$ rpki-client -vvf repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft File: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft (raw, json) Hash identifier: iEZQ8yq6oTcHoR1Ooe4vGcQypdcif/QFw+vSJh7o6mM= Subject key identifier: BF:6A:43:F2:E7:59:85:4F:48:9E:CE:4D:CD:58:5F:38:30:89:E8:CF Authority key identifier: 6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E Certificate issuer: /CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Certificate serial: 0D8D40C6D13D12A85B55DFD4F6DB13242A5B5B8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft Manifest number: BB Signing time: Sun 29 Jun 2025 06:02:07 +0000 Manifest this update: Sun 29 Jun 2025 05:57:07 +0000 Manifest next update: Wed 02 Jul 2025 11:42:07 +0000 Files and hashes: 1: 33362e35302e3231372e302f32342d3234203d3e20313437313238.roa (hash: suvA+Wk962jHlhC9+yItBsXmZi+V1BXvTufHDqbDzJE=) 2: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl (hash: hDfkPbOtNKYP5H4SGBEC2brgNXV7cFs1CV7SISGAhjk=) 3: 33362e35302e3231362e302f32342d3234203d3e20313437313238.roa (hash: knY/ggPl78wk2nvRxnL0Ik6PzIK0DYSQq15iPy2gM40=) 4: 33362e35302e3231362e302f32332d3233203d3e20313437313238.roa (hash: TzFqnwzzY9xia0s3waMLkiGG8A7BVi2jn0Tebn9ZTXg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 11:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:8d:40:c6:d1:3d:12:a8:5b:55:df:d4:f6:db:13:24:2a:5b:5b:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Validity Not Before: Jun 29 05:57:07 2025 GMT Not After : Jul 2 11:42:07 2025 GMT Subject: CN=BF6A43F2E759854F489ECE4DCD585F383089E8CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:12:42:5d:d0:9c:b0:69:3f:ea:3e:3a:a7:1a: 9a:9f:9c:36:cd:f8:10:0a:99:0b:88:a4:a6:db:80: e5:d0:c4:10:9c:1f:b9:50:b9:71:e7:65:4d:dd:b3: 61:dc:6d:0d:ea:04:0c:5a:0d:6f:37:8c:64:7d:57: 7a:7e:54:60:2c:4d:7c:2e:c4:f3:af:e6:49:a0:8b: 38:76:a5:2e:37:74:37:0d:5a:a2:43:8a:06:0f:a3: 35:04:a0:2b:79:68:ea:9c:cc:a8:37:e2:5e:89:3a: 33:c6:1f:84:67:75:bd:de:78:4f:9f:26:fd:e9:18: ed:ac:f9:f3:78:15:cb:cd:63:51:f3:c9:15:c6:e3: 5a:3e:7f:7a:a0:5f:7f:76:6a:31:40:b6:e2:28:46: bb:4b:6f:30:8d:18:fe:bc:b1:9a:7a:b2:1f:60:87: 94:25:70:97:ed:70:fa:70:4c:a6:6e:95:c0:7f:8c: ec:a6:23:af:d1:f7:01:3f:18:13:64:d9:f8:1f:71: 81:63:41:be:9d:cd:b9:8c:0f:3f:08:c3:7a:28:f6: db:1d:d4:38:c9:6a:f9:f3:63:ad:52:5d:c5:d5:a7: 8c:94:65:70:e0:fc:ce:f2:0c:43:5b:ce:7b:92:9a: a8:20:d3:cd:ce:51:98:01:71:9e:4d:5b:32:d0:62: 74:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:6A:43:F2:E7:59:85:4F:48:9E:CE:4D:CD:58:5F:38:30:89:E8:CF X509v3 