$ rpki-client -vvf repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft File: 6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft (raw, json) Hash identifier: fdbh46I08q7KiqhueA4LyXuPLAwI3o/yB1LUoMPy56A= Subject key identifier: 5E:FA:B5:2C:82:29:29:6E:0F:68:73:B1:6F:C6:8A:34:45:C9:77:3A Authority key identifier: 6B:5E:67:7E:9A:47:13:3A:B5:F3:7B:3E:2C:11:19:3B:CF:66:B8:01 Certificate issuer: /CN=6B5E677E9A47133AB5F37B3E2C11193BCF66B801 Certificate serial: 2D5A671870631C6B683F882972CBE9C4F36F85AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft Manifest number: 0183 Signing time: Sat 28 Jun 2025 16:11:09 +0000 Manifest this update: Sat 28 Jun 2025 16:06:09 +0000 Manifest next update: Tue 01 Jul 2025 23:13:09 +0000 Files and hashes: 1: 3130332e3235352e31352e302f32342d3234203d3e203539313531.roa (hash: clujjP0gMVXTK896cZFjDD0rWMqaqVNL/f+1BiuQ3UY=) 2: 6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl (hash: 7dU0soz2GZi6XjYSBMI78InWWhn7xFr9jBp437zdiQE=) 3: 3130332e3231302e33352e302f32342d3234203d3e203539313531.roa (hash: AiL+g1EooKWTtHWBu9kN++0bhh/1b9qWboQYM9JSjI0=) 4: 3130332e3133312e3130342e302f32332d3234203d3e203539313531.roa (hash: B82wfhLkFG26Wgxhbhj75gasKnE7y0LTbhfYXiDw4Lc=) 5: 323430303a653332303a3a2f33322d3438203d3e203539313531.roa (hash: 6P8mTgYGo32WPKmNCbLwXvT8t2XWCE8fFh2BcSizJBo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 23:13:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:5a:67:18:70:63:1c:6b:68:3f:88:29:72:cb:e9:c4:f3:6f:85:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B5E677E9A47133AB5F37B3E2C11193BCF66B801 Validity Not Before: Jun 28 16:06:09 2025 GMT Not After : Jul 1 23:13:09 2025 GMT Subject: CN=5EFAB52C8229296E0F6873B16FC68A3445C9773A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:61:3d:9b:51:9a:25:6b:7f:b1:0a:ea:1e:4a: 35:6f:cc:b0:61:d0:17:08:a6:64:58:90:f1:1e:aa: 42:56:56:38:b2:ce:86:9e:d2:4a:59:21:e2:5d:25: b6:e0:63:8d:d9:28:17:a4:8a:6b:d4:c1:d8:dd:c0: 4c:76:4e:3a:73:a9:76:9b:dc:92:be:3d:32:14:3f: 8d:b8:cc:ed:c9:53:2b:45:86:8b:55:e2:6a:72:91: af:b3:a1:fc:9c:46:1e:15:a6:c8:28:c9:57:ad:52: 34:eb:67:2a:65:73:e4:3d:21:4a:07:17:9a:d8:ea: 06:b9:73:a8:e7:cc:ca:56:ff:74:b8:00:e4:e6:4a: c8:1b:57:ac:a7:84:62:4e:8a:99:a3:f1:3c:e1:62: 0b:c9:1a:ee:c9:95:6a:6b:98:62:5c:af:c0:b2:bc: 79:c5:07:98:ef:89:16:c8:9d:c8:77:f6:75:02:78: 4f:fa:f8:5d:c1:97:f7:6c:be:3e:02:7a:9d:5a:20: c9:7e:d3:4a:b4:09:23:c4:f9:56:32:8a:eb:25:fd: cd:2b:ab:e2:4d:55:e8:f3:a8:db:01:75:d5:68:e1: 43:6c:bf:61:68:26:f6:85:20:d6:90:fc:1e:f2:dc: 75:b4:4a:da:b0:34:28:a7:6b:d5:d3:64:78:5f:bf: b5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FA:B5:2C:82:29:29:6E:0F:68:73:B1:6F:C6:8A:34:45:C9:77:3A