$ rpki-client -vvf repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft File: 6490D3D85678E9C1587D21E9545EF730D21346B5.mft (raw, json) Hash identifier: OzNk2QP8YiGe+Y1Fwa8fQ567TLq9pPvCIzkJgpWYsXY= Subject key identifier: 2B:1A:56:2E:4B:80:E4:56:17:EC:B1:F8:39:27:9D:37:61:FB:7C:99 Authority key identifier: 64:90:D3:D8:56:78:E9:C1:58:7D:21:E9:54:5E:F7:30:D2:13:46:B5 Certificate issuer: /CN=6490D3D85678E9C1587D21E9545EF730D21346B5 Certificate serial: 1AF584DAF36A10E35D39CC77A3215FC42A2C27C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft Manifest number: 95 Signing time: Sun 29 Jun 2025 13:50:43 +0000 Manifest this update: Sun 29 Jun 2025 13:45:43 +0000 Manifest next update: Wed 02 Jul 2025 20:13:43 +0000 Files and hashes: 1: 6490D3D85678E9C1587D21E9545EF730D21346B5.crl (hash: E8ewpqiMYsiFjgriCMQ88hPCpyr6sqDiHdSdWCmqHXM=) 2: 3136302e32302e3232302e302f32342d3234203d3e20313532373835.roa (hash: GDptFXCos4zkhK0BICLJWbr+aS8jyf1+uPPWMmueFX0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.crl rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 20:13:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:f5:84:da:f3:6a:10:e3:5d:39:cc:77:a3:21:5f:c4:2a:2c:27:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6490D3D85678E9C1587D21E9545EF730D21346B5 Validity Not Before: Jun 29 13:45:43 2025 GMT Not After : Jul 2 20:13:43 2025 GMT Subject: CN=2B1A562E4B80E45617ECB1F839279D3761FB7C99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:15:a8:9f:b8:9c:89:b2:3a:ad:66:d7:a6:20: 33:8a:10:32:45:82:ac:23:22:cc:b8:0c:56:87:3e: 61:b7:b9:8f:d4:7e:f9:af:87:59:b3:93:77:29:36: b1:de:51:8c:82:bd:2e:55:8f:54:55:9f:6f:0c:01: af:2c:4c:6c:89:49:f5:08:a1:ae:16:81:da:c6:dc: 17:aa:67:14:c1:da:99:bb:93:7a:5b:f2:8c:7c:f2: 90:f2:7d:e8:b5:b6:d1:da:fd:79:e6:fd:82:7d:49: a1:84:f8:5a:19:d7:32:0a:0d:39:4f:9d:34:c6:d9: 7b:2f:78:4d:54:92:24:a3:f5:ea:13:ce:fe:3d:18: 3a:bd:88:4f:10:cc:1d:f5:a3:20:b6:c1:c0:d1:34: b0:c0:12:d8:05:3b:71:41:f8:73:67:22:3d:6d:0b: 2b:0e:08:ff:1f:2f:12:c3:d8:69:74:94:e2:51:39: 8b:38:77:f9:2f:d7:3c:9e:ae:5e:77:31:b5:a9:db: 62:f8:4b:a1:8a:72:f6:f6:31:62:d8:73:b8:41:28: b9:10:43:43:b3:b0:19:00:d6:a7:cb:9e:2b:3b:3a: e8:d7:c5:46:72:97:5e:c4:b1:48:f4:fa:a3:fc:c8: 0b:3e:69:02:b4:0b:21:30:73:92:5a:ac:7d:60:ea: 1e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1A:56:2E:4B:80:E4:56:17:EC:B1:F8:39:27:9D:37:61:FB:7C:99 X509v3 Authority Key Identifier: