$ rpki-client -vvf repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft File: 6176447D40001B20E000D73A3B5E66B74A431374.mft (raw, json) Hash identifier: mQ8c2dqv6c0zngntWVa/3M4X1XWnn6aoK/ptnwZXQdw= Subject key identifier: CE:C3:DC:BF:2B:B2:78:F9:CA:2B:FC:9D:9D:A8:58:04:AF:CA:FE:77 Authority key identifier: 61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74 Certificate issuer: /CN=6176447D40001B20E000D73A3B5E66B74A431374 Certificate serial: 106A23D30175D2B2A9ADE53F3EF6A1211F983175 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft Manifest number: AB Signing time: Sun 29 Jun 2025 16:01:21 +0000 Manifest this update: Sun 29 Jun 2025 15:56:21 +0000 Manifest next update: Thu 03 Jul 2025 01:36:21 +0000 Files and hashes: 1: 3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa (hash: x2vTD40zXLkQU7jWF3x2cDs6hnaBe5UiTC1SGpRcNlY=) 2: 6176447D40001B20E000D73A3B5E66B74A431374.crl (hash: 9kWcOdZgTbFu7ZwZfddBjbn+0ujbDYItkt1Emtoc2aE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.crl rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 01:36:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:6a:23:d3:01:75:d2:b2:a9:ad:e5:3f:3e:f6:a1:21:1f:98:31:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6176447D40001B20E000D73A3B5E66B74A431374 Validity Not Before: Jun 29 15:56:21 2025 GMT Not After : Jul 3 01:36:21 2025 GMT Subject: CN=CEC3DCBF2BB278F9CA2BFC9D9DA85804AFCAFE77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:17:98:9a:ff:72:58:d2:64:d1:dd:f0:39:19: fb:ed:5d:71:45:1d:64:4a:32:82:b8:0b:c8:9f:ab: ac:d4:53:2b:17:af:a8:bf:ec:ac:77:81:dd:0f:1b: 21:72:77:70:9c:e0:b3:3c:ba:72:67:3d:9b:a8:63: 1c:9e:a6:f9:7e:90:b9:24:0e:47:dc:bb:f2:9e:93: 98:88:72:c4:97:ee:ad:e9:72:00:e8:57:55:14:9e: 45:78:89:05:cd:ce:bd:9e:eb:07:69:cd:35:b7:15: 21:3c:c0:5b:52:8f:13:0a:48:0d:39:6c:c4:08:0b: f8:27:92:c1:1a:75:9c:88:8c:c1:42:7d:2d:75:4c: 0b:53:9c:07:2d:f4:d4:da:6f:45:94:b3:62:6a:6c: fc:c5:b3:02:28:8e:1f:21:20:d4:11:24:d1:d4:15: e7:7d:4a:9f:83:21:72:94:f8:59:90:79:ba:5f:bb: 0a:f4:cd:c8:cb:20:d5:8c:50:be:a5:32:ff:d2:bc: ee:85:a0:93:45:83:84:32:fc:96:e5:e9:49:48:d8: 97:32:47:a1:6d:44:3b:74:93:24:3c:aa:d0:17:70: a9:91:b8:87:b6:b4:f6:a9:d5:3d:16:64:5d:33:25: 9f:02:b6:8a:a8:e0:10:f9:de:ff:98:76:26:3b:21: 70:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C3:DC:BF:2B:B2:78:F9:CA:2B:FC:9D:9D:A8:58:04:AF:CA:FE:77 X509v3 Authority Key Identifier: