$ rpki-client -vvf repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft File: 6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft (raw, json) Hash identifier: 3uNo+ne7hRQQZUAuioNKr6NXCV0IEpmWCY/1FCZhkd0= Subject key identifier: E5:AB:86:03:AD:E7:B5:9A:AD:F1:14:F5:3F:AE:F3:7C:B6:3C:4F:DF Authority key identifier: 6C:F6:DF:7E:65:16:A6:AB:F5:39:F0:39:6C:B6:C0:D4:DB:50:F4:D8 Certificate issuer: /CN=6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8 Certificate serial: 247297876C988F61E9B8FCCD4293284677A6F3BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft Manifest number: 01D9 Signing time: Mon 16 Jun 2025 13:31:50 +0000 Manifest this update: Mon 16 Jun 2025 13:26:50 +0000 Manifest next update: Thu 19 Jun 2025 21:14:50 +0000 Files and hashes: 1: 3130332e3139312e3134382e302f32332d3234203d3e2034383030.roa (hash: LB25lzl1k2b8wSXRCoswASZkgaqBVFdROFOv1MVYW7s=) 2: 6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl (hash: FKlFmsCS3815W1lMTrN9i4HPULxEAyObm50GmvlRTQE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 11:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:72:97:87:6c:98:8f:61:e9:b8:fc:cd:42:93:28:46:77:a6:f3:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8 Validity Not Before: Jun 16 13:26:50 2025 GMT Not After : Jun 19 21:14:50 2025 GMT Subject: CN=E5AB8603ADE7B59AADF114F53FAEF37CB63C4FDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3d:5f:0a:97:bf:2d:01:6d:03:0c:c4:b6:3d: 5b:3b:d9:52:51:e1:05:7e:28:a2:38:8c:0e:08:3e: 71:9c:b8:a8:f2:c6:a7:6a:3d:ed:b1:14:b4:32:34: bd:d3:ec:a0:93:2b:96:01:26:ef:15:4b:b2:05:33: aa:91:d3:2b:98:01:4b:61:44:1e:08:b3:63:6c:73: 40:99:82:ae:20:47:ee:46:63:11:21:0b:b3:cb:1e: 7c:08:14:19:c5:bf:a3:58:e8:d9:66:10:b6:96:74: e9:c3:7b:27:aa:82:7e:92:48:2d:60:dc:fa:d0:93: 94:8e:57:97:2c:4d:89:00:dd:c9:5b:1d:ac:1f:34: 14:b6:f1:b4:74:1f:7b:b1:eb:29:46:1b:83:9c:48: 24:ea:be:3c:e1:ff:0f:ef:84:c4:c9:94:60:7b:ad: 2d:32:b5:50:55:40:85:ed:27:69:fe:d5:f6:1a:95: 06:32:c0:7f:83:dc:66:6b:3a:58:92:f3:da:62:dd: 64:1c:df:81:39:04:1d:97:f3:48:7b:7b:fc:ad:a0: e1:11:74:8b:61:fc:b6:da:24:50:df:7f:7d:03:a3: be:fd:3e:7b:ff:e7:c9:75:bc:28:f9:45:a6:78:70: 66:b5:9f:13:97:d1:84:66:4d:bf:ea:37:88:37:e0: bd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AB:86:03:AD:E7:B5:9A:AD:F1:14:F5:3F:AE:F3:7C:B6:3C:4F:DF X509v3 Authority Key Identifier: keyid:6C:F6:DF:7E:65:16:A6:AB:F5:39:F0:39:6C:B6:C0:D4:DB:50:F4:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:71:43:1e:df:5c:12:98:4a:39:c6:c1:97:9e:fc:b2:6c:f5: 