$ rpki-client -vvf repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft File: 6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft (raw, json) Hash identifier: Cd5EtijVsnqP5vsMl4VI+SudKVqJ7aEjaHDCLbs7tAI= Subject key identifier: 2C:AF:D9:65:E5:8E:82:BF:0E:66:C3:8A:CD:98:BD:4F:E3:AB:84:BF Authority key identifier: 6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 Certificate issuer: /CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31 Certificate serial: 627F4DF001E9C96ABED466F8B97A643BA0D560B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft Manifest number: A3 Signing time: Fri 04 Jul 2025 13:10:46 +0000 Manifest this update: Fri 04 Jul 2025 13:05:46 +0000 Manifest next update: Mon 07 Jul 2025 22:30:46 +0000 Files and hashes: 1: 6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl (hash: Ug13naJtywv28msbJDbvgCKfBuG9YcHWc9wr/FEeJd4=) 2: 3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa (hash: hNrDFdJZIJVijEPlIae7oRd0LDEkkVmTrltcwdQNZWQ=) 3: 3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa (hash: nPtUGKaHPiIgcmd7zVYYYWB0FNbLMK1i/rlw7h+2X4I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:30:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:7f:4d:f0:01:e9:c9:6a:be:d4:66:f8:b9:7a:64:3b:a0:d5:60:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31 Validity Not Before: Jul 4 13:05:46 2025 GMT Not After : Jul 7 22:30:46 2025 GMT Subject: CN=2CAFD965E58E82BF0E66C38ACD98BD4FE3AB84BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3d:98:3c:5f:d2:d1:08:49:7b:54:3a:fa:c4: 8d:e6:44:25:79:84:d7:92:47:5b:19:fa:03:01:d3: 7e:73:f7:78:e6:3a:c1:55:d5:5c:0d:94:c0:3c:29: 43:49:21:ec:c9:4a:d4:a9:46:20:1f:13:a9:7b:43: ca:db:d7:7d:66:2d:b5:8a:a4:a3:ac:be:c6:9b:67: ad:42:1c:0e:5b:3a:68:e4:28:ed:82:b4:ae:ea:62: 4b:b8:0f:fe:47:f7:16:e5:24:90:c0:7e:de:70:14: 64:a8:52:e8:af:a9:c4:fa:19:9a:9d:24:6d:9d:03: 51:83:7f:73:14:0a:31:b9:c6:ea:73:8e:ce:fb:46: 16:c3:a4:85:92:31:54:cd:a4:d6:1b:b4:5b:6c:7d: af:da:95:2a:58:29:24:71:26:45:0b:6a:36:d9:ee: 47:e2:5c:1e:95:57:60:95:0e:bd:e1:75:ab:02:1a: af:f0:4b:2d:b0:29:9c:30:f1:6a:fa:7d:02:7e:64: 98:36:91:94:55:66:b0:64:83:16:bf:54:ff:97:56: b0:b0:30:f3:e1:20:95:fb:41:53:ba:60:94:f2:bc: e4:9e:ce:29:03:34:4e:1b:01:e0:53:d4:e3:fe:5a: c3:78:f6:b7:8e:f1:eb:5a:e7:8b:82:cc:28:d8:18: 6e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AF:D9:65:E5:8E:82:BF:0E:66:C3:8A:CD:98:BD:4F:E3:AB:84:BF X509v3 Authority Key Identifier: