$ rpki-client -vvf repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft File: 6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft (raw, json) Hash identifier: b2gf0XGt986YtRO3ukVkh8HzKxYjaBsoP8XBH8s86zs= Subject key identifier: 68:A6:47:7F:38:48:B3:FA:8B:E1:6F:24:BC:52:F3:5E:01:22:BD:64 Authority key identifier: 6F:EA:E1:20:D8:CD:63:D6:82:4D:82:61:F7:B0:98:63:1E:F4:12:E0 Certificate issuer: /CN=6FEAE120D8CD63D6824D8261F7B098631EF412E0 Certificate serial: 383BBEC9C6AEC136D957A74DC2D4BD05AEBAB257 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft Manifest number: 039E Signing time: Thu 21 Aug 2025 11:11:24 +0000 Manifest this update: Thu 21 Aug 2025 11:06:24 +0000 Manifest next update: Sun 24 Aug 2025 19:57:24 +0000 Files and hashes: 1: 3130332e3136332e3130332e302f32342d3234203d3e20313431363733.roa (hash: nbSzLxkTgg1Fhd955VZ38kl51XuK78f19xIlXEphedE=) 2: 3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa (hash: GVGKM4eV+MMT2LsZ6I2vKHLbSn/15kKEM082mCeNaT8=) 3: 6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl (hash: elMEqzc1yNaMgX5kWmC/rIdRPxWN6XztocdjqzfHetg=) 4: 3130332e3136332e3130322e302f32342d3234203d3e20313431363733.roa (hash: HBCSlYe9SztvZ5iSEatkCght6QFzU9643YFr0LJkHe0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 19:57:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:3b:be:c9:c6:ae:c1:36:d9:57:a7:4d:c2:d4:bd:05:ae:ba:b2:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FEAE120D8CD63D6824D8261F7B098631EF412E0 Validity Not Before: Aug 21 11:06:24 2025 GMT Not After : Aug 24 19:57:24 2025 GMT Subject: CN=68A6477F3848B3FA8BE16F24BC52F35E0122BD64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:7e:3b:ed:66:51:a9:28:c2:b8:1f:7f:25:cd: 77:75:bb:cd:91:5a:07:0c:bd:06:2c:0e:4e:16:e2: b9:03:ef:05:1b:f7:f3:c6:00:b4:4b:b6:e3:74:41: fe:2f:d9:f4:92:46:1b:58:bb:e0:93:c3:1e:80:93: 47:45:2c:3c:d6:45:cc:ea:6c:4f:e5:17:99:30:d8: 35:d4:b4:6e:cb:72:3b:84:d3:3b:a1:23:20:c5:d6: 4e:ed:35:4d:d4:6b:92:d2:67:df:78:37:a5:a2:56: d0:b6:6c:fd:ad:09:6c:e3:1c:ae:da:3d:9b:72:b8: 63:7c:7d:34:5d:a4:de:0e:54:d6:91:70:a3:dc:de: 41:7a:07:b8:29:8e:59:81:a2:56:a3:e4:26:8d:9a: 7a:58:6d:5e:e1:e3:9a:5c:cf:3d:af:40:2f:37:23: 58:78:e4:4e:9d:43:d3:94:73:bb:34:c1:12:ac:58: d5:d2:10:12:f4:86:33:ac:d2:06:4b:03:b5:4c:77: 84:48:90:90:17:21:4a:98:dd:66:0b:82:36:96:f2: 62:91:68:b0:35:75:e5:39:c5:9a:48:c4:51:3f:3c: b8:99:cb:20:51:9e:3a:b8:29:e1:de:83:2f:d8:8c: dc:0b:ad:2c:a6:bd:32:93:1b:80:5b:0b:d0:6b:c4: 28:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A6:47:7F:38:48:B3:FA:8B:E1:6F:24:BC:52:F3:5E:01:22:BD:64 X509v3 Authority