$ rpki-client -vvf repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft File: 6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft (raw, json) Hash identifier: Sg/Z7qmy31PH0q2QIx8Pol7+kGJWiV8srJitD5UsyqA= Subject key identifier: 66:47:91:4E:76:38:53:B7:79:EE:DB:2D:FE:07:7C:F4:57:10:2A:24 Authority key identifier: 6D:34:40:FA:38:B5:13:21:C8:A8:FD:81:36:BA:70:59:7A:86:86:E0 Certificate issuer: /CN=6D3440FA38B51321C8A8FD8136BA70597A8686E0 Certificate serial: 1837EBFB6031DA34865FDA9E98245EFFF7D96212 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft Manifest number: 0158 Signing time: Mon 16 Jun 2025 18:40:38 +0000 Manifest this update: Mon 16 Jun 2025 18:35:38 +0000 Manifest next update: Fri 20 Jun 2025 00:13:38 +0000 Files and hashes: 1: 6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl (hash: xB88uHl0GDvxQjjapkdhEQ2cmVn3I6tvxs6f+vYaVAs=) 2: 3130332e3136302e3139332e302f32342d3234203d3e20313530353433.roa (hash: 4Rc4ZkmdbbdveQiTO9ywjy41ILEiG5tUChzvFR34zXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:37:eb:fb:60:31:da:34:86:5f:da:9e:98:24:5e:ff:f7:d9:62:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D3440FA38B51321C8A8FD8136BA70597A8686E0 Validity Not Before: Jun 16 18:35:38 2025 GMT Not After : Jun 20 00:13:38 2025 GMT Subject: CN=6647914E763853B779EEDB2DFE077CF457102A24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:27:df:c8:f4:60:ab:f6:38:c9:3c:43:e8:cc: a8:f1:a9:13:11:c2:53:ad:cf:e8:66:18:29:06:fa: 80:e3:2a:1e:c1:9d:f5:9a:2e:cb:f6:01:fc:42:59: 01:00:b7:10:29:1b:bc:c0:4c:19:0f:89:35:38:e8: 8b:9c:ca:b7:52:38:b7:28:dd:a4:22:b9:ad:77:f6: 6f:07:60:b0:43:4e:02:3c:9d:8e:5d:91:65:f6:70: 4e:4a:d4:d2:d0:74:08:a2:70:ca:6d:bb:ed:72:0a: 71:3d:a6:0c:ab:5e:21:ac:2d:8d:2c:a2:d5:bf:3a: 1a:f0:5c:d2:fb:9a:12:fb:49:a6:16:fa:7c:a4:15: c9:c0:5e:4e:94:f2:53:ce:53:7d:d7:3c:bc:e7:c0: 87:60:50:5c:5c:2f:63:39:26:f1:f1:3c:cf:ac:c9: b3:ca:0a:74:e4:af:8a:1e:ed:0c:6e:89:2b:61:a3: 8f:85:c1:7f:46:9e:26:c5:97:76:0a:61:9e:9b:86: 64:8f:eb:dd:7d:6b:f9:1c:dc:f2:4d:86:8b:af:99: 86:24:88:61:50:15:6d:b5:15:56:dd:24:08:aa:ef: 69:f2:64:e2:b2:a6:b3:3a:54:e8:26:72:46:7f:f2: af:2d:a8:0a:b4:06:c1:a5:bc:60:d4:90:03:4f:a4: ef:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:47:91:4E:76:38:53:B7:79:EE:DB:2D:FE:07:7C:F4:57:10:2A:24 X509v3 Authority Key Identifier: keyid:6D:34:40:FA:38:B5:13:21:C8:A8:FD:81:36:BA:70:59:7A:86:86:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:68:ac:b4:1c:99:24:d1:3b:b7:a8:9a:da:08:22:6f:1c:0a: 