$ rpki-client -vvf repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft File: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft (raw, json) Hash identifier: 1OqbB3d0cFhGT580FGfPO3d6zTiOMMf9vOcYefYT6go= Subject key identifier: 85:BF:3C:B7:17:A1:DC:77:61:FD:58:1B:E7:4A:F5:AB:08:71:04:EC Authority key identifier: 6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21 Certificate issuer: /CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121 Certificate serial: 5CFF30C64712E24B74925347F427F6E326DB907F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft Manifest number: 04E1 Signing time: Sun 15 Jun 2025 12:00:50 +0000 Manifest this update: Sun 15 Jun 2025 11:55:50 +0000 Manifest next update: Wed 18 Jun 2025 23:51:50 +0000 Files and hashes: 1: 3130332e35302e32352e302f32342d3234203d3e203633383639.roa (hash: JbxABL76MkkqswIqSBjIy3QFwClw0Z/ylcfelmeq75g=) 2: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl (hash: aWozmNXU7emnC+uLQaTZYaVclvIAYtQ/xEk2Cvodupw=) 3: 3130332e35302e32342e302f32342d3234203d3e203633383639.roa (hash: pjDRNdkxVNQAonOH/ajeQNBbErsBzCB65TjYTm/AV04=) 4: 3130332e35302e32362e302f32342d3234203d3e203633383639.roa (hash: XC5DYejk2ouXNggePM7faKlSdJX+qPYu8hQvOlxyDok=) 5: 3130332e35302e32372e302f32342d3234203d3e203633383639.roa (hash: CMxLGqk+5iIxSLstgSUEPMheQZBFi/aQaQ40AR/6xck=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ff:30:c6:47:12:e2:4b:74:92:53:47:f4:27:f6:e3:26:db:90:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121 Validity Not Before: Jun 15 11:55:50 2025 GMT Not After : Jun 18 23:51:50 2025 GMT Subject: CN=85BF3CB717A1DC7761FD581BE74AF5AB087104EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b7:49:1f:57:1a:fe:cd:45:a0:e9:32:cc:56: 68:4f:44:47:4f:df:b6:9d:a2:85:71:c7:dc:6b:81: 12:db:1d:e4:52:2c:6f:d5:fa:4d:11:23:d5:b9:02: a2:36:64:be:ed:0e:e7:e3:26:6c:74:1c:3c:9f:f7: f9:02:c9:4d:02:88:79:8d:31:9c:4c:c1:74:e9:27: d1:ad:6d:44:87:fe:e5:a5:f5:66:6a:a4:6a:b4:f1: d6:88:af:ca:2b:3c:8a:2a:e3:75:72:7f:36:14:88: c7:3c:3c:8a:ca:43:df:f0:ce:95:61:5e:76:5a:1c: 2d:86:ff:1e:67:71:51:24:98:8c:f9:27:15:3c:de: 6f:d2:4d:89:8d:db:7b:d4:77:17:51:98:17:00:82: 86:2e:31:5f:b5:47:0f:dd:9c:ac:65:e1:53:0b:99: 0a:41:aa:a6:6d:54:ee:8b:1c:70:51:7b:c6:6b:b9: 58:dd:b0:b3:6e:76:bf:ef:68:cf:4f:49:b3:80:a0: ab:92:8a:ab:d4:b5:db:af:44:29:71:85:d0:a2:47: d9:d5:16:8b:f5:28:98:96:43:ec:da:bb:e8:c0:aa: 7f:7c:b7:5a:e8:3b:ed:18:0e:80:04:78:c1:30:c7: 6c:c7:96:61:46:2e:5c:1e:34:1e:d2:b1:67:8b:ed: af:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BF:3C:B7:17:A1:DC:77:61:FD:58:1B:E7:4A:F5:AB:08:71:04:EC