$ rpki-client -vvf repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft File: 6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft (raw, json) Hash identifier: Gd5JJz0bttTGbbKnlCHLUZ6ijfDMOf955cHk6hoIXtk= Subject key identifier: 16:92:0D:8A:92:83:DF:ED:1F:2F:74:F8:C0:A5:04:82:AA:43:23:C7 Authority key identifier: 6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92 Certificate issuer: /CN=6A200D6FC5434DAD6106CEE5439CA1270DDCBC92 Certificate serial: 3B9CE0C96F953B782541733A12B7B223837F5FBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft Manifest number: 82 Signing time: Sun 15 Jun 2025 12:31:06 +0000 Manifest this update: Sun 15 Jun 2025 12:26:06 +0000 Manifest next update: Wed 18 Jun 2025 17:12:06 +0000 Files and hashes: 1: 3130332e3130332e3138302e302f32332d3234203d3e20313336383437.roa (hash: z7JSBWPGJlOn/ZqqGa8az/lIZkw26RQslHPZ9GMpJ4M=) 2: 6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl (hash: 9pMWv4gb8vCU2RYoehX2qgrwoTkUAyoLfTsX0vofl0M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 17:12:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:9c:e0:c9:6f:95:3b:78:25:41:73:3a:12:b7:b2:23:83:7f:5f:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A200D6FC5434DAD6106CEE5439CA1270DDCBC92 Validity Not Before: Jun 15 12:26:06 2025 GMT Not After : Jun 18 17:12:06 2025 GMT Subject: CN=16920D8A9283DFED1F2F74F8C0A50482AA4323C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:32:e5:d7:55:ad:5a:78:ae:56:b3:03:95:19: f6:02:b6:9b:99:49:18:a6:ef:77:16:59:70:46:12: 76:58:9c:ff:9f:fe:d1:74:6c:84:f1:3e:48:bb:94: 85:a9:f1:d6:7e:cf:39:85:40:a6:7c:2b:47:8c:c0: e9:59:60:0d:62:af:a9:78:6e:cb:c6:68:9a:70:c7: 4c:a6:91:38:0e:7d:4f:ce:8d:75:2d:3d:da:2b:7b: 6e:90:55:77:ba:12:51:52:f5:c0:64:82:5e:e5:9a: 2a:9b:c9:09:ba:35:c6:70:2c:c7:e8:a4:d3:b7:8d: 29:bc:22:e2:91:aa:9f:59:fe:68:1b:60:88:02:7b: f2:23:a8:d8:20:f0:63:60:50:6a:64:e5:c2:94:2e: a5:d8:93:6a:17:46:5e:98:03:7b:3d:b8:54:64:53: 37:ff:77:dd:ed:29:57:7c:99:02:b3:2f:6a:bc:01: 54:3a:f0:32:3e:6d:fd:15:c8:36:ea:42:45:56:6c: 4d:d8:37:97:53:69:c6:58:f1:ec:62:c8:03:a1:f8: 5e:89:d1:89:29:73:a6:3b:bc:bf:f5:df:6a:24:12: 08:38:c1:34:d3:e5:3d:c8:d5:d8:b9:44:be:9b:c9: 9f:e5:38:65:65:83:86:98:6d:7a:17:f7:92:8e:4b: 51:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:92:0D:8A:92:83:DF:ED:1F:2F:74:F8:C0:A5:04:82:AA:43:23:C7 X509v3 Authority Key Identifier: keyid:6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:0a:99:25:1c:c9:53:08:30:94:ea:a6:47:16:6d:71:43:40: 