$ rpki-client -vvf repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.mft File: 6DBEA32A7EE18535066521365EFB05C4148698C9.mft (raw, json) Hash identifier: JLav8ROGQnZmXGPWBYLl6rmtoCctGqlW8Z3VNoCU1J8= Subject key identifier: BA:07:44:C4:BC:0C:72:4D:13:68:BD:A5:1A:30:08:36:14:D0:60:F6 Authority key identifier: 6D:BE:A3:2A:7E:E1:85:35:06:65:21:36:5E:FB:05:C4:14:86:98:C9 Certificate issuer: /CN=6DBEA32A7EE18535066521365EFB05C4148698C9 Certificate serial: 2621D678181F60651FCB55B400B3AA3E056DE8A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBEA32A7EE18535066521365EFB05C4148698C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.mft Manifest number: 04DE Signing time: Sun 15 Jun 2025 20:42:21 +0000 Manifest this update: Sun 15 Jun 2025 20:37:21 +0000 Manifest next update: Wed 18 Jun 2025 23:10:21 +0000 Files and hashes: 1: 6DBEA32A7EE18535066521365EFB05C4148698C9.crl (hash: il7TNPf+BAt34/eWwLYoDhrGYM+VXc6RUepl60CnGgc=) 2: 323430343a616663303a3a2f33322d3438203d3e20313338383239.roa (hash: ZX6Ox+wx5nbIu1GT16bLGXKsL0RQ4fgAjbd+X3UIku8=) 3: 3130332e3133372e3131302e302f32332d3234203d3e20313338383239.roa (hash: Py1k6xmnp+wD3zAOREcnFDtaHJ01Rtyy2hDt3IzTRvw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.crl rsync://repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBEA32A7EE18535066521365EFB05C4148698C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 23:10:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:21:d6:78:18:1f:60:65:1f:cb:55:b4:00:b3:aa:3e:05:6d:e8:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DBEA32A7EE18535066521365EFB05C4148698C9 Validity Not Before: Jun 15 20:37:21 2025 GMT Not After : Jun 18 23:10:21 2025 GMT Subject: CN=BA0744C4BC0C724D1368BDA51A30083614D060F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4b:31:91:6b:f2:5e:66:88:9b:b8:d4:00:cb: 42:3e:5a:9f:03:6b:c4:bd:56:a3:f2:92:95:c7:cc: 27:43:d0:74:09:4a:c5:53:1d:be:75:fb:b6:c3:d7: f7:bb:b0:be:19:5c:07:8b:51:97:59:d2:85:d1:c2: 3d:f7:fe:b0:b9:cc:ce:ae:17:e6:c7:ea:e2:da:6b: c9:63:1e:5d:7e:99:2d:68:01:10:85:d6:52:0b:f9: bb:69:e4:06:96:44:56:05:76:6f:1e:a1:a0:a9:87: e4:a5:f7:b4:5a:3a:2c:c4:8b:ac:8f:b9:2e:29:2d: b4:a5:35:39:4f:1b:80:f6:b3:a5:58:83:3b:b5:23: 9e:58:a9:da:f2:26:5b:c8:ff:85:60:ae:0e:0c:b9: e0:1a:28:94:49:45:67:13:97:5b:db:e6:15:48:4c: a4:80:8a:cb:47:9f:cb:f2:97:fe:8c:28:3f:ff:40: 00:38:d2:d6:0a:95:dc:a8:fb:0c:ce:a0:4d:87:63: 1b:fc:31:6f:18:78:4b:8d:84:2a:5c:2b:be:0e:26: 88:33:df:37:2d:5e:5b:7c:a4:57:04:42:1e:ae:35: f8:07:e4:52:e3:82:8f:68:30:9e:b8:97:bb:45:a3: d4:fe:77:4d:03:ea:b0:52:e3:bb:ff:19:05:e9:e3: d8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:07:44:C4:BC:0C:72:4D:13:68:BD:A5:1A:30:08:36:14:D0:60:F6 X509v3 Authority Key Identifier: keyid:6D:BE:A3:2A:7E:E1:85:35:06:65:21:36:5E:FB:05:C4:14:86:98:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBEA32A7EE18535066521365EFB05C4148698C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:0d:2c:f5:10:2d:fe:48:78:47:da:18:e9:84:77:7f:0a:df: cb:eb:be:9b:08:66:00:4b:bf:ea:fa:9e:37:a3:a2:6e:95:fd: 6f:0e:60:6c:1a:dc:c3:49:ca:3b:db:1c:6f:a8:0c:33:2d:e1: 13:4c:f4:87:50:a8:74:15:32:65:51:36:2b:ab:db:c4:79:32: 49:62:19:e1:93:db:6f:a4:d8:96:96:97:e2:aa:7d:da:09:32: d5:1a:b8:ad:4b:c7:8e:13:29:c8:07:39:cd:f1:cf:51:74:66: 0f:22:b3:2c:d0:d6:a7:66:9c:c8:0a:77:a3:f1:f1:d3:f7:a7: 37:6a:cf:cc:db:03:e0:f8:23:0d:7f:e3:01:4a:ea:ed:be:da: b1:10:29:a0:dd:a3:15:cb:9d:9d:96:ef:35:cf:ea:c0:4d:95: 7f:2f:e3:7d:bd:14:7b:67:9f:d7:ca:4a:b3:65:08:a5:74:e4: b7:57:f1:99:23:2b:ec:7f:f1:4c:ff:a4:7d:9c:7c:ce:b0:c7: e0:fa:1a:93:53:2f:77:72:40:ad:96:80:15:a6:37:74:5d:a9: c0:27:e6:4d:99:4a:9d:9e:c7:15:b4:1f:64:bf:9c:58:e0:11: 13:0a:12:d0:d0:fd:bb:0c:34:0e:e9:23:5c:67:5b:a4:54:6a: 34:4a:5b:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJiHWeBgfYGUfy1W0ALOqPgVt6KUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCRUEzMkE3RUUxODUzNTA2NjUyMTM2NUVGQjA1QzQx NDg2OThDOTAeFw0yNTA2MTUyMDM3MjFaFw0yNTA2MTgyMzEwMjFaMDMxMTAvBgNV BAMTKEJBMDc0NEM0QkMwQzcyNEQxMzY4QkRBNTFBMzAwODM2MTREMDYwRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOSzGRa/JeZoibuNQAy0I+Wp8D a8S9VqPykpXHzCdD0HQJSsVTHb51+7bD1/e7sL4ZXAeLUZdZ0oXRwj33/rC5zM6u F+bH6uLaa8ljHl1+mS1oARCF1lIL+btp5AaWRFYFdm8eoaCph+Sl97RaOizEi6yP uS4pLbSlNTlPG4D2s6VYgzu1I55YqdryJlvI/4Vgrg4MueAaKJRJRWcTl1vb5hVI TKSAistHn8vyl/6MKD//QAA40tYKldyo+wzOoE2HYxv8MW8YeEuNhCpcK74OJogz 3zctXlt8pFcEQh6uNfgH5FLjgo9oMJ64l7tFo9T+d00D6rBS47v/GQXp49gnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUugdExLwMck0TaL2lGjAINhTQYPYwHwYDVR0j BBgwFoAUbb6jKn7hhTUGZSE2XvsFxBSGmMkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGQ4ODBkNC1jMzNlLTQwMWUtYjQ2OC1hNWE2YThhYWYzZDcvMC82REJFQTMyQTdF RTE4NTM1MDY2NTIxMzY1RUZCMDVDNDE0ODY5OEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRCRUEzMkE3RUUxODUzNTA2NjUyMTM2NUVGQjA1QzQxNDg2 OThDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBkODgwZDQtYzMzZS00MDFlLWI0 NjgtYTVhNmE4YWFmM2Q3LzAvNkRCRUEzMkE3RUUxODUzNTA2NjUyMTM2NUVGQjA1 QzQxNDg2OThDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALMNLPUQLf5IeEfaGOmEd38K38vrvpsIZgBL v+r6njejom6V/W8OYGwa3MNJyjvbHG+oDDMt4RNM9IdQqHQVMmVRNiur28R5Mkli GeGT22+k2JaWl+KqfdoJMtUauK1Lx44TKcgHOc3xz1F0Zg8isyzQ1qdmnMgKd6Px 8dP3pzdqz8zbA+D4Iw1/4wFK6u2+2rEQKaDdoxXLnZ2W7zXP6sBNlX8v4329FHtn n9fKSrNlCKV05LdX8ZkjK+x/8Uz/pH2cfM6wx+D6GpNTL3dyQK2WgBWmN3RdqcAn 5k2ZSp2exxW0H2S/nFjgERMKEtDQ/bsMNA7pI1xnW6RUajRKW/o= -----END CERTIFICATE-----Generated at Mon Jun 16 10:43:54 2025 by rpki-client