$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft File: 6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft (raw, json) Hash identifier: T20KokVSB7SiP3jE4QLCLjhQISKR8IBRkNGSZpqttqY= Subject key identifier: AD:82:50:23:E4:64:0D:A0:CD:99:F6:11:86:AA:89:E4:DE:82:46:C3 Authority key identifier: 6F:29:B5:AE:A0:FD:7E:C5:68:AA:45:A1:72:1D:8E:5D:EA:92:6C:0F Certificate issuer: /CN=6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F Certificate serial: 66A0E1C43D8EF7A0ABA8776F963459B83D57A4C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft Manifest number: B3 Signing time: Mon 30 Jun 2025 05:11:10 +0000 Manifest this update: Mon 30 Jun 2025 05:06:10 +0000 Manifest next update: Thu 03 Jul 2025 07:53:10 +0000 Files and hashes: 1: 6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl (hash: G10+Fw73aCuR0kP44m0p0iwbszHjxX+0EAjgLS29M2I=) 2: 323030313a6466333a636634303a3a2f34382d3438203d3e20313532373536.roa (hash: EPGT5ryhDc35QQ+8DPj3Jot3CoQO1ERUPuwysJ3MS7U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 07:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a0:e1:c4:3d:8e:f7:a0:ab:a8:77:6f:96:34:59:b8:3d:57:a4:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F Validity Not Before: Jun 30 05:06:10 2025 GMT Not After : Jul 3 07:53:10 2025 GMT Subject: CN=AD825023E4640DA0CD99F61186AA89E4DE8246C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c1:51:4c:37:5a:03:23:d9:bc:c6:f0:9b:b0: 0c:2a:71:bb:7c:44:38:02:2c:df:90:b6:b0:63:d8: 61:86:c6:91:ed:a9:79:a2:60:26:76:3a:bf:b4:29: 0c:91:32:ff:f7:92:ed:59:9e:aa:cb:24:5a:3f:0e: 3b:8e:04:f5:c4:92:3b:ae:61:0d:3b:95:85:68:b2: 21:a8:a3:69:30:80:0a:57:f9:18:72:79:de:25:b1: cc:29:3b:53:4b:f7:d4:6e:52:c9:6b:a6:2e:37:d4: 92:87:f0:0d:c6:30:61:0d:e4:d4:35:2d:c5:99:e5: 84:b8:3f:a7:65:0e:59:5f:08:26:1d:ea:5e:c4:78: a3:e2:58:93:6d:df:a4:2a:b6:a5:cf:87:27:5f:d1: 99:54:c4:a8:13:38:74:46:eb:70:1a:c3:19:c3:2a: 9f:8b:07:0c:bd:5e:83:e6:4c:b8:6a:19:31:29:90: a7:09:51:29:a3:76:0c:0e:18:18:31:cf:d7:8d:82: 4b:87:39:10:e5:ac:fd:41:00:8b:ad:10:c5:fa:13: e5:df:34:9d:22:b3:84:29:09:55:8a:c2:75:bb:bb: 1f:50:a2:f1:6e:85:00:ba:68:ed:10:73:05:33:b1: e5:e9:c2:6c:ee:67:ff:69:89:b7:86:3b:2f:8e:ea: 89:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:82:50:23:E4:64:0D:A0:CD:99:F6:11:86:AA:89:E4:DE:82:46:C3 X509v3 Authority Key Identifier: keyid:6F:29:B5:AE:A0:FD:7E:C5:68:AA:45:A1:72:1D:8E:5D:EA:92:6C:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:17:eb:26:42:56:9b:4b:74:b1:1b:94:82:0c:a9:5f:75:3f: 