$ rpki-client -vvf repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft File: 6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft (raw, json) Hash identifier: scNiIavzL1HMI4PEaIz5CEqqtoKwgYIl+gcDT3wwx7E= Subject key identifier: 34:1F:E0:A4:38:B0:A0:7A:E3:C5:30:07:02:1B:79:DD:CE:23:62:5A Authority key identifier: 6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19 Certificate issuer: /CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19 Certificate serial: 256800DBDF80DA54C2FB7669570EF9B8BE82984E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft Manifest number: 04E3 Signing time: Sun 29 Jun 2025 05:40:38 +0000 Manifest this update: Sun 29 Jun 2025 05:35:38 +0000 Manifest next update: Wed 02 Jul 2025 11:16:38 +0000 Files and hashes: 1: 3130332e3132372e3134342e302f32332d3233203d3e203633383732.roa (hash: ej36uL5q6V5lzJlk2/mVmLfbDb6eLchafID3r1d/Uc0=) 2: 3130332e35322e3137302e302f32332d3233203d3e203633383732.roa (hash: brSZ0m97l9z7YCV2zCWTUJDAsUOi5NNl8YP1n7Hn+04=) 3: 3130332e3132372e3134352e302f32342d3234203d3e203633383732.roa (hash: MXaL0QCe5+IS+MABtk7XIsAr+HW38yfYtKBH23S5G78=) 4: 3130332e35322e3137312e302f32342d3234203d3e203633383732.roa (hash: 8GeHpy3P984a7HFNxAJwy8wpU0ns8pabD1WKnP4tvuw=) 5: 323030313a6466333a6330303a3a2f34382d3438203d3e203633383732.roa (hash: DbPoZnzVJDn8t1MnQ7X+537hTvhkD/yKBSWUNPseJA0=) 6: 6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl (hash: KgSwmT6svuDk5/HcRLHcm3tdrmxIq1E03dpsoYBcleM=) 7: 3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa (hash: dT1Ez91RELEcb3/us3FXp8X3LrIGPlHAyCw3ou4h/Pw=) 8: 3130332e35322e3137302e302f32342d3234203d3e203633383732.roa (hash: Z+FoVz2t/bU9Oh29fvVmEj58qbcaPFxm8OsmszzE23M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:68:00:db:df:80:da:54:c2:fb:76:69:57:0e:f9:b8:be:82:98:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19 Validity Not Before: Jun 29 05:35:38 2025 GMT Not After : Jul 2 11:16:38 2025 GMT Subject: CN=341FE0A438B0A07AE3C53007021B79DDCE23625A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3d:58:53:cc:a0:62:e3:ff:14:f2:84:4f:c3: fe:77:e9:e0:49:9d:6d:a0:30:02:48:96:07:b7:7c: af:5b:b4:d9:6e:0a:5e:27:24:76:3b:b2:8d:f5:5f: 53:e0:2d:8a:f6:6c:21:ce:ea:41:0d:68:b8:6d:26: ac:a4:24:8b:43:e2:8e:42:87:36:fb:a1:a6:45:c4: 30:3c:13:7c:12:a3:41:de:ad:11:ed:5f:3f:c9:66: 78:fd:df:ae:30:43:f8:85:41:02:2d:12:52:f4:58: 2e:3b:e1:0f:88:b6:40:c3:56:8c:4b:f8:89:41:e1: f6:23:81:67:58:e1:e0:54:73:9b:29:6a:2f:41:f4: fe:ef:f6:12:ed:e1:f6:2c:8f:b7:ae:a4:83:71:a8: a3:e0:00:b7:59:7a:b4:fa:72:9d:00:a0:fd:fb:22: 35:9b:cf:f8:c1:db:ee:34:5f:3a:66:b0:7d:b2:3c: 08:e3:30:92:45:16:69:f5:5c:46:c6:58:5e:2d:e6: 2d:98:32:20:5f:2c:2c:db:1e:18:05:21:ed:62:30: 65:78:59:db:a8:dd:1c:a6:74:98:b4:f3:c1:b8:18: 