$ rpki-client -vvf repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft File: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft (raw, json) Hash identifier: KyPkzkyUOgvqAom/ujeHjCcEZ4THYlEnRQPu6BeWF5o= Subject key identifier: 84:B9:49:E4:D3:A6:ED:1D:C8:96:2B:3C:C0:5D:A3:96:87:79:5D:EE Authority key identifier: 6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 Certificate issuer: /CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Certificate serial: 69CDC815742A3DAD7B70A1AFC0F91C69BCA2747B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft Manifest number: 01AE Signing time: Sun 29 Jun 2025 22:30:38 +0000 Manifest this update: Sun 29 Jun 2025 22:25:38 +0000 Manifest next update: Thu 03 Jul 2025 03:55:38 +0000 Files and hashes: 1: 3130332e3132362e3131372e302f32342d3234203d3e20313338313136.roa (hash: jIRxROaY+ZsyLOueu1pqPluvRpe9DT1746X5+JI8kKs=) 2: 3130332e3132362e3131362e302f32342d3234203d3e20313338313136.roa (hash: JQnrpdZbIEjOMrJ0gY+bWa1ZiQUgvaTVgcxr/pouQFw=) 3: 3130332e3132362e3131392e302f32342d3234203d3e20313339393732.roa (hash: nPlUaL9yF2n402rwq54ga4y4IA8tmh1JYztdhgr/yzQ=) 4: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl (hash: 7J3a2VYwQyxhaMQL1kf7qDDc5vwKmnDdCF7y4WXGhIM=) 5: 3130332e3132362e3131382e302f32342d3234203d3e20313338313136.roa (hash: IZ8KmdFwK5i2F35Ti/yV73rwyTaK/R/VAzY82jFEZs8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:cd:c8:15:74:2a:3d:ad:7b:70:a1:af:c0:f9:1c:69:bc:a2:74:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Validity Not Before: Jun 29 22:25:38 2025 GMT Not After : Jul 3 03:55:38 2025 GMT Subject: CN=84B949E4D3A6ED1DC8962B3CC05DA39687795DEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d2:2e:6f:41:4a:73:18:5c:9e:37:c6:29:77: ef:26:50:90:83:46:0e:ef:f7:93:bf:f5:43:b4:31: 49:6d:67:57:57:bb:df:cf:0c:fb:be:42:6a:07:7e: c0:3c:aa:3b:83:9f:60:c7:2f:5a:60:d3:0f:00:7c: 5e:bb:de:68:b6:df:f8:b6:89:3c:d4:8c:91:5c:17: 20:d1:b9:41:aa:85:65:fd:73:da:2c:5e:cf:d3:7c: 1a:a2:30:a1:bb:a3:40:12:fa:5b:95:b7:5e:88:c3: 8c:f0:16:00:10:fd:be:ae:74:50:c6:4f:f6:d8:b2: 3b:59:42:c8:c0:81:22:50:03:20:7a:0e:6f:23:64: 71:58:91:c4:d2:85:d2:5b:d7:08:e4:8b:74:c8:5d: ab:91:31:3c:31:c1:dd:54:8c:23:8f:b5:17:c7:8d: 00:af:08:1f:f6:3b:bb:1c:74:8e:ea:f9:10:b8:74: 22:90:d5:40:6c:71:57:66:84:fe:e1:88:38:75:16: 13:b4:51:cc:31:d5:c8:90:4c:2f:2a:38:cf:5e:76: 3e:b2:50:db:cd:e0:93:80:f3:2f:77:4d:7c:bc:5f: 13:24:47:6e:7e:c3:17:14:25:5a:ae:bc:12:e7:58: ac:06:6f:ec:3e:f4:b5:c3:7d:99:8d:ac:e7:79:fb: 15:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B9:49:E4:D3:A6:ED:1D:C8:96:2B:3C:C0:5D:A3:96:87:79:5D:EE