$ rpki-client -vvf repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft File: A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft (raw, json) Hash identifier: MnV3RZZs9yGmwcIFite6F/36l+0gcDFoCNMl0o44g08= Subject key identifier: 3C:B4:8D:79:24:FB:68:95:7B:68:12:D5:0B:3A:CF:03:81:2F:37:D5 Authority key identifier: A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D Certificate issuer: /CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D Certificate serial: 3D3305590C97F59927F4F8276EFDB8E0A7B28E79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft Manifest number: 04B7 Signing time: Mon 16 Jun 2025 11:40:48 +0000 Manifest this update: Mon 16 Jun 2025 11:35:48 +0000 Manifest next update: Thu 19 Jun 2025 16:32:48 +0000 Files and hashes: 1: A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl (hash: ceMxyFk2UHy4eQHKrKljtWqvJJCS3S58XQO+Z5feCl4=) 2: 323430353a633563303a666630303a3a2f34302d3438203d3e20313334363534.roa (hash: Q46pxbm+TVjkz99t2lUyFhkKtMbUjt5MtTd3GxK/1m0=) 3: 323430353a633563303a3a2f33322d3438203d3e20313339393736.roa (hash: xfrI3EMm4Ep5Rz+Bb2hqA/GSHJ4grbbfa2TI4fnTntU=) 4: 3130332e3134372e3235342e302f32342d3234203d3e20313339393736.roa (hash: dOv5VWfsUQMOSsP2UD/jXSQ8dYcxj2jFJJe5ag4euFo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 16:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:33:05:59:0c:97:f5:99:27:f4:f8:27:6e:fd:b8:e0:a7:b2:8e:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D Validity Not Before: Jun 16 11:35:48 2025 GMT Not After : Jun 19 16:32:48 2025 GMT Subject: CN=3CB48D7924FB68957B6812D50B3ACF03812F37D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e6:74:c4:99:c5:4d:1c:18:bc:9d:37:a9:eb: cf:00:a6:b7:8c:c0:ef:2d:be:93:17:3e:f2:3a:cd: 78:84:40:16:bb:0d:51:c4:ab:76:3e:56:91:f4:de: f3:fe:ec:e7:15:07:4b:f0:b7:0a:16:f8:bd:7e:94: 4e:f5:dd:d1:5f:3a:f7:2e:2a:ff:74:22:3b:ff:dd: fc:d2:15:12:0b:95:a8:fc:d2:5c:41:54:5d:90:3c: 95:e4:2a:4c:50:44:4d:c5:a1:82:1b:63:d5:18:2c: be:5d:67:c1:61:56:53:c6:8b:0a:a4:13:54:52:22: b4:2e:72:f0:56:0a:f0:10:78:c2:ae:95:e2:fe:8f: 32:9e:80:45:e9:2c:00:54:e7:ce:dd:14:d4:3a:e6: 93:bc:55:d0:00:7a:8e:66:e3:d0:88:d8:63:79:a1: 37:54:a7:a6:d3:34:eb:49:f3:c4:12:e0:31:da:96: 38:af:f5:48:9c:14:2f:b0:00:27:92:20:4f:23:16: 18:8a:c6:0e:66:47:6a:a9:fd:52:d1:8d:bc:e9:6e: 76:5e:82:fc:11:a6:db:e8:a2:cf:37:a0:f2:e4:60: 13:a5:ac:f4:ae:4b:e5:71:db:39:dd:24:24:4f:1b: dc:ab:eb:c2:03:ad:77:81:d9:6a:85:d7:74:74:87: 3a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B4:8D:79:24:FB:68:95:7B:68:12:D5:0B:3A:CF:03:81:2F:37:D5 