$ rpki-client -vvf repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft File: 6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft (raw, json) Hash identifier: /a+ri9ABFm9dGSXCtt1ySJWf0A/o7MFpMzF4iBomAko= Subject key identifier: 49:77:C9:9D:75:B3:39:8A:81:F8:52:E4:E9:7E:D0:DA:0E:EE:95:A5 Authority key identifier: 6A:6C:81:36:54:E0:C2:93:39:E6:CA:F5:22:20:1F:8E:70:2F:EA:D3 Certificate issuer: /CN=6A6C813654E0C29339E6CAF522201F8E702FEAD3 Certificate serial: 79297053B35A09F909A9E89F595224284C65723A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft Manifest number: 044B Signing time: Sun 29 Jun 2025 11:52:11 +0000 Manifest this update: Sun 29 Jun 2025 11:47:11 +0000 Manifest next update: Wed 02 Jul 2025 19:51:11 +0000 Files and hashes: 1: 6A6C813654E0C29339E6CAF522201F8E702FEAD3.crl (hash: JG7iIkAFTTEs+g8/HWe2lHSndjpIC9Lqhgbf1NcS9xQ=) 2: 3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa (hash: 8AmYK5KC8hldB1muUmxdPCs0q6CgoH4COunOQq9ZmmY=) 3: 3130332e3136302e3138352e302f32342d3234203d3e20313339393532.roa (hash: 4Nq+JxUfKWjr1BESTy40anbaM3Xf+v+a27YAvrUMBQ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.crl rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 19:51:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:29:70:53:b3:5a:09:f9:09:a9:e8:9f:59:52:24:28:4c:65:72:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A6C813654E0C29339E6CAF522201F8E702FEAD3 Validity Not Before: Jun 29 11:47:11 2025 GMT Not After : Jul 2 19:51:11 2025 GMT Subject: CN=4977C99D75B3398A81F852E4E97ED0DA0EEE95A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:70:4f:11:e2:0b:cc:cf:64:f4:6c:84:9f:34: db:89:27:6f:f4:b0:78:dd:4d:39:98:bc:18:a5:69: e1:84:89:50:4f:1e:fe:f5:ab:b9:ec:1e:61:45:9b: 0a:33:d2:10:54:c0:f6:7c:ab:4c:f7:6a:93:fb:2d: 8a:6f:a3:85:f3:e3:8a:10:c6:76:b4:ca:81:c5:1d: ee:8c:6f:c0:23:e2:06:b5:28:ed:10:87:ab:14:cb: 22:03:2a:9b:5f:58:64:bb:38:bc:66:e8:10:7e:f7: a9:bd:bb:62:9a:e5:6f:1d:bb:27:c8:e8:84:01:c8: 97:81:2c:2d:0f:70:a0:a1:05:25:a5:40:19:79:c1: e5:c2:87:45:95:30:b8:d9:ec:63:e1:09:a7:be:e1: 41:5a:fa:82:be:3f:a8:2d:1e:42:6d:42:8b:a5:95: 77:46:6e:9a:31:e5:13:58:0a:39:b2:28:0f:d7:a6: 72:38:1f:fc:0f:3b:40:7d:af:f8:68:10:8e:95:e4: a7:73:96:43:37:65:1d:54:3d:ec:80:c5:11:e6:a3: 91:47:45:75:61:4c:9d:5c:8b:8b:97:ae:7c:e9:06: 9e:dc:95:29:97:35:b5:36:df:cf:12:e3:2f:94:69: ac:d5:20:de:4f:31:c6:c9:e8:f4:a2:ad:2a:14:d3: 1f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:77:C9:9D:75:B3:39:8A:81:F8:52:E4:E9:7E:D0:DA:0E:EE:95:A5 X509v3 Authority Key Identifier: