$ rpki-client -vvf repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft File: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft (raw, json) Hash identifier: 1H8Tk5X1bF4fiZd8n1wNhF/u27cRUqUWwHMHkF7tLkg= Subject key identifier: 16:99:77:ED:4E:08:56:7A:D2:D4:9F:6F:D1:21:7B:37:11:B9:2F:02 Authority key identifier: 6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 Certificate issuer: /CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Certificate serial: 08F7398E24762C26BEC592B66714101D9675F74A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft Manifest number: 01FC Signing time: Mon 16 Jun 2025 18:30:51 +0000 Manifest this update: Mon 16 Jun 2025 18:25:51 +0000 Manifest next update: Fri 20 Jun 2025 01:12:51 +0000 Files and hashes: 1: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl (hash: mS1HYtNi0WYrSEwvfqslYKnt0YnNUZE6c3mhiKZTbYY=) 2: 3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa (hash: 8i2rkzBjlPEti5Kr8Zm8/78pVX8xhxtJgE0QaB9hDOo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:12:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:f7:39:8e:24:76:2c:26:be:c5:92:b6:67:14:10:1d:96:75:f7:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Validity Not Before: Jun 16 18:25:51 2025 GMT Not After : Jun 20 01:12:51 2025 GMT Subject: CN=169977ED4E08567AD2D49F6FD1217B3711B92F02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:78:6e:2b:10:4b:5c:84:b4:6b:37:c7:72:05: ec:4d:c0:36:fe:56:4c:2a:ec:ee:31:a8:b1:fc:35: 0b:70:50:13:c7:ba:c9:a3:01:62:4d:a0:0d:34:fc: 0b:e9:94:45:94:e2:27:68:5f:23:d4:8c:76:17:e3: 9a:29:31:9f:e6:d2:fa:8d:f1:ee:6c:08:5b:57:84: 01:9c:de:0e:dd:45:11:ba:1b:a7:97:a0:4e:92:5f: 37:4c:db:3b:ed:64:31:80:8e:25:53:88:8b:86:85: 38:37:76:8a:fd:7e:6e:4f:0b:44:25:7b:9e:31:e1: 7e:fd:1e:75:e4:6c:86:39:c8:e9:ec:55:cc:2f:b3: c8:4f:02:43:7f:59:a3:50:4f:14:51:f7:99:dc:4d: fe:82:89:f1:79:55:01:b3:b7:df:98:09:99:bd:d9: 31:73:74:b5:a9:08:e6:d1:9a:4c:c2:a3:94:0b:cd: 51:ee:08:95:ca:96:98:a3:00:f6:b5:4b:81:4a:01: f9:a9:fb:55:50:c2:46:9a:fe:98:b8:c0:10:f4:85: 9b:12:d2:e2:17:7c:06:df:33:84:1c:8c:e5:e7:4f: ab:01:2a:6a:69:48:2b:95:5c:4c:5f:f7:9a:9d:cd: ff:49:66:84:f9:7d:ad:27:38:8d:c5:a0:f9:23:47: 37:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:99:77:ED:4E:08:56:7A:D2:D4:9F:6F:D1:21:7B:37:11:B9:2F:02 X509v3 Authority Key Identifier: keyid:6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:af:6a:c7:0f:87:24:09:7b:05:ba:94:d1:42:25:4d:f8:3f: 26:1d:ce:5c:43:c8:7f:22:c2:4c:93:ae:6e:9c:28:77:0e:8e: 95:39:a5:2e:9f:66:8e:db:2e:03:60:b1:ce:04:7c:6b:b2:a5: 0b:24:c5:63:7d:59:51:34:22:3b:17:ab:9f:e0:63:98:7d:e1: b8:a9:86:e9:a5:17:9e:46:4f:98:32:70:a1:f8:26:b5:69:f5: 29:6f:f5:cd:cf:bb:7d:6d:1c:b6:f2:0f:62:51:ec:c1:a3:54: 48:05:1f:1e:5f:01:43:72:d6:7c:66:7a:88:5d:10:69:f2:5c: f5:f6:19:89:96:64:8b:a5:68:29:5b:c5:f6:9b:86:e9:fc:6a: 9d:5f:95:e9:9d:a3:be:de:de:69:65:ef:c8:c2:3f:46:e6:8f: cf:10:32:5d:1d:a4:4b:6f:e7:01:13:90:a3:25:e5:8c:62:b4: 5f:c6:8d:ef:fd:b6:3d:94:8a:a6:a3:be:52:f6:c4:34:2b:63: a2:c5:fe:05:03:a2:c9:5f:ad:69:9b:25:1c:46:0c:52:ec:30: 46:df:97:e6:7d:45:eb:37:8c:0a:66:22:00:d1:b8:48:0b:e7: 01:1f:64:81:61:6a:e6:61:ca:94:0f:16:4c:3b:a0:08:ef:e1: 58:7c:d9:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCPc5jiR2LCa+xZK2ZxQQHZZ190owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1 RkUwQkUxMTAeFw0yNTA2MTYxODI1NTFaFw0yNTA2MjAwMTEyNTFaMDMxMTAvBgNV BAMTKDE2OTk3N0VENEUwODU2N0FEMkQ0OUY2RkQxMjE3QjM3MTFCOTJGMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSeG4rEEtchLRrN8dyBexNwDb+ Vkwq7O4xqLH8NQtwUBPHusmjAWJNoA00/AvplEWU4idoXyPUjHYX45opMZ/m0vqN 8e5sCFtXhAGc3g7dRRG6G6eXoE6SXzdM2zvtZDGAjiVTiIuGhTg3dor9fm5PC0Ql e54x4X79HnXkbIY5yOnsVcwvs8hPAkN/WaNQTxRR95ncTf6CifF5VQGzt9+YCZm9 2TFzdLWpCObRmkzCo5QLzVHuCJXKlpijAPa1S4FKAfmp+1VQwkaa/pi4wBD0hZsS 0uIXfAbfM4QcjOXnT6sBKmppSCuVXExf95qdzf9JZoT5fa0nOI3FoPkjRzezAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFpl37U4IVnrS1J9v0SF7NxG5LwIwHwYDVR0j BBgwFoAUb8hX33/lNQpsBaHxE/PcLl/gvhEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTIzOGE2Mi02YTk2LTQzYmMtODdhZi0wMmRiNjQxZjcxMDkvMC82RkM4NTdERjdG RTUzNTBBNkMwNUExRjExM0YzREMyRTVGRTBCRTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1RkUw QkUxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGEyMzhhNjItNmE5Ni00M2JjLTg3 YWYtMDJkYjY0MWY3MTA5LzAvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RD MkU1RkUwQkUxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKqvascPhyQJewW6lNFCJU34PyYdzlxDyH8i wkyTrm6cKHcOjpU5pS6fZo7bLgNgsc4EfGuypQskxWN9WVE0IjsXq5/gY5h94bip humlF55GT5gycKH4JrVp9Slv9c3Pu31tHLbyD2JR7MGjVEgFHx5fAUNy1nxmeohd EGnyXPX2GYmWZIulaClbxfabhun8ap1flemdo77e3mll78jCP0bmj88QMl0dpEtv 5wETkKMl5YxitF/Gje/9tj2UiqajvlL2xDQrY6LF/gUDoslfrWmbJRxGDFLsMEbf l+Z9Res3jApmIgDRuEgL5wEfZIFhauZhypQPFkw7oAjv4Vh82RY= -----END CERTIFICATE-----Generated at Wed Jun 18 16:00:24 2025 by rpki-client