$ rpki-client -vvf repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.mft File: C6F736EFBEBD1A0143DB0A57A143545915A18B33.mft (raw, json) Hash identifier: hqD+91wBm/1lKO+SWU+HoJlA5Vyv+ui3WvZdmDk0DCA= Subject key identifier: 43:A3:F3:E5:1C:43:7F:24:61:E0:E2:46:98:FF:44:AA:4B:59:08:19 Authority key identifier: C6:F7:36:EF:BE:BD:1A:01:43:DB:0A:57:A1:43:54:59:15:A1:8B:33 Certificate issuer: /CN=C6F736EFBEBD1A0143DB0A57A143545915A18B33 Certificate serial: 318B51316A342869D3118922E79A92BA1FC06126 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6F736EFBEBD1A0143DB0A57A143545915A18B33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.mft Manifest number: 04E5 Signing time: Tue 01 Jul 2025 04:12:20 +0000 Manifest this update: Tue 01 Jul 2025 04:07:20 +0000 Manifest next update: Fri 04 Jul 2025 13:12:20 +0000 Files and hashes: 1: C6F736EFBEBD1A0143DB0A57A143545915A18B33.crl (hash: +v6bzFzoGIwwqb0d54suOc+mvYmm88Ui0Y82B/cgKDU=) 2: 3131362e3235342e3130302e302f32322d3234203d3e203535363933.roa (hash: p4QmW11QVKIy/H0IsIo9siyqhBsQC1fGJ4OCrOJGVFc=) 3: 3130332e31382e3133322e302f32322d3234203d3e203535363933.roa (hash: n2P3Yp+pRtsLYzAJB7+7TGk1BY1SpgPoZfiLyMV51xc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.crl rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6F736EFBEBD1A0143DB0A57A143545915A18B33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 13:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:8b:51:31:6a:34:28:69:d3:11:89:22:e7:9a:92:ba:1f:c0:61:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6F736EFBEBD1A0143DB0A57A143545915A18B33 Validity Not Before: Jul 1 04:07:20 2025 GMT Not After : Jul 4 13:12:20 2025 GMT Subject: CN=43A3F3E51C437F2461E0E24698FF44AA4B590819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:50:5c:4c:e9:4a:ec:c8:8b:fb:e4:92:d8:99: 48:68:11:82:5c:87:61:9e:ef:bb:3c:28:bc:9b:08: 15:dd:8a:72:1f:79:7f:be:ac:66:b6:90:f2:69:d5: 54:37:e7:d1:8c:92:a3:dc:6c:69:38:43:77:c2:17: 1c:c1:0b:4a:b1:dd:dc:d5:41:f0:0a:71:a6:1a:a8: 16:97:df:28:47:cb:45:10:5d:10:7b:ac:83:d3:34: da:f5:2f:78:3f:ad:78:74:a2:0d:20:8c:e3:0a:dc: b5:87:bc:86:14:ab:2f:f2:32:57:15:36:20:13:1c: 87:13:d0:b8:04:68:1c:b1:1c:ba:37:1b:2f:26:63: 2a:63:7a:ca:d9:01:62:fc:15:f8:ea:a4:d0:83:1c: c5:32:ca:d6:c2:e4:80:23:6a:ba:80:a6:87:2c:dc: 94:ca:0b:c6:bb:a3:34:d1:23:d6:31:be:68:67:18: cc:73:83:5c:3a:c7:96:4b:d3:f5:9a:32:22:22:4f: 2e:56:84:ae:3e:45:19:61:4c:ed:7d:ce:26:3f:41: ec:94:70:17:1e:99:f8:b1:a4:67:74:8d:39:0d:94: 25:e1:6f:55:6b:1e:5e:4b:0c:32:7d:1c:1c:36:0f: 27:9b:bb:70:f5:6d:f4:4e:ba:3b:fb:10:34:3f:86: 5a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A3:F3:E5:1C:43:7F:24:61:E0:E2:46:98:FF:44:AA:4B:59:08:19 X509v3 Authority Key Identifier: keyid:C6:F7:36:EF:BE:BD:1A:01:43:DB:0A:57:A1:43:54:59:15:A1:8B:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6F736EFBEBD1A0143DB0A57A143545915A18B33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/C6F736EFBEBD1A0143DB0A57A143545915A18B33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d7:86:84:60:da:73:cb:32:5b:9c:6c:90:bf:03:9a:16:1b: e5:30:b1:b0:9f:6f:35:7b:7a:a9:1f:b1:ec:34:37:94:a4:ae: 4f:ee:7b:e4:ca:b9:1c:6e:4a:da:c6:d0:80:e4:00:a2:fa:c2: 0a:42:aa:7f:3a:39:8a:75:76:ad:e3:c5:7e:fd:b7:25:ae:22: 08:7c:19:9d:fe:ae:22:92:e8:79:17:0e:bb:aa:aa:46:62:76: 47:04:02:22:6a:eb:38:61:7b:e8:af:1b:24:4c:0c:de:b6:b2: 63:8b:5f:6c:e5:20:06:40:fe:d0:e1:fd:7d:fd:5b:4e:1c:5d: d2:f1:13:63:33:5f:eb:af:f5:26:cf:49:35:1c:6b:ce:52:0e: 09:8a:78:68:5d:bd:88:26:dc:eb:5f:42:94:37:61:ae:c2:13: 9b:2d:5e:68:cf:55:ba:46:79:68:7c:bb:42:f5:79:97:9d:93: a7:6e:43:32:bc:c4:19:7b:a5:58:b3:98:3b:92:7f:46:a1:d7: f9:db:2b:82:22:4f:41:83:70:0a:fe:4e:5e:9a:ea:c5:b9:ec: da:50:00:33:a3:d7:44:2c:43:7e:07:6c:cd:0b:9a:74:f6:3d: 91:77:a5:a6:b4:86:ac:2d:48:aa:69:29:db:f5:25:2d:f1:53: 41:ea:d9:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMYtRMWo0KGnTEYki55qSuh/AYSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZGNzM2RUZCRUJEMUEwMTQzREIwQTU3QTE0MzU0NTkx NUExOEIzMzAeFw0yNTA3MDEwNDA3MjBaFw0yNTA3MDQxMzEyMjBaMDMxMTAvBgNV BAMTKDQzQTNGM0U1MUM0MzdGMjQ2MUUwRTI0Njk4RkY0NEFBNEI1OTA4MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkUFxM6UrsyIv75JLYmUhoEYJc h2Ge77s8KLybCBXdinIfeX++rGa2kPJp1VQ359GMkqPcbGk4Q3fCFxzBC0qx3dzV QfAKcaYaqBaX3yhHy0UQXRB7rIPTNNr1L3g/rXh0og0gjOMK3LWHvIYUqy/yMlcV NiATHIcT0LgEaByxHLo3Gy8mYypjesrZAWL8FfjqpNCDHMUyytbC5IAjarqApocs 3JTKC8a7ozTRI9YxvmhnGMxzg1w6x5ZL0/WaMiIiTy5WhK4+RRlhTO19ziY/QeyU cBcemfixpGd0jTkNlCXhb1VrHl5LDDJ9HBw2Dyebu3D1bfROujv7EDQ/hlo1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ6Pz5RxDfyRh4OJGmP9EqktZCBkwHwYDVR0j BBgwFoAUxvc27769GgFD2wpXoUNUWRWhizMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDU0YjRlMi0yZTU4LTQ2NWItYWZhYS0xYzk0NjVjODgyZTYvMC9DNkY3MzZFRkJF QkQxQTAxNDNEQjBBNTdBMTQzNTQ1OTE1QTE4QjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzZGNzM2RUZCRUJEMUEwMTQzREIwQTU3QTE0MzU0NTkxNUEx OEIzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ1NGI0ZTItMmU1OC00NjViLWFm YWEtMWM5NDY1Yzg4MmU2LzAvQzZGNzM2RUZCRUJEMUEwMTQzREIwQTU3QTE0MzU0 NTkxNUExOEIzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIvXhoRg2nPLMlucbJC/A5oWG+UwsbCfbzV7 eqkfsew0N5Skrk/ue+TKuRxuStrG0IDkAKL6wgpCqn86OYp1dq3jxX79tyWuIgh8 GZ3+riKS6HkXDruqqkZidkcEAiJq6zhhe+ivGyRMDN62smOLX2zlIAZA/tDh/X39 W04cXdLxE2MzX+uv9SbPSTUca85SDgmKeGhdvYgm3OtfQpQ3Ya7CE5stXmjPVbpG eWh8u0L1eZedk6duQzK8xBl7pVizmDuSf0ah1/nbK4IiT0GDcAr+Tl6a6sW57NpQ ADOj10QsQ34HbM0LmnT2PZF3paa0hqwtSKppKdv1JS3xU0Hq2XY= -----END CERTIFICATE-----Generated at Tue Jul 1 11:52:54 2025 by rpki-client