28:20:2d:ad:23:c9:60:0e:7a:d2:2a:b8:b0:fd:cf: 90:38:c1:7e:b6:a0:84:35:0e:46:d4:96:6c:87:18: 36:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1F:E0:A4:38:B0:A0:7A:E3:C5:30:07:02:1B:79:DD:CE:23:62:5A X509v3 Authority Key Identifier: keyid:6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c6:d1:07:c1:8e:0d:57:ea:90:b9:10:3a:ef:dc:d2:9a:6a: 45:1b:58:09:74:71:03:e3:72:a6:e3:1a:88:73:4b:1f:9b:ca: 0a:e2:c7:e6:f4:c3:05:d7:1d:6d:cc:1c:c5:e5:da:82:70:3f: b0:25:38:e2:87:4a:8b:4b:f2:d8:b3:52:98:aa:dc:27:be:e1: fb:e3:ce:30:7a:8a:b8:f4:4e:74:50:be:63:9d:b3:7d:0e:ea: 18:9b:a0:7c:88:77:0b:bd:f1:07:ad:6d:da:a6:c6:91:3e:45: a8:1d:98:f6:78:b6:c7:a8:77:56:9e:7b:de:b2:41:17:21:b6: a0:89:be:48:69:cb:8e:de:b8:6f:f2:23:09:62:8c:78:4f:a9: 93:27:7c:5a:81:9a:a9:b2:86:1d:ae:e5:94:f4:21:11:f2:96: 9f:58:ec:ad:80:dd:d8:a4:4f:8f:ad:a0:71:53:68:22:a4:2d: ea:e7:2a:82:23:88:80:b0:75:7c:7c:e4:da:13:30:d7:f0:d4: 6e:ad:0f:40:ea:cf:e4:20:90:1d:b9:72:94:5d:29:8a:5d:f4: 6c:1d:5a:c5:74:a7:e5:95:3c:8b:26:40:b5:ee:54:6e:e3:00: e3:f8:c9:8c:ac:de:0e:89:d7:8c:1e:8c:fc:34:62:ab:73:4a: 20:ac:7b:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJWgA29+A2lTC+3ZpVw75uL6CmE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3MTYy N0JFN0IxOTAeFw0yNTA2MjkwNTM1MzhaFw0yNTA3MDIxMTE2MzhaMDMxMTAvBgNV BAMTKDM0MUZFMEE0MzhCMEEwN0FFM0M1MzAwNzAyMUI3OUREQ0UyMzYyNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgPVhTzKBi4/8U8oRPw/536eBJ nW2gMAJIlge3fK9btNluCl4nJHY7so31X1PgLYr2bCHO6kENaLhtJqykJItD4o5C hzb7oaZFxDA8E3wSo0HerRHtXz/JZnj9364wQ/iFQQItElL0WC474Q+ItkDDVoxL +IlB4fYjgWdY4eBUc5spai9B9P7v9hLt4fYsj7eupINxqKPgALdZerT6cp0AoP37 IjWbz/jB2+40XzpmsH2yPAjjMJJFFmn1XEbGWF4t5i2YMiBfLCzbHhgFIe1iMGV4 Wduo3RymdJi088G4GCggLa0jyWAOetIquLD9z5A4wX62oIQ1DkbUlmyHGDYRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNB/gpDiwoHrjxTAHAht53c4jYlowHwYDVR0j BBgwFoAUbWuu2/27qka/PaIYVXB3Fie+exkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NmJiMzMzYy05ODJiLTRmY2UtYWM4MS1iYzA2OTIyOWUyNDMvMC82RDZCQUVEQkZE QkJBQTQ2QkYzREEyMTg1NTcwNzcxNjI3QkU3QjE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3MTYyN0JF N0IxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTZiYjMzM2MtOTgyYi00ZmNlLWFj ODEtYmMwNjkyMjllMjQzLzAvNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3 MTYyN0JFN0IxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDG0QfBjg1X6pC5EDrv3NKaakUbWAl0cQPj cqbjGohzSx+bygrix+b0wwXXHW3MHMXl2oJwP7AlOOKHSotL8tizUpiq3Ce+4fvj zjB6irj0TnRQvmOds30O6hiboHyIdwu98QetbdqmxpE+RagdmPZ4tseod1aee96y QRchtqCJvkhpy47euG/yIwlijHhPqZMnfFqBmqmyhh2u5ZT0IRHylp9Y7K2A3dik T4+toHFTaCKkLernKoIjiICwdXx85NoTMNfw1G6tD0Dqz+QgkB25cpRdKYpd9Gwd WsV0p+WVPIsmQLXuVG7jAOP4yYys3g6J14wejPw0YqtzSiCseyA= -----END CERTIFICATE-----Generated at Sun Jun 29 22:08:55 2025 by rpki-client