$ rpki-client -vvf repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.mft File: E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.mft (raw, json) Hash identifier: MypuKzpSdnDCyaE895kitei2F0WgfDlHSouJs6eID10= Subject key identifier: FF:A9:2B:21:98:D4:6F:A8:C0:45:29:22:7F:A8:71:04:4D:65:AC:D8 Authority key identifier: E6:E7:10:DA:CC:1F:6D:6D:D9:D7:8F:A6:11:7E:43:62:66:42:E6:F6 Certificate issuer: /CN=E6E710DACC1F6D6DD9D78FA6117E43626642E6F6 Certificate serial: 12D88BE7CEE4A1E8DF368A4C519709B1F88A58DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.mft Manifest number: D1 Signing time: Sun 29 Jun 2025 08:30:54 +0000 Manifest this update: Sun 29 Jun 2025 08:25:54 +0000 Manifest next update: Wed 02 Jul 2025 15:31:54 +0000 Files and hashes: 1: E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.crl (hash: 8qrDLpn/YPUMDlDr9eskuSgXqTlOrrGtwwfvJftEfWo=) 2: 3135372e31352e3131382e302f32342d3234203d3e20313532343031.roa (hash: jDuBPuo8FXkwHvuSx3l3NpRnjG6RnX6zvR23Pm7QMR8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.crl rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 15:31:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:d8:8b:e7:ce:e4:a1:e8:df:36:8a:4c:51:97:09:b1:f8:8a:58:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6E710DACC1F6D6DD9D78FA6117E43626642E6F6 Validity Not Before: Jun 29 08:25:54 2025 GMT Not After : Jul 2 15:31:54 2025 GMT Subject: CN=FFA92B2198D46FA8C04529227FA871044D65ACD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:69:b5:3d:29:03:bb:bc:50:74:11:1b:2b:76: 8f:eb:32:71:5f:dc:2b:ae:60:42:07:58:65:dd:53: 60:4e:7d:f8:71:b8:21:92:37:42:54:ae:92:52:63: bc:9b:31:0d:aa:b3:47:7c:b2:42:ab:b6:a6:c3:c3: ac:8b:e1:07:75:53:5b:b4:00:64:e6:cb:46:1c:dc: a4:6b:d1:6d:7c:44:52:91:c8:2a:2c:64:3c:3b:2d: 4d:53:2f:39:5b:e2:fa:04:57:19:98:70:09:bf:47: 0a:8f:ca:58:f1:99:f9:b3:5e:89:a4:0f:2c:0a:95: 6c:b3:6f:f0:f9:d0:79:5c:e4:91:d2:2c:c2:ec:6b: 2d:49:2e:2f:f1:87:ea:70:47:41:73:c6:b2:7a:bb: 2d:e9:e6:47:ee:9f:cd:21:d3:62:91:8e:5d:ee:40: 38:3c:5f:45:73:71:4c:1a:20:80:15:99:38:ec:51: b2:67:39:40:9d:d9:ea:06:44:7a:0c:de:08:df:72: 82:c1:34:83:aa:63:39:44:65:5c:dd:8f:ac:ce:d8: b1:b7:a4:bc:42:f4:2a:f0:d2:85:e6:60:fd:27:92: 42:f2:86:7c:39:22:6a:14:f2:b8:f9:f1:ef:f5:e1: fc:79:a0:95:21:52:47:8a:b4:0f:f1:25:a3:0d:ab: 96:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A9:2B:21:98:D4:6F:A8:C0:45:29:22:7F:A8:71:04:4D:65:AC:D8 X509v3 Authority Key Identifier: keyid:E6:E7:10:DA:CC:1F:6D:6D:D9:D7:8F:A6:11:7E:43:62:66:42:E6:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:91:eb:be:1c:eb:bb:dc:42:dc:9b:08:da:f1:e0:93:d4:2a: 