63:63:8e:4d:76:87:9c:59:55:b1:7c:70:25:f1:a5:31:e0:27: eb:52:f9:f8:bd:0b:7c:89:e9:1b:1c:a4:c4:cd:3b:56:c1:9e: cc:22:12:ee:63:2f:21:09:79:90:4e:86:16:70:16:8f:52:36: 60:dc:36:cd:70:e1:1e:98:b1:da:a3:fc:69:38:93:e1:ef:a6: 75:2c:20:eb:ce:03:6e:bc:de:b6:ea:a9:62:9e:0a:2a:e1:6f: f7:24:fb:40:d9:d9:68:e0:77:ed:c0:c5:4b:49:f7:88:b9:d8: 91:3a:54:52:d7:86:a2:d3:51:2f:46:09:95:db:1b:cf:32:02: bb:ba:ad:4b:78:1b:ca:ba:c4:2b:51:11:df:ea:2b:9d:00:ca: 1e:d4:13:cd:b2:ce:73:10:bc:21:40:28:6b:89:27:ec:2a:56: dd:c9:7d:a0:e4:bf:ab:24:5d:24:59:6d:fa:b1:16:25:28:15: fe:fd:ec:fc:0e:d0:d7:40:21:cf:bc:82:18:12:6f:f8:f4:d4: 86:df:ca:66:b9:12:74:ea:de:d1:c0:a1:bf:c1:ab:f9:ec:46: f1:5f:59:17:4d:ad:fa:53:c0:46:92:c6:5d:09:88:58:a9:fa: 1d:8f:30:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGDfr+2Ax2jSGX9qemCRe//fZYhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQzNDQwRkEzOEI1MTMyMUM4QThGRDgxMzZCQTcwNTk3 QTg2ODZFMDAeFw0yNTA2MTYxODM1MzhaFw0yNTA2MjAwMDEzMzhaMDMxMTAvBgNV BAMTKDY2NDc5MTRFNzYzODUzQjc3OUVFREIyREZFMDc3Q0Y0NTcxMDJBMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTJ9/I9GCr9jjJPEPozKjxqRMR wlOtz+hmGCkG+oDjKh7BnfWaLsv2AfxCWQEAtxApG7zATBkPiTU46IucyrdSOLco 3aQiua139m8HYLBDTgI8nY5dkWX2cE5K1NLQdAiicMptu+1yCnE9pgyrXiGsLY0s otW/OhrwXNL7mhL7SaYW+nykFcnAXk6U8lPOU33XPLznwIdgUFxcL2M5JvHxPM+s ybPKCnTkr4oe7QxuiStho4+FwX9GnibFl3YKYZ6bhmSP6919a/kc3PJNhouvmYYk iGFQFW21FVbdJAiq72nyZOKyprM6VOgmckZ/8q8tqAq0BsGlvGDUkANPpO8HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZkeRTnY4U7d57tst/gd89FcQKiQwHwYDVR0j BBgwFoAUbTRA+ji1EyHIqP2BNrpwWXqGhuAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2IzYjAwYi1hZDdiLTQ4NDktYjBiMi1lMjQ5YTJmYTYwNGEvMC82RDM0NDBGQTM4 QjUxMzIxQzhBOEZEODEzNkJBNzA1OTdBODY4NkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQzNDQwRkEzOEI1MTMyMUM4QThGRDgxMzZCQTcwNTk3QTg2 ODZFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NiM2IwMGItYWQ3Yi00ODQ5LWIw YjItZTI0OWEyZmE2MDRhLzAvNkQzNDQwRkEzOEI1MTMyMUM4QThGRDgxMzZCQTcw NTk3QTg2ODZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtorLQcmSTRO7eomtoIIm8cCmNjjk12h5xZ VbF8cCXxpTHgJ+tS+fi9C3yJ6RscpMTNO1bBnswiEu5jLyEJeZBOhhZwFo9SNmDc Ns1w4R6Ysdqj/Gk4k+HvpnUsIOvOA2683rbqqWKeCirhb/ck+0DZ2Wjgd+3AxUtJ 94i52JE6VFLXhqLTUS9GCZXbG88yAru6rUt4G8q6xCtREd/qK50Ayh7UE82yznMQ vCFAKGuJJ+wqVt3JfaDkv6skXSRZbfqxFiUoFf797PwO0NdAIc+8ghgSb/j01Ibf yma5EnTq3tHAob/Bq/nsRvFfWRdNrfpTwEaSxl0JiFip+h2PMLs= -----END CERTIFICATE-----Generated at Tue Jun 17 05:09:40 2025 by rpki-client