$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft File: 6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft (raw, json) Hash identifier: kC8P5UzczxvKV1xEdyf8KHbw9PqbHTbB5mUwmMY+LPk= Subject key identifier: 6B:B4:3B:D7:5F:82:62:C0:42:EB:FA:E1:18:AF:EC:BA:CA:71:75:FB Authority key identifier: 6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8 Certificate issuer: /CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8 Certificate serial: 19B5E2F3B5308BDB27BB8B8AD3331E419D1FE7B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft Manifest number: 6D Signing time: Sat 28 Jun 2025 08:51:22 +0000 Manifest this update: Sat 28 Jun 2025 08:46:22 +0000 Manifest next update: Tue 01 Jul 2025 13:36:22 +0000 Files and hashes: 1: 323030313a6466343a353663303a3a2f34382d3438203d3e20313533313231.roa (hash: zTJG58E9CdtcpbOn2YccIUm1CoDteBuPCbelkCQEFPE=) 2: 6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl (hash: Nmf5lZxr2/vn/fbSZquQgK1NZJJrjGEMC9squVZ6a8A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 13:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:b5:e2:f3:b5:30:8b:db:27:bb:8b:8a:d3:33:1e:41:9d:1f:e7:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8 Validity Not Before: Jun 28 08:46:22 2025 GMT Not After : Jul 1 13:36:22 2025 GMT Subject: CN=6BB43BD75F8262C042EBFAE118AFECBACA7175FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:98:29:6f:d4:df:07:6b:5b:cc:85:86:06:3f: e1:3a:81:7f:24:6f:fe:03:e2:55:82:1e:f4:ff:c6: b7:cf:f1:e9:ed:7b:3e:bd:89:e0:2f:07:c7:09:6f: 3a:d2:8b:73:e6:56:b5:25:e0:1a:53:0d:d9:3e:9c: a3:cd:b2:b4:f3:fd:0c:64:8f:bb:48:1a:c2:7a:79: 30:f0:fd:2a:9b:e5:b7:2f:35:a7:1a:c3:d4:94:d4: c2:fc:15:1e:3f:9f:48:a5:d9:db:37:18:38:87:03: bf:a8:11:9f:dd:5b:f6:70:e2:0d:dd:9f:51:c2:01: dc:2c:a8:de:d9:61:22:12:28:30:6d:8d:97:0d:6d: 90:66:ee:85:63:72:95:bb:c3:f4:7f:75:76:2e:0a: 4e:1c:1c:3d:ee:fd:de:c9:f5:0a:90:36:4e:57:55: ec:3a:ad:5f:08:65:f2:48:6b:71:a4:e4:25:1c:e5: 80:2e:5f:50:97:3d:ef:38:4e:fe:07:7e:77:1a:7a: 2b:74:c0:4e:1e:01:a1:dd:9e:d8:13:ff:9c:38:b1: 2b:39:2c:73:52:9c:1f:ab:2a:ec:65:9c:77:ba:8f: d0:30:a3:0b:e7:38:67:f1:16:7b:99:c6:1f:62:ec: 4f:b2:c7:60:ed:7b:ae:ab:f5:68:92:9f:f5:bd:f3: 05:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B4:3B:D7:5F:82:62:C0:42:EB:FA:E1:18:AF:EC:BA:CA:71:75:FB X509v3 Authority Key Identifier: keyid:6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:0a:17:ba:c0:0b:f9:4d:19:6e:07:f2:f5:a2:ae:aa:82:09: