$ rpki-client -vvf repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft File: 6D958AAEBD8946E47C968284B2652E02A2017E9E.mft (raw, json) Hash identifier: EhLH9rDLB5I5d9Rs/ZLVBMGWbP2A3ITwbGekhELR1Q0= Subject key identifier: 96:C0:2F:AD:64:0C:44:96:0E:EF:FD:52:63:94:9B:26:CC:5F:52:B2 Authority key identifier: 6D:95:8A:AE:BD:89:46:E4:7C:96:82:84:B2:65:2E:02:A2:01:7E:9E Certificate issuer: /CN=6D958AAEBD8946E47C968284B2652E02A2017E9E Certificate serial: 77D5B3EEBE9712FC2567E4617A22EC43DF5F1C6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft Manifest number: 017E Signing time: Mon 30 Jun 2025 20:20:04 +0000 Manifest this update: Mon 30 Jun 2025 20:15:04 +0000 Manifest next update: Fri 04 Jul 2025 02:54:04 +0000 Files and hashes: 1: 6D958AAEBD8946E47C968284B2652E02A2017E9E.crl (hash: 3QWpJ8jpffZ6n/6j9edgffWdwBNzh4SClzu4rR8fFDM=) 2: 3130332e3136372e3135362e302f32342d3234203d3e20313530353534.roa (hash: 80t5eYSm2/YNhAieXcls0z7n1huVJvGeox5Fv2BAMW4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.crl rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 02:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:d5:b3:ee:be:97:12:fc:25:67:e4:61:7a:22:ec:43:df:5f:1c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D958AAEBD8946E47C968284B2652E02A2017E9E Validity Not Before: Jun 30 20:15:04 2025 GMT Not After : Jul 4 02:54:04 2025 GMT Subject: CN=96C02FAD640C44960EEFFD5263949B26CC5F52B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:b6:db:2d:19:02:69:68:b5:95:1c:ff:a9:57: aa:5b:f4:40:f6:c9:81:51:5a:aa:61:a3:d6:37:91: 43:e5:06:a6:3e:2b:e9:fb:25:25:ba:96:1f:ab:7c: 85:d8:f6:f9:54:5d:0c:12:54:19:81:ce:26:0a:c4: 59:24:9e:73:37:52:8f:ca:01:f3:f1:8f:9b:51:79: 38:b0:dd:82:0b:4b:7f:80:fe:2f:7d:18:21:7f:2b: a0:6f:40:40:81:02:56:be:17:2c:16:ad:13:d5:0b: 8b:51:4d:49:16:cc:2f:1c:da:60:8d:dc:01:eb:a1: a8:53:05:4a:10:36:19:e6:55:c0:cf:87:79:c2:e2: 2d:cd:c4:e6:9e:b4:f9:ed:44:00:ec:c3:62:6e:98: 52:ee:7d:fa:47:bf:a3:9d:73:fb:6c:2f:ee:34:a0: e8:44:ba:33:ab:ff:ae:ab:5a:31:ec:c3:ab:fb:78: 64:55:1d:a9:41:ff:2f:b8:55:79:87:ee:16:48:86: 41:1d:f2:06:88:9f:85:3b:18:2f:75:ec:8a:cd:da: 9c:d2:a3:ec:69:9c:e1:ad:5b:32:3a:f0:1a:4b:7d: cd:6d:84:c9:36:90:a1:99:e4:0a:2d:0d:c7:2c:cc: d2:09:7d:83:d6:38:2c:f9:39:3a:06:4e:93:9a:ac: 64:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C0:2F:AD:64:0C:44:96:0E:EF:FD:52:63:94:9B:26:CC:5F:52:B2 X509v3 Authority Key Identifier: keyid:6D:95:8A:AE:BD:89:46:E4:7C:96:82:84:B2:65:2E:02:A2:01:7E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:98:fe:bc:2b:77:d8:66:4e:c5:29:b5:02:36:9b:ee:fe:bd: 8c:c9:14:61:ba:33:6b:34:6a:08:2f:af:7b:96:9c:e3:50:5c: 46:10:e6:94:31:0b:6f:1f:0d:25:e2:be:af:1d:54:62:f7:91: d9:32:38:a7:e5:9c:59:36:04:6f:1b:28:f7:be:39:a5:ce:13: 78:4f:9c:d0:8b:74:8b:8e:2d:68:e9:65:b6:c1:bc:d1:a1:5e: 4e:f3:72:29:1c:79:df:30:c7:fc:5e:b6:c2:96:ac:a4:3f:bc: df:7c:a0:8c:22:57:f6:c8:f4:1b:4f:4e:4c:fe:e6:c2:d2:02: d5:5b:9c:1d:83:06:5e:47:af:e0:17:a9:b6:81:42:6d:c2:92: d9:2a:e6:16:60:7f:88:b0:e3:ee:38:64:3f:b0:fc:c6:0f:7a: be:a3:12:0f:ca:be:aa:d9:40:d9:a4:e9:bc:f3:52:e8:5a:1e: cd:b4:80:74:87:e9:b3:8f:63:c0:f8:a4:2e:96:3f:fe:88:ce: 8b:52:0c:e2:fe:3d:c0:3c:07:ab:7e:68:65:45:9c:8e:be:85: 0b:84:a1:8d:0a:58:cb:7d:1a:d7:00:4a:dd:f8:96:df:64:9b: 1d:8d:8d:58:47:11:b9:17:54:09:84:b7:a1:2c:32:7a:4b:12: 80:60:18:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd9Wz7r6XEvwlZ+RheiLsQ99fHG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJFMDJB MjAxN0U5RTAeFw0yNTA2MzAyMDE1MDRaFw0yNTA3MDQwMjU0MDRaMDMxMTAvBgNV BAMTKDk2QzAyRkFENjQwQzQ0OTYwRUVGRkQ1MjYzOTQ5QjI2Q0M1RjUyQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2ttstGQJpaLWVHP+pV6pb9ED2 yYFRWqpho9Y3kUPlBqY+K+n7JSW6lh+rfIXY9vlUXQwSVBmBziYKxFkknnM3Uo/K AfPxj5tReTiw3YILS3+A/i99GCF/K6BvQECBAla+FywWrRPVC4tRTUkWzC8c2mCN 3AHroahTBUoQNhnmVcDPh3nC4i3NxOaetPntRADsw2JumFLuffpHv6Odc/tsL+40 oOhEujOr/66rWjHsw6v7eGRVHalB/y+4VXmH7hZIhkEd8gaIn4U7GC917IrN2pzS o+xpnOGtWzI68BpLfc1thMk2kKGZ5AotDccszNIJfYPWOCz5OToGTpOarGTpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlsAvrWQMRJYO7/1SY5SbJsxfUrIwHwYDVR0j BBgwFoAUbZWKrr2JRuR8loKEsmUuAqIBfp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTgwMzEyNS1kNzc3LTQwNTYtODQ0ZC04ZDFiZWZkMDE2M2QvMC82RDk1OEFBRUJE ODk0NkU0N0M5NjgyODRCMjY1MkUwMkEyMDE3RTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJFMDJBMjAx N0U5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE4MDMxMjUtZDc3Ny00MDU2LTg0 NGQtOGQxYmVmZDAxNjNkLzAvNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJF MDJBMjAxN0U5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6Y/rwrd9hmTsUptQI2m+7+vYzJFGG6M2s0 aggvr3uWnONQXEYQ5pQxC28fDSXivq8dVGL3kdkyOKflnFk2BG8bKPe+OaXOE3hP nNCLdIuOLWjpZbbBvNGhXk7zcikced8wx/xetsKWrKQ/vN98oIwiV/bI9BtPTkz+ 5sLSAtVbnB2DBl5Hr+AXqbaBQm3Cktkq5hZgf4iw4+44ZD+w/MYPer6jEg/KvqrZ QNmk6bzzUuhaHs20gHSH6bOPY8D4pC6WP/6IzotSDOL+PcA8B6t+aGVFnI6+hQuE oY0KWMt9GtcASt34lt9kmx2NjVhHEbkXVAmEt6EsMnpLEoBgGJI= -----END CERTIFICATE-----Generated at Tue Jul 1 18:31:41 2025 by rpki-client