$ rpki-client -vvf repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft File: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft (raw, json) Hash identifier: iWT2nc6ojvHUa/K6Ohch50VuPwh481Cif27ZLt7OFa4= Subject key identifier: A0:CF:FA:1F:61:86:7A:6E:E3:13:8D:98:54:EF:44:98:2A:19:F9:46 Authority key identifier: 6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA Certificate issuer: /CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Certificate serial: 3D09F32E8A4D33873330EE22274EAD238B700493 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft Manifest number: 0201 Signing time: Fri 22 Aug 2025 21:30:02 +0000 Manifest this update: Fri 22 Aug 2025 21:25:02 +0000 Manifest next update: Tue 26 Aug 2025 03:41:02 +0000 Files and hashes: 1: 3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa (hash: R1C6O4ul1Ppozfaiesg+Uhn8MwDAOfzdAmq+sSEet2w=) 2: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl (hash: lwl382pPIMoVb7s3Pxznh3iNdJJVAzyh+7qrEFYoYRU=) 3: 3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa (hash: XLXbrSM75a4OOhdIFSVSWGya3QA7TZER3P7tGhI+wW0=) 4: 3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa (hash: jcYNuwq5tBbtUM+5LFf+gih2lHYu/silWmdWErgVy5M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 03:41:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:09:f3:2e:8a:4d:33:87:33:30:ee:22:27:4e:ad:23:8b:70:04:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Validity Not Before: Aug 22 21:25:02 2025 GMT Not After : Aug 26 03:41:02 2025 GMT Subject: CN=A0CFFA1F61867A6EE3138D9854EF44982A19F946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:48:3b:e2:71:df:35:c9:69:8e:0e:65:e1:71: 2f:09:79:22:45:38:b3:9c:a3:51:80:aa:6b:f3:5c: 1e:5a:cf:7a:fb:c4:c7:6b:7e:45:bd:95:1d:be:df: 99:53:c1:c3:f1:33:08:c9:e8:b5:3a:20:1e:47:d1: 69:6e:34:83:55:81:1a:4b:c6:1d:31:9a:50:a6:df: 3a:37:0b:fb:d7:4a:a6:24:c7:60:2e:d4:cb:0e:e1: a3:01:ef:e7:c2:52:95:6e:7c:2e:73:9f:c0:67:62: 40:a8:28:25:53:a9:b9:b3:c4:bd:e6:6a:8a:ff:87: c1:05:6b:54:cd:0a:a8:63:f4:e9:f4:c1:b4:58:64: 91:b4:ab:a8:e4:50:3a:af:d6:67:9b:cf:2b:21:1f: 92:d7:2c:71:ec:7c:48:3f:6d:d1:9a:56:8d:66:9a: f8:b6:79:79:aa:c7:dc:0e:af:b4:0e:fd:af:91:ec: 99:e0:c2:2c:65:2c:fe:70:37:75:9a:9c:58:02:96: 40:47:05:be:d1:e2:1c:c6:d3:43:f2:12:25:86:05: ca:4c:1d:fb:8c:f8:64:be:76:f0:11:03:19:79:80: 9e:63:61:ce:35:a9:f2:fe:a0:f0:be:84:27:26:b1: a3:48:85:6d:6c:6c:61:4f:f3:c2:d9:fa:4a:63:87: b6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CF:FA:1F:61:86:7A:6E:E3:13:8D:98:54:EF:44:98:2A:19:F9:46 X509v3 