$ rpki-client -vvf repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.mft File: 6319B77FD8EB7EC968DD59FE94AE146A879A74E5.mft (raw, json) Hash identifier: +ZsvHWQrsStY3PuhButDkM8GYDQ7fRQpvSZ1SBoZ3w4= Subject key identifier: D0:F2:BC:16:5C:74:0A:00:6F:C7:E1:95:35:10:DC:88:66:4D:29:BA Authority key identifier: 63:19:B7:7F:D8:EB:7E:C9:68:DD:59:FE:94:AE:14:6A:87:9A:74:E5 Certificate issuer: /CN=6319B77FD8EB7EC968DD59FE94AE146A879A74E5 Certificate serial: 7DA38A0CBA1A271D6014425FDA354BE37018E0B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.mft Manifest number: 04E5 Signing time: Sat 28 Jun 2025 03:01:54 +0000 Manifest this update: Sat 28 Jun 2025 02:56:54 +0000 Manifest next update: Tue 01 Jul 2025 06:47:54 +0000 Files and hashes: 1: 6319B77FD8EB7EC968DD59FE94AE146A879A74E5.crl (hash: y64Y5bYH5J1mj6mHYMt2dNslTD0lTatEFF/uJXezxvE=) 2: 323430303a623138303a3a2f33322d3438203d3e203539323736.roa (hash: crOVEgCgm8Ew1MqWiIikyqPFfpnVH7kp+H/fQfPdFIk=) 3: 3130332e3232362e3233352e302f32342d3234203d3e203539323736.roa (hash: 8zx/66aBZbfRZn1QLl4C9oqw+rv2XDsUU6dYo8bSK3g=) 4: 3130332e3232362e3233342e302f32342d3234203d3e203539323736.roa (hash: YASd+4IY2ByHOpeWGSgT5aSz1TSDcJWrWxZ8mmmAyH4=) 5: 3130332e3232362e3233322e302f32322d3234203d3e203539323736.roa (hash: wXEz476nIlWr9YPVy2btympb5pWVJFYVSK12JD1WOHw=) 6: 3130332e3232362e3233332e302f32342d3234203d3e203539323736.roa (hash: VyjiO45+sx8rVhpe+p1nyWOxHRDbuxx2WR1qZ8IEuUM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.crl rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 06:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:a3:8a:0c:ba:1a:27:1d:60:14:42:5f:da:35:4b:e3:70:18:e0:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6319B77FD8EB7EC968DD59FE94AE146A879A74E5 Validity Not Before: Jun 28 02:56:54 2025 GMT Not After : Jul 1 06:47:54 2025 GMT Subject: CN=D0F2BC165C740A006FC7E1953510DC88664D29BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b4:5d:79:e1:0e:52:30:5e:fa:3a:3c:68:f2: ac:c8:62:8d:dd:f3:67:bf:1f:42:f4:74:77:0d:bf: 3c:74:a5:4b:14:9f:ec:0b:e6:b0:9d:a5:9b:7d:9e: 29:01:48:72:c6:85:35:8e:04:f1:f4:de:a1:04:0d: 32:84:08:82:1d:0c:17:be:fa:5a:aa:a8:24:f2:26: be:10:a6:26:f0:80:b8:59:6f:f2:76:ac:08:39:1c: 96:15:44:b1:02:87:09:29:8d:12:1e:b6:70:6a:55: fe:a9:82:3c:af:d0:af:b3:06:04:b0:f6:de:28:10: a0:16:f1:ea:b6:36:df:7e:80:ce:ae:58:63:6c:30: ee:79:26:97:eb:85:d4:ba:d5:ad:e7:d4:ae:04:9c: b6:cd:75:f6:da:ba:79:8d:eb:20:24:70:0b:ea:4e: 6c:38:de:15:3c:23:af:37:9b:2b:a1:27:64:3f:08: 51:2a:f5:8b:d7:ca:41:57:fb:f6:ea:a0:e5:c1:72: c9:61:1f:32:13:8e:a0:7e:ce:8c:2b:65:81:39:e2: b0:b1:f4:a1:fb:c4:b2:e3:ef:ea:64:59:2f:10:52: 3a:b2:44:e1:bd:02:97:3c:65:76:bc:79:2f:c3:37: cf:14:1c:2d:6c:86:0f:15:54:70:ee:b1:0d:15:32: 