$ rpki-client -vvf repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft File: 6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft (raw, json) Hash identifier: 8Vkg550034QLGuhy3HzONV4w37SxMAJNkIP0S16Kne4= Subject key identifier: D2:87:7A:73:7C:10:49:39:3D:1D:08:9A:AC:B6:77:48:5D:D5:E0:B0 Authority key identifier: 6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8 Certificate issuer: /CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8 Certificate serial: 4CD0269A78C5BA2A407AB15AC1D454A80B25B981 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft Manifest number: 042A Signing time: Mon 16 Jun 2025 07:03:15 +0000 Manifest this update: Mon 16 Jun 2025 06:58:15 +0000 Manifest next update: Thu 19 Jun 2025 11:31:15 +0000 Files and hashes: 1: 3130332e34322e3131372e302f32342d3234203d3e20313431393638.roa (hash: crt2F/X+RQnPJrrglVZI7zbLddWcN6j7uVz/Xw4zeS8=) 2: 6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl (hash: g6WwXn7An2+a4aW/ehFn6Lf8XrGXrPSa71gVMj7HCRU=) 3: 3130332e34322e3131392e302f32342d3234203d3e203234353139.roa (hash: tlMLEqQhJ1FXYwOLCCvAFRe52QGRRF02EIII3xVkWN0=) 4: 3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa (hash: FZlGjWO2QHYzsNelbvnW9T+cFLiq8WyISsSRf/rM5oc=) 5: 3130332e34322e3131362e302f32332d3233203d3e20313431393638.roa (hash: deSk7dhV94Q/bI20PuBTuLDi+FeXmglvV/8pK3EJY0A=) 6: 3130332e34322e3131382e302f32332d3233203d3e203234353139.roa (hash: HHqxnvo/jJQgCNZXpj544snDh99Z+fGyg/N/7YitJ5U=) 7: 3130332e34322e3131382e302f32342d3234203d3e203234353139.roa (hash: vCgDnA33NAkXtanYsGnqZiMWsel/bsPJTrf5ZDKywHU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 11:31:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:d0:26:9a:78:c5:ba:2a:40:7a:b1:5a:c1:d4:54:a8:0b:25:b9:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8 Validity Not Before: Jun 16 06:58:15 2025 GMT Not After : Jun 19 11:31:15 2025 GMT Subject: CN=D2877A737C1049393D1D089AACB677485DD5E0B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:95:78:5e:f9:d9:f4:10:ff:f2:7b:cd:0f:71: 82:8a:c2:67:da:12:09:ae:8f:be:f5:0d:c7:e0:06: 67:f9:1d:b7:cb:f3:af:17:41:91:c0:e1:65:83:cb: 97:4b:de:5f:25:d6:86:42:d9:21:82:60:e9:3d:06: f1:3c:c3:cb:d9:ab:3e:cc:fb:73:b4:db:55:c8:21: 0d:11:77:a3:d0:c8:ba:ee:9a:eb:18:24:a6:2e:a6: c0:02:b5:f3:a1:72:8c:8d:23:7b:e7:ea:30:b4:63: 7f:9f:ca:67:d6:9f:71:68:aa:23:2a:0c:38:a0:f4: db:3c:87:f9:a3:7d:56:db:6a:39:cf:b3:d9:60:fb: da:5d:2d:03:de:43:e3:cb:21:89:a4:dd:94:a5:40: 39:5d:60:0d:ee:a3:d7:7e:b9:ae:40:e1:79:9c:52: d8:57:d9:90:89:44:85:1f:29:56:88:d9:18:be:3c: e0:47:68:33:91:18:13:fd:d1:c1:b4:3b:e8:fa:ec: ae:f7:e3:99:6b:31:5d:8a:82:7f:06:e7:8a:75:c0: 5d:79:27:3b:4d:c3:8f:81:ef:e6:d4:77:fb:a0:35: 30:f5:99:ab:b8:c5:b4:64:5e:36:82:a1:c3:6e:a6: 