$ rpki-client -vvf repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft File: 6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft (raw, json) Hash identifier: FYRtcixaPTgs9aooKhL+LZursMV6E39EcvEblNG2iso= Subject key identifier: 82:F1:AF:98:1F:81:29:B9:BD:A2:FB:55:11:B1:78:39:EC:97:B6:C5 Authority key identifier: 6D:34:40:FA:38:B5:13:21:C8:A8:FD:81:36:BA:70:59:7A:86:86:E0 Certificate issuer: /CN=6D3440FA38B51321C8A8FD8136BA70597A8686E0 Certificate serial: 3AEDA73FD0AEE048403D7DA08050D1BD8577231E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft Manifest number: 015D Signing time: Sat 28 Jun 2025 01:50:37 +0000 Manifest this update: Sat 28 Jun 2025 01:45:37 +0000 Manifest next update: Tue 01 Jul 2025 04:22:37 +0000 Files and hashes: 1: 3130332e3136302e3139332e302f32342d3234203d3e20313530353433.roa (hash: 4Rc4ZkmdbbdveQiTO9ywjy41ILEiG5tUChzvFR34zXM=) 2: 6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl (hash: BHBlWZntdQwglrz8V15UR7i1Rk2S7ZnmrwU5FbU2qrg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 04:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ed:a7:3f:d0:ae:e0:48:40:3d:7d:a0:80:50:d1:bd:85:77:23:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D3440FA38B51321C8A8FD8136BA70597A8686E0 Validity Not Before: Jun 28 01:45:37 2025 GMT Not After : Jul 1 04:22:37 2025 GMT Subject: CN=82F1AF981F8129B9BDA2FB5511B17839EC97B6C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:68:f4:3a:af:12:d5:93:e0:e2:58:77:a5:08: a2:c0:38:6a:8e:40:f0:be:29:05:26:49:eb:93:52: 48:70:13:b6:1c:dc:6f:c0:a3:5d:dd:01:30:60:86: 5d:b0:bf:e0:ac:74:31:4a:9e:12:65:e9:a5:ba:47: 68:b2:db:97:21:5a:b1:4d:db:14:22:c0:30:8d:54: 54:85:8a:3c:68:0f:0d:f5:e5:33:7f:2c:79:37:fe: 9b:38:1c:f5:42:99:c4:ec:1d:5b:0e:3d:4b:ef:68: 92:62:fb:da:20:4f:f9:ee:3b:26:ff:a7:f7:fa:94: 01:9e:bd:2b:bb:f9:b0:62:7a:c0:b6:60:3f:26:a7: 06:0a:53:95:48:70:c4:6b:3a:f5:f1:63:a2:36:82: ba:b9:d8:73:49:8a:2e:c8:61:41:4f:39:89:3a:8d: 56:5b:1e:08:cf:c5:f2:f8:f6:ce:08:c0:29:8f:45: 02:4d:68:06:a7:52:c1:2e:94:9b:8b:4f:17:c4:84: 1b:71:3b:37:bf:e5:ad:e9:f1:4a:fb:d4:63:ff:8c: cd:b2:ff:83:a5:4e:3c:98:e0:ee:54:c7:1c:03:88: 8d:2d:aa:ff:00:42:b8:54:7a:ac:eb:d0:d0:b5:e1: 69:43:31:76:e2:b2:db:02:73:92:58:eb:0c:50:99: a0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F1:AF:98:1F:81:29:B9:BD:A2:FB:55:11:B1:78:39:EC:97:B6:C5 X509v3 Authority Key Identifier: keyid:6D:34:40:FA:38:B5:13:21:C8:A8:FD:81:36:BA:70:59:7A:86:86:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:02:67:2d:36:32:e5:8e:72:a7:88:dc:41:43:1b:25:8c:c3: 