$ rpki-client -vvf repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft File: 6490D3D85678E9C1587D21E9545EF730D21346B5.mft (raw, json) Hash identifier: ftf9b4OuFSdh0q0vKlyz1Qwvma0EHTuqrkThaZgU1aU= Subject key identifier: BC:CE:DD:B6:22:EF:B3:D0:59:7E:B4:DA:18:BE:48:A6:FC:FD:3E:31 Authority key identifier: 64:90:D3:D8:56:78:E9:C1:58:7D:21:E9:54:5E:F7:30:D2:13:46:B5 Certificate issuer: /CN=6490D3D85678E9C1587D21E9545EF730D21346B5 Certificate serial: 7AB789D0A1FDB6185CDFE2EC57AC969FD74153BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft Manifest number: 8F Signing time: Sun 15 Jun 2025 23:30:43 +0000 Manifest this update: Sun 15 Jun 2025 23:25:43 +0000 Manifest next update: Thu 19 Jun 2025 10:51:43 +0000 Files and hashes: 1: 6490D3D85678E9C1587D21E9545EF730D21346B5.crl (hash: I7dy3SzI6YPpiGqnalnL8cWjnC37JP48BLpFSK2WkGY=) 2: 3136302e32302e3232302e302f32342d3234203d3e20313532373835.roa (hash: GDptFXCos4zkhK0BICLJWbr+aS8jyf1+uPPWMmueFX0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.crl rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 10:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:b7:89:d0:a1:fd:b6:18:5c:df:e2:ec:57:ac:96:9f:d7:41:53:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6490D3D85678E9C1587D21E9545EF730D21346B5 Validity Not Before: Jun 15 23:25:43 2025 GMT Not After : Jun 19 10:51:43 2025 GMT Subject: CN=BCCEDDB622EFB3D0597EB4DA18BE48A6FCFD3E31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:19:0c:74:38:07:79:ae:1e:e7:e4:a9:cb:af: 69:77:aa:cc:4c:52:93:25:c5:dc:27:fb:1d:ee:9e: ef:18:76:87:c4:82:32:dc:cd:5d:bb:99:66:17:8e: 4d:03:33:0d:c7:61:e6:0e:fa:27:8b:b8:88:ef:99: f2:fd:31:e3:07:19:88:17:9c:24:9e:ab:08:b5:ab: 04:02:82:03:3c:fd:c7:3a:52:a0:ea:73:ab:ed:ab: 6d:3e:07:cd:33:80:ac:3e:bc:06:28:c1:19:b3:76: e0:80:cd:dc:88:5e:a0:50:f6:90:c1:67:01:9c:62: 16:ff:9b:5c:6c:4f:07:36:62:e6:31:1c:13:f5:33: a6:e9:23:6e:9e:cc:f8:0c:d5:19:ed:a2:02:10:99: 39:a5:ee:9f:fa:bc:fd:24:0c:42:1f:cb:e7:a5:a1: 8d:c3:94:e7:84:89:b1:8e:84:2f:13:b1:81:8e:3c: ae:af:da:31:cf:d6:04:e0:8b:64:de:84:b7:42:4b: 2e:ff:db:d1:b9:9d:d6:41:1a:90:da:09:17:d7:42: 06:33:02:41:21:27:ab:d0:15:75:a8:8c:97:07:46: 63:a2:b5:c6:91:b3:ea:ed:8b:60:20:10:6b:10:01: 03:3d:c0:98:b7:91:90:c3:b7:da:bd:64:29:96:09: 5f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CE:DD:B6:22:EF:B3:D0:59:7E:B4:DA:18:BE:48:A6:FC:FD:3E:31 X509v3 Authority Key Identifier: keyid:64:90:D3:D8:56:78:E9:C1:58:7D:21:E9:54:5E:F7:30:D2:13:46:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d6:71:f1:16:7f:ba:a4:18:e6:46:49:c3:de:d3:e4:57:15: 70:08:75:ce:83:ad:37:3d:a2:6d:18:ab:e7:11:1e:62:07:8f: 0e:f9:91:1a:84:b2:ec:ec:11:3e:4b:3d:73:9b:d1:f4:8b:53: 70:df:96:9d:03:2a:43:e8:de:54:40:cc:d7:27:3d:e4:c9:34: 00:c8:f9:5c:de:d6:c3:31:1f:84:53:96:0b:90:e0:2e:24:a6: 2b:60:13:a4:cb:99:35:5f:12:02:91:da:69:58:76:84:b7:19: 7e:18:07:e6:aa:f9:4d:f0:2e:8a:60:3c:03:e2:8c:a8:0e:3b: 86:0e:ed:18:fa:65:37:26:83:91:e8:17:f3:04:73:59:18:e1: 3e:8b:ea:27:62:40:7b:6b:db:52:6e:c0:cf:bf:8e:0b:19:a7: 95:97:8e:1c:fe:9a:66:60:5b:31:91:8b:43:a9:31:5d:8d:f2: 61:ec:26:e3:bc:d0:82:b8:f9:e1:96:21:e5:b9:a5:84:a7:38: fe:9e:09:bd:f4:2a:22:11:80:9f:d2:c7:80:5e:92:4e:65:12: bc:2e:f7:7a:a8:c2:b2:c5:3e:0d:99:be:17:24:2f:bf:15:b1: ea:7f:25:79:5a:ba:12:08:52:a4:93:87:37:6f:a6:f3:c9:32: 9e:c7:09:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUereJ0KH9thhc3+LsV6yWn9dBU78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3MzBE MjEzNDZCNTAeFw0yNTA2MTUyMzI1NDNaFw0yNTA2MTkxMDUxNDNaMDMxMTAvBgNV BAMTKEJDQ0VEREI2MjJFRkIzRDA1OTdFQjREQTE4QkU0OEE2RkNGRDNFMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzGQx0OAd5rh7n5KnLr2l3qsxM UpMlxdwn+x3unu8YdofEgjLczV27mWYXjk0DMw3HYeYO+ieLuIjvmfL9MeMHGYgX nCSeqwi1qwQCggM8/cc6UqDqc6vtq20+B80zgKw+vAYowRmzduCAzdyIXqBQ9pDB ZwGcYhb/m1xsTwc2YuYxHBP1M6bpI26ezPgM1RntogIQmTml7p/6vP0kDEIfy+el oY3DlOeEibGOhC8TsYGOPK6v2jHP1gTgi2TehLdCSy7/29G5ndZBGpDaCRfXQgYz AkEhJ6vQFXWojJcHRmOitcaRs+rti2AgEGsQAQM9wJi3kZDDt9q9ZCmWCV+PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvM7dtiLvs9BZfrTaGL5Ipvz9PjEwHwYDVR0j BBgwFoAUZJDT2FZ46cFYfSHpVF73MNITRrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODg1NzVjOC01NGZlLTQ4MDEtYTdiMS01MTdkMGU2YjhiNzMvMC82NDkwRDNEODU2 NzhFOUMxNTg3RDIxRTk1NDVFRjczMEQyMTM0NkI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3MzBEMjEz NDZCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg4NTc1YzgtNTRmZS00ODAxLWE3 YjEtNTE3ZDBlNmI4YjczLzAvNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3 MzBEMjEzNDZCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABvWcfEWf7qkGOZGScPe0+RXFXAIdc6DrTc9 om0Yq+cRHmIHjw75kRqEsuzsET5LPXOb0fSLU3Dflp0DKkPo3lRAzNcnPeTJNADI +Vze1sMxH4RTlguQ4C4kpitgE6TLmTVfEgKR2mlYdoS3GX4YB+aq+U3wLopgPAPi jKgOO4YO7Rj6ZTcmg5HoF/MEc1kY4T6L6idiQHtr21JuwM+/jgsZp5WXjhz+mmZg WzGRi0OpMV2N8mHsJuO80IK4+eGWIeW5pYSnOP6eCb30KiIRgJ/Sx4Bekk5lErwu 93qowrLFPg2ZvhckL78Vsep/JXlauhIIUqSThzdvpvPJMp7HCXQ= -----END CERTIFICATE-----Generated at Tue Jun 17 09:37:59 2025 by rpki-client