keyid:6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:1f:37:56:e5:55:0a:34:3e:5a:1d:5e:a5:a3:62:06:9f:01: 6c:be:3b:d0:31:3c:b6:20:b3:37:45:0f:e0:7c:02:c3:f1:b5: ad:e1:4b:76:e3:b8:6b:b5:7e:0b:e1:9b:00:e8:eb:47:75:40: 31:a8:c5:26:65:d1:2c:a7:dd:25:c6:1a:95:b4:46:b7:60:00: 0e:17:a5:cd:62:95:9c:f6:c6:0e:34:67:e6:67:c2:ba:9a:82: 8e:1c:41:c7:b9:11:54:92:48:d2:75:98:d0:e8:13:77:74:3b: e0:cc:da:32:f5:57:74:2b:31:43:5a:8e:b1:39:8a:38:cf:02: de:0f:11:0d:27:22:4b:5b:aa:47:dd:8f:58:e0:61:c3:04:25: 58:d9:4a:bd:74:b4:b1:62:64:fc:d9:df:34:09:fa:16:a3:e8: 2e:88:b7:83:08:5e:93:67:9a:33:80:a2:25:91:51:33:fc:e3: 72:16:35:36:7c:51:e6:52:ab:1f:d0:71:6f:fc:9d:39:e5:51: fc:50:04:b2:40:b7:d3:6e:d8:7f:e3:cc:1c:2d:bb:55:5f:50: 8a:9f:20:a9:ab:75:89:f2:b1:df:33:40:f0:e1:9c:bd:57:3e: 0d:e6:07:6c:66:31:2a:5c:68:3b:cf:a2:8c:8f:34:6e:3c:a7: 8c:25:a3:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYn9N8AHpyWq+1Gb4uXpkO6DVYLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFBRTlF M0QxOEQzMTAeFw0yNTA3MDQxMzA1NDZaFw0yNTA3MDcyMjMwNDZaMDMxMTAvBgNV BAMTKDJDQUZEOTY1RTU4RTgyQkYwRTY2QzM4QUNEOThCRDRGRTNBQjg0QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdPZg8X9LRCEl7VDr6xI3mRCV5 hNeSR1sZ+gMB035z93jmOsFV1VwNlMA8KUNJIezJStSpRiAfE6l7Q8rb131mLbWK pKOsvsabZ61CHA5bOmjkKO2CtK7qYku4D/5H9xblJJDAft5wFGSoUuivqcT6GZqd JG2dA1GDf3MUCjG5xupzjs77RhbDpIWSMVTNpNYbtFtsfa/alSpYKSRxJkULajbZ 7kfiXB6VV2CVDr3hdasCGq/wSy2wKZww8Wr6fQJ+ZJg2kZRVZrBkgxa/VP+XVrCw MPPhIJX7QVO6YJTyvOSezikDNE4bAeBT1OP+WsN49reO8eta54uCzCjYGG6HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULK/ZZeWOgr8OZsOKzZi9T+OrhL8wHwYDVR0j BBgwFoAUaizJ08cxSOJl6ZZhkpwa6ePRjTEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjJhOTE2YS1hZDIyLTQ5NzktYmU0My05NTFjNzZmMmY5MjAvMC82QTJDQzlEM0M3 MzE0OEUyNjVFOTk2NjE5MjlDMUFFOUUzRDE4RDMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFBRTlFM0Qx OEQzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2IyYTkxNmEtYWQyMi00OTc5LWJl NDMtOTUxYzc2ZjJmOTIwLzAvNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFB RTlFM0QxOEQzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0fN1blVQo0PlodXqWjYgafAWy+O9AxPLYg szdFD+B8AsPxta3hS3bjuGu1fgvhmwDo60d1QDGoxSZl0Syn3SXGGpW0RrdgAA4X pc1ilZz2xg40Z+Znwrqago4cQce5EVSSSNJ1mNDoE3d0O+DM2jL1V3QrMUNajrE5 ijjPAt4PEQ0nIktbqkfdj1jgYcMEJVjZSr10tLFiZPzZ3zQJ+haj6C6It4MIXpNn mjOAoiWRUTP843IWNTZ8UeZSqx/QcW/8nTnlUfxQBLJAt9Nu2H/jzBwtu1VfUIqf IKmrdYnysd8zQPDhnL1XPg3mB2xmMSpcaDvPooyPNG48p4wlozo= -----END CERTIFICATE-----Generated at Sat Jul 5 01:19:29 2025 by rpki-client