$ rpki-client -vvf repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft File: 6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft (raw, json) Hash identifier: t8ALQL9G9RpJnU+Oxhaf0QQWXxOmfDVePEt/iT8NPiA= Subject key identifier: 87:D8:0F:0B:CD:B9:93:93:35:6B:37:2F:B4:8C:A3:9A:B1:C1:0E:6A Authority key identifier: 6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 Certificate issuer: /CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53 Certificate serial: 206C0414299939914B470D0BBD10B5615EF296D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer Subject info access: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft Manifest number: 58 Signing time: Sat 28 Jun 2025 00:12:14 +0000 Manifest this update: Sat 28 Jun 2025 00:07:14 +0000 Manifest next update: Tue 01 Jul 2025 03:29:14 +0000 Files and hashes: 1: 3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa (hash: R+IkOnhEEkrZOxf8Y3xufcx4Q4z9+2sI/l2mQF5vKrU=) 2: 6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl (hash: oB+9Pv0JpoePMwJ8ctPnfnkgcREkhDqUfO4WBB/Oy7c=) 3: 3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa (hash: b3FwlMsLVeDm7arhAC1MOxAg/+Ixy8Gs1MmwDRmmqco=) 4: 3130332e3133362e31322e302f32322d3234203d3e20313338383231.roa (hash: Cb5AEtlH1NnuqmCvEw1t1v8nRYfGeJ7DwpY/kiNXrBE=) 5: 3130332e3133362e31322e302f32342d3234203d3e20313338383231.roa (hash: Lk7MgzxdNvFWTQC60iPK0vpuf42JvMwfykIHdcb6dFo=) 6: 3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa (hash: 4xFtj009j2KyXApXnh4MToBnYNS6TXxPJe0g07ZPzfw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 03:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:6c:04:14:29:99:39:91:4b:47:0d:0b:bd:10:b5:61:5e:f2:96:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53 Validity Not Before: Jun 28 00:07:14 2025 GMT Not After : Jul 1 03:29:14 2025 GMT Subject: CN=87D80F0BCDB99393356B372FB48CA39AB1C10E6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c8:11:71:98:97:b9:4e:f8:33:78:4c:a7:0d: 3c:7c:bb:b0:1f:40:c3:ac:75:17:43:3d:53:e4:a2: 17:98:86:52:a7:b6:0a:44:0c:61:34:d1:58:35:34: 57:b0:56:d1:0e:d0:a4:df:ff:a6:1a:c0:ae:0b:57: b9:85:54:52:ab:7a:2c:99:79:b5:35:0b:2c:47:b0: 7a:cf:bf:fd:05:6d:1e:5b:9c:64:16:a1:20:84:b4: dc:8a:6d:f9:1c:f0:53:25:e6:e6:ee:db:e6:9c:d4: 19:cb:f9:0c:4c:82:ec:c2:ee:76:82:71:8a:4f:1e: 57:cc:cd:5c:98:e5:79:47:f5:c1:e8:a3:8d:9f:d0: 20:a5:51:af:ca:17:ce:34:36:d9:4a:b2:d5:f4:a7: 00:34:b1:2c:81:65:55:5f:60:7e:54:69:f3:94:10: f5:70:db:f4:e2:f1:d0:c0:9d:cc:aa:a7:0e:1f:b5: 9c:ee:23:4f:7f:ae:e6:b6:4f:db:dd:d9:4f:4b:a8: 25:63:1d:c4:d3:c1:28:91:59:4b:45:cc:6d:ae:fd: e6:ad:44:0d:b9:38:04:1a:bb:a3:97:60:a2:08:37: 58:2d:6e:c8:35:2c:14:62:b2:7f:f6:2d:9d:ce:a0: a3:52:4b:8e:c7:22:81:41:5b:ad:eb:27:11:db:de: ca:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D8:0F:0B:CD:B9:93:93:35:6B:37:2F:B4:8C:A3:9A:B1:C1:0E:6A X509v3 Authority Key Identifier: keyid:6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:16:db:ba:00:ad:25:f9:4f:7b:d3:63:24:2f:9a:f0:c7:31: 7c:64:57:87:af:da:1b:f7:7a:bd:3a:e5:57:ea:8b:dc:f5:9d: 63:f0:bc:13:11:ce:ff:e6:38:48:9a:03:ce:47:7a:a4:a3:50: 7e:c1:6c:65:d1:f7:35:37:cc:f7:71:d4:e3:8c:e6:b7:f8:66: 6c:77:78:7b:a7:63:27:24:94:35:d5:7c:19:37:da:f9:8b:52: 2d:87:11:dc:0b:9c:14:cf:d6:64:8f:38:af:9e:e6:6c:fc:11: 7f:4a:06:30:cf:25:d2:70:99:d0:f3:22:77:de:96:16:38:37: cd:37:df:7f:77:da:46:f9:04:87:50:4e:ba:57:91:91:a5:54: 14:97:06:6e:97:a2:12:04:7d:a0:77:e5:c5:95:20:09:02:cd: 10:37:fb:0b:9a:c4:31:70:73:a1:0c:fb:f3:8e:ec:e8:13:7a: 3f:12:9e:50:81:ec:05:61:bf:d7:23:a5:a2:3d:b3:ff:1f:05: ac:52:3b:7f:01:4b:fb:b0:52:1f:0a:f8:42:13:09:23:9e:35: e8:47:af:d4:7c:34:4b:c6:00:a0:e1:4b:ed:93:77:73:31:ec: ad:85:2f:1b:20:16:00:72:6a:33:04:98:cb:89:c9:88:82:bd: 0c:c6:b7:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIGwEFCmZOZFLRw0LvRC1YV7yltYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNC RkIzN0I1MzAeFw0yNTA2MjgwMDA3MTRaFw0yNTA3MDEwMzI5MTRaMDMxMTAvBgNV BAMTKDg3RDgwRjBCQ0RCOTkzOTMzNTZCMzcyRkI0OENBMzlBQjFDMTBFNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3yBFxmJe5TvgzeEynDTx8u7Af QMOsdRdDPVPkoheYhlKntgpEDGE00Vg1NFewVtEO0KTf/6YawK4LV7mFVFKreiyZ ebU1CyxHsHrPv/0FbR5bnGQWoSCEtNyKbfkc8FMl5ubu2+ac1BnL+QxMguzC7naC cYpPHlfMzVyY5XlH9cHoo42f0CClUa/KF840NtlKstX0pwA0sSyBZVVfYH5UafOU EPVw2/Ti8dDAncyqpw4ftZzuI09/rua2T9vd2U9LqCVjHcTTwSiRWUtFzG2u/eat RA25OAQau6OXYKIIN1gtbsg1LBRisn/2LZ3OoKNSS47HIoFBW63rJxHb3srTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh9gPC825k5M1azcvtIyjmrHBDmowHwYDVR0j BBgwFoAUamnvxciXkHx0yKHr3Z03/L+ze1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDFiMWMxYi02NTZjLTQ4OWQtOWVkMy1jY2M3N2M4MzAxOGQvMC82QTY5RUZDNUM4 OTc5MDdDNzRDOEExRUJERDlEMzdGQ0JGQjM3QjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNCRkIz N0I1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAxYjFjMWItNjU2Yy00ODlkLTll ZDMtY2NjNzdjODMwMThkLzAvNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3 RkNCRkIzN0I1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALIW27oArSX5T3vTYyQvmvDHMXxkV4ev2hv3 er065Vfqi9z1nWPwvBMRzv/mOEiaA85HeqSjUH7BbGXR9zU3zPdx1OOM5rf4Zmx3 eHunYycklDXVfBk32vmLUi2HEdwLnBTP1mSPOK+e5mz8EX9KBjDPJdJwmdDzInfe lhY4N80333932kb5BIdQTrpXkZGlVBSXBm6XohIEfaB35cWVIAkCzRA3+wuaxDFw c6EM+/OO7OgTej8SnlCB7AVhv9cjpaI9s/8fBaxSO38BS/uwUh8K+EITCSOeNehH r9R8NEvGAKDhS+2Td3Mx7K2FLxsgFgByajMEmMuJyYiCvQzGtzQ= -----END CERTIFICATE-----Generated at Sun Jun 29 22:01:53 2025 by rpki-client