X509v3 Authority Key Identifier: keyid:6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:74:e0:48:5a:e9:f7:00:2d:7e:74:3c:3e:2b:79:2c:88:af: 4f:68:c2:24:b9:19:da:88:dd:1a:16:58:09:8a:86:c0:4d:5d: 5f:92:88:5d:44:68:d4:6d:40:55:76:21:06:52:ee:3f:b1:fe: f6:b9:77:b2:85:62:76:a7:56:a9:01:98:aa:b6:55:87:47:de: 33:41:9a:b4:62:aa:a2:9c:9a:33:5d:f9:e5:55:7e:4c:1a:00: e7:18:8d:f4:96:9d:90:fc:4e:9a:82:e4:03:cf:3e:9d:91:d1: e4:44:1a:56:b8:05:ab:b2:51:27:49:59:b2:82:97:b6:4a:57: dd:40:a1:d1:2c:9e:cc:19:fd:40:57:7e:e3:e7:7b:78:53:08: 7a:45:cb:41:44:74:df:84:bd:02:0c:79:91:2a:84:c8:b0:85: 2b:0a:7e:87:09:6d:e5:c3:47:32:57:63:83:b8:88:07:be:ac: 6e:84:57:fc:12:6a:11:59:36:2a:84:1a:68:2d:11:39:8a:0b: 8b:b2:1c:f3:72:35:1c:96:fc:ef:dc:1c:cf:ab:85:0c:45:7b: 11:23:66:6a:7a:26:48:ce:ff:87:48:3e:46:d3:00:de:34:db: d0:ba:5b:de:0d:78:0d:22:6e:7d:5f:c0:1c:b9:83:b3:fb:2f: b5:d0:e9:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUac3IFXQqPa17cKGvwPkcabyidHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdE MDJGNDdFODAeFw0yNTA2MjkyMjI1MzhaFw0yNTA3MDMwMzU1MzhaMDMxMTAvBgNV BAMTKDg0Qjk0OUU0RDNBNkVEMURDODk2MkIzQ0MwNURBMzk2ODc3OTVERUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD0i5vQUpzGFyeN8Ypd+8mUJCD Rg7v95O/9UO0MUltZ1dXu9/PDPu+QmoHfsA8qjuDn2DHL1pg0w8AfF673mi23/i2 iTzUjJFcFyDRuUGqhWX9c9osXs/TfBqiMKG7o0AS+luVt16Iw4zwFgAQ/b6udFDG T/bYsjtZQsjAgSJQAyB6Dm8jZHFYkcTShdJb1wjki3TIXauRMTwxwd1UjCOPtRfH jQCvCB/2O7scdI7q+RC4dCKQ1UBscVdmhP7hiDh1FhO0Ucwx1ciQTC8qOM9edj6y UNvN4JOA8y93TXy8XxMkR25+wxcUJVquvBLnWKwGb+w+9LXDfZmNrOd5+xW1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhLlJ5NOm7R3Ilis8wF2jlod5Xe4wHwYDVR0j BBgwFoAUbfioc7cLqMytoxqt2CFf99AvR+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 N2QyNmRlMC02OGNmLTQyOWMtOGIwZS04ZDY0Yjc2MmY4MjQvMC82REY4QTg3M0I3 MEJBOENDQURBMzFBQUREODIxNUZGN0QwMkY0N0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdEMDJG NDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTdkMjZkZTAtNjhjZi00MjljLThi MGUtOGQ2NGI3NjJmODI0LzAvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVG RjdEMDJGNDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALt04Eha6fcALX50PD4reSyIr09owiS5GdqI 3RoWWAmKhsBNXV+SiF1EaNRtQFV2IQZS7j+x/va5d7KFYnanVqkBmKq2VYdH3jNB mrRiqqKcmjNd+eVVfkwaAOcYjfSWnZD8TpqC5APPPp2R0eREGla4BauyUSdJWbKC l7ZKV91AodEsnswZ/UBXfuPne3hTCHpFy0FEdN+EvQIMeZEqhMiwhSsKfocJbeXD RzJXY4O4iAe+rG6EV/wSahFZNiqEGmgtETmKC4uyHPNyNRyW/O/cHM+rhQxFexEj Zmp6JkjO/4dIPkbTAN4029C6W94NeA0ibn1fwBy5g7P7L7XQ6Yc= -----END CERTIFICATE-----Generated at Mon Jun 30 00:40:49 2025 by rpki-client