e4:01:76:45:0d:a8:c5:fe:d2:fa:a7:6d:42:e7:72:9b:a4:38: 7f:8a:a4:6b:c3:d0:bd:09:16:71:2f:3c:81:ec:96:4a:51:5c: 2d:c3:ec:7d:49:c3:ba:9d:0b:e1:5a:d3:ae:7a:ed:10:1b:54: 97:ff:0a:19:3c:5b:3c:42:7d:46:da:e8:07:e4:2b:7d:72:b3: cb:a2:d6:6e:98:af:07:b8:25:f0:4d:5f:f4:9a:7f:d5:03:fc: 89:4c:4b:d6:6d:50:4e:1f:39:42:81:a8:ea:61:8b:9a:1a:a4: 8f:fc:5e:6e:47:38:55:f8:88:44:ea:15:7e:c6:0c:85:ec:de: b7:4f:ed:13:f7:74:75:d9:bb:39:83:89:a8:fa:5f:a3:ad:82: 66:e1:d7:dd:04:63:aa:62:1f:69:5f:08:fb:9a:be:df:47:d7: 68:2b:57:e2:1b:64:63:da:5f:d8:30:dd:e5:df:15:fc:6d:d2: 70:50:06:c3:4b:c7:00:ba:ff:1a:76:47:e6:bc:a5:67:02:4b: 80:66:d4:5e:e1:0e:37:4f:f4:68:ba:f1:34:41:2b:01:28:37: 48:59:40:07:98:20:1c:a9:16:3a:c5:5b:71:de:8e:7a:69:68: 57:77:cd:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGbXi87Uwi9snu4uK0zMeQZ0f57EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEzOTk2QUZFMTEzODIzODUzMEMyRkM5MkIyQUI2NzVG Q0QyMThDODAeFw0yNTA2MjgwODQ2MjJaFw0yNTA3MDExMzM2MjJaMDMxMTAvBgNV BAMTKDZCQjQzQkQ3NUY4MjYyQzA0MkVCRkFFMTE4QUZFQ0JBQ0E3MTc1RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZmClv1N8Ha1vMhYYGP+E6gX8k b/4D4lWCHvT/xrfP8entez69ieAvB8cJbzrSi3PmVrUl4BpTDdk+nKPNsrTz/Qxk j7tIGsJ6eTDw/Sqb5bcvNacaw9SU1ML8FR4/n0il2ds3GDiHA7+oEZ/dW/Zw4g3d n1HCAdwsqN7ZYSISKDBtjZcNbZBm7oVjcpW7w/R/dXYuCk4cHD3u/d7J9QqQNk5X Vew6rV8IZfJIa3Gk5CUc5YAuX1CXPe84Tv4Hfncaeit0wE4eAaHdntgT/5w4sSs5 LHNSnB+rKuxlnHe6j9AwowvnOGfxFnuZxh9i7E+yx2Dte66r9WiSn/W98wV9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa7Q711+CYsBC6/rhGK/suspxdfswHwYDVR0j BBgwFoAUajmWr+ETgjhTDC/JKyq2dfzSGMgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTg5YjdkZC05OWE3LTQ1MGUtYmU4NC1iM2JmYzczNDBmMWYvMS82QTM5OTZBRkUx MTM4MjM4NTMwQzJGQzkyQjJBQjY3NUZDRDIxOEM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEzOTk2QUZFMTEzODIzODUzMEMyRkM5MkIyQUI2NzVGQ0Qy MThDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzEvNkEzOTk2QUZFMTEzODIzODUzMEMyRkM5MkIyQUI2 NzVGQ0QyMThDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQKF7rAC/lNGW4H8vWirqqCCeQBdkUNqMX+ 0vqnbULncpukOH+KpGvD0L0JFnEvPIHslkpRXC3D7H1Jw7qdC+Fa06567RAbVJf/ Chk8WzxCfUba6AfkK31ys8ui1m6Yrwe4JfBNX/Saf9UD/IlMS9ZtUE4fOUKBqOph i5oapI/8Xm5HOFX4iETqFX7GDIXs3rdP7RP3dHXZuzmDiaj6X6Otgmbh190EY6pi H2lfCPuavt9H12grV+IbZGPaX9gw3eXfFfxt0nBQBsNLxwC6/xp2R+a8pWcCS4Bm 1F7hDjdP9Gi68TRBKwEoN0hZQAeYIBypFjrFW3HejnppaFd3zao= -----END CERTIFICATE-----Generated at Mon Jun 30 00:41:08 2025 by rpki-client