Key Identifier: keyid:6F:EA:E1:20:D8:CD:63:D6:82:4D:82:61:F7:B0:98:63:1E:F4:12:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:22:6d:1c:4e:19:c8:12:82:6d:a2:24:76:6a:af:cd:c0:05: af:14:ed:42:d9:8e:fc:92:1e:7b:a3:ad:4f:2e:45:44:5a:ae: 83:de:e7:06:16:5e:84:1c:1c:c7:52:2c:2a:20:6c:9d:b7:9a: 08:e5:aa:78:5a:1d:68:5f:3a:5f:00:6b:52:23:13:0e:17:d2: 0b:06:a4:f3:1a:91:75:3b:5e:b5:28:24:8d:73:50:ac:66:3d: ff:f5:05:1e:15:0b:c8:53:01:05:23:46:ee:8e:f6:ea:41:ab: ad:73:53:33:d7:b8:5d:29:72:8a:2d:57:21:bf:eb:88:cf:f6: c2:1c:12:ca:a8:b4:ee:02:29:38:82:97:77:98:7d:3d:4f:85: c9:55:93:54:e8:ee:cf:77:ea:71:e4:5c:d9:0a:00:4c:58:33: 5f:6b:8b:b6:17:fa:7b:5e:50:f5:e0:8c:9d:28:58:b9:c4:83: 94:33:17:d2:fe:e5:61:1e:c7:39:25:25:d2:7b:cb:c8:b4:84: e3:b6:36:c5:90:9d:90:03:68:3a:fc:00:c3:e0:52:62:72:2c: f5:24:fc:fb:bd:93:bf:a7:b7:cf:90:b9:db:ec:c6:18:b3:f7: a6:22:a2:c7:87:c1:b7:02:55:5a:53:fd:02:13:83:9d:24:8b: 66:08:2f:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUODu+ycauwTbZV6dNwtS9Ba66slcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4NjMx RUY0MTJFMDAeFw0yNTA4MjExMTA2MjRaFw0yNTA4MjQxOTU3MjRaMDMxMTAvBgNV BAMTKDY4QTY0NzdGMzg0OEIzRkE4QkUxNkYyNEJDNTJGMzVFMDEyMkJENjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3fjvtZlGpKMK4H38lzXd1u82R WgcMvQYsDk4W4rkD7wUb9/PGALRLtuN0Qf4v2fSSRhtYu+CTwx6Ak0dFLDzWRczq bE/lF5kw2DXUtG7LcjuE0zuhIyDF1k7tNU3Ua5LSZ994N6WiVtC2bP2tCWzjHK7a PZtyuGN8fTRdpN4OVNaRcKPc3kF6B7gpjlmBolaj5CaNmnpYbV7h45pczz2vQC83 I1h45E6dQ9OUc7s0wRKsWNXSEBL0hjOs0gZLA7VMd4RIkJAXIUqY3WYLgjaW8mKR aLA1deU5xZpIxFE/PLiZyyBRnjq4KeHegy/YjNwLrSymvTKTG4BbC9BrxCgbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaKZHfzhIs/qL4W8kvFLzXgEivWQwHwYDVR0j BBgwFoAUb+rhINjNY9aCTYJh97CYYx70EuAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzFlNDlhYi01MGNhLTRiM2UtODIzYy04YjNkMzFiYTg1ZjIvMC82RkVBRTEyMEQ4 Q0Q2M0Q2ODI0RDgyNjFGN0IwOTg2MzFFRjQxMkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4NjMxRUY0 MTJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGMxZTQ5YWItNTBjYS00YjNlLTgy M2MtOGIzZDMxYmE4NWYyLzAvNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4 NjMxRUY0MTJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgibRxOGcgSgm2iJHZqr83ABa8U7ULZjvyS HnujrU8uRURaroPe5wYWXoQcHMdSLCogbJ23mgjlqnhaHWhfOl8Aa1IjEw4X0gsG pPMakXU7XrUoJI1zUKxmPf/1BR4VC8hTAQUjRu6O9upBq61zUzPXuF0pcootVyG/ 64jP9sIcEsqotO4CKTiCl3eYfT1PhclVk1To7s936nHkXNkKAExYM19ri7YX+nte UPXgjJ0oWLnEg5QzF9L+5WEexzklJdJ7y8i0hOO2NsWQnZADaDr8AMPgUmJyLPUk /Pu9k7+nt8+Qudvsxhiz96YioseHwbcCVVpT/QITg50ki2YIL+c= -----END CERTIFICATE-----Generated at Sat Aug 23 14:13:18 2025 by rpki-client