X509v3 Authority Key Identifier: keyid:A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:96:51:d7:85:83:b8:15:43:01:76:6c:5d:b6:65:0f:99:5e: 44:12:f8:1e:5b:41:44:cc:d1:bd:f3:4a:76:19:b7:6f:38:06: a5:dd:ad:74:65:96:6f:32:8c:5e:96:58:c7:d1:8c:4b:fe:67: c6:53:40:7c:44:bb:41:31:38:4e:13:16:21:71:02:6c:01:ef: e4:96:e3:7f:e3:9f:85:97:38:97:e0:80:9d:7d:90:22:8c:bd: 56:8b:33:3c:c5:10:b0:0f:d3:c0:12:7f:af:59:64:34:44:23: b8:9c:c3:ce:3a:bb:97:45:c8:28:57:36:9c:98:1f:4c:30:29: a4:cc:8c:45:1b:03:84:29:50:23:ef:4a:6c:41:2f:34:8f:de: b2:ae:bb:41:49:44:7d:83:8e:f6:85:44:59:f0:c0:70:83:68: bf:bb:d1:9e:10:ad:a8:f8:e3:01:c7:6c:bb:72:42:2a:d2:b0: 6e:83:d3:6b:e9:30:a5:7e:f5:f0:59:42:10:47:e2:f6:83:b2: e8:a2:5d:34:00:5a:ea:0f:1b:ec:f3:9d:55:b1:32:37:86:2b: 6d:60:d4:58:0a:7c:86:24:b5:00:27:00:e0:63:71:58:08:3d: 4b:81:60:52:91:2a:f2:92:48:fe:70:b8:6f:94:2d:c0:5f:40: 20:e5:e6:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPTMFWQyX9Zkn9Pgnbv244KeyjnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1QjU3 QzRDOEUwRDAeFw0yNTA2MTYxMTM1NDhaFw0yNTA2MTkxNjMyNDhaMDMxMTAvBgNV BAMTKDNDQjQ4RDc5MjRGQjY4OTU3QjY4MTJENTBCM0FDRjAzODEyRjM3RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP5nTEmcVNHBi8nTep688ApreM wO8tvpMXPvI6zXiEQBa7DVHEq3Y+VpH03vP+7OcVB0vwtwoW+L1+lE713dFfOvcu Kv90Ijv/3fzSFRILlaj80lxBVF2QPJXkKkxQRE3FoYIbY9UYLL5dZ8FhVlPGiwqk E1RSIrQucvBWCvAQeMKuleL+jzKegEXpLABU587dFNQ65pO8VdAAeo5m49CI2GN5 oTdUp6bTNOtJ88QS4DHaljiv9UicFC+wACeSIE8jFhiKxg5mR2qp/VLRjbzpbnZe gvwRptvoos83oPLkYBOlrPSuS+Vx2zndJCRPG9yr68IDrXeB2WqF13R0hzrpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPLSNeST7aJV7aBLVCzrPA4EvN9UwHwYDVR0j BBgwFoAUpsexyguQiFXuWPGZHMyVtXxMjg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGU0NzUwZS00MzkzLTQzZWMtOWFiNS1kMjQ3YmJjMDdkODYvMC9BNkM3QjFDQTBC OTA4ODU1RUU1OEYxOTkxQ0NDOTVCNTdDNEM4RTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1QjU3QzRD OEUwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBlNDc1MGUtNDM5My00M2VjLTlh YjUtZDI0N2JiYzA3ZDg2LzAvQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1 QjU3QzRDOEUwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAqWUdeFg7gVQwF2bF22ZQ+ZXkQS+B5bQUTM 0b3zSnYZt284BqXdrXRllm8yjF6WWMfRjEv+Z8ZTQHxEu0ExOE4TFiFxAmwB7+SW 43/jn4WXOJfggJ19kCKMvVaLMzzFELAP08ASf69ZZDREI7icw846u5dFyChXNpyY H0wwKaTMjEUbA4QpUCPvSmxBLzSP3rKuu0FJRH2DjvaFRFnwwHCDaL+70Z4Qraj4 4wHHbLtyQirSsG6D02vpMKV+9fBZQhBH4vaDsuiiXTQAWuoPG+zznVWxMjeGK21g 1FgKfIYktQAnAOBjcVgIPUuBYFKRKvKSSP5wuG+ULcBfQCDl5gs= -----END CERTIFICATE-----Generated at Tue Jun 17 13:38:54 2025 by rpki-client