$ rpki-client -vvf repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft File: 6A755F0ECD114936B4C154BE153030E6BFE42025.mft (raw, json) Hash identifier: xFbWvH18Rmo7eYW6ZnkALxfyjXlWYG7ZTCpzIZZ4eVY= Subject key identifier: 20:BE:4B:CC:B8:79:63:8F:97:83:75:22:C1:87:A3:04:42:8A:4F:30 Authority key identifier: 6A:75:5F:0E:CD:11:49:36:B4:C1:54:BE:15:30:30:E6:BF:E4:20:25 Certificate issuer: /CN=6A755F0ECD114936B4C154BE153030E6BFE42025 Certificate serial: 7A286DC690BB601E74058535B99B927B2AD52486 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft Manifest number: 6F Signing time: Sun 29 Jun 2025 15:02:15 +0000 Manifest this update: Sun 29 Jun 2025 14:57:15 +0000 Manifest next update: Thu 03 Jul 2025 02:26:15 +0000 Files and hashes: 1: 3136302e32352e3234342e302f32342d3234203d3e20313533313131.roa (hash: 4PEyPB4qmPb2e/bBEQkgXwV9i5IzOHIeX5E1aebL4mE=) 2: 3136302e32352e3234352e302f32342d3234203d3e20313533313131.roa (hash: UFu8HMSGf8XDsGbPsoU1Eu+n+uIdk0W8r+YUHRms9EI=) 3: 6A755F0ECD114936B4C154BE153030E6BFE42025.crl (hash: en8cbH1k1CSIZqXHpLSip6y0hCf6yd7RIvYGBSCnJV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.crl rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 02:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:28:6d:c6:90:bb:60:1e:74:05:85:35:b9:9b:92:7b:2a:d5:24:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A755F0ECD114936B4C154BE153030E6BFE42025 Validity Not Before: Jun 29 14:57:15 2025 GMT Not After : Jul 3 02:26:15 2025 GMT Subject: CN=20BE4BCCB879638F97837522C187A304428A4F30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2c:4a:b6:37:15:a1:6c:4c:f3:9a:25:57:d2: 51:a2:43:21:96:0e:d0:1b:74:d3:1c:dc:3f:5e:2e: 71:b9:31:8d:3c:db:43:4c:66:ec:95:8e:bd:40:45: a0:d6:2c:5a:d5:c6:90:7e:72:b9:c3:d0:73:2f:29: f9:cf:b1:95:50:29:29:1e:74:5e:21:8f:23:7d:7d: 9f:99:1f:45:f6:75:f3:a5:82:26:60:d6:5f:32:2e: 5e:d9:4d:77:4e:d3:b0:2c:72:13:b7:6a:0e:b4:34: 53:46:fa:d2:13:8f:93:35:39:97:a7:1a:d0:56:08: 95:b6:ab:b2:d3:e1:56:ab:34:6c:f4:e1:7f:da:f9: a5:70:c5:87:71:24:15:e2:7c:c9:e9:34:e2:be:a4: ae:f2:a0:67:1d:d8:42:db:f7:99:86:52:a5:de:82: 96:89:f5:02:b3:3d:b6:9d:fe:ba:6c:43:81:d5:40: 65:4f:a2:23:89:75:9c:ef:d4:eb:37:93:c5:33:87: 60:29:df:73:9b:73:64:be:8d:45:37:ae:81:97:76: 4c:84:bc:8b:3b:91:20:f3:6a:22:16:6a:bb:5e:8a: 3c:99:61:bd:1b:81:63:33:5c:b1:65:a1:56:c0:5e: 35:e7:f1:74:84:c8:a7:ff:b7:02:33:09:fc:57:4b: 16:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BE:4B:CC:B8:79:63:8F:97:83:75:22:C1:87:A3:04:42:8A:4F:30 X509v3 Authority Key Identifier: