$ rpki-client -vvf repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft File: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft (raw, json) Hash identifier: HzVv7cSsfVt0TVnFDqI2T5FdxCN7EnYHdktlIEXE0Po= Subject key identifier: 51:32:A4:92:11:B8:61:4F:73:A5:DC:CB:4B:9B:6C:29:C8:6A:99:C1 Authority key identifier: 6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA Certificate issuer: /CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Certificate serial: 418EE2C040E3F4ACCBBAE4450FCF922D4B0D291D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft Manifest number: 01E3 Signing time: Mon 16 Jun 2025 18:40:02 +0000 Manifest this update: Mon 16 Jun 2025 18:35:02 +0000 Manifest next update: Thu 19 Jun 2025 21:07:02 +0000 Files and hashes: 1: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl (hash: qdaSI6eheik2LdfaPLDgAYrBJWq3+mNaGnM9CUMW+eI=) 2: 3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa (hash: R1C6O4ul1Ppozfaiesg+Uhn8MwDAOfzdAmq+sSEet2w=) 3: 3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa (hash: jcYNuwq5tBbtUM+5LFf+gih2lHYu/silWmdWErgVy5M=) 4: 3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa (hash: XLXbrSM75a4OOhdIFSVSWGya3QA7TZER3P7tGhI+wW0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:8e:e2:c0:40:e3:f4:ac:cb:ba:e4:45:0f:cf:92:2d:4b:0d:29:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Validity Not Before: Jun 16 18:35:02 2025 GMT Not After : Jun 19 21:07:02 2025 GMT Subject: CN=5132A49211B8614F73A5DCCB4B9B6C29C86A99C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:78:a8:a8:0e:ed:c1:73:98:8e:af:5c:f8:3b: 67:cc:57:6f:43:89:35:a9:cf:12:c6:68:ea:f9:05: 4a:1e:b4:60:89:74:9b:fa:0b:4b:3b:d0:b9:5e:10: 4a:f9:a5:7d:cf:e2:22:ed:d5:4d:5b:40:1c:d5:86: 6d:98:06:1b:34:6d:3b:18:5f:ec:4b:3f:8b:72:4e: 8d:dc:27:25:15:4c:ab:06:a6:2a:c0:35:c0:23:21: 73:19:34:e8:ae:4b:24:ed:87:1c:cf:70:b1:e6:ff: 25:60:38:d3:ea:99:8c:15:86:9a:52:b8:06:33:86: 1f:38:04:75:54:4e:64:6f:20:4e:6a:0b:45:87:c0: 3d:f8:24:d5:6f:33:61:e0:cb:6b:6e:27:55:8c:78: fc:4d:a1:4b:53:d8:b1:64:6c:8f:04:ef:1b:1f:b0: 2a:78:34:81:11:d6:3a:0c:23:6a:c8:18:e6:cf:19: 9d:4f:c2:e2:dd:6d:7a:42:c2:5b:c6:cb:48:85:16: b9:7b:3a:55:ae:29:71:2c:19:e0:4b:5f:1e:15:ef: 0d:5c:9d:53:df:d1:74:a0:9b:a1:d1:a6:6f:3e:d9: 30:20:ba:83:ef:9d:82:0c:02:41:5b:41:07:02:86: 83:59:1f:1e:d1:c3:00:08:2f:fd:2a:4b:b0:6b:f9: 46:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:32:A4:92:11:B8:61:4F:73:A5:DC:CB:4B:9B:6C:29:C8:6A:99:C1 X509v3 Authority Key Identifier: keyid:6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:35:3e:64:2f:1e:74:ae:34:74:1b:e4:40:e5:c1:95:de:bf: f1:5a:01:65:fb:e0:cf:60:55:f5:11:83:5f:fc:11:e1:68:17: e1:ae:4d:f3:52:23:5f:22:02:a7:3e:3a:06:e0:30:b7:ac:24: d5:f8:80:5d:c1:76:f5:6d:cc:ab:67:73:79:4d:67:99:0a:49: 69:4c:7e:f2:f5:c7:c5:51:49:e2:0d:df:4c:3e:0c:8d:f3:c8: cb:86:7d:9a:c6:d3:5f:50:8c:63:5d:06:de:5e:6c:2d:b1:2c: 8f:24:21:60:f2:82:62:0a:cd:73:0e:3e:9a:93:a3:9f:eb:b5: 45:ba:2e:dd:13:d0:0c:c6:35:52:0a:9c:fb:7e:86:63:73:dc: 78:81:5d:02:ef:de:85:36:8b:77:63:6d:ad:51:65:89:7e:fd: 76:cf:90:ad:09:89:97:33:ec:dd:be:60:ab:0f:7a:08:e6:ea: 8d:a2:20:9e:69:d1:42:bb:92:19:57:dd:b8:60:90:5f:04:c2: 2c:a2:c6:70:7d:78:75:77:6d:71:c9:7d:a8:93:23:7d:22:2b: 80:92:c2:11:99:8d:d1:39:e8:94:ce:38:ba:9c:8f:ce:51:94: 20:5a:a9:5b:de:37:df:89:15:35:ca:b2:b7:af:aa:92:30:b1: 35:d9:8e:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQY7iwEDj9KzLuuRFD8+SLUsNKR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMx REIwOEZEQTAeFw0yNTA2MTYxODM1MDJaFw0yNTA2MTkyMTA3MDJaMDMxMTAvBgNV BAMTKDUxMzJBNDkyMTFCODYxNEY3M0E1RENDQjRCOUI2QzI5Qzg2QTk5QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkeKioDu3Bc5iOr1z4O2fMV29D iTWpzxLGaOr5BUoetGCJdJv6C0s70LleEEr5pX3P4iLt1U1bQBzVhm2YBhs0bTsY X+xLP4tyTo3cJyUVTKsGpirANcAjIXMZNOiuSyTthxzPcLHm/yVgONPqmYwVhppS uAYzhh84BHVUTmRvIE5qC0WHwD34JNVvM2Hgy2tuJ1WMePxNoUtT2LFkbI8E7xsf sCp4NIER1joMI2rIGObPGZ1PwuLdbXpCwlvGy0iFFrl7OlWuKXEsGeBLXx4V7w1c nVPf0XSgm6HRpm8+2TAguoPvnYIMAkFbQQcChoNZHx7RwwAIL/0qS7Br+UYpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUTKkkhG4YU9zpdzLS5tsKchqmcEwHwYDVR0j BBgwFoAUb8DJM0D/c1k0NMjv/O2Osx2wj9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjY1OTkwNC0zNzAyLTQ3OTctYmQxYi00NDdhYjhjOTRlMGMvMC82RkMwQzkzMzQw RkY3MzU5MzQzNEM4RUZGQ0VEOEVCMzFEQjA4RkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMxREIw OEZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY2NTk5MDQtMzcwMi00Nzk3LWJk MWItNDQ3YWI4Yzk0ZTBjLzAvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhF QjMxREIwOEZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALQ1PmQvHnSuNHQb5EDlwZXev/FaAWX74M9g VfURg1/8EeFoF+GuTfNSI18iAqc+OgbgMLesJNX4gF3BdvVtzKtnc3lNZ5kKSWlM fvL1x8VRSeIN30w+DI3zyMuGfZrG019QjGNdBt5ebC2xLI8kIWDygmIKzXMOPpqT o5/rtUW6Lt0T0AzGNVIKnPt+hmNz3HiBXQLv3oU2i3djba1RZYl+/XbPkK0JiZcz 7N2+YKsPegjm6o2iIJ5p0UK7khlX3bhgkF8EwiyixnB9eHV3bXHJfaiTI30iK4CS whGZjdE56JTOOLqcj85RlCBaqVveN9+JFTXKsrevqpIwsTXZju8= -----END CERTIFICATE-----Generated at Tue Jun 17 03:24:06 2025 by rpki-client