$ rpki-client -vvf repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft File: 6189E4F67BE53DF65282F8E1BB63165CCA784862.mft (raw, json) Hash identifier: /YSNyy9XKL99OJiv/0RMQBfbg9UC3vfw7UjIwDicc2I= Subject key identifier: D3:8D:8E:1C:04:71:9A:7C:45:5F:C9:A4:50:04:7D:2B:E6:A0:7B:DD Authority key identifier: 61:89:E4:F6:7B:E5:3D:F6:52:82:F8:E1:BB:63:16:5C:CA:78:48:62 Certificate issuer: /CN=6189E4F67BE53DF65282F8E1BB63165CCA784862 Certificate serial: 3028252A5331B6EB295720112A2606310016476D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft Manifest number: 0155 Signing time: Wed 18 Jun 2025 13:22:09 +0000 Manifest this update: Wed 18 Jun 2025 13:17:09 +0000 Manifest next update: Sat 21 Jun 2025 19:49:09 +0000 Files and hashes: 1: 3130332e37302e39322e302f32332d3234203d3e20313338303634.roa (hash: TA4sXIkX/1vgSRuW9l2sSfoKt1o5FCsmy++oilBd+h0=) 2: 6189E4F67BE53DF65282F8E1BB63165CCA784862.crl (hash: ZxqXWhycwUhluoA4shbVg5/X9yK2s+nafykUkL5yQQg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.crl rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:28:25:2a:53:31:b6:eb:29:57:20:11:2a:26:06:31:00:16:47:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6189E4F67BE53DF65282F8E1BB63165CCA784862 Validity Not Before: Jun 18 13:17:09 2025 GMT Not After : Jun 21 19:49:09 2025 GMT Subject: CN=D38D8E1C04719A7C455FC9A450047D2BE6A07BDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a6:2f:ed:e6:e7:c4:b3:3b:46:b1:e1:20:93: ea:44:da:08:0d:54:66:58:31:a5:8d:bf:7c:83:34: 5a:0e:9b:17:de:95:ba:dd:09:b1:9f:20:1d:0d:f7: ba:6e:05:dd:ba:e0:fd:1b:e2:ed:90:e1:1e:3a:a2: a4:93:67:72:8f:8b:b4:29:32:89:bd:e3:88:2c:82: 65:c0:a0:83:7e:de:f4:b1:0e:35:1f:03:a9:e9:1d: 5b:b1:61:25:e5:4f:3c:20:23:54:91:63:7f:61:a7: fe:c2:3b:e7:6c:b9:7a:55:a5:a9:76:32:24:86:04: e5:cb:e7:38:e5:41:e1:f3:ff:c6:7a:07:bb:e5:e1: 38:0a:bb:d7:aa:5a:44:c6:c6:90:b6:ea:31:3e:56: 8f:1d:d7:c2:87:34:ab:61:d6:61:98:4c:b3:82:86: b8:a4:44:dd:ce:39:40:cc:03:ac:be:f5:89:89:f8: 4b:25:8e:b6:39:d2:25:0c:3a:15:90:f5:48:1f:88: ab:ae:ad:94:ab:56:bd:29:95:05:49:06:b8:fd:b3: 90:a9:fe:1e:42:b0:1b:aa:a4:28:8a:9a:19:83:a5: a5:34:8b:44:34:be:84:98:42:dd:c3:9f:00:43:49: 50:55:04:49:c2:fd:4c:5d:1c:c6:5e:eb:c6:23:81: 56:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8D:8E:1C:04:71:9A:7C:45:5F:C9:A4:50:04:7D:2B:E6:A0:7B:DD X509v3 Authority Key Identifier: keyid:61:89:E4:F6:7B:E5:3D:F6:52:82:F8:E1:BB:63:16:5C:CA:78:48:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:e5:95:aa:d9:ce:15:68:03:93:4e:ac:bf:08:38:b2:9c:eb: 