$ rpki-client -vvf repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft File: 6189E4F67BE53DF65282F8E1BB63165CCA784862.mft (raw, json) Hash identifier: 85cJyiwGMqe5NtK5YGHR7m5qHmapfTVWbDymZEX7hbE= Subject key identifier: 9C:DC:DF:3C:D7:FB:B7:BB:79:E9:D3:61:57:C1:CC:47:95:A6:7F:A7 Authority key identifier: 61:89:E4:F6:7B:E5:3D:F6:52:82:F8:E1:BB:63:16:5C:CA:78:48:62 Certificate issuer: /CN=6189E4F67BE53DF65282F8E1BB63165CCA784862 Certificate serial: 0368E508FCA76723916A51F6BC436EA143448C5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft Manifest number: 015B Signing time: Wed 02 Jul 2025 08:12:05 +0000 Manifest this update: Wed 02 Jul 2025 08:07:05 +0000 Manifest next update: Sat 05 Jul 2025 10:22:05 +0000 Files and hashes: 1: 6189E4F67BE53DF65282F8E1BB63165CCA784862.crl (hash: CtJLHtYm3tiZ0YSAF0cPOv03n8UaMGgtNFTE6Rq06zg=) 2: 3130332e37302e39322e302f32332d3234203d3e20313338303634.roa (hash: TA4sXIkX/1vgSRuW9l2sSfoKt1o5FCsmy++oilBd+h0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.crl rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 10:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:68:e5:08:fc:a7:67:23:91:6a:51:f6:bc:43:6e:a1:43:44:8c:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6189E4F67BE53DF65282F8E1BB63165CCA784862 Validity Not Before: Jul 2 08:07:05 2025 GMT Not After : Jul 5 10:22:05 2025 GMT Subject: CN=9CDCDF3CD7FBB7BB79E9D36157C1CC4795A67FA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:94:f4:e5:c0:c6:d0:a6:27:2e:3a:1b:b3:99: 10:83:c3:3e:f9:a0:c5:4c:6e:81:29:2a:2c:cd:3d: 9c:97:15:88:d9:f3:18:da:8f:c2:a4:1b:21:1c:01: 3c:0b:b9:17:ba:48:fe:c8:82:89:a2:1a:b5:95:be: ad:cb:6f:02:86:22:2b:20:e6:76:c7:b0:e6:ec:9c: e0:6a:13:8c:7b:4e:a6:40:3c:ee:06:6a:00:15:27: e3:bc:3c:79:c8:cb:66:c4:45:81:21:cf:5c:8c:a7: 4d:f9:37:57:1c:69:9f:a5:ac:c4:8f:e0:f2:2c:4b: b1:99:1d:89:af:1a:fe:9d:42:83:f4:d9:57:59:ad: d1:09:0e:60:6b:0c:7c:0d:48:07:d6:96:01:38:37: 6e:ad:0b:8f:9e:cf:aa:f5:36:b3:ff:4b:4b:6f:01: 4b:f7:ff:26:27:1b:e4:b8:dc:10:76:95:e3:4c:0c: 00:96:74:e7:22:03:f2:57:c1:e8:4e:ad:9b:a1:02: 1d:78:cd:d4:40:31:d1:fc:1e:6c:5d:1a:d2:69:5c: fb:80:ee:05:1e:ca:31:97:08:45:f4:e5:02:e6:bf: 2e:6f:d9:b6:b6:06:58:15:b0:93:83:12:ad:83:4a: b3:ff:10:8a:ec:5f:79:c6:26:d4:02:7d:fc:de:f9: 51:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:DC:DF:3C:D7:FB:B7:BB:79:E9:D3:61:57:C1:CC:47:95:A6:7F:A7 X509v3 Authority Key Identifier: keyid:61:89:E4:F6:7B:E5:3D:F6:52:82:F8:E1:BB:63:16:5C:CA:78:48:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:67:90:f8:8e:43:6b:d1:14:c1:b1:4c:ab:74:c9:23:47:b4: 