$ rpki-client -vvf repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft File: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft (raw, json) Hash identifier: BKDrC/54MCVVt4Rby7iJRL9X2T2cxR7r6jyzm/7p9nA= Subject key identifier: C1:27:5D:23:A0:A2:AC:43:BE:2E:1E:55:FF:77:F7:0F:CD:F2:EC:F3 Authority key identifier: 62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 Certificate issuer: /CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Certificate serial: 13B635D8506090A691139849165D1FD0C6F09224 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft Manifest number: 64 Signing time: Mon 30 Jun 2025 19:01:27 +0000 Manifest this update: Mon 30 Jun 2025 18:56:27 +0000 Manifest next update: Thu 03 Jul 2025 22:32:27 +0000 Files and hashes: 1: 3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa (hash: lqWm7H1VLaNogQYDvPWFxyEVAtvNrhxj3L3hhsj87j0=) 2: 3136302e3139312e3138312e302f32342d3234203d3e20313533313530.roa (hash: R1Eo64irF2fqBU24QMOkIR4K/Db3F6prGasQKdzareI=) 3: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl (hash: EJV9481aGTTpUaqsBynFGU5mJfKNQQxkJhsIBI2WW6o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 22:32:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b6:35:d8:50:60:90:a6:91:13:98:49:16:5d:1f:d0:c6:f0:92:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Validity Not Before: Jun 30 18:56:27 2025 GMT Not After : Jul 3 22:32:27 2025 GMT Subject: CN=C1275D23A0A2AC43BE2E1E55FF77F70FCDF2ECF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:48:9f:a0:d0:44:8f:3c:8a:7d:90:a7:15:05: c4:1f:34:41:76:82:fb:42:f0:39:6d:ea:41:42:d8: a7:3a:55:1b:4b:0f:66:74:ee:80:a4:2d:bd:01:59: 2d:94:88:ac:46:71:11:ab:22:64:c3:76:d9:dc:fe: be:04:26:2d:1e:51:33:29:59:c1:29:a1:bf:dd:21: 0f:3f:c4:8c:d8:aa:9f:ea:2e:9d:b3:d6:af:60:1e: 9b:b5:ca:62:eb:3e:10:cf:7f:56:71:4b:77:09:c9: b6:81:10:ec:bd:47:93:bd:2c:ed:c2:31:9a:6e:27: 28:1f:1d:1d:50:28:dd:08:f6:18:2c:03:4d:01:4e: 39:fb:43:bd:e4:44:ff:c2:74:c4:65:b5:ee:f8:ca: aa:58:1e:55:55:5c:c3:88:4b:cf:aa:26:49:77:18: a4:11:8a:0b:6d:95:b9:56:7d:5a:fd:10:6c:1c:36: 8c:5b:dc:9b:69:0b:c5:18:41:6c:4c:5d:bd:01:d6: b3:a0:0c:37:e2:22:da:6a:97:e0:19:7b:ac:e7:72: b2:c2:c4:4b:d1:41:55:d4:e5:f2:2f:b5:65:55:be: 2c:a3:65:b1:a5:9e:29:28:f5:3a:89:2e:eb:a6:22: 82:fe:ee:c3:3a:46:0b:c8:8a:66:6e:3c:6f:a3:44: f0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:27:5D:23:A0:A2:AC:43:BE:2E:1E:55:FF:77:F7:0F:CD:F2:EC:F3 X509v3 Authority Key Identifier: keyid:62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:86:cd:7b:35:42:0a:92:3a:b4:a7:8e:9a:73:b3:33:63:1f: 97:68:0b:ab:6b:04:e2:98:4e:dd:eb:19:80:7e:d2:fb:65:13: f1:cc:9a:99:7c:0a:0f:da:8d:96:c7:de:ed:32:03:24:b3:70: 1c:87:75:ea:65:81:19:fd:be:f3:c7:46:d6:a9:ee:bc:3d:36: 1f:7a:3e:56:2d:3d:bb:c9:68:0c:c5:42:d3:0b:96:f0:89:c4: 2d:f0:d4:98:ae:78:7d:d4:36:8e:26:e8:d9:97:92:a1:f0:0c: e4:5e:16:df:15:96:d3:31:2a:79:19:69:22:9f:30:67:3c:a0: b0:9e:a4:b9:3d:7d:26:7c:d5:42:cb:e5:32:2b:96:2a:30:ea: ed:65:5e:b7:1d:73:24:ef:27:9e:8d:d5:3e:bd:2e:77:41:0f: be:97:fa:28:de:d9:71:85:84:92:8d:e0:37:5e:f2:bd:cf:94: 50:a7:0c:ec:7d:5c:76:d8:68:fe:0e:8f:00:1b:1d:77:ca:b8: 73:35:35:ac:04:0f:4c:07:f8:56:6a:04:16:e7:27:2b:c7:db: 79:d3:85:e4:5a:9f:9d:f0:6c:6b:e4:8a:0c:27:6c:2d:53:8e: 15:b9:fb:f4:22:6a:ed:c8:ab:f3:c9:69:35:0f:1d:79:a7:f8: 35:80:2b:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE7Y12FBgkKaRE5hJFl0f0MbwkiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAw Qjk0RjhBNDAeFw0yNTA2MzAxODU2MjdaFw0yNTA3MDMyMjMyMjdaMDMxMTAvBgNV BAMTKEMxMjc1RDIzQTBBMkFDNDNCRTJFMUU1NUZGNzdGNzBGQ0RGMkVDRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBSJ+g0ESPPIp9kKcVBcQfNEF2 gvtC8Dlt6kFC2Kc6VRtLD2Z07oCkLb0BWS2UiKxGcRGrImTDdtnc/r4EJi0eUTMp WcEpob/dIQ8/xIzYqp/qLp2z1q9gHpu1ymLrPhDPf1ZxS3cJybaBEOy9R5O9LO3C MZpuJygfHR1QKN0I9hgsA00BTjn7Q73kRP/CdMRlte74yqpYHlVVXMOIS8+qJkl3 GKQRigttlblWfVr9EGwcNoxb3JtpC8UYQWxMXb0B1rOgDDfiItpql+AZe6zncrLC xEvRQVXU5fIvtWVVviyjZbGlniko9TqJLuumIoL+7sM6RgvIimZuPG+jRPBZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwSddI6CirEO+Lh5V/3f3D83y7PMwHwYDVR0j BBgwFoAUYkfRqvOxW1DTpz5E5Z4sAAuU+KQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTk2MTJhMi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMC82MjQ3RDFBQUYz QjE1QjUwRDNBNzNFNDRFNTlFMkMwMDBCOTRGOEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAwQjk0 RjhBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzAvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJD MDAwQjk0RjhBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIuGzXs1QgqSOrSnjppzszNjH5doC6trBOKY Tt3rGYB+0vtlE/HMmpl8Cg/ajZbH3u0yAySzcByHdeplgRn9vvPHRtap7rw9Nh96 PlYtPbvJaAzFQtMLlvCJxC3w1JiueH3UNo4m6NmXkqHwDOReFt8VltMxKnkZaSKf MGc8oLCepLk9fSZ81ULL5TIrliow6u1lXrcdcyTvJ56N1T69LndBD76X+ije2XGF hJKN4Dde8r3PlFCnDOx9XHbYaP4OjwAbHXfKuHM1NawED0wH+FZqBBbnJyvH23nT heRan53wbGvkigwnbC1TjhW5+/Qiau3Iq/PJaTUPHXmn+DWAKxk= -----END CERTIFICATE-----Generated at Wed Jul 2 20:50:04 2025 by rpki-client