6f:bc:2d:c3:f0:ca:61:8f:10:72:aa:95:f2:69:c3:12:5f:9d: 5c:e9:3f:1b:05:41:f5:dd:84:47:75:42:0e:64:bd:8f:ce:80: c9:96:71:27:f2:77:8a:8a:c3:bb:46:8e:b7:9f:e0:e8:00:3b: fc:1f:d5:9f:fa:70:6b:4a:34:d6:42:dd:2f:24:3d:f8:35:26: b9:17:ae:80:88:aa:3c:5a:1c:ce:28:e2:38:ea:64:6a:5a:49: 53:cf:4b:59:bb:cc:59:30:d9:92:d2:6b:74:fe:da:31:4b:09: 0e:39:10:21:17:8f:4d:8e:c1:fd:39:2b:ff:f1:4f:c7:27:dc: 0f:a5:d3:2e:c1:69:32:7a:7c:0e:b5:66:f1:fb:06:ed:0e:aa: a8:bc:4f:d6:04:dd:96:89:a2:0a:64:64:bf:1d:22:27:2b:c1: 7b:b5:fb:83:f0:b8:3a:f0:27:b8:6c:0c:fa:52:85:18:3f:0e: 1a:d3:2a:49:d7:1b:58:68:e2:42:9d:8a:6a:a8:23:20:89:20: 9c:49:24:12:5e:5d:0e:18:01:da:0e:dc:08:6d:52:b7:33:21: 34:5e:72:e9:96:4e:22:a4:d1:ba:95:ae:8c:48:36:ba:6e:d3: 5d:4e:13:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO5zgyW+VO3glQXM6EreyI4N/X78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0ExMjcw RERDQkM5MjAeFw0yNTA2MTUxMjI2MDZaFw0yNTA2MTgxNzEyMDZaMDMxMTAvBgNV BAMTKDE2OTIwRDhBOTI4M0RGRUQxRjJGNzRGOEMwQTUwNDgyQUE0MzIzQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIMuXXVa1aeK5WswOVGfYCtpuZ SRim73cWWXBGEnZYnP+f/tF0bITxPki7lIWp8dZ+zzmFQKZ8K0eMwOlZYA1ir6l4 bsvGaJpwx0ymkTgOfU/OjXUtPdore26QVXe6ElFS9cBkgl7lmiqbyQm6NcZwLMfo pNO3jSm8IuKRqp9Z/mgbYIgCe/IjqNgg8GNgUGpk5cKULqXYk2oXRl6YA3s9uFRk Uzf/d93tKVd8mQKzL2q8AVQ68DI+bf0VyDbqQkVWbE3YN5dTacZY8exiyAOh+F6J 0Ykpc6Y7vL/132okEgg4wTTT5T3I1di5RL6byZ/lOGVlg4aYbXoX95KOS1FHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFpINipKD3+0fL3T4wKUEgqpDI8cwHwYDVR0j BBgwFoAUaiANb8VDTa1hBs7lQ5yhJw3cvJIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGQwZmNhOC01YzJkLTRlMzUtYmQ3ZC1iNDQ4YWE3NWYyYmUvMC82QTIwMEQ2RkM1 NDM0REFENjEwNkNFRTU0MzlDQTEyNzBERENCQzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0ExMjcwRERD QkM5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhkMGZjYTgtNWMyZC00ZTM1LWJk N2QtYjQ0OGFhNzVmMmJlLzAvNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0Ex MjcwRERDQkM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMAKmSUcyVMIMJTqpkcWbXFDQG+8LcPwymGP EHKqlfJpwxJfnVzpPxsFQfXdhEd1Qg5kvY/OgMmWcSfyd4qKw7tGjref4OgAO/wf 1Z/6cGtKNNZC3S8kPfg1JrkXroCIqjxaHM4o4jjqZGpaSVPPS1m7zFkw2ZLSa3T+ 2jFLCQ45ECEXj02Owf05K//xT8cn3A+l0y7BaTJ6fA61ZvH7Bu0Oqqi8T9YE3ZaJ ogpkZL8dIicrwXu1+4PwuDrwJ7hsDPpShRg/DhrTKknXG1ho4kKdimqoIyCJIJxJ JBJeXQ4YAdoO3AhtUrczITRecumWTiKk0bqVroxINrpu011OExg= -----END CERTIFICATE-----Generated at Tue Jun 17 15:48:40 2025 by rpki-client