$ rpki-client -vvf repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft File: 6176447D40001B20E000D73A3B5E66B74A431374.mft (raw, json) Hash identifier: DlzHE3SW23fgTLkv3SxFlPEEkoQAM2puRt+NIDijGM4= Subject key identifier: 8C:A9:BE:3E:40:7B:9A:8E:BC:D3:D0:8B:89:85:11:9E:CF:B4:09:BC Authority key identifier: 61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74 Certificate issuer: /CN=6176447D40001B20E000D73A3B5E66B74A431374 Certificate serial: 61AEAECC1C711348ADA1289BFF8089A28B64BAFE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft Manifest number: A4 Signing time: Fri 13 Jun 2025 17:31:20 +0000 Manifest this update: Fri 13 Jun 2025 17:26:20 +0000 Manifest next update: Mon 16 Jun 2025 21:00:20 +0000 Files and hashes: 1: 6176447D40001B20E000D73A3B5E66B74A431374.crl (hash: 5Sn1AltgrMY0w4LAhN2XZD60lr5dXZoW80hSTH8lBB4=) 2: 3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa (hash: x2vTD40zXLkQU7jWF3x2cDs6hnaBe5UiTC1SGpRcNlY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.crl rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 21:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ae:ae:cc:1c:71:13:48:ad:a1:28:9b:ff:80:89:a2:8b:64:ba:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6176447D40001B20E000D73A3B5E66B74A431374 Validity Not Before: Jun 13 17:26:20 2025 GMT Not After : Jun 16 21:00:20 2025 GMT Subject: CN=8CA9BE3E407B9A8EBCD3D08B8985119ECFB409BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0b:d9:0f:2c:20:da:21:a8:22:75:c2:68:90: df:6e:98:af:c8:e7:7e:28:bd:61:5f:b3:09:b3:21: 62:c0:83:b4:2e:da:7a:75:78:3f:77:13:d5:14:75: f4:94:f2:97:20:88:c5:e8:4d:04:a0:bd:ed:78:9b: cc:09:0d:97:56:57:48:da:ba:88:6a:fb:f7:18:80: 07:6d:ae:f8:44:96:af:e7:d7:70:23:27:55:41:81: d9:39:50:7d:0f:8f:66:22:11:40:c6:b3:e4:eb:3f: dc:85:51:fe:9f:f5:1d:74:e9:3e:76:c5:ab:8e:48: 21:e7:0a:62:20:de:90:5d:be:58:1c:43:22:18:f9: 5f:4f:1b:dc:32:d2:1e:90:93:8d:c6:48:55:67:c8: 6e:e5:b8:5e:a4:03:54:87:aa:24:dc:4e:11:2b:d1: 2b:d9:8d:a0:08:3e:7c:b0:1b:7e:e6:fb:b8:6a:40: 74:62:c3:f1:2f:43:fe:1a:f3:d7:bf:69:e0:28:e1: b3:5d:60:dd:00:0e:ba:ba:3f:65:f6:bf:8c:eb:85: 9d:5e:8a:a9:a9:97:e1:71:2e:be:58:c4:d2:ce:4d: 65:6a:e4:5b:12:1f:6a:d6:7c:18:01:0c:c6:92:a7: a1:c0:c0:4a:08:93:9f:74:8f:6e:bf:1a:ea:42:ff: 87:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A9:BE:3E:40:7B:9A:8E:BC:D3:D0:8B:89:85:11:9E:CF:B4:09:BC X509v3 Authority Key Identifier: keyid:61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:90:57:25:22:f5:44:c8:dc:e7:3c:37:92:2b:10:ad:cc:a2: d3:d2:4c:73:d9:6f:df:7e:17:21:6e:6c:a0:6b:3b:cd:12:58: 32:f8:c9:d7:7a:72:ea:ed:7e:a0:3d:2c:4a:ee:97:fc:49:18: b9:15:7c:91:15:28:f7:db:72:45:48:77:f1:19:9e:5b:a6:8a: 55:c0:a5:48:19:e1:25:b1:6f:e3:2d:3e:ac:b1:08:c1:52:e2: 9e:7b:e3:86:f7:de:ff:24:c1:b2:1b:ed:55:98:92:1a:42:a4: b3:7a:1d:42:7f:d1:fc:b7:c5:96:74:75:90:d5:7a:f1:4b:00: 00:4c:ed:a7:2e:2c:90:c5:fc:52:a1:9d:26:d3:ae:75:06:fd: a1:db:31:06:e2:e2:a1:d2:8a:66:4c:a1:8e:aa:43:b2:e0:3b: 95:44:58:f6:a5:17:9a:59:cb:23:5a:7b:f9:58:f1:49:11:d1: a2:b5:2f:9e:f1:e6:78:8e:de:32:7a:19:08:3d:c9:0f:76:d5: d5:80:26:33:0e:03:6a:97:5d:9b:12:e0:5e:e9:78:b6:96:f5: 27:6a:11:74:ae:d3:a2:f5:98:7c:5c:5d:9a:0c:bf:a6:30:93: da:43:09:ae:33:b2:0a:fa:17:75:8a:06:4f:39:71:e9:32:c6: 85:c6:83:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYa6uzBxxE0itoSib/4CJootkuv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2Qjc0 QTQzMTM3NDAeFw0yNTA2MTMxNzI2MjBaFw0yNTA2MTYyMTAwMjBaMDMxMTAvBgNV BAMTKDhDQTlCRTNFNDA3QjlBOEVCQ0QzRDA4Qjg5ODUxMTlFQ0ZCNDA5QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7C9kPLCDaIagidcJokN9umK/I 534ovWFfswmzIWLAg7Qu2np1eD93E9UUdfSU8pcgiMXoTQSgve14m8wJDZdWV0ja uohq+/cYgAdtrvhElq/n13AjJ1VBgdk5UH0Pj2YiEUDGs+TrP9yFUf6f9R106T52 xauOSCHnCmIg3pBdvlgcQyIY+V9PG9wy0h6Qk43GSFVnyG7luF6kA1SHqiTcThEr 0SvZjaAIPnywG37m+7hqQHRiw/EvQ/4a89e/aeAo4bNdYN0ADrq6P2X2v4zrhZ1e iqmpl+FxLr5YxNLOTWVq5FsSH2rWfBgBDMaSp6HAwEoIk590j26/GupC/4dxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjKm+PkB7mo6809CLiYURns+0CbwwHwYDVR0j BBgwFoAUYXZEfUAAGyDgANc6O15mt0pDE3QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDBiZDZlNC1iNGZiLTRmNDgtYjgzYS1hY2I4ZjJkNzQ1ODMvMC82MTc2NDQ3RDQw MDAxQjIwRTAwMEQ3M0EzQjVFNjZCNzRBNDMxMzc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2Qjc0QTQz MTM3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQwYmQ2ZTQtYjRmYi00ZjQ4LWI4 M2EtYWNiOGYyZDc0NTgzLzAvNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2 Qjc0QTQzMTM3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGQVyUi9UTI3Oc8N5IrEK3MotPSTHPZb99+ FyFubKBrO80SWDL4ydd6curtfqA9LErul/xJGLkVfJEVKPfbckVId/EZnlumilXA pUgZ4SWxb+MtPqyxCMFS4p5744b33v8kwbIb7VWYkhpCpLN6HUJ/0fy3xZZ0dZDV evFLAABM7acuLJDF/FKhnSbTrnUG/aHbMQbi4qHSimZMoY6qQ7LgO5VEWPalF5pZ yyNae/lY8UkR0aK1L57x5niO3jJ6GQg9yQ921dWAJjMOA2qXXZsS4F7peLaW9Sdq EXSu06L1mHxcXZoMv6Ywk9pDCa4zsgr6F3WKBk85cekyxoXGgyo= -----END CERTIFICATE-----Generated at Sun Jun 15 16:50:27 2025 by rpki-client