$ rpki-client -vvf repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft File: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft (raw, json) Hash identifier: c/6ooMF7axHR6kigWQwPqGu1bPTzlyjrZKTZ/vPCvRc= Subject key identifier: 61:60:4D:49:A7:CE:79:1C:19:8E:8D:05:07:29:4A:49:B8:4C:0E:33 Authority key identifier: 6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 Certificate issuer: /CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Certificate serial: 21F10148B47A7010CC01D4312F9E0AB7D45D7D02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft Manifest number: 0202 Signing time: Mon 30 Jun 2025 11:40:53 +0000 Manifest this update: Mon 30 Jun 2025 11:35:53 +0000 Manifest next update: Thu 03 Jul 2025 13:57:53 +0000 Files and hashes: 1: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl (hash: QsGpTRzR/A1CWXBbngNausnX6gJwMwjL7FmCnTPqtN8=) 2: 3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa (hash: 8i2rkzBjlPEti5Kr8Zm8/78pVX8xhxtJgE0QaB9hDOo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 13:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:f1:01:48:b4:7a:70:10:cc:01:d4:31:2f:9e:0a:b7:d4:5d:7d:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Validity Not Before: Jun 30 11:35:53 2025 GMT Not After : Jul 3 13:57:53 2025 GMT Subject: CN=61604D49A7CE791C198E8D0507294A49B84C0E33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:31:b2:21:8a:ad:b3:4e:73:a2:a9:27:53:eb: 56:73:cb:8b:ad:f9:3a:c7:ac:21:36:f5:da:f7:b7: e8:21:11:18:2d:b7:c3:ce:93:85:12:dd:ee:ca:f3: ed:7f:28:b6:92:1a:c2:3f:9d:90:00:c3:d3:92:c5: 45:ee:66:86:66:e9:6d:b2:56:8f:78:1b:b9:16:b8: 8e:f9:85:9b:4a:c9:9b:f6:25:00:b9:ba:fa:3f:17: b0:af:52:6a:68:46:44:fa:96:24:88:3b:b0:84:bd: d4:8b:fe:76:61:e2:16:6e:14:a7:5f:f5:5b:e0:c9: ac:93:a9:4a:63:42:ed:2f:01:de:73:59:19:b7:7b: b4:52:6f:f9:99:50:ec:16:c5:66:a9:f2:69:39:5b: 30:b9:0f:35:72:39:bf:5f:60:53:10:7d:f4:08:6e: be:b8:ca:f7:78:e5:3b:8a:27:9d:38:bb:be:de:60: 9b:92:ef:e8:22:8e:06:a9:af:15:90:be:dd:bd:dd: aa:ec:a5:11:dd:34:e9:d7:03:79:a6:63:f5:c1:78: 41:52:d4:30:f2:bc:52:b6:31:24:6e:6d:e3:49:be: 48:40:39:4e:24:bc:f5:88:41:54:bf:5d:90:e6:fa: e6:b0:9e:49:09:ff:9d:a3:4e:ff:4c:02:d8:54:33: e3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:60:4D:49:A7:CE:79:1C:19:8E:8D:05:07:29:4A:49:B8:4C:0E:33 X509v3 Authority Key Identifier: keyid:6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:7b:a9:3e:d3:7c:0c:18:07:65:e2:ea:7d:d3:03:b1:64:dc: bc:25:11:b5:0e:27:93:3a:77:30:01:4a:8d:f2:de:c7:2e:50: 5b:53:bb:bb:19:e8:66:97:78:65:72:2a:87:28:69:07:39:2c: 76:bc:53:d1:3f:2b:4e:3a:ab:53:f3:3a:69:5c:65:90:f5:55: 7b:8c:a1:94:2e:8b:44:92:ad:01:f9:cb:b3:28:58:52:18:8c: 06:7c:bf:ec:8c:8f:ff:09:05:ed:92:09:c9:56:5b:e7:9f:85: d5:ea:83:21:05:46:e5:65:8b:23:5e:4a:4d:c8:2f:06:98:48: c8:bb:78:98:82:e1:7d:b6:28:9e:76:cd:5c:a1:5b:07:ae:78: b6:aa:c4:5d:6f:a6:ae:5a:c8:0f:e1:44:a2:c7:da:bc:08:a8: a0:f8:c6:ab:95:21:12:15:9e:1b:87:9e:2a:2e:2d:2b:b5:20: c4:98:f8:37:10:da:16:d0:ad:99:f7:ee:03:52:43:b6:e9:70: 86:c5:04:6a:cc:a3:42:65:c5:12:b8:49:57:b8:db:7c:1d:62: 18:02:1f:8b:46:c6:d7:bd:9c:78:3b:4a:0f:98:fc:e0:0a:4a: 83:1b:90:a1:c5:a2:23:fd:33:e7:e5:ce:58:ba:9e:95:f1:b6: 86:58:1c:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIfEBSLR6cBDMAdQxL54Kt9RdfQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1 RkUwQkUxMTAeFw0yNTA2MzAxMTM1NTNaFw0yNTA3MDMxMzU3NTNaMDMxMTAvBgNV BAMTKDYxNjA0RDQ5QTdDRTc5MUMxOThFOEQwNTA3Mjk0QTQ5Qjg0QzBFMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrMbIhiq2zTnOiqSdT61Zzy4ut +TrHrCE29dr3t+ghERgtt8POk4US3e7K8+1/KLaSGsI/nZAAw9OSxUXuZoZm6W2y Vo94G7kWuI75hZtKyZv2JQC5uvo/F7CvUmpoRkT6liSIO7CEvdSL/nZh4hZuFKdf 9VvgyayTqUpjQu0vAd5zWRm3e7RSb/mZUOwWxWap8mk5WzC5DzVyOb9fYFMQffQI br64yvd45TuKJ504u77eYJuS7+gijgaprxWQvt293arspRHdNOnXA3mmY/XBeEFS 1DDyvFK2MSRubeNJvkhAOU4kvPWIQVS/XZDm+uawnkkJ/52jTv9MAthUM+MdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYWBNSafOeRwZjo0FBylKSbhMDjMwHwYDVR0j BBgwFoAUb8hX33/lNQpsBaHxE/PcLl/gvhEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTIzOGE2Mi02YTk2LTQzYmMtODdhZi0wMmRiNjQxZjcxMDkvMC82RkM4NTdERjdG RTUzNTBBNkMwNUExRjExM0YzREMyRTVGRTBCRTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1RkUw QkUxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGEyMzhhNjItNmE5Ni00M2JjLTg3 YWYtMDJkYjY0MWY3MTA5LzAvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RD MkU1RkUwQkUxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZ7qT7TfAwYB2Xi6n3TA7Fk3LwlEbUOJ5M6 dzABSo3y3scuUFtTu7sZ6GaXeGVyKocoaQc5LHa8U9E/K046q1PzOmlcZZD1VXuM oZQui0SSrQH5y7MoWFIYjAZ8v+yMj/8JBe2SCclWW+efhdXqgyEFRuVliyNeSk3I LwaYSMi7eJiC4X22KJ52zVyhWweueLaqxF1vpq5ayA/hRKLH2rwIqKD4xquVIRIV nhuHniouLSu1IMSY+DcQ2hbQrZn37gNSQ7bpcIbFBGrMo0JlxRK4SVe423wdYhgC H4tGxte9nHg7Sg+Y/OAKSoMbkKHFoiP9M+flzli6npXxtoZYHL8= -----END CERTIFICATE-----Generated at Wed Jul 2 15:09:49 2025 by rpki-client