$ rpki-client -vvf repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft File: 6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft (raw, json) Hash identifier: e6NicVdVXz7FIugtZrDAA0eGrjBVeiu1UA6DI0FTajE= Subject key identifier: E3:24:CB:87:A0:7A:B5:F7:2E:D3:6E:42:1C:94:FD:72:8D:82:3F:46 Authority key identifier: 6B:FD:65:6A:9F:A6:3F:B8:98:16:B1:7C:CE:D2:83:2B:43:FE:41:CD Certificate issuer: /CN=6BFD656A9FA63FB89816B17CCED2832B43FE41CD Certificate serial: 5F17CF720969B709CAF0F02761C232210E8A8FBD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft Manifest number: EE Signing time: Sat 28 Jun 2025 18:31:24 +0000 Manifest this update: Sat 28 Jun 2025 18:26:24 +0000 Manifest next update: Tue 01 Jul 2025 18:34:24 +0000 Files and hashes: 1: 6BFD656A9FA63FB89816B17CCED2832B43FE41CD.crl (hash: dWBAcYVYAieVIS0gc+KLprXwacWoq1IzbDtmEWb3Iko=) 2: 323030313a6466333a356334303a3a2f34382d3438203d3e20313431313236.roa (hash: QBBO/FoYTyAYgTzseCUJPqnk8CnediRAVVQ9iko63Nk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.crl rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 18:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:17:cf:72:09:69:b7:09:ca:f0:f0:27:61:c2:32:21:0e:8a:8f:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6BFD656A9FA63FB89816B17CCED2832B43FE41CD Validity Not Before: Jun 28 18:26:24 2025 GMT Not After : Jul 1 18:34:24 2025 GMT Subject: CN=E324CB87A07AB5F72ED36E421C94FD728D823F46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ec:de:33:df:54:3c:ac:9f:42:17:c2:bd:b3: c0:45:46:87:e6:ce:94:c5:57:d0:6f:c0:cc:cd:e8: 4e:8d:92:9f:f7:af:7d:86:5a:32:4e:26:88:87:e4: 8c:f0:cb:3d:10:e7:0e:c6:4b:e7:f4:4c:27:9c:59: ac:41:f1:64:7c:81:5f:da:e2:58:89:ff:e0:34:9c: 7a:f7:52:80:17:d6:bc:be:80:aa:fc:86:30:f4:f3: be:a7:ea:6d:c5:26:fd:4e:56:2a:a3:39:71:4e:ac: 8c:7d:28:ff:be:64:8e:1d:e4:65:b7:ff:f0:51:3d: fc:b2:92:bb:15:49:7b:08:21:2e:91:47:85:cc:9b: fa:f3:3f:a9:88:c7:76:2c:0e:c5:3b:cd:04:f6:d1: 5a:39:e3:90:48:69:79:c4:b8:79:f6:4f:54:15:b4: 44:1c:cd:6f:11:0a:ca:c3:8b:22:6d:8d:bb:fe:a7: f7:7d:1b:bd:60:4d:1a:fb:7a:12:5e:98:96:47:4d: 7e:8f:91:8c:ac:67:ed:39:98:57:ae:a8:1a:32:5f: 68:0d:0e:4d:8c:ad:d4:29:4d:50:36:73:b9:f3:5d: c0:b5:3b:d6:94:98:ab:d7:44:17:21:18:04:bb:2f: 8d:79:bd:b2:15:43:8d:50:c0:10:7f:15:bd:22:0b: 6c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:24:CB:87:A0:7A:B5:F7:2E:D3:6E:42:1C:94:FD:72:8D:82:3F:46 X509v3 Authority Key Identifier: keyid:6B:FD:65:6A:9F:A6:3F:B8:98:16:B1:7C:CE:D2:83:2B:43:FE:41:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:44:1e:54:79:64:56:4c:00:32:e9:1b:de:da:de:8f:40:8b: 