$ rpki-client -vvf repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft File: 6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft (raw, json) Hash identifier: x1+pzTJ2yCuhqyvfb6zdbBU+L1lhgX+sRSY78roBjqo= Subject key identifier: 36:C4:AB:C8:FF:D4:E5:9E:9C:87:6D:3E:ED:83:5D:85:8A:92:68:B0 Authority key identifier: 6D:39:05:08:CE:26:22:C5:BA:AA:3B:EE:95:AA:61:27:FE:5B:E5:F4 Certificate issuer: /CN=6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4 Certificate serial: 67CE3FF2EE45FA4261439AC2ECCDCA7B6B98756F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft Manifest number: 0288 Signing time: Sat 28 Jun 2025 12:21:15 +0000 Manifest this update: Sat 28 Jun 2025 12:16:15 +0000 Manifest next update: Tue 01 Jul 2025 23:49:15 +0000 Files and hashes: 1: 3130332e3137342e31362e302f32342d3234203d3e2030.roa (hash: R+Xsj942oVIU56vgb7MBSOwNXGuK6EmVsnXWJ+Njpjw=) 2: 6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.crl (hash: ZMR79FHzcc6imNpQIGQQO7o3TL/XZIenFxJR/YGZ0zg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.crl rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 23:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ce:3f:f2:ee:45:fa:42:61:43:9a:c2:ec:cd:ca:7b:6b:98:75:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4 Validity Not Before: Jun 28 12:16:15 2025 GMT Not After : Jul 1 23:49:15 2025 GMT Subject: CN=36C4ABC8FFD4E59E9C876D3EED835D858A9268B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e6:9b:40:59:28:e2:5d:98:64:86:ff:a3:76: 4b:85:c1:f9:a8:87:4c:26:f9:83:0f:f2:6f:e1:30: a3:b8:f9:bb:b2:ad:e9:5a:43:7a:2c:e4:7a:e8:70: f0:38:74:20:22:d9:a4:87:00:ca:3e:84:25:d0:67: 25:24:59:d5:21:b7:68:0c:c8:83:c2:c7:60:00:99: 50:98:2f:c8:2d:f4:6a:35:4a:b0:ec:7a:d2:a1:58: a0:7b:26:1d:22:68:22:3d:11:6f:a3:fa:43:ce:57: 55:0b:67:3f:4d:52:36:cf:59:16:fd:0b:bb:9b:ac: 6b:ac:8c:e1:6e:b7:4a:a8:59:67:f0:11:63:1d:2e: 51:51:09:ca:6e:76:8b:6e:44:c1:99:41:e2:3e:d1: c1:c8:19:4b:74:e7:85:64:8a:80:6b:31:ed:3e:f9: 7b:45:15:d3:d5:08:22:b1:e9:25:da:a6:40:b4:8c: c1:fa:4d:51:50:61:e5:14:bc:e1:70:b9:b6:05:4c: 76:4b:f4:3e:32:1f:36:83:cb:9d:eb:a5:4f:bd:d2: 28:64:12:62:05:12:06:83:18:9d:58:db:2f:18:e4: c0:ff:a5:48:ea:6b:cc:44:6b:ed:b4:0c:84:e9:4a: 5a:84:8f:57:f6:a0:52:f0:6c:09:d7:c8:e3:b7:0f: 60:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C4:AB:C8:FF:D4:E5:9E:9C:87:6D:3E:ED:83:5D:85:8A:92:68:B0 X509v3 Authority Key Identifier: keyid:6D:39:05:08:CE:26:22:C5:BA:AA:3B:EE:95:AA:61:27:FE:5B:E5:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:bf:c1:c5:03:15:9e:e7:76:a3:c4:54:51:f4:21:f7:77:c1: f0:d9:cb:ca:92:3b:1f:dc:ef:39:ba:5e:bc:28:55:34:2e:b2: ef:5f:06:f4:28:6f:5d:7a:df:53:e6:73:f3:f5:98:75:38:0b: 86:d0:4e:c4:9b:1c:f0:96:bf:ae:fc:ef:af:83:cf:f0:6b:db: bf:83:6f:2a:11:78:d3:38:94:88:76:35:00:db:32:52:03:4e: 28:0e:5c:42:dd:79:89:7b:67:b9:0b:f3:9c:e7:96:85:4a:a6: cd:a3:07:4a:0c:38:e9:70:e4:c5:49:b9:17:a2:08:98:5a:bb: 15:b9:69:91:4c:5c:47:57:01:af:4b:78:db:e7:84:3e:b8:c1: 9d:3c:40:e4:a4:01:03:a4:09:af:65:81:03:bf:e3:91:1c:d3: 64:42:ae:70:f2:24:a8:0f:b7:a6:23:59:d9:7b:ba:d4:50:79: a2:25:ed:c6:d1:fb:45:be:2d:2e:01:b8:db:25:f2:17:40:ef: bc:65:c8:60:20:65:5b:cc:cf:1b:77:f8:95:52:f4:c7:18:45: 8c:65:05:57:dc:76:c8:73:8f:56:7a:aa:8c:43:b4:86:ea:33: 32:33:f9:d3:f2:db:7d:f0:15:9a:27:6c:f0:cf:cb:2c:20:bc: 84:5a:7f:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ84/8u5F+kJhQ5rC7M3Ke2uYdW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQzOTA1MDhDRTI2MjJDNUJBQUEzQkVFOTVBQTYxMjdG RTVCRTVGNDAeFw0yNTA2MjgxMjE2MTVaFw0yNTA3MDEyMzQ5MTVaMDMxMTAvBgNV BAMTKDM2QzRBQkM4RkZENEU1OUU5Qzg3NkQzRUVEODM1RDg1OEE5MjY4QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd5ptAWSjiXZhkhv+jdkuFwfmo h0wm+YMP8m/hMKO4+buyrelaQ3os5HrocPA4dCAi2aSHAMo+hCXQZyUkWdUht2gM yIPCx2AAmVCYL8gt9Go1SrDsetKhWKB7Jh0iaCI9EW+j+kPOV1ULZz9NUjbPWRb9 C7ubrGusjOFut0qoWWfwEWMdLlFRCcpudotuRMGZQeI+0cHIGUt054VkioBrMe0+ +XtFFdPVCCKx6SXapkC0jMH6TVFQYeUUvOFwubYFTHZL9D4yHzaDy53rpU+90ihk EmIFEgaDGJ1Y2y8Y5MD/pUjqa8xEa+20DITpSlqEj1f2oFLwbAnXyOO3D2A1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNsSryP/U5Z6ch20+7YNdhYqSaLAwHwYDVR0j BBgwFoAUbTkFCM4mIsW6qjvulaphJ/5b5fQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTQ4MmFkYS1kMGM4LTQ2NGItYTAwNy04NTE5NDg5Y2IxYzQvMC82RDM5MDUwOENF MjYyMkM1QkFBQTNCRUU5NUFBNjEyN0ZFNUJFNUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQzOTA1MDhDRTI2MjJDNUJBQUEzQkVFOTVBQTYxMjdGRTVC RTVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U0ODJhZGEtZDBjOC00NjRiLWEw MDctODUxOTQ4OWNiMWM0LzAvNkQzOTA1MDhDRTI2MjJDNUJBQUEzQkVFOTVBQTYx MjdGRTVCRTVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2/wcUDFZ7ndqPEVFH0Ifd3wfDZy8qSOx/c 7zm6XrwoVTQusu9fBvQob11631Pmc/P1mHU4C4bQTsSbHPCWv67876+Dz/Br27+D byoReNM4lIh2NQDbMlIDTigOXELdeYl7Z7kL85znloVKps2jB0oMOOlw5MVJuRei CJhauxW5aZFMXEdXAa9LeNvnhD64wZ08QOSkAQOkCa9lgQO/45Ec02RCrnDyJKgP t6YjWdl7utRQeaIl7cbR+0W+LS4BuNsl8hdA77xlyGAgZVvMzxt3+JVS9McYRYxl BVfcdshzj1Z6qoxDtIbqMzIz+dPy233wFZonbPDPyywgvIRafws= -----END CERTIFICATE-----Generated at Mon Jun 30 03:31:38 2025 by rpki-client