$ rpki-client -vvf repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft File: 6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft (raw, json) Hash identifier: PjOFrArBycX+dSVPNjlrgRHlQ36pORUFL6FD175fvvY= Subject key identifier: A9:B6:0A:9E:D8:F5:87:B9:E6:74:4B:E9:F6:F3:3B:C4:4B:C4:5D:A4 Authority key identifier: 6D:39:05:08:CE:26:22:C5:BA:AA:3B:EE:95:AA:61:27:FE:5B:E5:F4 Certificate issuer: /CN=6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4 Certificate serial: 3D586C089615364C4A8645205FFF3C8345886AC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft Manifest number: 0282 Signing time: Sun 15 Jun 2025 01:31:13 +0000 Manifest this update: Sun 15 Jun 2025 01:26:13 +0000 Manifest next update: Wed 18 Jun 2025 05:27:13 +0000 Files and hashes: 1: 6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.crl (hash: LHTJyk5tpStO2IUM0OchijYa4FV0PuRLCgRWupSpbec=) 2: 3130332e3137342e31362e302f32342d3234203d3e2030.roa (hash: R+Xsj942oVIU56vgb7MBSOwNXGuK6EmVsnXWJ+Njpjw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.crl rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 05:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:58:6c:08:96:15:36:4c:4a:86:45:20:5f:ff:3c:83:45:88:6a:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4 Validity Not Before: Jun 15 01:26:13 2025 GMT Not After : Jun 18 05:27:13 2025 GMT Subject: CN=A9B60A9ED8F587B9E6744BE9F6F33BC44BC45DA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c7:04:64:90:16:18:12:9f:c9:07:ae:80:d2: 89:b1:c0:61:ec:72:b7:e1:32:12:2e:dd:31:d3:88: db:9f:af:be:9b:a4:48:33:a5:35:cf:aa:99:ac:9a: fe:5a:dc:13:68:7a:82:7e:53:98:40:ed:bb:69:61: bc:41:31:cc:bd:cf:19:b4:2a:4d:22:28:0e:38:3e: fc:06:0e:16:db:be:18:33:25:70:9d:9c:1c:d3:26: 83:ae:49:ff:5a:a9:3b:0e:22:e2:f3:53:6a:97:32: 9e:90:b4:aa:04:c2:b0:76:f5:43:77:7c:c1:db:53: 06:0b:8f:a4:a1:5b:2b:66:e8:e9:46:c1:87:a5:14: 3f:dd:b3:b7:8a:ea:95:cd:88:70:8c:9d:01:19:21: ab:ac:67:71:20:d3:e0:86:80:02:18:73:97:54:dd: e7:fe:77:97:18:f9:63:f3:0d:03:ac:a3:90:a4:27: a2:c8:ee:4d:0a:de:6a:e3:62:53:ef:b6:44:8b:38: a1:2f:7b:d0:63:00:56:d0:94:99:c7:a4:ac:8a:84: 45:4e:7a:21:e5:fc:67:51:86:18:3a:31:0d:f0:49: 07:19:6a:51:77:cd:d0:ff:32:b4:86:c2:26:d4:46: 07:5f:37:d8:d1:e6:ed:bf:93:3a:20:f6:b6:85:5c: 88:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B6:0A:9E:D8:F5:87:B9:E6:74:4B:E9:F6:F3:3B:C4:4B:C4:5D:A4 X509v3 Authority Key Identifier: keyid:6D:39:05:08:CE:26:22:C5:BA:AA:3B:EE:95:AA:61:27:FE:5B:E5:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:38:8c:ca:69:74:76:03:b5:d7:17:af:60:6c:d9:b0:91:e3: ae:e6:e6:8d:2f:19:8c:f5:8d:a5:46:46:8a:47:10:22:b6:60: 4c:fd:20:6d:b8:3a:4e:24:1c:11:61:a3:22:b1:6e:b9:83:8e: 25:6a:90:ec:00:7c:91:83:5d:cb:09:f0:86:dd:6e:14:56:94: d5:1d:2a:61:5e:fe:96:5e:d2:a2:a7:ff:2d:3d:76:e9:86:e4: e7:74:a2:8f:cf:d0:4f:5b:0b:93:73:36:03:d0:cd:79:60:ce: e4:a7:9a:9a:79:f9:2a:ad:50:65:e2:94:d5:64:70:14:00:77: 9e:55:65:c4:6c:67:33:d2:41:5f:04:4e:25:9f:3f:6f:cc:10: fa:6a:41:ae:99:aa:b2:10:d2:7a:cd:1b:c1:62:16:73:44:1a: 5f:7e:cd:90:aa:c2:e0:7b:6c:a5:96:1d:ce:bb:ae:2b:de:39: 24:48:a9:f1:77:15:68:d2:08:91:2f:00:27:5d:90:fb:e3:1c: bc:e6:b4:30:5a:21:c8:11:4f:62:40:bb:ba:91:6a:02:2c:57: ba:d1:7b:78:30:6a:b5:67:5b:7e:26:cd:ed:27:bc:5e:d6:5a: cc:7c:d0:76:c4:b6:c2:ee:dc:d5:0b:e8:b7:ec:95:94:8c:fa: f5:0c:37:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPVhsCJYVNkxKhkUgX/88g0WIasUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQzOTA1MDhDRTI2MjJDNUJBQUEzQkVFOTVBQTYxMjdG RTVCRTVGNDAeFw0yNTA2MTUwMTI2MTNaFw0yNTA2MTgwNTI3MTNaMDMxMTAvBgNV BAMTKEE5QjYwQTlFRDhGNTg3QjlFNjc0NEJFOUY2RjMzQkM0NEJDNDVEQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKxwRkkBYYEp/JB66A0omxwGHs crfhMhIu3THTiNufr76bpEgzpTXPqpmsmv5a3BNoeoJ+U5hA7btpYbxBMcy9zxm0 Kk0iKA44PvwGDhbbvhgzJXCdnBzTJoOuSf9aqTsOIuLzU2qXMp6QtKoEwrB29UN3 fMHbUwYLj6ShWytm6OlGwYelFD/ds7eK6pXNiHCMnQEZIausZ3Eg0+CGgAIYc5dU 3ef+d5cY+WPzDQOso5CkJ6LI7k0K3mrjYlPvtkSLOKEve9BjAFbQlJnHpKyKhEVO eiHl/GdRhhg6MQ3wSQcZalF3zdD/MrSGwibURgdfN9jR5u2/kzog9raFXIgVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqbYKntj1h7nmdEvp9vM7xEvEXaQwHwYDVR0j BBgwFoAUbTkFCM4mIsW6qjvulaphJ/5b5fQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTQ4MmFkYS1kMGM4LTQ2NGItYTAwNy04NTE5NDg5Y2IxYzQvMC82RDM5MDUwOENF MjYyMkM1QkFBQTNCRUU5NUFBNjEyN0ZFNUJFNUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQzOTA1MDhDRTI2MjJDNUJBQUEzQkVFOTVBQTYxMjdGRTVC RTVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U0ODJhZGEtZDBjOC00NjRiLWEw MDctODUxOTQ4OWNiMWM0LzAvNkQzOTA1MDhDRTI2MjJDNUJBQUEzQkVFOTVBQTYx MjdGRTVCRTVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQ4jMppdHYDtdcXr2Bs2bCR467m5o0vGYz1 jaVGRopHECK2YEz9IG24Ok4kHBFhoyKxbrmDjiVqkOwAfJGDXcsJ8IbdbhRWlNUd KmFe/pZe0qKn/y09dumG5Od0oo/P0E9bC5NzNgPQzXlgzuSnmpp5+SqtUGXilNVk cBQAd55VZcRsZzPSQV8ETiWfP2/MEPpqQa6ZqrIQ0nrNG8FiFnNEGl9+zZCqwuB7 bKWWHc67riveOSRIqfF3FWjSCJEvACddkPvjHLzmtDBaIcgRT2JAu7qRagIsV7rR e3gwarVnW34mze0nvF7WWsx80HbEtsLu3NUL6LfslZSM+vUMNy4= -----END CERTIFICATE-----Generated at Tue Jun 17 00:19:34 2025 by rpki-client