$ rpki-client -vvf repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft File: 6A755F0ECD114936B4C154BE153030E6BFE42025.mft (raw, json) Hash identifier: O+3vMA6AaHZk4PUlZOSZhf29bnPbs91/jIa3FLUaHfA= Subject key identifier: 3E:02:BC:64:B7:52:08:9D:23:5A:88:6C:47:8E:1F:B0:E9:76:95:DF Authority key identifier: 6A:75:5F:0E:CD:11:49:36:B4:C1:54:BE:15:30:30:E6:BF:E4:20:25 Certificate issuer: /CN=6A755F0ECD114936B4C154BE153030E6BFE42025 Certificate serial: 16A6108D03FC16D2B2ADEE33152429D69255FFF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft Manifest number: 68 Signing time: Sat 14 Jun 2025 01:32:15 +0000 Manifest this update: Sat 14 Jun 2025 01:27:15 +0000 Manifest next update: Tue 17 Jun 2025 12:39:15 +0000 Files and hashes: 1: 6A755F0ECD114936B4C154BE153030E6BFE42025.crl (hash: PWd2IzfbfF5MYECG7bD6ZdCN0xi1zJNNiQfpbAY2+wE=) 2: 3136302e32352e3234352e302f32342d3234203d3e20313533313131.roa (hash: UFu8HMSGf8XDsGbPsoU1Eu+n+uIdk0W8r+YUHRms9EI=) 3: 3136302e32352e3234342e302f32342d3234203d3e20313533313131.roa (hash: 4PEyPB4qmPb2e/bBEQkgXwV9i5IzOHIeX5E1aebL4mE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.crl rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 12:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a6:10:8d:03:fc:16:d2:b2:ad:ee:33:15:24:29:d6:92:55:ff:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A755F0ECD114936B4C154BE153030E6BFE42025 Validity Not Before: Jun 14 01:27:15 2025 GMT Not After : Jun 17 12:39:15 2025 GMT Subject: CN=3E02BC64B752089D235A886C478E1FB0E97695DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4f:e8:4a:8b:cb:97:65:c1:61:25:1c:68:1c: db:0d:76:9c:aa:f5:bd:2a:a7:96:eb:82:0c:3a:4b: 56:7f:7e:e6:85:45:8c:6e:f0:1b:50:2a:9d:d0:79: fe:42:06:0c:50:a4:49:d5:c7:2f:72:23:c9:3a:cc: f2:54:f0:5d:96:49:1e:26:37:89:ba:f5:54:cb:e1: 07:31:8f:6d:ec:e9:5c:e0:fa:dc:99:a1:d6:9d:a7: 10:9c:2a:b5:a8:9d:1f:83:9c:c0:07:4b:e9:3d:e4: 72:7a:e9:bd:bd:6a:42:03:55:37:7c:ed:81:96:8a: af:63:5d:9d:e5:e0:c2:ca:4b:62:ea:ee:4e:b6:d0: 1a:f2:e6:e6:04:b2:cb:1d:cf:7b:ab:ce:3d:97:ff: 43:6a:5a:83:6a:1e:86:99:4a:24:5f:01:ae:c6:76: 7b:b3:0c:4f:42:6a:af:98:9d:e6:f2:06:46:6c:65: 8e:a5:7a:5c:6d:82:e2:7d:6d:0a:ac:38:43:89:fa: 1f:32:ad:9d:72:6e:36:b5:f1:02:d4:22:0b:a2:a9: 3c:16:c4:3f:56:47:fb:9b:68:e7:b3:d5:a3:8a:02: d7:d8:11:d0:96:ad:15:31:1b:0b:80:32:51:ba:6f: 0c:2d:0b:ee:61:82:dd:42:e2:13:5d:74:7d:0b:c1: 51:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:02:BC:64:B7:52:08:9D:23:5A:88:6C:47:8E:1F:B0:E9:76:95:DF X509v3 Authority Key Identifier: keyid:6A:75:5F:0E:CD:11:49:36:B4:C1:54:BE:15:30:30:E6:BF:E4:20:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:7c:ce:af:e8:72:60:f0:fb:09:4e:bd:da:66:6a:4d:e0:03: 4f:f1:cf:22:23:ed:ef:5f:c5:75:14:1c:e9:14:77:62:c8:9d: a0:09:cf:1a:eb:08:21:85:68:12:fb:7f:1e:fc:a1:d0:26:c4: 88:a8:b4:4d:e9:d6:45:83:c3:cc:05:23:22:80:49:ab:3d:c5: f8:1f:ad:24:58:9d:92:ad:32:9a:1b:bc:aa:44:27:8f:04:0c: 88:b2:9a:aa:fb:96:3d:fb:0f:44:ee:3c:4b:77:40:65:3b:ca: 97:1c:ba:13:81:82:82:13:6f:56:cc:75:88:54:12:de:4d:11: af:14:b7:08:da:ac:15:49:9b:98:bf:2f:f8:62:4c:70:14:8f: 86:60:49:4b:de:1a:8b:3d:0f:d0:ba:a9:6f:f8:8b:56:c7:f5: 2c:8f:57:f2:74:53:93:e3:84:36:10:06:ab:ea:43:6c:ff:a5: 28:0a:dc:74:18:7e:62:7d:fe:29:4f:0d:a7:f4:da:d8:93:79: 09:91:ed:6e:6a:c2:75:2d:7b:d7:49:26:82:5e:6b:32:b6:5a: 08:78:bc:72:68:c2:d5:44:b7:98:3e:6e:e4:f2:ab:c2:03:74: aa:59:f8:87:28:a5:60:7e:49:6d:14:b7:8e:87:9f:e6:23:1c: 00:49:35:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFqYQjQP8FtKyre4zFSQp1pJV//YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE3NTVGMEVDRDExNDkzNkI0QzE1NEJFMTUzMDMwRTZC RkU0MjAyNTAeFw0yNTA2MTQwMTI3MTVaFw0yNTA2MTcxMjM5MTVaMDMxMTAvBgNV BAMTKDNFMDJCQzY0Qjc1MjA4OUQyMzVBODg2QzQ3OEUxRkIwRTk3Njk1REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZT+hKi8uXZcFhJRxoHNsNdpyq 9b0qp5brggw6S1Z/fuaFRYxu8BtQKp3Qef5CBgxQpEnVxy9yI8k6zPJU8F2WSR4m N4m69VTL4Qcxj23s6Vzg+tyZodadpxCcKrWonR+DnMAHS+k95HJ66b29akIDVTd8 7YGWiq9jXZ3l4MLKS2Lq7k620Bry5uYEsssdz3urzj2X/0NqWoNqHoaZSiRfAa7G dnuzDE9Caq+YnebyBkZsZY6lelxtguJ9bQqsOEOJ+h8yrZ1ybja18QLUIguiqTwW xD9WR/ubaOez1aOKAtfYEdCWrRUxGwuAMlG6bwwtC+5hgt1C4hNddH0LwVF3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPgK8ZLdSCJ0jWohsR44fsOl2ld8wHwYDVR0j BBgwFoAUanVfDs0RSTa0wVS+FTAw5r/kICUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGNjMWM3ZS1kYTc0LTRiMTEtYjY3YS1kNWYyN2Q5ODE3NTcvMC82QTc1NUYwRUNE MTE0OTM2QjRDMTU0QkUxNTMwMzBFNkJGRTQyMDI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkE3NTVGMEVDRDExNDkzNkI0QzE1NEJFMTUzMDMwRTZCRkU0 MjAyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhjYzFjN2UtZGE3NC00YjExLWI2 N2EtZDVmMjdkOTgxNzU3LzAvNkE3NTVGMEVDRDExNDkzNkI0QzE1NEJFMTUzMDMw RTZCRkU0MjAyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFB8zq/ocmDw+wlOvdpmak3gA0/xzyIj7e9f xXUUHOkUd2LInaAJzxrrCCGFaBL7fx78odAmxIiotE3p1kWDw8wFIyKASas9xfgf rSRYnZKtMpobvKpEJ48EDIiymqr7lj37D0TuPEt3QGU7ypccuhOBgoITb1bMdYhU Et5NEa8UtwjarBVJm5i/L/hiTHAUj4ZgSUveGos9D9C6qW/4i1bH9SyPV/J0U5Pj hDYQBqvqQ2z/pSgK3HQYfmJ9/ilPDaf02tiTeQmR7W5qwnUte9dJJoJeazK2Wgh4 vHJowtVEt5g+buTyq8IDdKpZ+IcopWB+SW0Ut46Hn+YjHABJNS4= -----END CERTIFICATE-----Generated at Sun Jun 15 17:06:34 2025 by rpki-client