$ rpki-client -vvf repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft File: 6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft (raw, json) Hash identifier: 519HLdhMNecz/iwsAnKfK8S844yH+Lu+Q8g2qiehtlU= Subject key identifier: 9B:74:D5:9C:93:C1:DD:A7:F2:12:F7:86:ED:2D:47:27:93:ED:CD:0F Authority key identifier: 6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB Certificate issuer: /CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB Certificate serial: 7338D86F41A6961CE247963CE807461181084244 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft Manifest number: 03CC Signing time: Thu 21 Aug 2025 17:21:46 +0000 Manifest this update: Thu 21 Aug 2025 17:16:45 +0000 Manifest next update: Sun 24 Aug 2025 23:41:45 +0000 Files and hashes: 1: 3130332e31362e37392e302f32342d3234203d3e20313331373835.roa (hash: dq2C0qn2bszea5JrNdqQBrs3uxaP2+6us75MTw8i5Kc=) 2: 3130332e3232362e35352e302f32342d3234203d3e20313331373835.roa (hash: w25Hdja8cVcMSMfXbCo6MIHOJSikdvlBUIB8EBkQuqs=) 3: 6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl (hash: 9Y+h+Fwfa4FHjl1nKIfDhjsQa1TQdOO7V3NFczaWpLQ=) 4: 3130332e3131362e3130382e302f32342d3234203d3e20313331373835.roa (hash: LY7WT+w7FguQLmfrSOP0mKv6BUNq2KCw3SGoAGK1WaA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 23:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:38:d8:6f:41:a6:96:1c:e2:47:96:3c:e8:07:46:11:81:08:42:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB Validity Not Before: Aug 21 17:16:45 2025 GMT Not After : Aug 24 23:41:45 2025 GMT Subject: CN=9B74D59C93C1DDA7F212F786ED2D472793EDCD0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:25:af:c1:26:34:49:f6:f0:66:66:ec:65:20: 5f:c1:ed:3b:9f:14:ec:a2:6b:d0:3b:70:25:73:28: fa:c6:1f:e5:23:87:e0:4d:59:82:4b:d9:b1:be:ec: 65:f1:0f:93:c6:2d:d9:58:b5:18:58:8c:99:e4:d3: 10:d5:27:31:9d:de:73:53:b7:06:a9:08:79:60:f1: a1:46:89:ba:f5:dd:38:d6:f2:cb:a6:0d:bc:c2:95: 87:7a:d2:18:d2:d5:fd:b2:1f:9f:fd:47:1c:45:10: 4e:22:9d:d8:1b:15:66:ed:c0:3e:e7:ac:91:51:84: f1:40:a3:45:41:38:f4:a6:32:59:41:86:db:63:47: a7:95:df:ef:32:48:de:46:4d:5d:3b:35:fb:44:91: 78:6c:0c:c9:b4:df:a9:c2:9f:19:4d:b0:2f:1c:a3: d3:7d:14:1e:e9:a8:ed:05:b8:43:62:ed:e3:14:b0: f2:b9:07:14:46:b3:b4:c3:13:0e:c8:3e:52:12:05: cf:61:a8:87:64:02:d6:9f:bc:fd:4c:e9:35:2f:9e: c6:4d:e1:48:05:39:2f:a8:6f:4b:c5:9c:f2:72:3b: 94:76:ba:c6:a3:06:3c:65:60:97:a1:40:2d:6b:33: 9a:e2:1c:9f:fe:5b:27:4b:7a:f8:e8:87:af:90:bc: 14:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:74:D5:9C:93:C1:DD:A7:F2:12:F7:86:ED:2D:47:27:93:ED:CD:0F