$ rpki-client -vvf repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft File: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft (raw, json) Hash identifier: vxkc/5EePH4FvMQ1+9IsjR15mR3Cjg3Uy5+9R/C/2yU= Subject key identifier: 18:A9:6A:43:F4:62:83:41:E1:D9:16:C3:FF:32:B5:0C:70:AC:2A:07 Authority key identifier: 6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21 Certificate issuer: /CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121 Certificate serial: 595022487E1CB004C24D86CA3E0BA6ABD93F42D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft Manifest number: 04FF Signing time: Fri 22 Aug 2025 21:20:51 +0000 Manifest this update: Fri 22 Aug 2025 21:15:51 +0000 Manifest next update: Tue 26 Aug 2025 08:16:51 +0000 Files and hashes: 1: 3130332e35302e32352e302f32342d3234203d3e203633383639.roa (hash: JbxABL76MkkqswIqSBjIy3QFwClw0Z/ylcfelmeq75g=) 2: 3130332e35302e32342e302f32342d3234203d3e203633383639.roa (hash: pjDRNdkxVNQAonOH/ajeQNBbErsBzCB65TjYTm/AV04=) 3: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl (hash: H9Jq4zbDNb0O8riWsQ3qtvcI+dHuPcr1Vt6F1s3guHQ=) 4: 3130332e35302e32372e302f32342d3234203d3e203633383639.roa (hash: CMxLGqk+5iIxSLstgSUEPMheQZBFi/aQaQ40AR/6xck=) 5: 3130332e35302e32362e302f32342d3234203d3e203633383639.roa (hash: XC5DYejk2ouXNggePM7faKlSdJX+qPYu8hQvOlxyDok=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 08:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:50:22:48:7e:1c:b0:04:c2:4d:86:ca:3e:0b:a6:ab:d9:3f:42:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121 Validity Not Before: Aug 22 21:15:51 2025 GMT Not After : Aug 26 08:16:51 2025 GMT Subject: CN=18A96A43F4628341E1D916C3FF32B50C70AC2A07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:67:3d:20:99:2a:cf:f4:20:3f:c0:60:db:cd: 46:a1:20:50:e1:de:4c:31:61:25:65:ba:0d:d3:92: 47:ca:67:47:65:de:6c:90:7f:a8:86:78:b5:c2:d2: b7:df:2b:24:01:76:e0:fe:a6:b3:db:49:45:71:07: 5a:3a:31:da:ae:13:b4:39:6c:65:75:15:f0:6a:b2: 10:50:e7:51:02:06:ce:e8:5d:24:93:9e:3b:83:3a: 45:d7:4d:fd:d6:67:76:1a:89:25:b2:d3:eb:32:a6: eb:13:ef:4d:65:a6:bf:61:f6:bc:4e:9a:35:16:3e: 4b:49:0b:b5:c8:0b:eb:78:74:ba:1c:f1:9c:d9:73: c6:ab:31:38:a4:73:fc:08:3a:81:51:04:de:4d:57: f1:3a:3c:30:9e:a8:67:08:08:f8:09:59:3b:e2:23: 3a:b1:fe:2e:da:a3:25:4a:56:53:6c:37:03:93:60: a2:4f:0d:0e:d0:4b:1b:e4:85:41:f4:fe:9c:82:25: 0a:73:76:01:04:0c:4f:73:2c:71:5b:6b:4a:ac:f7: 17:ae:17:90:53:ce:b3:41:76:f0:85:ce:ff:27:87: c8:fd:7d:d0:52:76:61:a3:6f:86:72:2e:a5:47:c2: 