$ rpki-client -vvf repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft File: 6B35526165718CDFDDCB202D241332F565BEE7B0.mft (raw, json) Hash identifier: w5WAg4iE2D61eyhnk2BkVEKrAADfANseD29ASeX9qxU= Subject key identifier: 8A:68:43:15:48:4C:14:AF:D7:B8:93:D5:79:32:A2:FC:09:A5:50:D5 Authority key identifier: 6B:35:52:61:65:71:8C:DF:DD:CB:20:2D:24:13:32:F5:65:BE:E7:B0 Certificate issuer: /CN=6B35526165718CDFDDCB202D241332F565BEE7B0 Certificate serial: 1A4A5F03A29FC11010E17AF33DA598DC8B683E0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B35526165718CDFDDCB202D241332F565BEE7B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft Manifest number: AB Signing time: Sun 29 Jun 2025 02:51:19 +0000 Manifest this update: Sun 29 Jun 2025 02:46:19 +0000 Manifest next update: Wed 02 Jul 2025 08:17:19 +0000 Files and hashes: 1: 323030313a6466333a623034303a3a2f34382d3438203d3e20313532343432.roa (hash: mKIqmd/EOitm2VkjJ4/rdItHB7wxpB5sjP3tcWKMCX8=) 2: 6B35526165718CDFDDCB202D241332F565BEE7B0.crl (hash: ns3bflw5bliSor90b4s2VwOy/S/Gkk7RiHjcrSdU3i0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.crl rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B35526165718CDFDDCB202D241332F565BEE7B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:4a:5f:03:a2:9f:c1:10:10:e1:7a:f3:3d:a5:98:dc:8b:68:3e:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B35526165718CDFDDCB202D241332F565BEE7B0 Validity Not Before: Jun 29 02:46:19 2025 GMT Not After : Jul 2 08:17:19 2025 GMT Subject: CN=8A684315484C14AFD7B893D57932A2FC09A550D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:16:e5:7b:1d:c3:1f:15:fa:25:3f:78:1e:07: 9e:c0:0b:0b:30:74:7b:73:aa:b7:c8:c3:2b:3f:74: 71:06:81:74:bc:9f:99:54:6a:c4:2c:10:63:80:79: cb:e4:1e:e9:3f:83:fb:b9:34:4b:72:ab:08:cd:28: b9:52:a4:58:97:4b:05:1e:b6:db:31:24:e1:3e:35: 13:ad:e7:1f:d3:1d:67:7c:25:03:4a:47:7b:5a:d0: 75:6c:b8:65:8a:7f:ab:5a:aa:5e:ee:c1:ed:b6:da: 2a:ac:47:fe:36:72:57:ac:53:c8:fe:4f:ba:23:d3: da:a9:fa:9b:d6:c1:c7:6d:92:85:44:19:87:77:a4: d4:d8:84:ea:5b:a6:ad:96:fe:a0:69:c5:6f:5e:9d: d9:d2:25:89:a8:0b:51:b4:2a:bc:54:45:ba:b4:7a: a7:14:75:84:cb:43:bb:ce:bb:67:38:1a:1b:4d:91: 0a:83:a9:cb:73:1e:0e:d7:10:d4:93:02:0f:48:64: 2b:df:d9:2a:a8:62:8a:57:8e:b4:a2:13:7a:57:28: 1e:29:ad:89:8d:29:27:b4:03:0b:99:e2:bc:d4:02: d8:64:dd:d0:49:59:7f:ae:3d:51:45:09:2d:b7:9c: b1:42:bd:be:4c:b3:30:d0:64:37:f7:bf:dd:cb:62: 2e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:68:43:15:48:4C:14:AF:D7:B8:93:D5:79:32:A2:FC:09:A5:50:D5 X509v3 Authority Key Identifier: