$ rpki-client -vvf repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft File: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft (raw, json) Hash identifier: rjI8bQ2w/UVkWowmcwzLg2x884KKzZA2A16uA5v1tuA= Subject key identifier: 24:B5:58:6E:6C:59:21:67:1F:7F:D1:48:F8:97:13:D4:57:3F:70:AD Authority key identifier: 6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA Certificate issuer: /CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Certificate serial: 28BB013A4BD5A9920EDD9B6AC17BEBF9E0778F38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft Manifest number: 01E8 Signing time: Fri 27 Jun 2025 08:10:02 +0000 Manifest this update: Fri 27 Jun 2025 08:05:02 +0000 Manifest next update: Mon 30 Jun 2025 18:55:02 +0000 Files and hashes: 1: 3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa (hash: jcYNuwq5tBbtUM+5LFf+gih2lHYu/silWmdWErgVy5M=) 2: 3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa (hash: XLXbrSM75a4OOhdIFSVSWGya3QA7TZER3P7tGhI+wW0=) 3: 3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa (hash: R1C6O4ul1Ppozfaiesg+Uhn8MwDAOfzdAmq+sSEet2w=) 4: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl (hash: DFy66gsBePMbl8osa/PP/3pec4h72+Ky440y5unNDnA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 18:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:bb:01:3a:4b:d5:a9:92:0e:dd:9b:6a:c1:7b:eb:f9:e0:77:8f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Validity Not Before: Jun 27 08:05:02 2025 GMT Not After : Jun 30 18:55:02 2025 GMT Subject: CN=24B5586E6C5921671F7FD148F89713D4573F70AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:79:70:fa:54:c1:f9:89:8c:b9:5e:19:02:c2: d5:ef:5f:4c:2b:75:c5:d1:22:ac:e2:10:7c:61:62: 8b:b7:f8:37:c9:0c:59:60:ad:0c:e6:1a:22:96:f5: e7:41:6d:6f:5b:d9:f1:da:c5:07:fe:b4:1d:c7:a3: 11:b8:13:86:9a:87:47:e6:11:42:e3:db:e0:bc:e2: 4e:26:3f:af:b7:46:ca:61:e5:0d:d8:08:b0:58:43: 2d:60:9d:bf:e0:45:4d:22:9c:93:36:7d:0d:91:38: ca:3f:78:ac:50:fd:36:f7:fd:31:b3:11:fc:27:f1: 1e:71:2c:3c:6f:85:44:85:78:40:57:c9:ea:df:e3: 51:04:b7:85:81:2f:12:d4:ef:82:33:f9:48:5f:54: 17:b9:4d:53:50:3d:62:1c:12:a5:05:d7:21:bb:f0: c7:52:d9:18:33:e5:49:fa:71:df:b7:57:3e:93:d3: 4b:4b:b7:39:b8:c0:de:05:42:4c:6b:e1:ed:64:06: 77:88:d8:d3:dd:c2:9c:ac:aa:f4:af:ee:24:cc:c7: 0f:7e:62:bf:98:06:5d:83:7a:7e:9c:dc:9c:7c:9a: 5b:43:28:f5:61:ce:9a:0e:89:01:a4:2d:dd:3e:cf: e4:59:85:9b:b2:38:8d:d8:ff:1e:50:c2:07:cc:63: 41:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B5:58:6E:6C:59:21:67:1F:7F:D1:48:F8:97:13:D4:57:3F:70:AD X509v3 