Authority Key Identifier: keyid:6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:57:1a:d8:bd:dd:01:4d:1b:9b:43:c1:4a:9d:74:62:96:18: 41:1c:97:94:4e:b8:07:71:58:95:73:8e:81:14:06:3e:a5:f4: 1a:61:41:51:60:e6:bc:e7:56:06:8e:f9:0e:39:2d:45:f7:ad: b9:6d:9b:43:e8:56:97:33:62:49:60:d5:c4:5b:01:48:57:b4: 6f:47:7c:c9:09:5c:37:26:20:8e:64:7c:df:cf:cc:05:ac:1a: 56:a1:cd:49:d4:65:7f:8d:5d:82:72:d1:79:4e:3a:e1:59:ba: f5:46:b6:d6:56:6c:f9:ac:e7:0d:f4:e4:2c:61:81:5e:5f:7b: be:77:9d:8a:b2:5f:bb:61:41:2a:c7:34:b7:fc:2b:a9:62:87: ee:6f:e6:b3:57:89:43:7e:39:a2:d7:93:22:27:98:e8:6b:a2: 56:d1:f6:58:89:70:bd:89:d6:79:57:a4:e8:9f:cc:53:6b:13: 60:0c:41:89:77:77:10:d5:a3:1d:f8:14:71:27:3e:57:61:2e: ea:6b:d3:c1:f5:6d:61:3e:b4:69:bb:51:1e:8c:df:48:2f:7e: c3:48:57:7b:fa:f6:10:a0:74:68:96:9c:d6:0b:0e:d9:45:8c: 00:13:98:f7:09:77:47:68:d0:c1:d6:7d:88:4b:7e:da:3f:ad: 09:5c:ef:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDY1AxtE9EqhbVd/U9tsTJCpbW40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3 QTk4MDk5RTAeFw0yNTA2MjkwNTU3MDdaFw0yNTA3MDIxMTQyMDdaMDMxMTAvBgNV BAMTKEJGNkE0M0YyRTc1OTg1NEY0ODlFQ0U0RENENTg1RjM4MzA4OUU4Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbEkJd0JywaT/qPjqnGpqfnDbN +BAKmQuIpKbbgOXQxBCcH7lQuXHnZU3ds2HcbQ3qBAxaDW83jGR9V3p+VGAsTXwu xPOv5kmgizh2pS43dDcNWqJDigYPozUEoCt5aOqczKg34l6JOjPGH4Rndb3eeE+f Jv3pGO2s+fN4FcvNY1HzyRXG41o+f3qgX392ajFAtuIoRrtLbzCNGP68sZp6sh9g h5QlcJftcPpwTKZulcB/jOymI6/R9wE/GBNk2fgfcYFjQb6dzbmMDz8Iw3oo9tsd 1DjJavnzY61SXcXVp4yUZXDg/M7yDENbznuSmqgg083OUZgBcZ5NWzLQYnSXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv2pD8udZhU9Ins5NzVhfODCJ6M8wHwYDVR0j BBgwFoAUbbsQDY1GaauKXH7gVyKO1nqYCZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTk4OWZhZi00OGZiLTRmNDAtOWU3Ny0yNDNkNzhhNWI1YzQvMC82REJCMTAwRDhE NDY2OUFCOEE1QzdFRTA1NzIyOEVENjdBOTgwOTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3QTk4 MDk5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU5ODlmYWYtNDhmYi00ZjQwLTll NzctMjQzZDc4YTViNWM0LzAvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhF RDY3QTk4MDk5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhXGti93QFNG5tDwUqddGKWGEEcl5ROuAdx WJVzjoEUBj6l9BphQVFg5rznVgaO+Q45LUX3rbltm0PoVpczYklg1cRbAUhXtG9H fMkJXDcmII5kfN/PzAWsGlahzUnUZX+NXYJy0XlOOuFZuvVGttZWbPms5w305Cxh gV5fe753nYqyX7thQSrHNLf8K6lih+5v5rNXiUN+OaLXkyInmOhrolbR9liJcL2J 1nlXpOifzFNrE2AMQYl3dxDVox34FHEnPldhLupr08H1bWE+tGm7UR6M30gvfsNI V3v69hCgdGiWnNYLDtlFjAATmPcJd0do0MHWfYhLfto/rQlc7yM= -----END CERTIFICATE-----Generated at Mon Jun 30 10:33:59 2025 by rpki-client