37:d4:61:a1:1c:a6:ea:2f:e8:34:23:00:11:de:0e:a8:56:78: 42:82:fb:2f:b7:7e:b8:87:cf:2c:46:a4:b1:a5:04:3e:62:db: f9:5f:d2:dd:c5:8b:d4:38:11:90:d5:33:10:8a:0a:42:9b:1c: 21:c3:32:b4:21:1b:5a:c4:84:77:07:96:ef:b2:45:25:e0:2c: 4e:78:f3:0b:3d:6f:92:b5:87:00:ac:1b:48:6b:7f:6b:e2:db: e7:2a:1f:4c:cc:92:7d:90:60:58:51:c7:38:9c:5b:e1:51:22: ad:a7:51:5b:bc:d6:ed:d1:73:ed:47:ff:30:68:8b:4e:74:25: 2f:b1:dd:ce:9a:e9:45:f4:a7:1a:a5:47:f9:72:96:96:ce:09: 29:2a:96:5d:d9:94:b2:a5:e4:cd:e1:61:25:fe:93:f9:24:c7: a1:4f:31:e4:06:ec:be:e4:4d:80:d1:31:fb:cf:a0:6b:8c:80: e1:d1:fd:12:3b:81:1d:29:e0:8d:b8:21:fb:e6:62:12:07:a1: d8:bf:b2:c8:12:90:c5:48:24:2d:a6:44:ef:a7:62:10:42:44: ea:25:ab:a3:b1:10:24:a8:64:ef:f4:1d:40:99:e7:1a:93:fa: 32:71:89:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXxfPcglptwnK8PAnYcIyIQ6Kj70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkJGRDY1NkE5RkE2M0ZCODk4MTZCMTdDQ0VEMjgzMkI0 M0ZFNDFDRDAeFw0yNTA2MjgxODI2MjRaFw0yNTA3MDExODM0MjRaMDMxMTAvBgNV BAMTKEUzMjRDQjg3QTA3QUI1RjcyRUQzNkU0MjFDOTRGRDcyOEQ4MjNGNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU7N4z31Q8rJ9CF8K9s8BFRofm zpTFV9BvwMzN6E6Nkp/3r32GWjJOJoiH5Izwyz0Q5w7GS+f0TCecWaxB8WR8gV/a 4liJ/+A0nHr3UoAX1ry+gKr8hjD0876n6m3FJv1OViqjOXFOrIx9KP++ZI4d5GW3 //BRPfyykrsVSXsIIS6RR4XMm/rzP6mIx3YsDsU7zQT20Vo545BIaXnEuHn2T1QV tEQczW8RCsrDiyJtjbv+p/d9G71gTRr7ehJemJZHTX6PkYysZ+05mFeuqBoyX2gN Dk2MrdQpTVA2c7nzXcC1O9aUmKvXRBchGAS7L415vbIVQ41QwBB/Fb0iC2wLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4yTLh6B6tfcu025CHJT9co2CP0YwHwYDVR0j BBgwFoAUa/1lap+mP7iYFrF8ztKDK0P+Qc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTBjYjYzMC02MzZhLTRiNmEtOTNkZi1iNWQ5MDhmZTZlZTcvMC82QkZENjU2QTlG QTYzRkI4OTgxNkIxN0NDRUQyODMyQjQzRkU0MUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkJGRDY1NkE5RkE2M0ZCODk4MTZCMTdDQ0VEMjgzMkI0M0ZF NDFDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmUwY2I2MzAtNjM2YS00YjZhLTkz ZGYtYjVkOTA4ZmU2ZWU3LzAvNkJGRDY1NkE5RkE2M0ZCODk4MTZCMTdDQ0VEMjgz MkI0M0ZFNDFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJhEHlR5ZFZMADLpG97a3o9AizfUYaEcpuov 6DQjABHeDqhWeEKC+y+3friHzyxGpLGlBD5i2/lf0t3Fi9Q4EZDVMxCKCkKbHCHD MrQhG1rEhHcHlu+yRSXgLE548ws9b5K1hwCsG0hrf2vi2+cqH0zMkn2QYFhRxzic W+FRIq2nUVu81u3Rc+1H/zBoi050JS+x3c6a6UX0pxqlR/lylpbOCSkqll3ZlLKl 5M3hYSX+k/kkx6FPMeQG7L7kTYDRMfvPoGuMgOHR/RI7gR0p4I24IfvmYhIHodi/ ssgSkMVIJC2mRO+nYhBCROolq6OxECSoZO/0HUCZ5xqT+jJxiec= -----END CERTIFICATE-----Generated at Sun Jun 29 18:36:35 2025 by rpki-client