X509v3 Authority Key Identifier: keyid:6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:59:6c:12:c7:2e:2c:9b:d3:74:67:bc:dd:e5:7d:2a:2b:a2: cd:67:14:ef:11:32:bc:05:1e:e8:31:d3:aa:dc:89:16:c0:2f: 03:2a:ca:15:df:a0:b9:32:e6:a2:1d:00:b2:2e:4f:97:38:63: fa:2e:b2:b0:36:4d:d0:e4:67:1a:37:83:4b:ac:7f:7f:3e:e4: 1c:c8:84:c0:51:c9:ef:5f:06:64:d5:af:9f:df:ad:76:6a:8a: ae:eb:c9:34:8d:79:76:cc:4c:b4:16:54:31:6a:a0:d3:00:9c: 7b:71:93:99:ba:3d:f8:b6:f9:43:12:11:a3:31:c2:ef:9e:df: a4:f4:aa:da:54:af:65:27:de:57:0a:aa:0b:43:03:5d:97:b1: 5b:37:f4:77:82:17:a8:6d:84:08:81:54:23:98:d1:45:c3:09: 23:b2:c8:89:89:31:76:8c:dd:47:39:ba:35:93:37:ff:8b:c9: cd:cc:1b:22:ac:95:a0:8a:b7:99:19:a7:f9:68:39:e5:73:f0: b3:17:7a:52:56:3e:bb:dd:2f:8f:dc:08:77:d1:61:bc:61:6d: ee:02:4a:b0:9d:ee:c3:92:6a:b7:cd:d7:1f:88:98:20:88:af: 9c:db:be:29:db:84:41:b2:34:02:35:b0:7c:f4:cd:94:ca:cb: 72:21:0f:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUczjYb0GmlhziR5Y86AdGEYEIQkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhGN0M1 OEFDQThBQjAeFw0yNTA4MjExNzE2NDVaFw0yNTA4MjQyMzQxNDVaMDMxMTAvBgNV BAMTKDlCNzRENTlDOTNDMUREQTdGMjEyRjc4NkVEMkQ0NzI3OTNFRENEMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqJa/BJjRJ9vBmZuxlIF/B7Tuf FOyia9A7cCVzKPrGH+Ujh+BNWYJL2bG+7GXxD5PGLdlYtRhYjJnk0xDVJzGd3nNT twapCHlg8aFGibr13TjW8sumDbzClYd60hjS1f2yH5/9RxxFEE4indgbFWbtwD7n rJFRhPFAo0VBOPSmMllBhttjR6eV3+8ySN5GTV07NftEkXhsDMm036nCnxlNsC8c o9N9FB7pqO0FuENi7eMUsPK5BxRGs7TDEw7IPlISBc9hqIdkAtafvP1M6TUvnsZN 4UgFOS+ob0vFnPJyO5R2usajBjxlYJehQC1rM5riHJ/+WydLevjoh6+QvBTxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm3TVnJPB3afyEveG7S1HJ5PtzQ8wHwYDVR0j BBgwFoAUbUsXSN5S3OOXuGh3LhKPfFisqKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDIwNzUyMy1kNWY1LTRhY2MtYjBhYy1iZmIwOTU0ZmE0ZTAvMC82RDRCMTc0OERF NTJEQ0UzOTdCODY4NzcyRTEyOEY3QzU4QUNBOEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhGN0M1OEFD QThBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQyMDc1MjMtZDVmNS00YWNjLWIw YWMtYmZiMDk1NGZhNGUwLzAvNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhG N0M1OEFDQThBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGlZbBLHLiyb03RnvN3lfSoros1nFO8RMrwF Hugx06rciRbALwMqyhXfoLky5qIdALIuT5c4Y/ousrA2TdDkZxo3g0usf38+5BzI hMBRye9fBmTVr5/frXZqiq7ryTSNeXbMTLQWVDFqoNMAnHtxk5m6Pfi2+UMSEaMx wu+e36T0qtpUr2Un3lcKqgtDA12XsVs39HeCF6hthAiBVCOY0UXDCSOyyImJMXaM 3Uc5ujWTN/+Lyc3MGyKslaCKt5kZp/loOeVz8LMXelJWPrvdL4/cCHfRYbxhbe4C SrCd7sOSarfN1x+ImCCIr5zbvinbhEGyNAI1sHz0zZTKy3IhD0U= -----END CERTIFICATE-----Generated at Sat Aug 23 14:33:12 2025 by rpki-client