$ rpki-client -vvf repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft File: 6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft (raw, json) Hash identifier: Hs/vzSECaLOHi7YzUA3IgzvnvkcA0cs4yhFTbtYU6Js= Subject key identifier: E6:0A:6D:B9:5B:F6:2D:4F:BF:D0:B5:D5:B0:45:BD:C9:2C:B0:4C:F1 Authority key identifier: 6A:AF:6E:8D:1C:9A:80:94:46:CB:C0:76:FE:39:08:3A:F9:54:70:8E Certificate issuer: /CN=6AAF6E8D1C9A809446CBC076FE39083AF954708E Certificate serial: 52C0E9514E633900E6A1015019EA8A99F0236E9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft Manifest number: 019F Signing time: Tue 01 Jul 2025 10:01:23 +0000 Manifest this update: Tue 01 Jul 2025 09:56:23 +0000 Manifest next update: Fri 04 Jul 2025 11:10:23 +0000 Files and hashes: 1: 6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl (hash: CEosOf+PMwxRM6NcsI2TAmXGkhuZRUjirw3x1p5v2BU=) 2: 3130332e33392e37342e302f32332d3234203d3e20313530323732.roa (hash: /jbCkGD1i8NyhuUnKVEmZYj4vCqIPPKrbQpk5MF5I1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 11:10:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:c0:e9:51:4e:63:39:00:e6:a1:01:50:19:ea:8a:99:f0:23:6e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AAF6E8D1C9A809446CBC076FE39083AF954708E Validity Not Before: Jul 1 09:56:23 2025 GMT Not After : Jul 4 11:10:23 2025 GMT Subject: CN=E60A6DB95BF62D4FBFD0B5D5B045BDC92CB04CF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:dd:25:69:5b:26:8e:76:e5:f4:9b:74:bd:e4: db:80:5d:bb:fc:01:0d:5a:68:92:c7:af:3b:fb:2d: bb:cd:d6:73:de:db:65:ac:10:18:51:17:7f:c8:41: 56:31:25:5a:8c:52:11:5f:40:0a:70:c6:8a:e8:45: de:36:6b:98:cf:8c:43:2a:ba:6a:0a:d9:e1:63:55: 8f:bf:f9:51:2d:ac:b8:bb:b0:a2:13:4e:64:cd:da: 3b:f0:d3:00:53:22:c2:b4:26:c1:dd:f0:1b:92:76: 69:b0:07:0b:91:f5:f6:ff:b6:2a:dd:94:04:18:15: d1:a1:64:a7:f9:c2:a7:c0:d9:f0:6f:69:99:2b:ac: ae:4e:2a:5c:f8:e8:94:be:7b:dd:a2:76:f1:08:16: b8:ee:f4:ea:08:08:9f:b3:66:54:1e:e5:61:94:7a: ab:18:a7:1d:47:94:93:59:92:99:d0:0b:e8:8c:1c: f4:66:fe:60:05:2a:23:29:ea:08:2f:96:51:59:e2: 26:2e:9b:27:2b:4e:8c:42:44:05:4e:b5:02:cd:3f: 89:0b:5b:e6:ad:79:b4:dc:ec:25:45:a6:fb:fa:8f: 27:3a:47:d4:62:f1:c5:9b:17:bf:d2:e0:82:a4:3f: 66:cc:b5:8e:53:4d:32:a8:1a:d5:ba:07:47:f1:2a: af:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:0A:6D:B9:5B:F6:2D:4F:BF:D0:B5:D5:B0:45:BD:C9:2C:B0:4C:F1 X509v3 Authority Key Identifier: keyid:6A:AF:6E:8D:1C:9A:80:94:46:CB:C0:76:FE:39:08:3A:F9:54:70:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:ef:5c:46:f6:63:4b:78:fd:2d:c0:28:7c:ca:ba:f3:35:ba: 