$ rpki-client -vvf repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft File: 6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft (raw, json) Hash identifier: 2NhmsPSoF7Ln+mVsK1LFs+w4YvGR7KLtBIGQ8ePU2qw= Subject key identifier: F6:B7:79:F2:F1:9E:F0:5B:96:E7:FD:A3:3E:65:7D:38:B3:EB:05:D9 Authority key identifier: 6A:9D:C5:66:C8:CB:F1:D7:CE:B1:7F:C9:91:7A:CD:58:2E:5C:0A:95 Certificate issuer: /CN=6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95 Certificate serial: 024D57E5FD69EE1844D6DE4D69D5DA9636C978C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft Manifest number: 04E9 Signing time: Tue 01 Jul 2025 09:42:02 +0000 Manifest this update: Tue 01 Jul 2025 09:37:02 +0000 Manifest next update: Fri 04 Jul 2025 21:31:02 +0000 Files and hashes: 1: 6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl (hash: KtCuJHtAUyBmN4JAx3DI3TKC7stqQUlI61tQbEb5nOE=) 2: 3130332e3130352e3235322e302f32322d3234203d3e20313336383835.roa (hash: 78aRtA03tdL6oV14dW3aN00qRLjvVDFQ6jhLRcjVdxc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 21:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:4d:57:e5:fd:69:ee:18:44:d6:de:4d:69:d5:da:96:36:c9:78:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95 Validity Not Before: Jul 1 09:37:02 2025 GMT Not After : Jul 4 21:31:02 2025 GMT Subject: CN=F6B779F2F19EF05B96E7FDA33E657D38B3EB05D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:58:24:8b:ca:63:57:6a:ec:53:4c:7c:58:76: 06:c5:9e:8f:dc:cb:81:33:d1:a6:9f:d1:b0:93:cc: 84:c5:4c:21:ee:bb:6a:0a:2c:69:93:7a:89:f0:bb: dc:b3:cd:7b:49:47:9e:f2:04:09:9f:97:97:8e:37: 1e:11:45:d7:79:38:39:09:9e:16:69:02:c8:64:e0: 20:56:82:8c:01:1f:ca:04:6b:d7:f1:b3:7b:22:fb: 4a:ad:3b:51:b4:fe:0c:f6:a9:13:36:9e:40:05:60: 91:26:b8:be:a5:68:7e:ae:46:6d:3f:85:5a:fc:a9: 7d:c6:20:2a:e5:ef:b4:24:87:7e:8a:0e:eb:96:73: 96:84:f3:c8:ed:0f:d7:51:bd:87:e8:c2:88:00:f1: 0e:79:8a:d1:c2:1b:19:65:5b:04:74:65:c4:aa:eb: 37:1f:53:64:00:89:41:5b:08:8d:55:83:e1:1b:00: ae:66:16:3d:3e:8a:9b:56:c2:8e:a0:c1:21:69:28: 7b:96:d6:ee:67:3c:f2:31:69:30:5f:7d:a6:8c:5a: a9:63:b4:3e:09:74:ab:18:22:99:e9:34:5e:16:26: 80:35:98:f4:08:34:dd:c5:26:4b:d9:ae:91:81:08: 6d:5a:40:96:c2:24:5c:fe:0f:bc:f6:e0:7d:df:aa: ae:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B7:79:F2:F1:9E:F0:5B:96:E7:FD:A3:3E:65:7D:38:B3:EB:05:D9 X509v3 Authority Key Identifier: keyid:6A:9D:C5:66:C8:CB:F1:D7:CE:B1:7F:C9:91:7A:CD:58:2E:5C:0A:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:ed:c8:f6:a2:e1:ea:fa:46:e4:25:d9:c5:fd:84:f6:cd:ee: 