1b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F2:BC:16:5C:74:0A:00:6F:C7:E1:95:35:10:DC:88:66:4D:29:BA X509v3 Authority Key Identifier: keyid:63:19:B7:7F:D8:EB:7E:C9:68:DD:59:FE:94:AE:14:6A:87:9A:74:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:81:57:ed:7b:4f:14:25:51:18:f4:f7:30:ae:f5:e9:2a:c1: 71:ed:69:e4:97:5a:7f:42:7d:33:11:f1:ec:b1:9b:aa:9d:1c: c9:bd:d2:0d:61:bd:f1:bf:5b:ad:26:32:c0:60:45:c1:99:98: 29:13:bc:c2:b7:7f:c5:1c:78:2d:4b:26:36:4a:9c:33:7b:6f: 30:a0:b0:c6:75:a7:28:f5:e1:20:96:a3:4c:7b:1d:1d:b2:5b: 9f:e6:70:96:c3:01:e0:0b:e9:47:d0:87:e0:2b:54:10:d6:ef: 36:35:68:a8:60:d1:03:08:55:7d:9f:38:ee:6d:b8:3f:18:6a: 7e:9e:f9:a2:34:66:16:ba:29:59:cc:4f:33:70:a9:04:a1:89: 23:af:80:09:8b:ee:e0:97:3f:40:68:c2:66:7c:ed:08:04:ff: 2b:64:1a:24:95:7d:91:bd:fd:a5:6d:8a:34:e9:15:c9:d7:d3: 57:08:a1:da:51:75:fe:55:e3:59:31:7a:69:56:51:ee:63:27: be:d7:d7:43:69:8a:94:21:a1:5a:4f:96:d7:fa:f5:16:f4:53: ed:23:5a:28:23:d6:5b:e4:00:44:d3:c0:38:a8:94:31:b1:d6: 04:87:37:4d:a6:07:22:e1:33:7d:62:16:a8:83:6a:fe:c9:f8: f9:e0:4d:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfaOKDLoaJx1gFEJf2jVL43AY4LIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMxOUI3N0ZEOEVCN0VDOTY4REQ1OUZFOTRBRTE0NkE4 NzlBNzRFNTAeFw0yNTA2MjgwMjU2NTRaFw0yNTA3MDEwNjQ3NTRaMDMxMTAvBgNV BAMTKEQwRjJCQzE2NUM3NDBBMDA2RkM3RTE5NTM1MTBEQzg4NjY0RDI5QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCltF154Q5SMF76Ojxo8qzIYo3d 82e/H0L0dHcNvzx0pUsUn+wL5rCdpZt9nikBSHLGhTWOBPH03qEEDTKECIIdDBe+ +lqqqCTyJr4QpibwgLhZb/J2rAg5HJYVRLEChwkpjRIetnBqVf6pgjyv0K+zBgSw 9t4oEKAW8eq2Nt9+gM6uWGNsMO55JpfrhdS61a3n1K4EnLbNdfbaunmN6yAkcAvq Tmw43hU8I683myuhJ2Q/CFEq9YvXykFX+/bqoOXBcslhHzITjqB+zowrZYE54rCx 9KH7xLLj7+pkWS8QUjqyROG9Apc8ZXa8eS/DN88UHC1shg8VVHDusQ0VMhulAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0PK8Flx0CgBvx+GVNRDciGZNKbowHwYDVR0j BBgwFoAUYxm3f9jrfslo3Vn+lK4UaoeadOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjU0MmJjNC03NGRjLTQ1ZGQtYjY1OS03NDVjYTJhY2EzMzMvMC82MzE5Qjc3RkQ4 RUI3RUM5NjhERDU5RkU5NEFFMTQ2QTg3OUE3NEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjMxOUI3N0ZEOEVCN0VDOTY4REQ1OUZFOTRBRTE0NkE4NzlB NzRFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmY1NDJiYzQtNzRkYy00NWRkLWI2 NTktNzQ1Y2EyYWNhMzMzLzAvNjMxOUI3N0ZEOEVCN0VDOTY4REQ1OUZFOTRBRTE0 NkE4NzlBNzRFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACSBV+17TxQlURj09zCu9ekqwXHtaeSXWn9C fTMR8eyxm6qdHMm90g1hvfG/W60mMsBgRcGZmCkTvMK3f8UceC1LJjZKnDN7bzCg sMZ1pyj14SCWo0x7HR2yW5/mcJbDAeAL6UfQh+ArVBDW7zY1aKhg0QMIVX2fOO5t uD8Yan6e+aI0Zha6KVnMTzNwqQShiSOvgAmL7uCXP0BowmZ87QgE/ytkGiSVfZG9 /aVtijTpFcnX01cIodpRdf5V41kxemlWUe5jJ77X10NpipQhoVpPltf69Rb0U+0j Wigj1lvkAETTwDiolDGx1gSHN02mByLhM31iFqiDav7J+PngTag= -----END CERTIFICATE-----Generated at Sun Jun 29 18:49:15 2025 by rpki-client