66:36:85:5b:b3:39:9c:4f:38:98:c5:f5:fd:75:92:49:81:78: 4c:50:f7:83:19:77:b8:9d:ce:cb:98:ec:84:7d:64:40:c6:f4: cf:ac:28:23:ea:e5:6f:5c:5c:c1:40:e4:16:53:b0:32:a1:e2: 41:ec:4b:ea:70:7a:ac:2c:7d:fa:c5:9e:44:6c:a3:d2:26:17: 6b:c6:0e:06:d4:a2:7b:fd:90:a8:de:70:e5:0f:3e:38:26:5f: 46:e0:03:0e:9f:6d:a8:f8:f1:f7:d3:32:8e:9e:b0:f8:5b:2d: 68:f6:70:1c:bf:b9:3c:76:14:8f:7d:75:71:2e:ae:e1:01:00: 24:13:2e:1c:f4:28:49:e4:ae:c2:c0:42:ca:e3:fb:7e:f6:9c: 3d:41:ac:48:c0:8f:94:ee:48:df:90:e7:33:3a:a9:7a:a1:f3: 79:fa:21:72:e3:86:b6:19:87:a2:2c:0e:c9:9a:af:8a:ed:e3: 09:e5:dd:77:23:ce:a9:30:ca:5f:9b:e1:4e:86:89:44:b3:d2: 6d:10:5f:b3:74:85:4a:f6:82:ab:0e:9d:56:05:e8:cf:80:89: d4:12:10:83:8f:c1:5a:6a:f6:89:30:63:2c:c8:2c:f5:5d:83: 31:e1:25:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUsDpUU5jOQDmoQFQGeqKmfAjbpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4M0FG OTU0NzA4RTAeFw0yNTA3MDEwOTU2MjNaFw0yNTA3MDQxMTEwMjNaMDMxMTAvBgNV BAMTKEU2MEE2REI5NUJGNjJENEZCRkQwQjVENUIwNDVCREM5MkNCMDRDRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA3SVpWyaOduX0m3S95NuAXbv8 AQ1aaJLHrzv7LbvN1nPe22WsEBhRF3/IQVYxJVqMUhFfQApwxoroRd42a5jPjEMq umoK2eFjVY+/+VEtrLi7sKITTmTN2jvw0wBTIsK0JsHd8BuSdmmwBwuR9fb/tird lAQYFdGhZKf5wqfA2fBvaZkrrK5OKlz46JS+e92idvEIFrju9OoICJ+zZlQe5WGU eqsYpx1HlJNZkpnQC+iMHPRm/mAFKiMp6ggvllFZ4iYumycrToxCRAVOtQLNP4kL W+atebTc7CVFpvv6jyc6R9Ri8cWbF7/S4IKkP2bMtY5TTTKoGtW6B0fxKq/DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5gptuVv2LU+/0LXVsEW9ySywTPEwHwYDVR0j BBgwFoAUaq9ujRyagJRGy8B2/jkIOvlUcI4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTE5YWJjOC04NTA3LTQxZWQtODI4OS03ZTNhYzdiMjQ5MzUvMC82QUFGNkU4RDFD OUE4MDk0NDZDQkMwNzZGRTM5MDgzQUY5NTQ3MDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4M0FGOTU0 NzA4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2UxOWFiYzgtODUwNy00MWVkLTgy ODktN2UzYWM3YjI0OTM1LzAvNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4 M0FGOTU0NzA4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTvXEb2Y0t4/S3AKHzKuvM1umY2hVuzOZxP OJjF9f11kkmBeExQ94MZd7idzsuY7IR9ZEDG9M+sKCPq5W9cXMFA5BZTsDKh4kHs S+pweqwsffrFnkRso9ImF2vGDgbUonv9kKjecOUPPjgmX0bgAw6fbaj48ffTMo6e sPhbLWj2cBy/uTx2FI99dXEuruEBACQTLhz0KEnkrsLAQsrj+372nD1BrEjAj5Tu SN+Q5zM6qXqh83n6IXLjhrYZh6IsDsmar4rt4wnl3Xcjzqkwyl+b4U6GiUSz0m0Q X7N0hUr2gqsOnVYF6M+AidQSEIOPwVpq9okwYyzILPVdgzHhJe4= -----END CERTIFICATE-----Generated at Tue Jul 1 20:43:47 2025 by rpki-client