X509v3 Authority Key Identifier: keyid:6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:e3:4d:f4:11:b9:b1:fa:f6:93:c6:eb:54:0c:84:b1:4e:31: 68:8c:9d:04:38:4e:cf:0e:12:a3:af:b9:96:10:60:50:c2:c0: 10:90:48:90:d2:20:33:67:50:d8:e1:17:7f:a5:a1:4b:ae:6c: 68:b7:46:63:59:54:98:9e:dd:e9:b9:91:46:cf:cc:50:a3:61: 02:9d:9e:97:20:c5:30:27:51:d3:70:f8:a6:b7:5b:fd:58:9f: 64:8a:ee:26:94:11:49:41:c3:cf:2f:b5:cb:2b:3d:fb:88:97: cc:3a:4f:a3:1b:7a:d8:2e:97:88:12:a7:e1:b3:93:4d:c9:20: 0a:ed:cf:bf:bc:7c:53:09:6f:a3:56:03:2c:ee:aa:40:39:25: bb:aa:a6:25:03:79:a9:98:7a:99:e1:db:31:d6:bf:3b:5c:29: e9:ed:c7:f7:6f:08:e0:be:26:79:f8:9b:00:ff:9d:2e:11:45: 92:92:57:57:85:7e:09:0e:59:40:c9:d6:58:47:03:d0:54:13: ee:3c:a1:88:92:43:c7:60:be:e9:48:84:73:7c:45:c1:06:60: a5:1b:1a:8d:a8:e7:2a:e4:66:ae:1f:99:3a:8c:0a:96:d9:88: 97:e2:d8:83:56:4a:8a:18:88:e6:56:fc:80:33:44:f9:73:e0: 22:b4:a1:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXP8wxkcS4kt0klNH9Cf24ybbkH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3 MUQyRDEyMTAeFw0yNTA2MTUxMTU1NTBaFw0yNTA2MTgyMzUxNTBaMDMxMTAvBgNV BAMTKDg1QkYzQ0I3MTdBMURDNzc2MUZENTgxQkU3NEFGNUFCMDg3MTA0RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHt0kfVxr+zUWg6TLMVmhPREdP 37adooVxx9xrgRLbHeRSLG/V+k0RI9W5AqI2ZL7tDufjJmx0HDyf9/kCyU0CiHmN MZxMwXTpJ9GtbUSH/uWl9WZqpGq08daIr8orPIoq43VyfzYUiMc8PIrKQ9/wzpVh XnZaHC2G/x5ncVEkmIz5JxU83m/STYmN23vUdxdRmBcAgoYuMV+1Rw/dnKxl4VML mQpBqqZtVO6LHHBRe8ZruVjdsLNudr/vaM9PSbOAoKuSiqvUtduvRClxhdCiR9nV Fov1KJiWQ+zau+jAqn98t1roO+0YDoAEeMEwx2zHlmFGLlweNB7SsWeL7a9VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhb88txeh3Hdh/Vgb50r1qwhxBOwwHwYDVR0j BBgwFoAUbBWXYHoMPqw+MM9I/zG6/XHS0SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzY2ODU0MS1kNmM2LTQwOWUtOGFkMS01ZTg5YTRiMjg1MGUvMC82QzE1OTc2MDdB MEMzRUFDM0UzMENGNDhGRjMxQkFGRDcxRDJEMTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3MUQy RDEyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc2Njg1NDEtZDZjNi00MDllLThh ZDEtNWU4OWE0YjI4NTBlLzAvNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJB RkQ3MUQyRDEyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTjTfQRubH69pPG61QMhLFOMWiMnQQ4Ts8O EqOvuZYQYFDCwBCQSJDSIDNnUNjhF3+loUuubGi3RmNZVJie3em5kUbPzFCjYQKd npcgxTAnUdNw+Ka3W/1Yn2SK7iaUEUlBw88vtcsrPfuIl8w6T6Mbetgul4gSp+Gz k03JIArtz7+8fFMJb6NWAyzuqkA5JbuqpiUDeamYepnh2zHWvztcKentx/dvCOC+ Jnn4mwD/nS4RRZKSV1eFfgkOWUDJ1lhHA9BUE+48oYiSQ8dgvulIhHN8RcEGYKUb Go2o5yrkZq4fmTqMCpbZiJfi2INWSooYiOZW/IAzRPlz4CK0oQA= -----END CERTIFICATE-----Generated at Sun Jun 15 15:22:49 2025 by rpki-client