1c:95:90:5f:dd:2e:2c:7f:29:d4:fb:4d:36:1d:ac: 0a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:87:7A:73:7C:10:49:39:3D:1D:08:9A:AC:B6:77:48:5D:D5:E0:B0 X509v3 Authority Key Identifier: keyid:6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:55:f3:de:59:b2:71:f2:12:73:25:3f:38:e3:da:fd:a5:83: 46:52:97:4a:fa:4c:ec:ea:e8:74:f3:7b:3d:46:ff:33:92:21: bc:f4:19:21:1a:ed:0c:32:0c:58:d2:9a:8a:b3:54:ee:1a:89: 3b:e0:66:e5:69:4b:00:38:61:72:08:40:5f:7f:53:b3:82:45: 6c:cc:fe:9a:f3:98:fb:be:e5:41:2e:dd:84:b8:45:e0:87:19: 02:20:24:64:c7:5c:ec:40:b6:54:7a:5b:32:dd:ac:5a:a4:5e: dc:13:d9:52:b1:28:67:8d:08:61:04:94:a2:dc:55:b0:11:b9: 4b:97:b7:f9:5e:79:5e:f1:30:e1:c4:92:45:3f:ea:fc:42:f9: 13:a6:d8:2c:6f:6f:3f:f0:04:01:3c:bc:ba:56:90:93:21:3f: d2:b3:f8:36:24:44:90:2e:12:9c:7f:83:52:1c:db:f1:1d:c3: 48:ee:bf:5f:6f:4d:72:00:82:03:98:09:ff:8e:ab:c9:9d:95: c2:e4:b0:63:50:a8:9e:74:0b:13:ff:88:93:9e:1e:9c:b7:c1: 2c:20:b5:70:19:02:ca:03:e8:aa:e4:1f:1f:e3:bb:ce:ee:64: d9:8c:7d:7a:93:3c:d6:c8:32:f1:92:41:64:60:94:56:c0:1a: 4b:27:ad:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTNAmmnjFuipAerFawdRUqAsluYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY0ODVBREFEMjA2ODMzN0ZERjhCMjhGRjAwN0JDREM1 QjQ5OTlEODAeFw0yNTA2MTYwNjU4MTVaFw0yNTA2MTkxMTMxMTVaMDMxMTAvBgNV BAMTKEQyODc3QTczN0MxMDQ5MzkzRDFEMDg5QUFDQjY3NzQ4NURENUUwQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWlXhe+dn0EP/ye80PcYKKwmfa Egmuj771DcfgBmf5HbfL868XQZHA4WWDy5dL3l8l1oZC2SGCYOk9BvE8w8vZqz7M +3O021XIIQ0Rd6PQyLrumusYJKYupsACtfOhcoyNI3vn6jC0Y3+fymfWn3FoqiMq DDig9Ns8h/mjfVbbajnPs9lg+9pdLQPeQ+PLIYmk3ZSlQDldYA3uo9d+ua5A4Xmc UthX2ZCJRIUfKVaI2Ri+POBHaDORGBP90cG0O+j67K7345lrMV2Kgn8G54p1wF15 JztNw4+B7+bUd/ugNTD1mau4xbRkXjaCocNuphyVkF/dLix/KdT7TTYdrAqpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0od6c3wQSTk9HQiarLZ3SF3V4LAwHwYDVR0j BBgwFoAUb0ha2tIGgzf9+LKP8Ae83FtJmdgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjU4OTM0ZC0xYjAwLTQ0ODktOTJlZC0xY2E2ZGM0YjI5MGYvMC82RjQ4NUFEQUQy MDY4MzM3RkRGOEIyOEZGMDA3QkNEQzVCNDk5OUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkY0ODVBREFEMjA2ODMzN0ZERjhCMjhGRjAwN0JDREM1QjQ5 OTlEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY1ODkzNGQtMWIwMC00NDg5LTky ZWQtMWNhNmRjNGIyOTBmLzAvNkY0ODVBREFEMjA2ODMzN0ZERjhCMjhGRjAwN0JD REM1QjQ5OTlEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9V895ZsnHyEnMlPzjj2v2lg0ZSl0r6TOzq 6HTzez1G/zOSIbz0GSEa7QwyDFjSmoqzVO4aiTvgZuVpSwA4YXIIQF9/U7OCRWzM /przmPu+5UEu3YS4ReCHGQIgJGTHXOxAtlR6WzLdrFqkXtwT2VKxKGeNCGEElKLc VbARuUuXt/leeV7xMOHEkkU/6vxC+ROm2Cxvbz/wBAE8vLpWkJMhP9Kz+DYkRJAu Epx/g1Ic2/Edw0juv19vTXIAggOYCf+Oq8mdlcLksGNQqJ50CxP/iJOeHpy3wSwg tXAZAsoD6KrkHx/ju87uZNmMfXqTPNbIMvGSQWRglFbAGksnrZk= -----END CERTIFICATE-----Generated at Tue Jun 17 14:30:21 2025 by rpki-client