84:74:73:9a:cf:dd:1a:56:54:e3:f0:74:78:21:f1:26:56:ec: 51:ae:ad:3d:20:9f:6b:51:1d:06:a9:d4:e3:95:99:f4:c3:4b: b1:0c:0c:13:95:b1:10:fd:37:c6:b2:b6:a4:f2:a8:79:52:b7: 8f:6b:1b:b8:4a:3c:f2:66:dc:4a:d7:54:fb:f7:2d:0d:76:a6: 59:2d:19:bc:0b:f9:e6:38:ff:d5:38:b6:24:c2:aa:6c:52:80: 04:ad:9d:10:55:e4:b8:21:bf:5e:fb:36:66:c4:41:0a:2f:78: 7a:af:be:ab:f6:42:ed:4c:c8:1f:57:74:ef:14:a9:67:1c:cf: 9a:df:6f:35:3a:86:78:be:e9:32:58:52:d5:77:62:f5:98:bb: 1c:8c:b9:64:73:e2:08:3f:e1:64:0e:0c:52:30:ef:69:19:ec: e2:83:5a:e6:cd:e2:b6:83:96:2b:f0:fb:91:02:06:a0:22:a5: bb:24:f1:e4:d7:c6:5a:57:a3:c7:0c:b1:3e:fd:d9:c2:e0:09: 1d:e4:27:f7:8d:e3:ea:f7:3a:62:2e:85:97:12:7a:47:12:b0: ca:75:b4:93:c8:74:14:30:ca:92:63:b3:66:93:a1:07:bc:7c: 79:0e:5a:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOu2nP9Cu4EhAPX2ggFDRvYV3Ix4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQzNDQwRkEzOEI1MTMyMUM4QThGRDgxMzZCQTcwNTk3 QTg2ODZFMDAeFw0yNTA2MjgwMTQ1MzdaFw0yNTA3MDEwNDIyMzdaMDMxMTAvBgNV BAMTKDgyRjFBRjk4MUY4MTI5QjlCREEyRkI1NTExQjE3ODM5RUM5N0I2QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5aPQ6rxLVk+DiWHelCKLAOGqO QPC+KQUmSeuTUkhwE7Yc3G/Ao13dATBghl2wv+CsdDFKnhJl6aW6R2iy25chWrFN 2xQiwDCNVFSFijxoDw315TN/LHk3/ps4HPVCmcTsHVsOPUvvaJJi+9ogT/nuOyb/ p/f6lAGevSu7+bBiesC2YD8mpwYKU5VIcMRrOvXxY6I2grq52HNJii7IYUFPOYk6 jVZbHgjPxfL49s4IwCmPRQJNaAanUsEulJuLTxfEhBtxOze/5a3p8Ur71GP/jM2y /4OlTjyY4O5UxxwDiI0tqv8AQrhUeqzr0NC14WlDMXbistsCc5JY6wxQmaATAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgvGvmB+BKbm9ovtVEbF4OeyXtsUwHwYDVR0j BBgwFoAUbTRA+ji1EyHIqP2BNrpwWXqGhuAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2IzYjAwYi1hZDdiLTQ4NDktYjBiMi1lMjQ5YTJmYTYwNGEvMC82RDM0NDBGQTM4 QjUxMzIxQzhBOEZEODEzNkJBNzA1OTdBODY4NkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQzNDQwRkEzOEI1MTMyMUM4QThGRDgxMzZCQTcwNTk3QTg2 ODZFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NiM2IwMGItYWQ3Yi00ODQ5LWIw YjItZTI0OWEyZmE2MDRhLzAvNkQzNDQwRkEzOEI1MTMyMUM4QThGRDgxMzZCQTcw NTk3QTg2ODZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcCZy02MuWOcqeI3EFDGyWMw4R0c5rP3RpW VOPwdHgh8SZW7FGurT0gn2tRHQap1OOVmfTDS7EMDBOVsRD9N8aytqTyqHlSt49r G7hKPPJm3ErXVPv3LQ12plktGbwL+eY4/9U4tiTCqmxSgAStnRBV5Lghv177NmbE QQoveHqvvqv2Qu1MyB9XdO8UqWccz5rfbzU6hni+6TJYUtV3YvWYuxyMuWRz4gg/ 4WQODFIw72kZ7OKDWubN4raDlivw+5ECBqAipbsk8eTXxlpXo8cMsT792cLgCR3k J/eN4+r3OmIuhZcSekcSsMp1tJPIdBQwypJjs2aToQe8fHkOWtw= -----END CERTIFICATE-----Generated at Sun Jun 29 18:42:04 2025 by rpki-client