$ rpki-client -vvf repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft File: 6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft (raw, json) Hash identifier: 3VeMNh8yUYoYMk4iovoeAy3s3eyn15ebDGdY2a2dpNo= Subject key identifier: 90:26:20:D8:72:7E:77:E4:E2:22:DD:0F:10:35:11:50:D0:2C:4C:F7 Authority key identifier: 6D:DA:5C:1E:72:FD:CA:12:9B:06:9E:D9:C4:4B:8A:AE:08:BA:E6:40 Certificate issuer: /CN=6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640 Certificate serial: 2A056513ACAE9EA99CC3100C726A9FFC235DF797 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer Subject info access: rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft Manifest number: 04DC Signing time: Sun 15 Jun 2025 11:01:07 +0000 Manifest this update: Sun 15 Jun 2025 10:56:07 +0000 Manifest next update: Wed 18 Jun 2025 21:52:07 +0000 Files and hashes: 1: 6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl (hash: 8T0OokXrQqnRdHg6aiy8P9xz7ldGRUpOGFzD2JwpdoY=) 2: 3130332e3233332e3130302e302f32342d3234203d3e20313333333537.roa (hash: Sp1gcRSl9gkUunIoA7wttKs/P7PqHdCHTdTVU9qZ8Lk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 21:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:05:65:13:ac:ae:9e:a9:9c:c3:10:0c:72:6a:9f:fc:23:5d:f7:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640 Validity Not Before: Jun 15 10:56:07 2025 GMT Not After : Jun 18 21:52:07 2025 GMT Subject: CN=902620D8727E77E4E222DD0F10351150D02C4CF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:62:31:68:ac:00:b1:1a:34:d7:2d:c7:39:e6: 8d:ea:75:77:8f:e6:4b:b3:02:7e:8f:21:a9:ac:6f: 7e:18:7f:26:a7:45:d4:96:8d:4a:46:15:dc:f3:85: 29:06:b6:82:07:d8:73:ab:50:2d:f8:87:bd:40:45: ad:2c:56:05:3b:21:05:31:9e:1b:28:bd:3d:f0:e4: d1:d5:86:26:91:8f:09:2f:f3:bd:64:32:26:37:ac: c8:13:dc:38:4c:b2:f7:ad:6d:eb:99:96:9e:18:48: af:98:70:6c:a5:6c:a1:d3:81:10:48:06:66:7f:49: 4d:17:80:f9:b8:8c:bf:19:90:8e:8c:08:9b:02:cb: 66:bc:cc:ec:25:58:d3:c8:93:bc:1a:c0:71:be:cb: c8:0e:cb:78:56:df:61:9b:e4:21:a3:6b:6c:31:d4: 92:67:c9:77:09:a2:31:6d:04:e2:6a:40:7c:c7:48: dd:bd:6e:02:02:44:a0:e7:06:c0:2f:08:b1:08:63: e4:3b:cb:0d:d3:b0:db:53:c0:b4:e8:49:b6:e7:8e: 7b:52:bb:2e:df:51:31:c8:c3:cc:97:90:c0:bf:02: 63:41:26:df:1c:c5:b9:b9:27:e0:6c:a6:80:f7:e6: 16:9e:c3:c4:67:2f:f8:ac:fb:83:7e:40:a2:0a:67: d3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:26:20:D8:72:7E:77:E4:E2:22:DD:0F:10:35:11:50:D0:2C:4C:F7 X509v3 Authority Key Identifier: keyid:6D:DA:5C:1E:72:FD:CA:12:9B:06:9E:D9:C4:4B:8A:AE:08:BA:E6:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:7e:77:08:98:39:f9:fc:ac:3e:10:6a:0b:e1:b7:ea:f1:57: 86:3c:2c:6c:6c:d1:f3:ea:55:e7:bc:d0:1c:d7:00:cc:16:c9: 8c:e5:2d:0c:10:e5:86:57:0d:a5:5c:1d:49:7f:df:a8:73:51: e6:d8:1a:9e:3e:29:66:c9:53:65:0f:16:07:52:4d:c2:16:17: a3:e3:a3:05:ee:c8:21:20:8e:13:18:52:f1:b2:ed:8a:3b:04: b7:21:21:5a:ac:8e:fe:ee:12:3a:b2:ca:83:9b:37:fd:1d:7b: 7f:4f:a6:a7:6e:df:d9:89:06:a2:00:fa:da:76:dd:b7:da:18: df:8c:d5:9f:1c:f2:5e:bb:e0:35:7f:cf:e8:bc:f9:2a:78:83: 9d:56:e8:6d:37:df:8a:0f:4c:51:28:20:47:7d:2a:68:6b:99: 85:dc:93:f1:54:2b:12:a0:1f:35:19:71:9b:84:c6:61:b4:4c: f1:01:37:5c:4f:63:07:26:dd:ec:e1:5b:b8:07:d0:da:9d:a4: 98:16:db:6d:4e:93:76:5d:ac:e3:e8:a3:9d:9a:12:b8:32:80: 81:3b:bb:87:51:56:bb:b8:8f:a2:1c:c6:2e:6f:16:e5:f5:ad: 19:4c:a1:60:c7:ff:63:97:be:9a:f6:7f:d2:fd:d1:94:c2:47: f2:8a:b6:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKgVlE6yunqmcwxAMcmqf/CNd95cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhBQUUw OEJBRTY0MDAeFw0yNTA2MTUxMDU2MDdaFw0yNTA2MTgyMTUyMDdaMDMxMTAvBgNV BAMTKDkwMjYyMEQ4NzI3RTc3RTRFMjIyREQwRjEwMzUxMTUwRDAyQzRDRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4YjForACxGjTXLcc55o3qdXeP 5kuzAn6PIamsb34YfyanRdSWjUpGFdzzhSkGtoIH2HOrUC34h71ARa0sVgU7IQUx nhsovT3w5NHVhiaRjwkv871kMiY3rMgT3DhMsvetbeuZlp4YSK+YcGylbKHTgRBI BmZ/SU0XgPm4jL8ZkI6MCJsCy2a8zOwlWNPIk7wawHG+y8gOy3hW32Gb5CGja2wx 1JJnyXcJojFtBOJqQHzHSN29bgICRKDnBsAvCLEIY+Q7yw3TsNtTwLToSbbnjntS uy7fUTHIw8yXkMC/AmNBJt8cxbm5J+BspoD35haew8RnL/is+4N+QKIKZ9OjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkCYg2HJ+d+TiIt0PEDURUNAsTPcwHwYDVR0j BBgwFoAUbdpcHnL9yhKbBp7ZxEuKrgi65kAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTdjOGMwMS00YWY3LTQxYjAtODVhMy05ZDFmYTRlYjlmYmEvMC82RERBNUMxRTcy RkRDQTEyOUIwNjlFRDlDNDRCOEFBRTA4QkFFNjQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhBQUUwOEJB RTY0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE3YzhjMDEtNGFmNy00MWIwLTg1 YTMtOWQxZmE0ZWI5ZmJhLzAvNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhB QUUwOEJBRTY0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHR+dwiYOfn8rD4Qagvht+rxV4Y8LGxs0fPq Vee80BzXAMwWyYzlLQwQ5YZXDaVcHUl/36hzUebYGp4+KWbJU2UPFgdSTcIWF6Pj owXuyCEgjhMYUvGy7Yo7BLchIVqsjv7uEjqyyoObN/0de39Ppqdu39mJBqIA+tp2 3bfaGN+M1Z8c8l674DV/z+i8+Sp4g51W6G0334oPTFEoIEd9KmhrmYXck/FUKxKg HzUZcZuExmG0TPEBN1xPYwcm3ezhW7gH0NqdpJgW221Ok3ZdrOPoo52aErgygIE7 u4dRVru4j6Icxi5vFuX1rRlMoWDH/2OXvpr2f9L90ZTCR/KKtpc= -----END CERTIFICATE-----Generated at Tue Jun 17 15:40:35 2025 by rpki-client