$ rpki-client -vvf repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft File: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft (raw, json) Hash identifier: ffcQghIBi2pL/CcpuJt9lCpnmiLqEM3lkwuRLiDIz/I= Subject key identifier: 74:A8:12:83:BA:17:66:BE:82:CB:8A:0F:6C:B1:D6:84:27:14:F7:24 Authority key identifier: 6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E Certificate issuer: /CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Certificate serial: 4F04CA048B12A731410840A24DB5460A55FE05FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft Manifest number: B5 Signing time: Sun 15 Jun 2025 16:22:10 +0000 Manifest this update: Sun 15 Jun 2025 16:17:10 +0000 Manifest next update: Wed 18 Jun 2025 21:51:10 +0000 Files and hashes: 1: 33362e35302e3231362e302f32342d3234203d3e20313437313238.roa (hash: knY/ggPl78wk2nvRxnL0Ik6PzIK0DYSQq15iPy2gM40=) 2: 33362e35302e3231362e302f32332d3233203d3e20313437313238.roa (hash: TzFqnwzzY9xia0s3waMLkiGG8A7BVi2jn0Tebn9ZTXg=) 3: 33362e35302e3231372e302f32342d3234203d3e20313437313238.roa (hash: suvA+Wk962jHlhC9+yItBsXmZi+V1BXvTufHDqbDzJE=) 4: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl (hash: hIzcD8LaCeYiDfCah+7Midcy9wljx4Ch68wNzgZPdZc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 21:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:04:ca:04:8b:12:a7:31:41:08:40:a2:4d:b5:46:0a:55:fe:05:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Validity Not Before: Jun 15 16:17:10 2025 GMT Not After : Jun 18 21:51:10 2025 GMT Subject: CN=74A81283BA1766BE82CB8A0F6CB1D6842714F724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:48:6e:8d:44:b2:16:cd:bf:93:23:80:f0:86: ce:8b:05:00:76:fd:6f:0d:3e:37:11:2a:dd:98:a6: c6:ea:f3:95:8a:0c:dc:17:a6:e8:b6:38:6c:b0:e7: 78:a3:9e:f5:0d:08:cb:26:66:8f:3e:07:3e:2e:93: e7:35:a1:ec:d2:57:66:95:fa:c9:5a:2f:df:54:a9: 3a:03:13:b1:2b:e7:e6:4a:d7:25:78:11:7b:cc:fb: ae:76:cc:9d:de:f4:c7:ac:98:6c:2a:b7:c6:b4:be: 7c:79:ca:a5:89:0d:d5:73:19:e6:4a:43:ce:3b:11: 18:8c:db:e8:0b:db:0a:e8:f7:57:76:ca:e5:0e:0e: a5:08:23:69:12:c5:84:e1:da:fb:fc:3c:cc:2b:cb: c4:ff:0a:d8:c5:2e:70:bf:5c:65:82:6f:fc:7c:ba: 9b:10:bb:e5:96:1a:85:d4:b1:ed:47:3e:e5:1a:ee: f6:7a:1f:0d:49:30:ea:1d:d2:c4:26:69:45:e0:0e: cf:10:a8:71:ae:f9:41:4f:86:ef:24:e2:e6:29:5c: d0:11:bc:d1:39:eb:6b:88:36:73:3e:ce:23:9e:19: b9:20:6b:0f:84:69:7f:23:80:b1:3c:f2:8c:37:a1: 8e:f3:5e:fe:a5:bc:14:cb:2c:6d:ca:22:43:ef:87: 60:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A8:12:83:BA:17:66:BE:82:CB:8A:0F:6C:B1:D6:84:27:14:F7:24 X509v3 