$ rpki-client -vvf repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft File: 6437999FD06F2C7F0F16F8160CD6145F775884A4.mft (raw, json) Hash identifier: Pebs9T0CfAQ/JmMypg4P+cKUxxT5EmFV6X47TQ6cxs4= Subject key identifier: 74:35:DE:9D:0F:1B:07:8E:19:D2:1C:2D:AE:D6:52:43:85:DE:83:BD Authority key identifier: 64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 Certificate issuer: /CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Certificate serial: 046ADC9559416DC75DD0882D76989954DB751C14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft Manifest number: 0217 Signing time: Sat 14 Jun 2025 07:10:03 +0000 Manifest this update: Sat 14 Jun 2025 07:05:03 +0000 Manifest next update: Tue 17 Jun 2025 17:51:03 +0000 Files and hashes: 1: 3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa (hash: 6kBcLlz4I+EwiYd/zHv8YINF31MEROhjhbQ+A0qjPjE=) 2: 3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa (hash: b3wEoQmduATe2XsB1+5lzcIjLJ7k0E7+xb68g1ewVFQ=) 3: 3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa (hash: FtQ7YyJ/nXZZN06U1YB5sNs24X+l1RzMYb5gI1y1G9M=) 4: 6437999FD06F2C7F0F16F8160CD6145F775884A4.crl (hash: HWWk4p4qgXpvJ6pHARc0hJ1pk71I9wEEcBpfOZFqCSk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 17:51:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:6a:dc:95:59:41:6d:c7:5d:d0:88:2d:76:98:99:54:db:75:1c:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Validity Not Before: Jun 14 07:05:03 2025 GMT Not After : Jun 17 17:51:03 2025 GMT Subject: CN=7435DE9D0F1B078E19D21C2DAED6524385DE83BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a2:36:d0:b7:a6:0e:98:61:7f:89:94:ec:fa: 10:ba:eb:23:45:8a:ef:8d:21:58:9d:1c:91:d0:d4: e1:a5:d0:58:8f:08:29:e8:7e:1b:4a:a1:ac:31:ef: d9:4f:2e:b7:8c:f6:a3:35:78:46:f9:0a:0b:fe:2a: ef:57:dc:fe:9a:7e:2b:cf:a1:60:8f:cf:a1:18:ac: 8d:45:84:66:2f:c6:7e:45:97:f2:29:56:e5:b8:58: 1f:3a:89:10:bd:c8:95:8a:77:3a:ca:6e:27:31:70: 6c:65:95:21:66:9e:e4:69:0c:36:30:95:b2:19:68: 04:2e:ed:d7:5b:83:56:0b:f6:7e:6e:cc:ee:fa:c8: 68:b6:f0:ff:2a:fa:f3:d0:78:00:31:79:e2:eb:7d: 04:e7:76:ea:94:9b:2f:78:2d:b7:50:e5:1d:f6:e4: 10:71:d2:0c:87:ac:b3:54:5c:dc:4e:d6:ca:27:13: 2b:36:92:cd:93:5e:8c:80:c1:ff:71:18:a5:a8:58: e9:7a:78:cd:ba:c6:26:b9:39:0d:a5:a0:60:49:fd: 72:f7:e3:f6:cb:ec:04:b7:2b:8b:ac:c8:86:e0:ae: 2c:73:a9:09:ed:2f:ec:4f:e9:ec:7b:d9:53:a7:b8: d2:b6:c9:01:71:be:98:60:5d:0b:51:57:41:4a:b7: ac:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:35:DE:9D:0F:1B:07:8E:19:D2:1C:2D:AE:D6:52:43:85:DE:83:BD X509v3 Authority