keyid:61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:f9:0f:4e:70:c5:17:48:89:13:0b:86:25:91:29:65:c8:1b: 02:0a:d3:ec:5a:25:3b:ce:34:0f:46:c1:49:cc:81:59:7f:b5: b1:16:7b:80:94:69:f4:b2:e5:c4:7f:da:68:73:d8:0e:a9:fc: e5:a9:c6:ff:13:8e:f4:04:64:9d:6a:72:8e:a4:d2:5f:0c:30: 4e:a8:6b:00:fc:e2:c7:57:b7:d6:7e:db:1c:f5:a3:2f:95:48: aa:c3:46:89:97:61:ae:a1:61:9a:9d:c8:9b:e5:38:b4:43:61: e3:69:d5:4b:8d:79:92:63:f4:ee:98:7c:6e:34:ea:7b:61:74: a3:a1:ce:2d:80:55:67:95:9b:ee:88:d5:56:38:8e:4e:c2:6d: 28:e9:79:91:3e:31:fa:dd:25:75:4b:a6:84:01:6f:c8:7a:67: 23:16:47:af:5d:02:dd:d0:57:a2:b8:22:70:7e:0b:94:a2:7c: 1b:52:f5:4f:c9:c7:d3:31:7b:f9:36:6e:9a:95:6f:d3:50:0a: fc:c5:0b:40:11:ca:be:49:bf:1d:59:74:24:6b:88:d1:82:f0: 6c:93:72:7b:c3:f6:86:0f:8e:c0:6c:97:d5:b4:0b:96:63:f9: 9b:a7:56:52:59:90:ed:53:d4:17:09:50:f3:f0:f2:fb:64:66: d2:25:81:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEGoj0wF10rKpreU/PvahIR+YMXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2Qjc0 QTQzMTM3NDAeFw0yNTA2MjkxNTU2MjFaFw0yNTA3MDMwMTM2MjFaMDMxMTAvBgNV BAMTKENFQzNEQ0JGMkJCMjc4RjlDQTJCRkM5RDlEQTg1ODA0QUZDQUZFNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiF5ia/3JY0mTR3fA5GfvtXXFF HWRKMoK4C8ifq6zUUysXr6i/7Kx3gd0PGyFyd3Cc4LM8unJnPZuoYxyepvl+kLkk Dkfcu/Kek5iIcsSX7q3pcgDoV1UUnkV4iQXNzr2e6wdpzTW3FSE8wFtSjxMKSA05 bMQIC/gnksEadZyIjMFCfS11TAtTnAct9NTab0WUs2JqbPzFswIojh8hINQRJNHU Fed9Sp+DIXKU+FmQebpfuwr0zcjLINWMUL6lMv/SvO6FoJNFg4Qy/Jbl6UlI2Jcy R6FtRDt0kyQ8qtAXcKmRuIe2tPap1T0WZF0zJZ8Ctoqo4BD53v+YdiY7IXA9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzsPcvyuyePnKK/ydnahYBK/K/ncwHwYDVR0j BBgwFoAUYXZEfUAAGyDgANc6O15mt0pDE3QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDBiZDZlNC1iNGZiLTRmNDgtYjgzYS1hY2I4ZjJkNzQ1ODMvMC82MTc2NDQ3RDQw MDAxQjIwRTAwMEQ3M0EzQjVFNjZCNzRBNDMxMzc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2Qjc0QTQz MTM3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQwYmQ2ZTQtYjRmYi00ZjQ4LWI4 M2EtYWNiOGYyZDc0NTgzLzAvNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2 Qjc0QTQzMTM3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABL5D05wxRdIiRMLhiWRKWXIGwIK0+xaJTvO NA9GwUnMgVl/tbEWe4CUafSy5cR/2mhz2A6p/OWpxv8TjvQEZJ1qco6k0l8MME6o awD84sdXt9Z+2xz1oy+VSKrDRomXYa6hYZqdyJvlOLRDYeNp1UuNeZJj9O6YfG40 6nthdKOhzi2AVWeVm+6I1VY4jk7CbSjpeZE+MfrdJXVLpoQBb8h6ZyMWR69dAt3Q V6K4InB+C5SifBtS9U/Jx9Mxe/k2bpqVb9NQCvzFC0ARyr5Jvx1ZdCRriNGC8GyT cnvD9oYPjsBsl9W0C5Zj+ZunVlJZkO1T1BcJUPPw8vtkZtIlgUs= -----END CERTIFICATE-----Generated at Mon Jun 30 16:16:08 2025 by rpki-client