keyid:6A:6C:81:36:54:E0:C2:93:39:E6:CA:F5:22:20:1F:8E:70:2F:EA:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:98:cc:d6:e4:fd:42:e2:6e:70:ce:ac:29:a2:7c:81:d4:f8: aa:9c:1f:c9:1a:ab:6c:aa:3b:d4:66:1d:fd:b3:3b:e8:11:4b: e4:f6:cd:3a:aa:5e:99:c5:d1:6b:d4:b5:7c:8c:a7:76:a2:76: be:80:e6:6f:aa:db:27:6c:08:b4:cb:01:32:d0:99:ed:a7:83: 04:91:a9:c1:e6:06:b4:dc:3e:1e:19:61:4a:00:9b:4c:3c:25: c8:39:03:03:29:58:0a:53:5b:68:25:f9:71:2f:d6:30:45:a1: cc:77:5e:ae:10:e3:13:0d:63:e6:50:ca:88:bf:c8:44:a2:17: 04:08:14:c9:31:de:cf:2f:b8:95:f4:ff:b2:6d:10:16:02:c8: 6d:7e:fb:df:b0:99:ce:23:a9:cd:8d:1f:42:dc:54:8b:58:bc: e9:3f:fe:8c:cc:63:01:b5:9b:9c:9d:45:40:35:fe:30:ef:4c: 76:32:ff:2d:65:fe:5b:2c:01:00:e8:d3:b5:4b:9f:c7:86:20: 14:9f:dc:47:4c:50:f8:b3:ae:61:31:9d:64:38:75:75:0d:20: 37:e6:cf:ef:e2:8d:6a:90:ff:b5:60:90:ac:3c:99:76:39:cb: a0:e1:1c:0c:70:88:7d:b7:47:43:8f:2e:0d:0e:f6:12:55:35: c2:03:d9:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeSlwU7NaCfkJqeifWVIkKExlcjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE2QzgxMzY1NEUwQzI5MzM5RTZDQUY1MjIyMDFGOEU3 MDJGRUFEMzAeFw0yNTA2MjkxMTQ3MTFaFw0yNTA3MDIxOTUxMTFaMDMxMTAvBgNV BAMTKDQ5NzdDOTlENzVCMzM5OEE4MUY4NTJFNEU5N0VEMERBMEVFRTk1QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGcE8R4gvMz2T0bISfNNuJJ2/0 sHjdTTmYvBilaeGEiVBPHv71q7nsHmFFmwoz0hBUwPZ8q0z3apP7LYpvo4Xz44oQ xna0yoHFHe6Mb8Aj4ga1KO0Qh6sUyyIDKptfWGS7OLxm6BB+96m9u2Ka5W8duyfI 6IQByJeBLC0PcKChBSWlQBl5weXCh0WVMLjZ7GPhCae+4UFa+oK+P6gtHkJtQoul lXdGbpox5RNYCjmyKA/XpnI4H/wPO0B9r/hoEI6V5KdzlkM3ZR1UPeyAxRHmo5FH RXVhTJ1ci4uXrnzpBp7clSmXNbU2388S4y+UaazVIN5PMcbJ6PSirSoU0x9hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSXfJnXWzOYqB+FLk6X7Q2g7ulaUwHwYDVR0j BBgwFoAUamyBNlTgwpM55sr1IiAfjnAv6tMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjgyYmNhMy1lODU4LTRkNTItYjFhMy0yZjRiYWU0N2M5ZjIvMC82QTZDODEzNjU0 RTBDMjkzMzlFNkNBRjUyMjIwMUY4RTcwMkZFQUQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE2QzgxMzY1NEUwQzI5MzM5RTZDQUY1MjIyMDFGOEU3MDJG RUFEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY4MmJjYTMtZTg1OC00ZDUyLWIx YTMtMmY0YmFlNDdjOWYyLzAvNkE2QzgxMzY1NEUwQzI5MzM5RTZDQUY1MjIyMDFG OEU3MDJGRUFEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImYzNbk/ULibnDOrCmifIHU+KqcH8kaq2yq O9RmHf2zO+gRS+T2zTqqXpnF0WvUtXyMp3aidr6A5m+q2ydsCLTLATLQme2ngwSR qcHmBrTcPh4ZYUoAm0w8Jcg5AwMpWApTW2gl+XEv1jBFocx3Xq4Q4xMNY+ZQyoi/ yESiFwQIFMkx3s8vuJX0/7JtEBYCyG1++9+wmc4jqc2NH0LcVItYvOk//ozMYwG1 m5ydRUA1/jDvTHYy/y1l/lssAQDo07VLn8eGIBSf3EdMUPizrmExnWQ4dXUNIDfm z+/ijWqQ/7VgkKw8mXY5y6DhHAxwiH23R0OPLg0O9hJVNcID2eM= -----END CERTIFICATE-----Generated at Mon Jun 30 17:33:51 2025 by rpki-client