Authority Key Identifier: keyid:6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:64:4f:6a:8d:ec:a2:1b:44:fc:e6:cf:2f:f8:74:39:da:f5: ec:85:80:5c:d6:8a:3c:dd:3f:e2:27:2f:5e:7e:94:49:c3:db: 04:12:be:09:2f:af:60:a0:f1:2d:ee:71:27:9d:53:3a:59:cc: 47:73:66:19:f6:db:ad:d7:e6:ae:de:ee:66:58:81:81:fb:eb: d8:2e:50:26:02:1a:f7:6b:d8:45:4a:ee:db:4b:1d:24:40:5b: bb:2d:96:9f:60:4d:03:03:83:bd:8d:76:33:0d:9b:ed:63:8b: 3e:99:97:20:25:45:08:12:0b:d7:c1:df:12:81:64:37:75:6a: 1e:b0:4b:91:61:aa:ca:99:98:78:74:f6:cc:b3:1c:7b:2a:82: a6:d9:7b:9a:e8:f5:37:23:be:c8:aa:11:ca:73:82:92:0e:13: 09:ae:09:dd:49:13:03:f4:de:6c:35:bd:16:c6:a0:15:b8:fb: 8d:57:e3:18:05:a0:a3:14:14:3d:69:04:29:3b:38:3f:80:e7: a5:9b:6b:8a:e0:cb:98:cc:f4:e8:28:89:18:39:d6:5a:66:40: 32:27:90:1a:d8:85:2e:68:f8:0a:2d:30:97:95:4e:e1:a9:6d: 44:96:c9:cb:78:e5:c3:a8:81:ac:7f:ad:37:9d:07:32:c0:e2: 20:93:17:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKLsBOkvVqZIO3ZtqwXvr+eB3jzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMx REIwOEZEQTAeFw0yNTA2MjcwODA1MDJaFw0yNTA2MzAxODU1MDJaMDMxMTAvBgNV BAMTKDI0QjU1ODZFNkM1OTIxNjcxRjdGRDE0OEY4OTcxM0Q0NTczRjcwQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCreXD6VMH5iYy5XhkCwtXvX0wr dcXRIqziEHxhYou3+DfJDFlgrQzmGiKW9edBbW9b2fHaxQf+tB3HoxG4E4aah0fm EULj2+C84k4mP6+3Rsph5Q3YCLBYQy1gnb/gRU0inJM2fQ2ROMo/eKxQ/Tb3/TGz Efwn8R5xLDxvhUSFeEBXyerf41EEt4WBLxLU74Iz+UhfVBe5TVNQPWIcEqUF1yG7 8MdS2Rgz5Un6cd+3Vz6T00tLtzm4wN4FQkxr4e1kBneI2NPdwpysqvSv7iTMxw9+ Yr+YBl2Den6c3Jx8mltDKPVhzpoOiQGkLd0+z+RZhZuyOI3Y/x5QwgfMY0FfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJLVYbmxZIWcff9FI+JcT1Fc/cK0wHwYDVR0j BBgwFoAUb8DJM0D/c1k0NMjv/O2Osx2wj9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjY1OTkwNC0zNzAyLTQ3OTctYmQxYi00NDdhYjhjOTRlMGMvMC82RkMwQzkzMzQw RkY3MzU5MzQzNEM4RUZGQ0VEOEVCMzFEQjA4RkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMxREIw OEZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY2NTk5MDQtMzcwMi00Nzk3LWJk MWItNDQ3YWI4Yzk0ZTBjLzAvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhF QjMxREIwOEZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKxkT2qN7KIbRPzmzy/4dDna9eyFgFzWijzd P+InL15+lEnD2wQSvgkvr2Cg8S3ucSedUzpZzEdzZhn2263X5q7e7mZYgYH769gu UCYCGvdr2EVK7ttLHSRAW7stlp9gTQMDg72NdjMNm+1jiz6ZlyAlRQgSC9fB3xKB ZDd1ah6wS5FhqsqZmHh09syzHHsqgqbZe5ro9TcjvsiqEcpzgpIOEwmuCd1JEwP0 3mw1vRbGoBW4+41X4xgFoKMUFD1pBCk7OD+A56Wba4rgy5jM9OgoiRg51lpmQDIn kBrYhS5o+AotMJeVTuGpbUSWyct45cOogax/rTedBzLA4iCTF8s= -----END CERTIFICATE-----Generated at Sun Jun 29 18:14:28 2025 by rpki-client