X509v3 Authority Key Identifier: keyid:6B:5E:67:7E:9A:47:13:3A:B5:F3:7B:3E:2C:11:19:3B:CF:66:B8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:9a:64:63:96:f5:05:9d:23:da:13:aa:e0:27:13:ca:4a:fa: f1:99:0d:ec:6b:4e:61:43:85:6c:24:87:f8:6e:92:e1:0e:4d: b5:f2:ee:3d:f5:f7:e7:40:6d:d2:7f:4e:0c:07:38:d8:1d:54: 75:40:e1:1d:80:06:3c:b0:dc:5b:b0:b5:03:53:2f:bd:75:ee: ac:2e:9a:4c:c9:8b:fa:6a:4d:bd:47:03:02:fa:01:e0:51:5b: 2f:b2:cb:c8:b0:ba:75:4b:b6:dd:9d:30:07:dd:a7:ec:23:ef: 0f:82:9f:18:c4:60:34:b3:b9:6f:db:f8:41:da:fd:87:09:f7: 60:89:f7:bb:7a:36:0b:f6:4f:1e:5c:64:76:07:d7:21:09:f1: 5c:81:ea:fa:7b:29:6c:f4:7d:18:62:2a:14:95:bf:60:55:0a: e6:58:75:42:3d:ff:fa:10:7f:0e:dd:a9:50:50:5c:e6:49:eb: 4b:bf:fb:73:e2:68:28:e3:8d:3f:0f:b1:6d:4b:48:7d:04:ff: 57:32:87:27:ab:88:d3:5a:44:43:dd:03:c1:71:ad:bf:d4:42: 45:46:84:fa:f4:02:5d:92:39:b0:1a:c3:a5:f0:5c:3a:a1:8d: ae:ba:91:52:65:0e:52:49:8f:88:a6:fc:45:ce:9e:4d:8d:9c: de:e6:48:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULVpnGHBjHGtoP4gpcsvpxPNvhaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI1RTY3N0U5QTQ3MTMzQUI1RjM3QjNFMkMxMTE5M0JD RjY2QjgwMTAeFw0yNTA2MjgxNjA2MDlaFw0yNTA3MDEyMzEzMDlaMDMxMTAvBgNV BAMTKDVFRkFCNTJDODIyOTI5NkUwRjY4NzNCMTZGQzY4QTM0NDVDOTc3M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzYT2bUZola3+xCuoeSjVvzLBh 0BcIpmRYkPEeqkJWVjiyzoae0kpZIeJdJbbgY43ZKBekimvUwdjdwEx2TjpzqXab 3JK+PTIUP424zO3JUytFhotV4mpyka+zofycRh4VpsgoyVetUjTrZyplc+Q9IUoH F5rY6ga5c6jnzMpW/3S4AOTmSsgbV6ynhGJOipmj8TzhYgvJGu7JlWprmGJcr8Cy vHnFB5jviRbInch39nUCeE/6+F3Bl/dsvj4Cep1aIMl+00q0CSPE+VYyiusl/c0r q+JNVejzqNsBddVo4UNsv2FoJvaFINaQ/B7y3HW0StqwNCina9XTZHhfv7UzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXvq1LIIpKW4PaHOxb8aKNEXJdzowHwYDVR0j BBgwFoAUa15nfppHEzq183s+LBEZO89muAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODc2NmQ2Ni0yOTIzLTRjZTAtYWE4NS05YzQ5ODhjYzhiYTEvMC82QjVFNjc3RTlB NDcxMzNBQjVGMzdCM0UyQzExMTkzQkNGNjZCODAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkI1RTY3N0U5QTQ3MTMzQUI1RjM3QjNFMkMxMTE5M0JDRjY2 QjgwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDg3NjZkNjYtMjkyMy00Y2UwLWFh ODUtOWM0OTg4Y2M4YmExLzAvNkI1RTY3N0U5QTQ3MTMzQUI1RjM3QjNFMkMxMTE5 M0JDRjY2QjgwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGaaZGOW9QWdI9oTquAnE8pK+vGZDexrTmFD hWwkh/hukuEOTbXy7j319+dAbdJ/TgwHONgdVHVA4R2ABjyw3FuwtQNTL7117qwu mkzJi/pqTb1HAwL6AeBRWy+yy8iwunVLtt2dMAfdp+wj7w+CnxjEYDSzuW/b+EHa /YcJ92CJ97t6Ngv2Tx5cZHYH1yEJ8VyB6vp7KWz0fRhiKhSVv2BVCuZYdUI9//oQ fw7dqVBQXOZJ60u/+3PiaCjjjT8PsW1LSH0E/1cyhyeriNNaREPdA8Fxrb/UQkVG hPr0Al2SObAaw6XwXDqhja66kVJlDlJJj4im/EXOnk2NnN7mSOo= -----END CERTIFICATE-----Generated at Sun Jun 29 18:14:23 2025 by rpki-client