keyid:6B:35:52:61:65:71:8C:DF:DD:CB:20:2D:24:13:32:F5:65:BE:E7:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B35526165718CDFDDCB202D241332F565BEE7B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:ff:ac:f0:b7:b3:59:ed:1c:ea:f2:0f:60:ad:43:7a:07:4d: 7e:54:81:87:69:df:cb:73:5e:d9:22:73:bb:8b:23:5b:c3:89: 6e:2f:3c:22:1f:3c:3f:d3:53:52:8e:52:51:fe:3f:59:e0:e4: d6:c0:66:2b:57:aa:00:25:2d:6f:76:41:ef:a4:e9:d3:56:af: fc:e9:a5:17:bd:63:d3:17:d9:e1:90:de:83:7b:de:aa:b8:20: de:36:89:c8:6e:f7:99:32:4e:16:a7:ea:b3:fe:3b:e0:43:aa: 2f:15:19:36:08:54:22:48:c6:3a:d2:62:3a:5f:2b:5f:81:6f: 08:42:b9:57:ee:7d:98:4b:6a:9d:9a:ee:eb:fa:fd:6e:54:42: df:4c:17:94:eb:89:ad:be:9f:24:01:3f:a2:e1:af:aa:de:b0: e9:5e:37:41:bc:2d:1c:2a:17:5b:6d:5d:7a:18:fb:cc:20:5d: d3:82:6f:b6:b2:61:da:e6:c9:c6:3b:aa:20:c2:cc:f2:37:78: 9d:75:3d:6a:56:e1:14:5e:94:3d:3b:6f:39:0a:02:6b:1f:86: 76:ba:4c:64:1f:80:60:8e:49:c8:3e:c4:f1:c3:fe:6a:69:c4: bc:6b:72:b6:6d:45:4e:a0:9b:26:0c:94:e2:f2:0b:bf:0c:cd: 3d:0a:16:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGkpfA6KfwRAQ4XrzPaWY3ItoPgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzNTUyNjE2NTcxOENERkREQ0IyMDJEMjQxMzMyRjU2 NUJFRTdCMDAeFw0yNTA2MjkwMjQ2MTlaFw0yNTA3MDIwODE3MTlaMDMxMTAvBgNV BAMTKDhBNjg0MzE1NDg0QzE0QUZEN0I4OTNENTc5MzJBMkZDMDlBNTUwRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYFuV7HcMfFfolP3geB57ACwsw dHtzqrfIwys/dHEGgXS8n5lUasQsEGOAecvkHuk/g/u5NEtyqwjNKLlSpFiXSwUe ttsxJOE+NROt5x/THWd8JQNKR3ta0HVsuGWKf6taql7uwe222iqsR/42clesU8j+ T7oj09qp+pvWwcdtkoVEGYd3pNTYhOpbpq2W/qBpxW9endnSJYmoC1G0KrxURbq0 eqcUdYTLQ7vOu2c4GhtNkQqDqctzHg7XENSTAg9IZCvf2SqoYopXjrSiE3pXKB4p rYmNKSe0AwuZ4rzUAthk3dBJWX+uPVFFCS23nLFCvb5MszDQZDf3v93LYi59AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUimhDFUhMFK/XuJPVeTKi/AmlUNUwHwYDVR0j BBgwFoAUazVSYWVxjN/dyyAtJBMy9WW+57AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ODdkZDU5Ny00MGNkLTQwOWItYjNjNS0yODUyY2UwMTQ4ODkvMS82QjM1NTI2MTY1 NzE4Q0RGRERDQjIwMkQyNDEzMzJGNTY1QkVFN0IwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkIzNTUyNjE2NTcxOENERkREQ0IyMDJEMjQxMzMyRjU2NUJF RTdCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg3ZGQ1OTctNDBjZC00MDliLWIz YzUtMjg1MmNlMDE0ODg5LzEvNkIzNTUyNjE2NTcxOENERkREQ0IyMDJEMjQxMzMy RjU2NUJFRTdCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAn/rPC3s1ntHOryD2CtQ3oHTX5UgYdp38tz Xtkic7uLI1vDiW4vPCIfPD/TU1KOUlH+P1ng5NbAZitXqgAlLW92Qe+k6dNWr/zp pRe9Y9MX2eGQ3oN73qq4IN42ichu95kyThan6rP+O+BDqi8VGTYIVCJIxjrSYjpf K1+BbwhCuVfufZhLap2a7uv6/W5UQt9MF5Tria2+nyQBP6Lhr6resOleN0G8LRwq F1ttXXoY+8wgXdOCb7ayYdrmycY7qiDCzPI3eJ11PWpW4RRelD07bzkKAmsfhna6 TGQfgGCOScg+xPHD/mppxLxrcrZtRU6gmyYMlOLyC78MzT0KFgQ= -----END CERTIFICATE-----Generated at Sun Jun 29 18:13:11 2025 by rpki-client