$ rpki-client -vvf repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft File: 6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft (raw, json) Hash identifier: kFNgN0WFyNEybYkWKHFc5k0B9oXfp8kAnQ2ge0yOk/E= Subject key identifier: 29:FA:95:5B:D6:7B:BF:2B:51:6B:83:89:F7:83:96:9C:16:5A:39:FB Authority key identifier: 6C:F6:DF:7E:65:16:A6:AB:F5:39:F0:39:6C:B6:C0:D4:DB:50:F4:D8 Certificate issuer: /CN=6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8 Certificate serial: 5FAE71B4CDDE71EBCB54C748D0CBAB50BE4612C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft Manifest number: 01DF Signing time: Sun 29 Jun 2025 17:02:01 +0000 Manifest this update: Sun 29 Jun 2025 16:57:01 +0000 Manifest next update: Thu 03 Jul 2025 03:10:01 +0000 Files and hashes: 1: 3130332e3139312e3134382e302f32332d3234203d3e2034383030.roa (hash: LB25lzl1k2b8wSXRCoswASZkgaqBVFdROFOv1MVYW7s=) 2: 6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl (hash: v+VmpVoE7WsAPMwi2DPRBKdbeuwv59sGeJL3tziz9I0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:ae:71:b4:cd:de:71:eb:cb:54:c7:48:d0:cb:ab:50:be:46:12:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8 Validity Not Before: Jun 29 16:57:01 2025 GMT Not After : Jul 3 03:10:01 2025 GMT Subject: CN=29FA955BD67BBF2B516B8389F783969C165A39FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:80:82:e7:5f:6a:3e:7c:41:27:a0:2d:b5:78: f7:d5:05:b3:89:f9:08:51:c8:9e:c7:9a:b2:37:b2: 61:79:ec:54:98:e9:1d:c7:ff:f8:f9:ac:bc:99:2a: 1e:e2:dd:4b:8d:b3:da:7a:4f:e6:0b:2a:50:74:10: 70:a2:c1:a0:76:b4:eb:da:06:22:d2:16:f4:9f:6b: 49:28:e7:f3:3d:ba:c6:4a:23:63:93:6b:9f:7a:f3: f9:00:b0:6d:9c:50:66:b7:df:7c:6f:e0:1d:e3:15: aa:b5:f8:67:38:c4:d2:cf:69:20:1a:91:e2:f2:74: 63:11:9c:3b:b1:1f:a7:ad:d4:40:c9:41:c0:5f:8c: 15:8f:d8:d6:b5:30:0f:ea:70:65:aa:25:c5:3a:71: f8:f8:31:f5:f5:e4:8e:33:86:1d:e7:b8:6c:f9:e3: f8:d8:34:d4:9a:34:4b:96:9d:d3:30:fe:ce:52:7c: 88:fc:31:94:07:95:25:48:7a:4a:af:3e:b7:a5:4c: b3:a4:f2:11:7b:58:ee:c4:76:c6:34:e5:78:6c:dd: cc:90:be:51:de:88:28:3e:c3:eb:46:88:14:d4:c4: dc:e2:85:68:c8:2f:29:c5:bb:e1:a8:a4:5a:0a:20: cd:e4:1a:0e:6a:2d:17:5c:43:d1:d7:05:42:83:5e: d7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:FA:95:5B:D6:7B:BF:2B:51:6B:83:89:F7:83:96:9C:16:5A:39:FB X509v3 Authority Key Identifier: keyid:6C:F6:DF:7E:65:16:A6:AB:F5:39:F0:39:6C:B6:C0:D4:DB:50:F4:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:6b:13:04:4d:37:4d:65:c7:cc:61:19:50:c2:32:81:e4:74: c9:66:03:be:0c:04:ac:17:3b:94:88:1b:f7:54:af:f9:fb:23: 9f:25:c3:12:a4:54:11:1c:83:32:c3:2b:fd:0d:03:c1:df:13: 97:24:53:9b:9f:ce:c6:32:de:9d:14:9e:95:f9:ac:19:9d:bc: 49:94:8d:35:d7:b3:cc:2c:3e:78:df:dc:d8:45:f1:97:84:60: 7f:74:4a:02:97:38:a2:8d:61:84:75:16:26:de:a2:49:97:88: dd:a8:47:63:54:5c:f9:81:d0:15:88:9f:a9:03:8e:ce:9d:4a: db:39:7c:66:1e:a9:9a:7b:99:0e:04:3c:88:5e:d6:79:12:81: 22:57:1f:47:13:7b:0a:6b:bd:af:bf:49:38:1a:a2:8c:5f:b8: ab:78:67:bc:17:ab:9d:ef:ab:be:9a:fb:49:2e:28:05:5b:79: 5c:7f:4c:51:de:b1:19:cc:18:b2:6b:fd:c0:85:12:48:07:9d: 19:40:3e:53:b7:7d:f6:41:51:92:1a:1f:9f:08:f4:93:aa:59: 8b:7d:5b:74:66:bd:5d:f3:1d:98:b6:6c:d3:f7:40:0e:0b:c4: 82:af:96:3b:de:2c:dd:b2:0d:d8:ca:5d:3d:b2:f5:a7:f4:bb: f7:5c:b5:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX65xtM3ecevLVMdI0MurUL5GEsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMwRDRE QjUwRjREODAeFw0yNTA2MjkxNjU3MDFaFw0yNTA3MDMwMzEwMDFaMDMxMTAvBgNV BAMTKDI5RkE5NTVCRDY3QkJGMkI1MTZCODM4OUY3ODM5NjlDMTY1QTM5RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCngILnX2o+fEEnoC21ePfVBbOJ +QhRyJ7HmrI3smF57FSY6R3H//j5rLyZKh7i3UuNs9p6T+YLKlB0EHCiwaB2tOva BiLSFvSfa0ko5/M9usZKI2OTa5968/kAsG2cUGa333xv4B3jFaq1+Gc4xNLPaSAa keLydGMRnDuxH6et1EDJQcBfjBWP2Na1MA/qcGWqJcU6cfj4MfX15I4zhh3nuGz5 4/jYNNSaNEuWndMw/s5SfIj8MZQHlSVIekqvPrelTLOk8hF7WO7EdsY05Xhs3cyQ vlHeiCg+w+tGiBTUxNzihWjILynFu+GopFoKIM3kGg5qLRdcQ9HXBUKDXtflAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKfqVW9Z7vytRa4OJ94OWnBZaOfswHwYDVR0j BBgwFoAUbPbffmUWpqv1OfA5bLbA1NtQ9NgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDkwNmZjMC00MzYzLTRmNDYtOWIxNC01YzFhYjgyNWEzMzUvMC82Q0Y2REY3RTY1 MTZBNkFCRjUzOUYwMzk2Q0I2QzBENERCNTBGNEQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMwRDREQjUw RjREOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ5MDZmYzAtNDM2My00ZjQ2LTli MTQtNWMxYWI4MjVhMzM1LzAvNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMw RDREQjUwRjREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtrEwRNN01lx8xhGVDCMoHkdMlmA74MBKwX O5SIG/dUr/n7I58lwxKkVBEcgzLDK/0NA8HfE5ckU5ufzsYy3p0UnpX5rBmdvEmU jTXXs8wsPnjf3NhF8ZeEYH90SgKXOKKNYYR1FibeokmXiN2oR2NUXPmB0BWIn6kD js6dSts5fGYeqZp7mQ4EPIhe1nkSgSJXH0cTewprva+/STgaooxfuKt4Z7wXq53v q76a+0kuKAVbeVx/TFHesRnMGLJr/cCFEkgHnRlAPlO3ffZBUZIaH58I9JOqWYt9 W3RmvV3zHZi2bNP3QA4LxIKvljveLN2yDdjKXT2y9af0u/dctSk= -----END CERTIFICATE-----Generated at Sun Jun 29 18:49:11 2025 by rpki-client