30:fe:75:c1:79:59:03:6b:74:2b:be:b8:78:c1:1e:ee:a8:73: b9:cf:70:3c:af:1b:fe:b4:72:eb:22:53:ee:a6:c6:bf:1c:20: 2f:d6:23:7c:1d:a7:88:da:09:9b:7b:df:41:b4:71:4b:64:32: 6e:2c:69:f0:cb:80:74:dd:2c:c7:e6:35:e8:d2:09:74:a5:b7: 25:06:0e:90:cd:2b:2a:a2:a8:92:ce:5c:a2:8f:ea:b4:0b:c1: 25:45:00:1b:1a:9e:59:89:a5:04:cd:fc:89:c6:63:e2:46:8c: 95:4b:c6:35:82:bb:f5:51:7b:0a:ce:e1:e9:24:aa:87:54:db: 55:88:03:8a:e4:33:6b:94:38:ab:50:92:1d:af:15:39:41:6d: 98:95:e4:f5:fd:a9:87:94:28:46:ef:1b:98:7e:81:21:7e:5b: b8:32:43:5d:60:71:d9:64:38:53:ce:32:6f:9e:4e:64:ab:c7: f0:46:5c:6d:f3:68:20:03:8e:9d:3e:79:77:61:a3:b3:6e:de: 74:1c:be:fc:a5:3a:4d:8d:6a:42:da:ff:1f:c1:24:1a:c5:4d: 51:2c:b9:41:b5:58:82:fc:4d:6c:8e:db:42:c4:7f:dd:0e:5c: 84:a4:fc:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA2jlCPynZyORalH2vENuoUNEjF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE4OUU0RjY3QkU1M0RGNjUyODJGOEUxQkI2MzE2NUND QTc4NDg2MjAeFw0yNTA3MDIwODA3MDVaFw0yNTA3MDUxMDIyMDVaMDMxMTAvBgNV BAMTKDlDRENERjNDRDdGQkI3QkI3OUU5RDM2MTU3QzFDQzQ3OTVBNjdGQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCflPTlwMbQpicuOhuzmRCDwz75 oMVMboEpKizNPZyXFYjZ8xjaj8KkGyEcATwLuRe6SP7IgomiGrWVvq3LbwKGIisg 5nbHsObsnOBqE4x7TqZAPO4GagAVJ+O8PHnIy2bERYEhz1yMp035N1ccaZ+lrMSP 4PIsS7GZHYmvGv6dQoP02VdZrdEJDmBrDHwNSAfWlgE4N26tC4+ez6r1NrP/S0tv AUv3/yYnG+S43BB2leNMDACWdOciA/JXwehOrZuhAh14zdRAMdH8HmxdGtJpXPuA 7gUeyjGXCEX05QLmvy5v2ba2BlgVsJODEq2DSrP/EIrsX3nGJtQCffze+VGfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnNzfPNf7t7t56dNhV8HMR5Wmf6cwHwYDVR0j BBgwFoAUYYnk9nvlPfZSgvjhu2MWXMp4SGIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTg5ZjY0My0zN2JjLTRmZmItOTUyOS00MDFlNGI2ZWY2NzUvMC82MTg5RTRGNjdC RTUzREY2NTI4MkY4RTFCQjYzMTY1Q0NBNzg0ODYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE4OUU0RjY3QkU1M0RGNjUyODJGOEUxQkI2MzE2NUNDQTc4 NDg2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU4OWY2NDMtMzdiYy00ZmZiLTk1 MjktNDAxZTRiNmVmNjc1LzAvNjE4OUU0RjY3QkU1M0RGNjUyODJGOEUxQkI2MzE2 NUNDQTc4NDg2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJnkPiOQ2vRFMGxTKt0ySNHtDD+dcF5WQNr dCu+uHjBHu6oc7nPcDyvG/60cusiU+6mxr8cIC/WI3wdp4jaCZt730G0cUtkMm4s afDLgHTdLMfmNejSCXSltyUGDpDNKyqiqJLOXKKP6rQLwSVFABsanlmJpQTN/InG Y+JGjJVLxjWCu/VRewrO4ekkqodU21WIA4rkM2uUOKtQkh2vFTlBbZiV5PX9qYeU KEbvG5h+gSF+W7gyQ11gcdlkOFPOMm+eTmSrx/BGXG3zaCADjp0+eXdho7Nu3nQc vvylOk2NakLa/x/BJBrFTVEsuUG1WIL8TWyO20LEf90OXISk/BY= -----END CERTIFICATE-----Generated at Thu Jul 3 09:52:29 2025 by rpki-client