B18FC670BA1D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1e:95:ef:45:9a:d0:a5:e4:d4:9b:83:8c:c8: 16:28:87:f3:88:1b:13:02:a4:55:56:8c:44:a0:fd: 5c:f5:b8:db:94:12:fb:70:40:5f:5e:ee:c1:d9:97: 88:ae:b1:c7:4d:ec:53:ac:6f:ad:45:3b:87:1c:1d: f3:9b:5e:54:ac:e6:79:99:c2:6c:95:af:bf:83:c0: 27:7c:69:a3:0c:60:89:df:98:96:56:23:b1:47:c9: f8:f6:13:ba:af:31:c8:04:9c:a7:24:7b:24:fc:ff: b5:39:90:62:94:16:62:d2:f7:3f:4c:a7:d5:6e:f6: 65:8e:71:3d:d0:3f:8b:01:f5:34:25:d7:21:1c:42: b2:9d:94:a9:7c:2a:06:e4:0f:ca:3d:8b:e1:32:bd: 38:73:45:c5:91:73:0c:c4:0a:16:82:38:ca:ef:ba: 4b:42:e9:96:60:7e:d6:27:bc:54:e6:9c:0c:80:b7: 4a:91:0a:66:d1:ff:9b:d5:82:a8:e7:94:d0:a5:28: 02:96:23:7d:10:05:82:84:ee:83:db:71:ae:38:3d: ac:32:9e:08:d1:52:1c:16:47:0d:c2:2e:c5:ae:b2: af:73:9e:a3:b3:2c:51:67:2c:47:0c:50:ee:2e:2f: a4:49:66:f9:d2:23:ac:03:46:e6:05:6f:2b:99:36: 48:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:83:DE:1D:36:F5:14:D9:8E:0C:3C:EB:FE:5B:18:FC:67:0B:A1:D9 X509v3 Authority Key Identifier: keyid:6D:95:8A:AE:BD:89:46:E4:7C:96:82:84:B2:65:2E:02:A2:01:7E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:22:bf:9c:cd:2d:87:95:65:d7:43:7a:fe:2a:dc:18:30:c7: 74:a0:89:40:26:b5:aa:3f:a5:b2:8b:2f:3d:9e:f4:98:0d:bd: 23:ad:57:ea:35:a1:f4:2c:d6:75:4b:0f:42:d1:85:2b:80:48: 38:4c:84:b6:de:6c:26:e0:e1:2f:0b:13:eb:6a:1b:73:07:1f: 77:c3:b5:18:2a:99:58:65:79:67:f8:ab:67:2e:3b:de:61:36: 55:35:d3:ac:ce:a4:76:eb:86:8a:28:05:25:a8:88:31:fb:fb: f7:a2:f5:3d:46:fd:69:64:2f:26:c5:c7:ad:65:e3:6f:e2:f5: ab:ae:8b:7a:d3:f6:f7:b2:ee:26:aa:46:ae:85:06:3b:60:fa: 09:ec:0c:bf:af:3b:42:0a:73:e6:66:7f:5e:28:28:68:38:68: 6e:b4:56:77:87:21:ea:43:c6:0d:ba:28:5e:b0:da:15:57:d6: 47:4c:10:97:15:7c:d1:5b:bb:08:66:fc:88:b0:aa:19:83:96: c5:40:32:cb:81:8d:38:92:89:2b:02:c4:e9:ac:f4:f6:69:2e: b0:92:63:e4:98:9d:35:9c:09:d5:45:11:cd:a3:04:b9:8c:42: 94:ee:96:24:9e:9e:db:e0:a9:bf:d7:ee:cb:10:c1:26:2b:3f: 8c:ed:4d:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd52G7DKky7f8orRYTpMVYK3h0egwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJFMDJB MjAxN0U5RTAeFw0yNTA2MDMxMDU1MjBaFw0yNTA2MDYyMDIyMjBaMDMxMTAvBgNV BAMTKDVGODNERTFEMzZGNTE0RDk4RTBDM0NFQkZFNUIxOEZDNjcwQkExRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHHpXvRZrQpeTUm4OMyBYoh/OI GxMCpFVWjESg/Vz1uNuUEvtwQF9e7sHZl4iuscdN7FOsb61FO4ccHfObXlSs5nmZ wmyVr7+DwCd8aaMMYInfmJZWI7FHyfj2E7qvMcgEnKckeyT8/7U5kGKUFmLS9z9M p9Vu9mWOcT3QP4sB9TQl1yEcQrKdlKl8KgbkD8o9i+EyvThzRcWRcwzEChaCOMrv uktC6ZZgftYnvFTmnAyAt0qRCmbR/5vVgqjnlNClKAKWI30QBYKE7oPbca44Pawy ngjRUhwWRw3CLsWusq9znqOzLFFnLEcMUO4uL6RJZvnSI6wDRuYFbyuZNkgnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX4PeHTb1FNmODDzr/lsY/GcLodkwHwYDVR0j BBgwFoAUbZWKrr2JRuR8loKEsmUuAqIBfp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTgwMzEyNS1kNzc3LTQwNTYtODQ0ZC04ZDFiZWZkMDE2M2QvMC82RDk1OEFBRUJE ODk0NkU0N0M5NjgyODRCMjY1MkUwMkEyMDE3RTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJFMDJBMjAx N0U5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE4MDMxMjUtZDc3Ny00MDU2LTg0 NGQtOGQxYmVmZDAxNjNkLzAvNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJF MDJBMjAxN0U5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIiv5zNLYeVZddDev4q3Bgwx3SgiUAmtao/ pbKLLz2e9JgNvSOtV+o1ofQs1nVLD0LRhSuASDhMhLbebCbg4S8LE+tqG3MHH3fD tRgqmVhleWf4q2cuO95hNlU106zOpHbrhoooBSWoiDH7+/ei9T1G/WlkLybFx61l 42/i9auui3rT9vey7iaqRq6FBjtg+gnsDL+vO0IKc+Zmf14oKGg4aG60VneHIepD xg26KF6w2hVX1kdMEJcVfNFbuwhm/IiwqhmDlsVAMsuBjTiSiSsCxOms9PZpLrCS Y+SYnTWcCdVFEc2jBLmMQpTuliSentvgqb/X7ssQwSYrP4ztTdo= -----END CERTIFICATE-----Generated at Tue Jun 3 23:44:19 2025 by rpki-client