6c:04:87:8d:29:70:31:b9:4c:17:43:69:7b:45:79:96:c2:35: 43:17:c1:09:33:73:18:b0:2d:24:38:ad:e7:ad:b6:e8:59:a3: 6e:0f:ab:7b:2c:2b:de:76:c3:f9:50:51:b4:9e:4f:6a:00:58: 5a:4a:9f:37:9b:d0:ef:e5:b0:78:e0:d8:dc:8b:41:99:1b:e0: 53:a4:c9:4d:2f:46:e5:ef:e0:e3:86:a0:d9:ed:51:d7:57:df: e9:69:c7:d4:28:38:b1:81:38:f2:a9:41:ed:3f:52:49:c8:ed: f1:71:0c:d6:76:19:10:e2:5d:55:cf:49:09:5d:c2:a2:7e:e1: ff:67:fb:8c:7c:4d:bc:e9:e6:fc:d4:f3:f7:09:a3:ce:22:34: 82:a5:75:92:eb:f3:b3:4e:c7:d0:d5:cc:e5:52:20:f7:17:c8: 45:54:09:2c:df:de:d6:4d:a3:8c:f6:31:bb:c3:b1:a5:91:fd: ef:93:38:10:79:ee:c7:f8:8d:81:00:35:a7:c0:d2:b9:d1:4e: 23:3e:03:f7:bf:82:f4:ca:ca:96:cb:b4:cc:2f:41:2e:29:c4: be:06:39:e6:dd:cf:89:b7:a0:ca:2d:f3:20:bd:18:1d:b0:a8: bd:28:46:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJHKXh2yYj2HpuPzNQpMoRnem87wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMwRDRE QjUwRjREODAeFw0yNTA2MTYxMzI2NTBaFw0yNTA2MTkyMTE0NTBaMDMxMTAvBgNV BAMTKEU1QUI4NjAzQURFN0I1OUFBREYxMTRGNTNGQUVGMzdDQjYzQzRGREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfPV8Kl78tAW0DDMS2PVs72VJR 4QV+KKI4jA4IPnGcuKjyxqdqPe2xFLQyNL3T7KCTK5YBJu8VS7IFM6qR0yuYAUth RB4Is2Nsc0CZgq4gR+5GYxEhC7PLHnwIFBnFv6NY6NlmELaWdOnDeyeqgn6SSC1g 3PrQk5SOV5csTYkA3clbHawfNBS28bR0H3ux6ylGG4OcSCTqvjzh/w/vhMTJlGB7 rS0ytVBVQIXtJ2n+1fYalQYywH+D3GZrOliS89pi3WQc34E5BB2X80h7e/ytoOER dIth/LbaJFDff30Do779Pnv/58l1vCj5RaZ4cGa1nxOX0YRmTb/qN4g34L2VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5auGA63ntZqt8RT1P67zfLY8T98wHwYDVR0j BBgwFoAUbPbffmUWpqv1OfA5bLbA1NtQ9NgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDkwNmZjMC00MzYzLTRmNDYtOWIxNC01YzFhYjgyNWEzMzUvMC82Q0Y2REY3RTY1 MTZBNkFCRjUzOUYwMzk2Q0I2QzBENERCNTBGNEQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMwRDREQjUw RjREOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ5MDZmYzAtNDM2My00ZjQ2LTli MTQtNWMxYWI4MjVhMzM1LzAvNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMw RDREQjUwRjREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1xQx7fXBKYSjnGwZee/LJs9WwEh40pcDG5 TBdDaXtFeZbCNUMXwQkzcxiwLSQ4reettuhZo24Pq3ssK952w/lQUbSeT2oAWFpK nzeb0O/lsHjg2NyLQZkb4FOkyU0vRuXv4OOGoNntUddX3+lpx9QoOLGBOPKpQe0/ UknI7fFxDNZ2GRDiXVXPSQldwqJ+4f9n+4x8Tbzp5vzU8/cJo84iNIKldZLr87NO x9DVzOVSIPcXyEVUCSzf3tZNo4z2MbvDsaWR/e+TOBB57sf4jYEANafA0rnRTiM+ A/e/gvTKypbLtMwvQS4pxL4GOebdz4m3oMot8yC9GB2wqL0oRs0= -----END CERTIFICATE-----Generated at Mon Jun 16 15:38:47 2025 by rpki-client