Key Identifier: keyid:64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:04:c0:4e:63:09:1b:4a:cf:a7:01:c5:27:49:e9:65:dd:2a: 3b:b3:b5:4d:c2:a0:69:28:54:dc:c4:56:6b:f4:dd:d7:59:ce: cf:0c:95:b4:14:ed:77:04:9d:bf:f3:4e:1a:d0:9b:63:f1:79: c4:2e:f9:75:be:9b:cd:96:7e:a4:b6:5e:63:81:25:60:96:82: fa:f2:56:b7:9f:8b:e7:ed:03:81:23:6b:d8:8f:d3:fb:02:fa: 3a:f7:6c:fd:b0:ab:a5:ab:ed:e5:3e:a7:1e:31:08:d5:9a:2e: c9:40:91:4b:ba:dd:b1:61:67:e6:9a:b6:3d:34:7e:0d:ef:57: 37:fb:ec:2c:e9:80:72:c5:e6:3a:27:f7:71:99:35:ea:be:40: d9:a0:40:75:7a:6e:2c:61:a2:ad:b0:34:33:9e:71:d5:0a:61: fc:b3:a0:fa:10:3e:7f:85:62:0c:16:8d:9c:b7:b7:6b:06:53: e5:1c:3c:78:b4:01:63:2f:fb:f7:b1:05:62:dd:7a:e0:16:26: e4:42:94:00:d4:ef:80:ec:47:7e:ee:d5:bb:5c:05:fa:a6:c9: 15:6d:db:d8:4a:77:04:48:b6:40:94:d9:c4:5a:ae:52:3c:e7: 29:76:c1:24:17:c4:24:43:48:93:3d:bd:36:6c:10:1e:cc:ab: 17:24:f7:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBGrclVlBbcdd0IgtdpiZVNt1HBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3 NzU4ODRBNDAeFw0yNTA2MTQwNzA1MDNaFw0yNTA2MTcxNzUxMDNaMDMxMTAvBgNV BAMTKDc0MzVERTlEMEYxQjA3OEUxOUQyMUMyREFFRDY1MjQzODVERTgzQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ojbQt6YOmGF/iZTs+hC66yNF iu+NIVidHJHQ1OGl0FiPCCnofhtKoawx79lPLreM9qM1eEb5Cgv+Ku9X3P6afivP oWCPz6EYrI1FhGYvxn5Fl/IpVuW4WB86iRC9yJWKdzrKbicxcGxllSFmnuRpDDYw lbIZaAQu7ddbg1YL9n5uzO76yGi28P8q+vPQeAAxeeLrfQTnduqUmy94LbdQ5R32 5BBx0gyHrLNUXNxO1sonEys2ks2TXoyAwf9xGKWoWOl6eM26xia5OQ2loGBJ/XL3 4/bL7AS3K4usyIbgrixzqQntL+xP6ex72VOnuNK2yQFxvphgXQtRV0FKt6wVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdDXenQ8bB44Z0hwtrtZSQ4Xeg70wHwYDVR0j BBgwFoAUZDeZn9BvLH8PFvgWDNYUX3dYhKQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzZmZGM2MC04MDIzLTQwY2QtYWFhNC1jZDZlZDIyYzRkNDUvMC82NDM3OTk5RkQw NkYyQzdGMEYxNkY4MTYwQ0Q2MTQ1Rjc3NTg4NEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3NzU4 ODRBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc2ZmRjNjAtODAyMy00MGNkLWFh YTQtY2Q2ZWQyMmM0ZDQ1LzAvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0 NUY3NzU4ODRBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEEwE5jCRtKz6cBxSdJ6WXdKjuztU3CoGko VNzEVmv03ddZzs8MlbQU7XcEnb/zThrQm2PxecQu+XW+m82WfqS2XmOBJWCWgvry Vrefi+ftA4Eja9iP0/sC+jr3bP2wq6Wr7eU+px4xCNWaLslAkUu63bFhZ+aatj00 fg3vVzf77CzpgHLF5jon93GZNeq+QNmgQHV6bixhoq2wNDOecdUKYfyzoPoQPn+F YgwWjZy3t2sGU+UcPHi0AWMv+/exBWLdeuAWJuRClADU74DsR37u1btcBfqmyRVt 29hKdwRItkCU2cRarlI85yl2wSQXxCRDSJM9vTZsEB7Mqxck9/I= -----END CERTIFICATE-----Generated at Mon Jun 16 13:29:51 2025 by rpki-client