61:cc:cb:f7:d4:7a:e8:25:dd:a7:37:2c:bf:92:9d:08:78:2c: 49:29:78:13:b6:87:c8:d7:95:6b:8c:e2:d9:87:c3:77:fa:6c: ce:c2:a8:f7:5b:4b:05:7b:fd:b6:89:ce:8d:ee:b2:58:64:a7: 27:73:19:0c:ff:51:cc:ac:5e:e7:64:82:18:76:20:c1:d4:d6: a9:38:65:f2:09:7b:03:1a:c0:3b:6d:72:3e:62:be:05:82:64: 99:be:95:cb:67:17:f6:67:35:5f:c4:ce:92:bb:bd:e0:8d:80: 9a:8b:b2:95:40:40:c4:3a:de:e8:2b:7c:e0:29:d8:9d:1a:25: 84:15:18:62:a5:15:1f:05:9a:c2:9a:d5:04:29:16:63:20:1a: 74:a2:87:2f:48:0e:9e:c5:94:1f:a1:44:e9:65:5b:95:20:ce: c1:d6:3f:19:c0:28:c6:e2:3d:03:52:80:08:48:8d:f9:8f:03: ee:19:51:7e:8a:00:fb:0f:6b:3b:32:fb:f2:a7:57:00:57:37: 37:93:ae:62:2b:ba:e7:c5:3e:13:bc:67:f7:ec:d0:7d:16:92: 50:f5:be:5d:b2:40:8f:e3:83:83:86:18:b7:b9:8c:d0:ac:b5: 7b:d2:47:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAk1X5f1p7hhE1t5NadXaljbJeMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE5REM1NjZDOENCRjFEN0NFQjE3RkM5OTE3QUNENTgy RTVDMEE5NTAeFw0yNTA3MDEwOTM3MDJaFw0yNTA3MDQyMTMxMDJaMDMxMTAvBgNV BAMTKEY2Qjc3OUYyRjE5RUYwNUI5NkU3RkRBMzNFNjU3RDM4QjNFQjA1RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNWCSLymNXauxTTHxYdgbFno/c y4Ez0aaf0bCTzITFTCHuu2oKLGmTeonwu9yzzXtJR57yBAmfl5eONx4RRdd5ODkJ nhZpAshk4CBWgowBH8oEa9fxs3si+0qtO1G0/gz2qRM2nkAFYJEmuL6laH6uRm0/ hVr8qX3GICrl77Qkh36KDuuWc5aE88jtD9dRvYfowogA8Q55itHCGxllWwR0ZcSq 6zcfU2QAiUFbCI1Vg+EbAK5mFj0+iptWwo6gwSFpKHuW1u5nPPIxaTBffaaMWqlj tD4JdKsYIpnpNF4WJoA1mPQINN3FJkvZrpGBCG1aQJbCJFz+D7z24H3fqq5tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9rd58vGe8FuW5/2jPmV9OLPrBdkwHwYDVR0j BBgwFoAUap3FZsjL8dfOsX/JkXrNWC5cCpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTZhYTU0Zi03MTU4LTQzYWYtYjMzNi1iZTQ3MTQ4MTZmYWQvMC82QTlEQzU2NkM4 Q0JGMUQ3Q0VCMTdGQzk5MTdBQ0Q1ODJFNUMwQTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE5REM1NjZDOENCRjFEN0NFQjE3RkM5OTE3QUNENTgyRTVD MEE5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE2YWE1NGYtNzE1OC00M2FmLWIz MzYtYmU0NzE0ODE2ZmFkLzAvNkE5REM1NjZDOENCRjFEN0NFQjE3RkM5OTE3QUNE NTgyRTVDMEE5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPtyPai4er6RuQl2cX9hPbN7mHMy/fUeugl 3ac3LL+SnQh4LEkpeBO2h8jXlWuM4tmHw3f6bM7CqPdbSwV7/baJzo3uslhkpydz GQz/UcysXudkghh2IMHU1qk4ZfIJewMawDttcj5ivgWCZJm+lctnF/ZnNV/EzpK7 veCNgJqLspVAQMQ63ugrfOAp2J0aJYQVGGKlFR8FmsKa1QQpFmMgGnSihy9IDp7F lB+hROllW5UgzsHWPxnAKMbiPQNSgAhIjfmPA+4ZUX6KAPsPazsy+/KnVwBXNzeT rmIruufFPhO8Z/fs0H0WklD1vl2yQI/jg4OGGLe5jNCstXvSR/U= -----END CERTIFICATE-----Generated at Wed Jul 2 22:38:53 2025 by rpki-client