01:e6:3b:74:cf:9f:71:c5:28:10:64:df:50:33:56:15:8b:7a: f0:3b:45:e0:5f:44:ac:d7:7f:90:85:dc:c9:d5:4b:0a:95:49: 20:b9:98:30:dc:69:4b:16:da:69:7a:1d:68:42:39:13:3d:ae: 1d:72:e3:e2:24:51:ee:88:44:27:8f:73:14:a6:61:13:30:5f: 5a:ca:61:d9:7b:97:55:c9:a9:9b:78:3d:e3:bd:71:c6:4d:d5: 52:fe:69:71:c8:66:a5:5f:b4:6c:19:87:23:26:85:3b:1f:fa: e2:9e:07:f6:7c:fd:17:4c:d1:85:f3:db:bf:13:9b:41:a0:1c: 99:1f:0d:f1:a6:ad:17:1c:bb:9a:b8:df:f4:f6:96:b5:02:f5: 04:e5:f2:a7:26:96:b9:a5:4c:bc:cd:c4:9a:5f:e6:f8:1b:ed: f5:82:3f:cf:a6:9a:8a:65:68:cc:29:9b:7f:4d:0a:ee:79:40: 7d:ee:9b:3b:33:70:22:f9:51:cb:0d:94:c0:0d:9a:78:25:92: 77:f0:45:7d:74:5b:02:20:ac:0b:54:77:81:3a:5a:5b:9f:7d: d6:7c:bb:5e:08:71:b8:26:60:b7:4e:ae:13:92:af:75:a6:b2: 3e:47:86:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMCglKlMxtuspVyARKiYGMQAWR20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE4OUU0RjY3QkU1M0RGNjUyODJGOEUxQkI2MzE2NUND QTc4NDg2MjAeFw0yNTA2MTgxMzE3MDlaFw0yNTA2MjExOTQ5MDlaMDMxMTAvBgNV BAMTKEQzOEQ4RTFDMDQ3MTlBN0M0NTVGQzlBNDUwMDQ3RDJCRTZBMDdCREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCpi/t5ufEsztGseEgk+pE2ggN VGZYMaWNv3yDNFoOmxfelbrdCbGfIB0N97puBd264P0b4u2Q4R46oqSTZ3KPi7Qp Mom944gsgmXAoIN+3vSxDjUfA6npHVuxYSXlTzwgI1SRY39hp/7CO+dsuXpVpal2 MiSGBOXL5zjlQeHz/8Z6B7vl4TgKu9eqWkTGxpC26jE+Vo8d18KHNKth1mGYTLOC hrikRN3OOUDMA6y+9YmJ+EsljrY50iUMOhWQ9UgfiKuurZSrVr0plQVJBrj9s5Cp /h5CsBuqpCiKmhmDpaU0i0Q0voSYQt3DnwBDSVBVBEnC/UxdHMZe68YjgVYlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU042OHARxmnxFX8mkUAR9K+age90wHwYDVR0j BBgwFoAUYYnk9nvlPfZSgvjhu2MWXMp4SGIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTg5ZjY0My0zN2JjLTRmZmItOTUyOS00MDFlNGI2ZWY2NzUvMC82MTg5RTRGNjdC RTUzREY2NTI4MkY4RTFCQjYzMTY1Q0NBNzg0ODYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE4OUU0RjY3QkU1M0RGNjUyODJGOEUxQkI2MzE2NUNDQTc4 NDg2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU4OWY2NDMtMzdiYy00ZmZiLTk1 MjktNDAxZTRiNmVmNjc1LzAvNjE4OUU0RjY3QkU1M0RGNjUyODJGOEUxQkI2MzE2 NUNDQTc4NDg2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/llarZzhVoA5NOrL8IOLKc6wHmO3TPn3HF KBBk31AzVhWLevA7ReBfRKzXf5CF3MnVSwqVSSC5mDDcaUsW2ml6HWhCORM9rh1y 4+IkUe6IRCePcxSmYRMwX1rKYdl7l1XJqZt4PeO9ccZN1VL+aXHIZqVftGwZhyMm hTsf+uKeB/Z8/RdM0YXz278Tm0GgHJkfDfGmrRccu5q43/T2lrUC9QTl8qcmlrml TLzNxJpf5vgb7fWCP8+mmoplaMwpm39NCu55QH3umzszcCL5UcsNlMANmnglknfw RX10WwIgrAtUd4E6WluffdZ8u14IcbgmYLdOrhOSr3Wmsj5HhvE= -----END CERTIFICATE-----Generated at Fri Jun 20 13:18:24 2025 by rpki-client