Authority Key Identifier: keyid:6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:a7:29:c8:b1:07:18:07:c8:74:7f:d4:4c:1e:c9:7f:4b:6a: c3:7f:f3:ed:34:46:a5:8d:3b:8a:29:39:94:f3:41:90:f5:59: 1a:41:d8:b4:e9:0e:be:b4:51:cc:e6:b9:c7:b3:0d:9f:c9:b6: 8e:7d:89:c4:8b:30:9e:be:78:9f:a1:44:44:36:fe:68:c5:b3: dc:92:e5:e8:c7:72:5f:e9:7f:78:47:9a:f9:bd:59:4e:8c:3f: 56:fc:6e:2d:91:23:35:e3:63:5b:ab:ad:42:be:82:5e:c5:c0: 88:2a:f3:8c:a9:da:3a:ff:48:9c:07:e1:6c:07:cd:4d:a1:14: 97:e8:9f:7e:89:fc:c7:c3:ed:59:50:63:9c:02:94:54:a9:70: 7d:a6:4b:b3:5a:95:da:45:73:66:1a:93:44:44:ad:16:4d:bb: e2:6a:63:68:de:99:bd:f6:74:00:45:33:d2:0a:8d:8f:30:02: b3:95:6b:c6:f8:b1:29:79:d9:14:e0:fd:52:38:de:c4:81:36: bd:c7:07:1c:2c:da:d7:33:32:4c:84:fa:49:c4:50:33:84:c6: e0:ae:22:d4:5b:ed:10:b1:75:07:bf:4b:b8:05:62:32:b5:5f: 8c:a8:c5:16:d2:14:42:8a:cb:de:dd:2b:7b:5a:91:f2:53:e4: 8e:f0:7a:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTwTKBIsSpzFBCECiTbVGClX+Bf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3 QTk4MDk5RTAeFw0yNTA2MTUxNjE3MTBaFw0yNTA2MTgyMTUxMTBaMDMxMTAvBgNV BAMTKDc0QTgxMjgzQkExNzY2QkU4MkNCOEEwRjZDQjFENjg0MjcxNEY3MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmSG6NRLIWzb+TI4Dwhs6LBQB2 /W8NPjcRKt2Ypsbq85WKDNwXpui2OGyw53ijnvUNCMsmZo8+Bz4uk+c1oezSV2aV +slaL99UqToDE7Er5+ZK1yV4EXvM+652zJ3e9MesmGwqt8a0vnx5yqWJDdVzGeZK Q847ERiM2+gL2wro91d2yuUODqUII2kSxYTh2vv8PMwry8T/CtjFLnC/XGWCb/x8 upsQu+WWGoXUse1HPuUa7vZ6Hw1JMOod0sQmaUXgDs8QqHGu+UFPhu8k4uYpXNAR vNE562uINnM+ziOeGbkgaw+EaX8jgLE88ow3oY7zXv6lvBTLLG3KIkPvh2CPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdKgSg7oXZr6Cy4oPbLHWhCcU9yQwHwYDVR0j BBgwFoAUbbsQDY1GaauKXH7gVyKO1nqYCZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTk4OWZhZi00OGZiLTRmNDAtOWU3Ny0yNDNkNzhhNWI1YzQvMC82REJCMTAwRDhE NDY2OUFCOEE1QzdFRTA1NzIyOEVENjdBOTgwOTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3QTk4 MDk5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU5ODlmYWYtNDhmYi00ZjQwLTll NzctMjQzZDc4YTViNWM0LzAvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhF RDY3QTk4MDk5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGanKcixBxgHyHR/1EweyX9LasN/8+00RqWN O4opOZTzQZD1WRpB2LTpDr60UczmucezDZ/Jto59icSLMJ6+eJ+hREQ2/mjFs9yS 5ejHcl/pf3hHmvm9WU6MP1b8bi2RIzXjY1urrUK+gl7FwIgq84yp2jr/SJwH4WwH zU2hFJfon36J/MfD7VlQY5wClFSpcH2mS7NaldpFc2Yak0RErRZNu+JqY2jemb32 dABFM9IKjY8wArOVa8b4sSl52RTg/VI43sSBNr3HBxws2tczMkyE+knEUDOExuCu ItRb7RCxdQe/S7gFYjK1X4yoxRbSFEKKy97dK3takfJT5I7wel4= -----END CERTIFICATE-----Generated at Mon Jun 16 17:44:11 2025 by rpki-client