18:81:db:38:4d:a8:ed:4f:48:f0:3f:96:0f:20:92:48:81:b5: d3:10:0d:f5:f6:7c:48:7a:61:a8:91:dc:17:4e:e6:45:90:35: fa:26:b6:a9:0d:e1:69:de:8c:67:ef:cd:94:3e:f8:c3:3b:20: 14:33:f6:c8:5b:26:35:ec:03:1b:be:50:77:a9:31:9c:48:ca: e2:12:e2:e3:be:83:cb:7e:6a:c3:e2:64:1f:e2:53:dd:9b:67: 50:cc:d7:e3:34:69:55:f5:c6:fb:94:8b:b2:c1:72:63:72:5a: 72:0a:1a:be:e7:c8:69:20:e1:cc:ce:82:61:24:7e:da:68:dc: 25:69:63:42:7b:7f:22:f9:eb:d7:44:7b:ed:da:72:ac:51:32: d6:3d:d9:75:f6:92:52:c1:83:5b:ac:ba:0d:43:30:a2:31:4a: 82:cf:e7:ec:0c:04:3c:79:52:62:fb:81:5d:91:e4:cc:3a:0a: 32:6b:19:a1:95:57:9f:f4:95:77:3c:1a:1c:f6:20:3b:d3:bb: 72:fb:42:b6:d8:c7:ea:e4:e2:ed:c1:59:82:9a:20:dd:56:96: c7:a4:74:b3:74:f1:e0:e5:0e:44:4c:a0:76:e9:64:25:53:9a: 02:ad:66:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZqDhxD2O96CrqHdvljRZuD1XpMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkYyOUI1QUVBMEZEN0VDNTY4QUE0NUExNzIxRDhFNURF QTkyNkMwRjAeFw0yNTA2MzAwNTA2MTBaFw0yNTA3MDMwNzUzMTBaMDMxMTAvBgNV BAMTKEFEODI1MDIzRTQ2NDBEQTBDRDk5RjYxMTg2QUE4OUU0REU4MjQ2QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrwVFMN1oDI9m8xvCbsAwqcbt8 RDgCLN+QtrBj2GGGxpHtqXmiYCZ2Or+0KQyRMv/3ku1ZnqrLJFo/DjuOBPXEkjuu YQ07lYVosiGoo2kwgApX+Rhyed4lscwpO1NL99RuUslrpi431JKH8A3GMGEN5NQ1 LcWZ5YS4P6dlDllfCCYd6l7EeKPiWJNt36QqtqXPhydf0ZlUxKgTOHRG63AawxnD Kp+LBwy9XoPmTLhqGTEpkKcJUSmjdgwOGBgxz9eNgkuHORDlrP1BAIutEMX6E+Xf NJ0is4QpCVWKwnW7ux9QovFuhQC6aO0QcwUzseXpwmzuZ/9pibeGOy+O6onZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrYJQI+RkDaDNmfYRhqqJ5N6CRsMwHwYDVR0j BBgwFoAUbym1rqD9fsVoqkWhch2OXeqSbA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWI0ZTE0ZC0wMjFkLTQwZGMtOTIzYS1jMTJkMWFmNDQzYjUvMS82RjI5QjVBRUEw RkQ3RUM1NjhBQTQ1QTE3MjFEOEU1REVBOTI2QzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkYyOUI1QUVBMEZEN0VDNTY4QUE0NUExNzIxRDhFNURFQTky NkMwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky M2EtYzEyZDFhZjQ0M2I1LzEvNkYyOUI1QUVBMEZEN0VDNTY4QUE0NUExNzIxRDhF NURFQTkyNkMwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgX6yZCVptLdLEblIIMqV91PxiB2zhNqO1P SPA/lg8gkkiBtdMQDfX2fEh6YaiR3BdO5kWQNfomtqkN4WnejGfvzZQ++MM7IBQz 9shbJjXsAxu+UHepMZxIyuIS4uO+g8t+asPiZB/iU92bZ1DM1+M0aVX1xvuUi7LB cmNyWnIKGr7nyGkg4czOgmEkftpo3CVpY0J7fyL569dEe+3acqxRMtY92XX2klLB g1usug1DMKIxSoLP5+wMBDx5UmL7gV2R5Mw6CjJrGaGVV5/0lXc8Ghz2IDvTu3L7 QrbYx+rk4u3BWYKaIN1WlsekdLN08eDlDkRMoHbpZCVTmgKtZtM= -----END CERTIFICATE-----Generated at Tue Jul 1 11:42:16 2025 by rpki-client