0d:92:7b:9d:78:7f:7c:7f:27:57:4d:e5:e3:33:44:03:7d:9f: 56:d2:9b:41:de:81:00:28:3a:07:37:7a:52:31:bc:fe:b0:0e: b3:27:b9:03:b9:78:2c:c8:d5:ce:b9:bc:8e:cf:fe:66:d2:c6: d9:1a:db:b0:53:6b:53:23:da:78:6e:51:a1:a4:5a:da:a0:62: 56:ec:c6:e4:98:7b:96:c3:52:dc:b1:38:4e:85:dc:35:53:9a: 7d:c6:a5:d4:71:a6:42:28:d3:46:ec:62:f3:69:09:d6:c0:41: 97:e7:92:d9:c8:94:39:b8:a9:e2:fc:e9:0a:35:f1:d5:36:e1: 1c:da:25:ef:b1:cc:54:88:40:83:ad:57:02:d9:fc:5d:3a:b0: bf:25:4e:35:66:cf:b8:6a:4e:c1:12:80:96:58:7e:bb:e7:e3: 32:37:1f:1e:7d:de:22:a8:a8:af:b7:2a:07:e2:2c:90:33:71: d4:55:bb:a9:9e:9d:b9:37:67:80:a3:0d:5c:0c:95:36:3e:e5: 8b:44:57:e5:95:f4:85:d3:d9:2d:d4:f0:c4:58:2b:c5:5e:94: 40:ef:48:88:e0:0f:d7:bf:15:b9:47:41:c1:07:2c:7c:42:c3: b2:db:0f:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEtiL587koejfNopMUZcJsfiKWNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZFNzEwREFDQzFGNkQ2REQ5RDc4RkE2MTE3RTQzNjI2 NjQyRTZGNjAeFw0yNTA2MjkwODI1NTRaFw0yNTA3MDIxNTMxNTRaMDMxMTAvBgNV BAMTKEZGQTkyQjIxOThENDZGQThDMDQ1MjkyMjdGQTg3MTA0NEQ2NUFDRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9abU9KQO7vFB0ERsrdo/rMnFf 3CuuYEIHWGXdU2BOffhxuCGSN0JUrpJSY7ybMQ2qs0d8skKrtqbDw6yL4Qd1U1u0 AGTmy0Yc3KRr0W18RFKRyCosZDw7LU1TLzlb4voEVxmYcAm/RwqPyljxmfmzXomk DywKlWyzb/D50Hlc5JHSLMLsay1JLi/xh+pwR0FzxrJ6uy3p5kfun80h02KRjl3u QDg8X0VzcUwaIIAVmTjsUbJnOUCd2eoGRHoM3gjfcoLBNIOqYzlEZVzdj6zO2LG3 pLxC9Crw0oXmYP0nkkLyhnw5ImoU8rj58e/14fx5oJUhUkeKtA/xJaMNq5ZtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/6krIZjUb6jARSkif6hxBE1lrNgwHwYDVR0j BBgwFoAU5ucQ2swfbW3Z14+mEX5DYmZC5vYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWQ3MzZkYy1lNWRiLTQzODEtOTcxZi02MjQzNjc0MTg1NGIvMC9FNkU3MTBEQUND MUY2RDZERDlENzhGQTYxMTdFNDM2MjY2NDJFNkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTZFNzEwREFDQzFGNkQ2REQ5RDc4RkE2MTE3RTQzNjI2NjQy RTZGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVkNzM2ZGMtZTVkYi00MzgxLTk3 MWYtNjI0MzY3NDE4NTRiLzAvRTZFNzEwREFDQzFGNkQ2REQ5RDc4RkE2MTE3RTQz NjI2NjQyRTZGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIOR674c67vcQtybCNrx4JPUKg2Se514f3x/ J1dN5eMzRAN9n1bSm0HegQAoOgc3elIxvP6wDrMnuQO5eCzI1c65vI7P/mbSxtka 27BTa1Mj2nhuUaGkWtqgYlbsxuSYe5bDUtyxOE6F3DVTmn3GpdRxpkIo00bsYvNp CdbAQZfnktnIlDm4qeL86Qo18dU24RzaJe+xzFSIQIOtVwLZ/F06sL8lTjVmz7hq TsESgJZYfrvn4zI3Hx593iKoqK+3KgfiLJAzcdRVu6menbk3Z4CjDVwMlTY+5YtE V+WV9IXT2S3U8MRYK8VelEDvSIjgD9e/FblHQcEHLHxCw7LbD3U= -----END CERTIFICATE-----Generated at Mon Jun 30 16:42:02 2025 by rpki-client