Authority Key Identifier: keyid:6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:a0:13:b7:49:4b:bb:b5:88:aa:bd:0d:dc:3b:ae:87:7c:f4: da:d6:20:c5:e9:2e:ac:55:9c:9f:a9:a6:bf:ef:38:64:d9:4d: e4:b6:2f:a1:6e:37:68:45:95:34:5a:4c:a0:a5:b8:60:6a:c1: 14:14:25:a6:64:10:91:1f:a3:36:4b:e1:1f:7e:d9:de:93:70: 3c:08:5f:92:2e:3e:30:15:ab:84:e0:dc:a2:6e:90:00:a4:f7: f6:70:84:3f:71:1a:96:37:68:9d:81:32:91:ce:52:02:48:f8: bb:4e:a8:c6:ab:32:f5:c6:3a:a3:3a:b3:2c:39:2c:9c:d4:6a: 91:a4:07:5f:e4:b1:cf:cd:55:0a:7f:4a:79:59:03:2a:b0:42: 0a:c1:6e:04:7a:87:89:ed:00:ba:4b:21:f2:5b:26:df:cf:6d: 34:1c:dc:71:f3:24:93:c0:e1:29:74:f9:6f:0c:21:49:39:fb: 28:53:04:71:78:07:8b:74:04:32:0b:08:aa:be:fe:ad:aa:08: 72:fa:52:a3:f7:c6:e7:43:48:6c:e1:00:6a:69:43:c7:c5:42: 6f:b0:a8:5b:ca:c3:3d:b9:18:01:65:28:7b:ff:0a:65:18:83: 6b:60:6b:7f:bb:d9:60:31:a1:d8:89:8a:19:46:25:a6:82:af: e3:35:4b:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPQnzLopNM4czMO4iJ06tI4twBJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMx REIwOEZEQTAeFw0yNTA4MjIyMTI1MDJaFw0yNTA4MjYwMzQxMDJaMDMxMTAvBgNV BAMTKEEwQ0ZGQTFGNjE4NjdBNkVFMzEzOEQ5ODU0RUY0NDk4MkExOUY5NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwSDvicd81yWmODmXhcS8JeSJF OLOco1GAqmvzXB5az3r7xMdrfkW9lR2+35lTwcPxMwjJ6LU6IB5H0WluNINVgRpL xh0xmlCm3zo3C/vXSqYkx2Au1MsO4aMB7+fCUpVufC5zn8BnYkCoKCVTqbmzxL3m aor/h8EFa1TNCqhj9On0wbRYZJG0q6jkUDqv1mebzyshH5LXLHHsfEg/bdGaVo1m mvi2eXmqx9wOr7QO/a+R7JngwixlLP5wN3WanFgClkBHBb7R4hzG00PyEiWGBcpM HfuM+GS+dvARAxl5gJ5jYc41qfL+oPC+hCcmsaNIhW1sbGFP88LZ+kpjh7bDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoM/6H2GGem7jE42YVO9EmCoZ+UYwHwYDVR0j BBgwFoAUb8DJM0D/c1k0NMjv/O2Osx2wj9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjY1OTkwNC0zNzAyLTQ3OTctYmQxYi00NDdhYjhjOTRlMGMvMC82RkMwQzkzMzQw RkY3MzU5MzQzNEM4RUZGQ0VEOEVCMzFEQjA4RkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMxREIw OEZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY2NTk5MDQtMzcwMi00Nzk3LWJk MWItNDQ3YWI4Yzk0ZTBjLzAvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhF QjMxREIwOEZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALegE7dJS7u1iKq9Ddw7rod89NrWIMXpLqxV nJ+ppr/vOGTZTeS2L6FuN2hFlTRaTKCluGBqwRQUJaZkEJEfozZL4R9+2d6TcDwI X5IuPjAVq4Tg3KJukACk9/ZwhD9xGpY3aJ2BMpHOUgJI+LtOqMarMvXGOqM6syw5 LJzUapGkB1/ksc/NVQp/SnlZAyqwQgrBbgR6h4ntALpLIfJbJt/PbTQc3HHzJJPA 4Sl0+W8MIUk5+yhTBHF4B4t0BDILCKq+/q2qCHL6UqP3xudDSGzhAGppQ8fFQm+w qFvKwz25GAFlKHv/CmUYg2tga3+72WAxodiJihlGJaaCr+M1S88= -----END CERTIFICATE-----Generated at Sat Aug 23 22:48:52 2025 by rpki-client