keyid:64:90:D3:D8:56:78:E9:C1:58:7D:21:E9:54:5E:F7:30:D2:13:46:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:7c:9f:b9:1a:d0:8a:09:fe:5c:3f:a0:30:39:f9:c4:9d:ab: 43:62:46:01:65:43:d6:dc:3a:ea:2d:ae:00:4e:a4:8d:f2:9d: a9:c9:3c:13:1c:02:28:88:00:26:62:ea:47:18:90:69:0f:82: b5:c6:89:ef:6f:a3:62:38:ca:14:30:c0:ab:7a:37:33:3e:e3: f4:fb:e1:04:4c:62:de:02:a3:8e:56:12:02:23:1d:84:ff:f3: 60:30:10:b7:86:e1:db:08:fb:8b:01:e0:79:49:b7:92:7b:57: 3c:08:07:61:2b:2f:91:30:4e:29:7e:f1:9b:28:13:85:25:c4: 27:6d:29:12:2d:e7:04:47:21:57:bd:17:05:4d:53:3f:da:88: ae:1b:19:54:91:35:05:1f:91:42:b4:3f:9b:19:22:f3:56:fe: f2:4c:8e:89:46:96:82:d3:31:08:7a:eb:fb:7c:c8:45:b3:b3: da:bf:c9:d9:8a:62:df:9c:c0:1e:2e:09:e2:3a:34:b0:60:9a: 7d:7b:7c:91:dc:87:b9:9a:26:f7:98:5a:55:ab:fe:b6:2b:32: 31:5b:e7:65:51:a4:b0:d8:9a:8b:c2:03:1d:ae:48:3f:c3:ae: bb:77:06:9e:53:86:da:00:5f:4a:db:a7:9e:3c:5d:8c:7f:51: 20:6a:db:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGvWE2vNqEONdOcx3oyFfxCosJ8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3MzBE MjEzNDZCNTAeFw0yNTA2MjkxMzQ1NDNaFw0yNTA3MDIyMDEzNDNaMDMxMTAvBgNV BAMTKDJCMUE1NjJFNEI4MEU0NTYxN0VDQjFGODM5Mjc5RDM3NjFGQjdDOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKFaifuJyJsjqtZtemIDOKEDJF gqwjIsy4DFaHPmG3uY/Ufvmvh1mzk3cpNrHeUYyCvS5Vj1RVn28MAa8sTGyJSfUI oa4WgdrG3BeqZxTB2pm7k3pb8ox88pDyfei1ttHa/Xnm/YJ9SaGE+FoZ1zIKDTlP nTTG2XsveE1UkiSj9eoTzv49GDq9iE8QzB31oyC2wcDRNLDAEtgFO3FB+HNnIj1t CysOCP8fLxLD2Gl0lOJROYs4d/kv1zyerl53MbWp22L4S6GKcvb2MWLYc7hBKLkQ Q0OzsBkA1qfLnis7OujXxUZyl17EsUj0+qP8yAs+aQK0CyEwc5JarH1g6h7/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKxpWLkuA5FYX7LH4OSedN2H7fJkwHwYDVR0j BBgwFoAUZJDT2FZ46cFYfSHpVF73MNITRrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODg1NzVjOC01NGZlLTQ4MDEtYTdiMS01MTdkMGU2YjhiNzMvMC82NDkwRDNEODU2 NzhFOUMxNTg3RDIxRTk1NDVFRjczMEQyMTM0NkI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3MzBEMjEz NDZCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg4NTc1YzgtNTRmZS00ODAxLWE3 YjEtNTE3ZDBlNmI4YjczLzAvNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3 MzBEMjEzNDZCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL58n7ka0IoJ/lw/oDA5+cSdq0NiRgFlQ9bc OuotrgBOpI3ynanJPBMcAiiIACZi6kcYkGkPgrXGie9vo2I4yhQwwKt6NzM+4/T7 4QRMYt4Co45WEgIjHYT/82AwELeG4dsI+4sB4HlJt5J7VzwIB2ErL5EwTil+8Zso E4UlxCdtKRIt5wRHIVe9FwVNUz/aiK4bGVSRNQUfkUK0P5sZIvNW/vJMjolGloLT MQh66/t8yEWzs9q/ydmKYt+cwB4uCeI6NLBgmn17fJHch7maJveYWlWr/rYrMjFb 52VRpLDYmovCAx2uSD/Drrt3Bp5ThtoAX0rbp548XYx/USBq25k= -----END CERTIFICATE-----Generated at Tue Jul 1 15:42:35 2025 by rpki-client