$ rpki-client -vvf repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft File: 6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft (raw, json) Hash identifier: 8bvQcpD0X/Nz93iMTips6vpzuRaLNr/reTGg8XQ3ksw= Subject key identifier: E3:92:DE:EA:CC:3F:62:36:76:03:D6:89:84:7C:B3:0A:CE:92:3E:CA Authority key identifier: 6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92 Certificate issuer: /CN=6A200D6FC5434DAD6106CEE5439CA1270DDCBC92 Certificate serial: 5B889875C05E864E4797D9E80E8F0D0A77687B26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft Manifest number: 88 Signing time: Sat 28 Jun 2025 22:51:09 +0000 Manifest this update: Sat 28 Jun 2025 22:46:09 +0000 Manifest next update: Wed 02 Jul 2025 07:43:09 +0000 Files and hashes: 1: 3130332e3130332e3138302e302f32332d3234203d3e20313336383437.roa (hash: z7JSBWPGJlOn/ZqqGa8az/lIZkw26RQslHPZ9GMpJ4M=) 2: 6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl (hash: vD0scm4sJ43ahQyKWAjT2lnoxPI++z56DCjnseWyDo4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:88:98:75:c0:5e:86:4e:47:97:d9:e8:0e:8f:0d:0a:77:68:7b:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A200D6FC5434DAD6106CEE5439CA1270DDCBC92 Validity Not Before: Jun 28 22:46:09 2025 GMT Not After : Jul 2 07:43:09 2025 GMT Subject: CN=E392DEEACC3F62367603D689847CB30ACE923ECA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:73:25:ed:a2:61:53:f6:2a:b1:58:bb:29:d9: 96:7b:fa:88:8f:24:10:e9:8f:b4:13:e5:e4:52:81: 48:b3:0f:0e:51:db:8f:7e:ae:53:f9:90:74:eb:27: 41:b7:c9:61:a9:2d:75:e4:70:e9:b0:e2:a7:5e:bf: 5f:b7:73:9a:0b:af:8d:79:33:fb:cc:92:4d:2e:af: a3:8e:6b:00:9b:64:b6:1d:b1:7d:28:55:dd:11:32: 78:88:bf:d6:47:a3:be:dc:50:6c:b4:23:78:0d:da: b7:e5:a8:75:75:3d:3e:41:01:43:5a:0d:05:a2:d8: 90:30:23:45:02:0a:69:84:63:16:65:67:ae:88:87: 6c:d6:40:a1:e8:1d:ab:f3:17:30:da:5c:d6:ec:e5: 33:b8:af:b3:fa:a6:97:28:c7:7d:1a:16:77:14:75: 23:c9:22:43:06:8d:a8:69:7f:db:97:e5:f5:3d:d1: a0:a0:70:59:aa:70:f9:d8:57:dc:6a:a9:c1:da:ea: c5:1d:09:78:cc:a8:4e:02:4e:f7:f8:62:65:08:09: f6:38:75:cf:97:1a:23:88:fc:00:ca:6d:79:ab:8a: e2:2d:1c:e5:a6:74:60:49:06:6b:f6:d7:ac:ca:58: c6:5d:fa:c5:ff:77:85:a7:39:71:58:e8:a2:c0:cd: 6c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:92:DE:EA:CC:3F:62:36:76:03:D6:89:84:7C:B3:0A:CE:92:3E:CA X509v3 Authority Key Identifier: keyid:6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:39:89:77:a4:eb:ba:37:10:56:e0:23:d6:87:02:18:db:5d: fd:cc:1a:4f:35:fa:05:30:ec:ef:bf:fa:43:87:e5:7a:b7:ea: a7:11:06:ff:99:0e:d0:11:f7:3f:b1:bf:ae:b7:ae:32:5f:4c: e7:38:d9:8e:39:32:a7:77:61:ae:69:fb:9c:13:00:e6:91:c6: 61:40:96:24:4b:d5:dd:ee:fa:92:5f:06:0f:1e:62:4f:ca:44: 50:84:b3:96:4e:63:14:7c:eb:47:b0:25:c3:b7:46:95:35:74: 5d:6f:76:12:a2:af:ed:53:80:c4:48:76:16:90:66:87:d8:b5: 81:e9:73:ca:99:c2:c5:6f:ba:41:be:c0:97:64:fa:38:0e:fc: 69:19:e2:d4:a6:b6:e9:c2:93:db:8f:f1:d3:fb:47:0b:45:90: 5e:94:cb:d0:25:b4:be:d7:bd:20:45:ff:28:0a:a4:a0:ee:75: c5:03:b3:7d:3b:40:79:da:e5:4c:16:80:78:6f:a2:56:8d:90: 76:8c:47:93:e1:0d:66:98:aa:35:9e:23:cb:3c:86:af:7b:45: 44:41:54:fb:9b:a9:92:0b:0e:15:d2:9f:74:ef:a2:82:c1:fc: df:76:94:35:7b:6a:6b:f1:49:ec:b9:e8:55:09:c4:c1:83:93: 74:b9:5e:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW4iYdcBehk5Hl9noDo8NCndoeyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0ExMjcw RERDQkM5MjAeFw0yNTA2MjgyMjQ2MDlaFw0yNTA3MDIwNzQzMDlaMDMxMTAvBgNV BAMTKEUzOTJERUVBQ0MzRjYyMzY3NjAzRDY4OTg0N0NCMzBBQ0U5MjNFQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZcyXtomFT9iqxWLsp2ZZ7+oiP JBDpj7QT5eRSgUizDw5R249+rlP5kHTrJ0G3yWGpLXXkcOmw4qdev1+3c5oLr415 M/vMkk0ur6OOawCbZLYdsX0oVd0RMniIv9ZHo77cUGy0I3gN2rflqHV1PT5BAUNa DQWi2JAwI0UCCmmEYxZlZ66Ih2zWQKHoHavzFzDaXNbs5TO4r7P6ppcox30aFncU dSPJIkMGjahpf9uX5fU90aCgcFmqcPnYV9xqqcHa6sUdCXjMqE4CTvf4YmUICfY4 dc+XGiOI/ADKbXmriuItHOWmdGBJBmv216zKWMZd+sX/d4WnOXFY6KLAzWz9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU45Le6sw/YjZ2A9aJhHyzCs6SPsowHwYDVR0j BBgwFoAUaiANb8VDTa1hBs7lQ5yhJw3cvJIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGQwZmNhOC01YzJkLTRlMzUtYmQ3ZC1iNDQ4YWE3NWYyYmUvMC82QTIwMEQ2RkM1 NDM0REFENjEwNkNFRTU0MzlDQTEyNzBERENCQzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0ExMjcwRERD QkM5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhkMGZjYTgtNWMyZC00ZTM1LWJk N2QtYjQ0OGFhNzVmMmJlLzAvNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0Ex MjcwRERDQkM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGI5iXek67o3EFbgI9aHAhjbXf3MGk81+gUw 7O+/+kOH5Xq36qcRBv+ZDtAR9z+xv663rjJfTOc42Y45Mqd3Ya5p+5wTAOaRxmFA liRL1d3u+pJfBg8eYk/KRFCEs5ZOYxR860ewJcO3RpU1dF1vdhKir+1TgMRIdhaQ ZofYtYHpc8qZwsVvukG+wJdk+jgO/GkZ4tSmtunCk9uP8dP7RwtFkF6Uy9AltL7X vSBF/ygKpKDudcUDs307QHna5UwWgHhvolaNkHaMR5PhDWaYqjWeI8s8hq97RURB VPubqZILDhXSn3TvooLB/N92lDV7amvxSey56FUJxMGDk3S5Xi4= -----END CERTIFICATE-----Generated at Mon Jun 30 18:53:37 2025 by rpki-client