$ rpki-client -vvf repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft File: 6DA2B28F4391C01434B7229FD4D68E661BF13061.mft (raw, json) Hash identifier: zVhZN1e/fFikrjupBpVrRtpan4ysSwMBx/fXmxCdM5k= Subject key identifier: 4D:3F:28:1F:71:71:94:8B:2E:CB:49:1C:69:ED:34:76:4B:03:87:A3 Authority key identifier: 6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61 Certificate issuer: /CN=6DA2B28F4391C01434B7229FD4D68E661BF13061 Certificate serial: 66D6AE077914D990B071A8F52E2C173AD5506F28 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft Manifest number: 0255 Signing time: Sat 28 Jun 2025 10:31:24 +0000 Manifest this update: Sat 28 Jun 2025 10:26:24 +0000 Manifest next update: Tue 01 Jul 2025 11:22:24 +0000 Files and hashes: 1: 34392e3233362e3232302e302f32342d3234203d3e203535363638.roa (hash: KZESdVYPyK5UDmppEqYu4UgDw6S2JiyC9Aylq3V7KK8=) 2: 34392e3233362e3231362e302f32342d3234203d3e203535363638.roa (hash: C1ful6krFD/D/NQklV2H82Wf+t1lC80LwN0uOUSrxSc=) 3: 34392e3233362e3231372e302f32342d3234203d3e203535363638.roa (hash: SptXDMlN81cXVQItr4QSDBANvjvdA+fjiFu71V/b7e4=) 4: 6DA2B28F4391C01434B7229FD4D68E661BF13061.crl (hash: ojx32mgYEPvM+VgzvbNrjC+VTwJ6txpkODhIYrQCAA0=) 5: 34392e3233362e3232312e302f32342d3234203d3e203535363638.roa (hash: P3qaAQS+9Hmz4InOLYsrCr6O0nuBDwpieqmijzpxLgQ=) 6: 34392e3233362e3232332e302f32342d3234203d3e203535363638.roa (hash: 6Ss/J4jbsHWttbGBWZAXrFLeP7zMzLu10fV9oC9kRxs=) 7: 34392e3233362e3231392e302f32342d3234203d3e203535363638.roa (hash: 3dUHFOcTvL6SRCYfkh3xOumINLAjfoUSiaeyY80AmMU=) 8: 34392e3233362e3231382e302f32342d3234203d3e203535363638.roa (hash: cndHnN7Y2CkZsc1bcXRUS17ntMjtPGamuBmM/0sBScA=) 9: 34392e3233362e3232322e302f32342d3234203d3e203535363638.roa (hash: 7nW2fdNzQ/pw6iueKs/nit/sd4D7nCLJjKMOnmFO3+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 11:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d6:ae:07:79:14:d9:90:b0:71:a8:f5:2e:2c:17:3a:d5:50:6f:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DA2B28F4391C01434B7229FD4D68E661BF13061 Validity Not Before: Jun 28 10:26:24 2025 GMT Not After : Jul 1 11:22:24 2025 GMT Subject: CN=4D3F281F7171948B2ECB491C69ED34764B0387A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ef:4d:5c:94:38:d5:72:f7:d5:b8:7d:99:54: fc:8d:12:66:79:c2:ed:7a:92:38:6a:58:88:d5:c1: 66:fb:cd:e9:e0:1a:9d:56:52:14:b0:b9:0a:c2:f4: 8e:72:05:d6:e4:c7:c0:ec:0f:c4:01:e6:f6:f4:cf: 5a:19:03:25:4d:cd:16:76:fa:88:60:ad:bc:c7:0b: 2e:35:f5:17:51:64:58:15:3b:4a:d6:cd:8e:8f:1b: 20:b2:93:b0:ec:bb:7a:82:c1:74:4b:1b:6b:41:79: 9b:c1:70:5c:42:37:86:00:08:56:ed:a9:d4:d8:6c: 9c:0b:0b:07:22:15:fe:ae:6e:69:6f:60:f7:a8:b9: 8e:07:d6:58:f4:6d:ce:4a:83:48:14:77:d0:ca:aa: 0e:61:00:0e:dd:7f:f2:82:de:a5:75:7f:54:80:40: 1c:7d:cc:7e:0b:d9:0e:6d:38:27:7b:a3:0d:65:74: 8b:fd:3c:43:15:f5:8a:7b:6c:20:10:53:4f:cf:df: bf:eb:da:8c:5d:55:0c:df:94:36:db:d2:2b:4a:9e: a6:68:ac:71:d3:45:48:9a:ff:22:13:e9:59:5d:29: 20:01:0a:70:c5:90:c7:1d:f1:43:c6:e4:c8:6d:fb: d1:ab:f3:50:5e:80:f3:46:93:8e:a5:64:fa:67:c1: 30:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3F:28:1F:71:71:94:8B:2E:CB:49:1C:69:ED:34:76:4B:03:87:A3 X509v3 Authority Key Identifier: keyid:6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:54:31:5e:33:1d:d6:77:d8:b8:e6:cf:82:4e:80:cf:0f:c9: 0e:8c:13:ae:e9:59:a4:1d:a7:d8:11:0b:02:b5:5f:84:ed:9a: 94:33:26:30:98:8e:82:d5:11:24:03:e2:f7:84:ce:46:1d:ae: fc:00:f8:21:8f:17:46:48:ce:f3:9f:e6:82:89:cf:a4:78:9d: d3:94:71:21:20:b4:07:b5:66:a6:ae:24:65:17:57:f5:d0:51: be:7d:63:e2:a2:e6:0d:d1:18:ec:ff:54:2f:97:db:3e:e3:4e: 2f:a7:57:92:f2:b0:f3:df:d9:a8:55:da:d5:30:63:4a:4b:10: 15:40:1b:23:31:cf:4e:04:dd:8d:40:e2:9f:37:1d:b6:0a:21: 02:0f:8d:a8:2a:a1:b1:e9:2a:c0:9a:9b:3e:f7:0d:3a:08:e3: 33:3f:5b:68:52:eb:f3:32:98:95:7e:4f:27:de:c3:4d:f8:a6: 3d:60:46:78:a7:4d:b7:8c:f5:2b:c5:84:90:6e:00:60:dc:00: 94:41:4b:8e:d0:86:60:33:58:b5:c2:09:6a:7f:f7:08:12:9f: af:d7:b3:18:93:59:a4:01:69:ef:1b:8e:75:02:d4:a7:ca:59: ed:35:44:7c:9e:27:ea:52:0c:81:87:0e:b0:a5:02:ac:f3:ca: a0:9c:3c:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZtauB3kU2ZCwcaj1LiwXOtVQbygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhFNjYx QkYxMzA2MTAeFw0yNTA2MjgxMDI2MjRaFw0yNTA3MDExMTIyMjRaMDMxMTAvBgNV BAMTKDREM0YyODFGNzE3MTk0OEIyRUNCNDkxQzY5RUQzNDc2NEIwMzg3QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI701clDjVcvfVuH2ZVPyNEmZ5 wu16kjhqWIjVwWb7zengGp1WUhSwuQrC9I5yBdbkx8DsD8QB5vb0z1oZAyVNzRZ2 +ohgrbzHCy419RdRZFgVO0rWzY6PGyCyk7Dsu3qCwXRLG2tBeZvBcFxCN4YACFbt qdTYbJwLCwciFf6ubmlvYPeouY4H1lj0bc5Kg0gUd9DKqg5hAA7df/KC3qV1f1SA QBx9zH4L2Q5tOCd7ow1ldIv9PEMV9Yp7bCAQU0/P37/r2oxdVQzflDbb0itKnqZo rHHTRUia/yIT6VldKSABCnDFkMcd8UPG5Mht+9Gr81BegPNGk46lZPpnwTAHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTT8oH3FxlIsuy0kcae00dksDh6MwHwYDVR0j BBgwFoAUbaKyj0ORwBQ0tyKf1NaOZhvxMGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDBmOTljMy1lNTY3LTQxYWUtYWEwMC0yNmNiOTc4MWZiZTkvMC82REEyQjI4RjQz OTFDMDE0MzRCNzIyOUZENEQ2OEU2NjFCRjEzMDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhFNjYxQkYx MzA2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwZjk5YzMtZTU2Ny00MWFlLWFh MDAtMjZjYjk3ODFmYmU5LzAvNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhF NjYxQkYxMzA2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBUMV4zHdZ32Ljmz4JOgM8PyQ6ME67pWaQd p9gRCwK1X4TtmpQzJjCYjoLVESQD4veEzkYdrvwA+CGPF0ZIzvOf5oKJz6R4ndOU cSEgtAe1ZqauJGUXV/XQUb59Y+Ki5g3RGOz/VC+X2z7jTi+nV5LysPPf2ahV2tUw Y0pLEBVAGyMxz04E3Y1A4p83HbYKIQIPjagqobHpKsCamz73DToI4zM/W2hS6/My mJV+Tyfew034pj1gRninTbeM9SvFhJBuAGDcAJRBS47QhmAzWLXCCWp/9wgSn6/X sxiTWaQBae8bjnUC1KfKWe01RHyeJ+pSDIGHDrClAqzzyqCcPAE= -----END CERTIFICATE-----Generated at Sun Jun 29 22:06:41 2025 by rpki-client