keyid:6A:75:5F:0E:CD:11:49:36:B4:C1:54:BE:15:30:30:E6:BF:E4:20:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:33:6f:21:a5:f8:3d:b3:a8:69:1c:1b:c6:d7:ff:f2:78:21: dc:4c:54:52:00:5f:8d:f1:83:45:0d:49:ad:a1:02:69:ab:9d: 28:62:4a:03:b4:4d:f1:fb:13:4d:2d:ec:58:22:a2:c5:52:a9: 9f:b8:23:b3:df:a4:b7:27:2d:78:28:fb:5f:ab:25:40:65:60: 03:04:0f:28:c7:2a:81:11:cf:04:dd:74:42:b6:d2:70:40:e2: dc:c3:f6:80:39:17:c1:4a:ea:2b:43:48:03:39:cd:a9:6f:89: 35:5b:d2:0d:28:50:11:c1:6f:40:be:a9:ad:8b:f0:9b:1d:6d: e4:c6:23:44:10:2c:f4:4a:e7:bb:90:47:72:41:91:51:59:41: 3f:ce:59:e1:9b:ab:b0:82:eb:01:4f:ff:c0:12:b6:1b:8a:82: ab:26:b1:ff:05:5f:65:b4:5e:bf:ef:ea:11:78:36:d0:b8:81: 52:a2:af:70:0c:45:88:3d:0d:56:63:5b:b6:4f:4b:55:73:25: 69:1e:08:2e:17:7d:10:cd:ec:eb:b7:99:d5:b6:3a:8a:1c:6c: e1:2d:be:d6:06:92:f1:e6:7d:7e:10:ca:5c:3b:cb:df:35:ee: 09:88:d3:b9:7e:81:14:5f:1a:a1:8f:08:23:93:b9:08:ce:ee: 92:3b:9e:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeihtxpC7YB50BYU1uZuSeyrVJIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE3NTVGMEVDRDExNDkzNkI0QzE1NEJFMTUzMDMwRTZC RkU0MjAyNTAeFw0yNTA2MjkxNDU3MTVaFw0yNTA3MDMwMjI2MTVaMDMxMTAvBgNV BAMTKDIwQkU0QkNDQjg3OTYzOEY5NzgzNzUyMkMxODdBMzA0NDI4QTRGMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChLEq2NxWhbEzzmiVX0lGiQyGW DtAbdNMc3D9eLnG5MY0820NMZuyVjr1ARaDWLFrVxpB+crnD0HMvKfnPsZVQKSke dF4hjyN9fZ+ZH0X2dfOlgiZg1l8yLl7ZTXdO07AschO3ag60NFNG+tITj5M1OZen GtBWCJW2q7LT4VarNGz04X/a+aVwxYdxJBXifMnpNOK+pK7yoGcd2ELb95mGUqXe gpaJ9QKzPbad/rpsQ4HVQGVPoiOJdZzv1Os3k8Uzh2Ap33Obc2S+jUU3roGXdkyE vIs7kSDzaiIWarteijyZYb0bgWMzXLFloVbAXjXn8XSEyKf/twIzCfxXSxYJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIL5LzLh5Y4+Xg3UiwYejBEKKTzAwHwYDVR0j BBgwFoAUanVfDs0RSTa0wVS+FTAw5r/kICUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGNjMWM3ZS1kYTc0LTRiMTEtYjY3YS1kNWYyN2Q5ODE3NTcvMC82QTc1NUYwRUNE MTE0OTM2QjRDMTU0QkUxNTMwMzBFNkJGRTQyMDI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkE3NTVGMEVDRDExNDkzNkI0QzE1NEJFMTUzMDMwRTZCRkU0 MjAyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhjYzFjN2UtZGE3NC00YjExLWI2 N2EtZDVmMjdkOTgxNzU3LzAvNkE3NTVGMEVDRDExNDkzNkI0QzE1NEJFMTUzMDMw RTZCRkU0MjAyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAzbyGl+D2zqGkcG8bX//J4IdxMVFIAX43x g0UNSa2hAmmrnShiSgO0TfH7E00t7FgiosVSqZ+4I7PfpLcnLXgo+1+rJUBlYAME DyjHKoERzwTddEK20nBA4tzD9oA5F8FK6itDSAM5zalviTVb0g0oUBHBb0C+qa2L 8JsdbeTGI0QQLPRK57uQR3JBkVFZQT/OWeGbq7CC6wFP/8ASthuKgqsmsf8FX2W0 Xr/v6hF4NtC4gVKir3AMRYg9DVZjW7ZPS1VzJWkeCC4XfRDN7Ou3mdW2OoocbOEt vtYGkvHmfX4Qylw7y9817gmI07l+gRRfGqGPCCOTuQjO7pI7ng4= -----END CERTIFICATE-----Generated at Tue Jul 1 23:25:08 2025 by rpki-client