02:f1:0c:d6:6a:08:92:c2:f7:9a:c6:0d:e5:b4:3f: f9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A9:6A:43:F4:62:83:41:E1:D9:16:C3:FF:32:B5:0C:70:AC:2A:07 X509v3 Authority Key Identifier: keyid:6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:c9:62:6f:6c:6f:34:f1:54:7a:2d:97:50:2b:96:6d:c3:b2: 43:d6:2c:1f:94:26:9e:6d:53:aa:f7:70:61:9b:d0:fd:3b:ff: 75:9b:9e:44:1b:61:e3:11:e0:f3:ce:e1:60:67:70:fa:97:a4: df:a1:81:f1:62:d9:42:5e:47:a7:d7:de:a0:2d:61:3f:47:50: c8:ed:c1:17:5f:c3:01:0a:c9:02:46:13:43:b9:f4:d4:bb:27: 2b:b4:f3:c2:b9:41:00:a6:63:a5:b7:fb:3d:bf:05:c1:fb:ac: f1:cb:a7:92:52:3a:87:eb:0e:b1:7c:ad:91:13:c2:8d:d1:07: 15:22:6c:47:cc:b2:a3:4d:22:b2:5f:01:81:6f:b4:df:04:1f: 31:bb:e0:ea:37:c2:35:81:b7:4f:f9:10:92:15:e0:71:74:da: c5:55:1f:03:d4:10:e3:a9:36:68:49:f5:e5:fb:5e:5b:06:87: c0:2a:ac:4c:3b:56:b1:aa:65:b4:c0:08:7e:d7:0b:f7:b2:54: 44:d5:35:4e:2b:08:de:32:65:37:8f:75:8c:12:73:99:7c:e9: 70:2f:8d:21:93:6a:10:12:8c:61:df:32:41:1c:bd:86:50:4d: dc:99:7a:82:bf:25:77:6e:b4:cf:ee:10:f6:60:42:d1:ce:f5: 08:2e:a4:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWVAiSH4csATCTYbKPgumq9k/QtYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3 MUQyRDEyMTAeFw0yNTA4MjIyMTE1NTFaFw0yNTA4MjYwODE2NTFaMDMxMTAvBgNV BAMTKDE4QTk2QTQzRjQ2MjgzNDFFMUQ5MTZDM0ZGMzJCNTBDNzBBQzJBMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Zz0gmSrP9CA/wGDbzUahIFDh 3kwxYSVlug3TkkfKZ0dl3myQf6iGeLXC0rffKyQBduD+prPbSUVxB1o6MdquE7Q5 bGV1FfBqshBQ51ECBs7oXSSTnjuDOkXXTf3WZ3YaiSWy0+sypusT701lpr9h9rxO mjUWPktJC7XIC+t4dLoc8ZzZc8arMTikc/wIOoFRBN5NV/E6PDCeqGcICPgJWTvi Izqx/i7aoyVKVlNsNwOTYKJPDQ7QSxvkhUH0/pyCJQpzdgEEDE9zLHFba0qs9xeu F5BTzrNBdvCFzv8nh8j9fdBSdmGjb4ZyLqVHwgLxDNZqCJLC95rGDeW0P/nHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGKlqQ/Rig0Hh2RbD/zK1DHCsKgcwHwYDVR0j BBgwFoAUbBWXYHoMPqw+MM9I/zG6/XHS0SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzY2ODU0MS1kNmM2LTQwOWUtOGFkMS01ZTg5YTRiMjg1MGUvMC82QzE1OTc2MDdB MEMzRUFDM0UzMENGNDhGRjMxQkFGRDcxRDJEMTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3MUQy RDEyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc2Njg1NDEtZDZjNi00MDllLThh ZDEtNWU4OWE0YjI4NTBlLzAvNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJB RkQ3MUQyRDEyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPJYm9sbzTxVHotl1Arlm3DskPWLB+UJp5t U6r3cGGb0P07/3WbnkQbYeMR4PPO4WBncPqXpN+hgfFi2UJeR6fX3qAtYT9HUMjt wRdfwwEKyQJGE0O59NS7Jyu088K5QQCmY6W3+z2/BcH7rPHLp5JSOofrDrF8rZET wo3RBxUibEfMsqNNIrJfAYFvtN8EHzG74Oo3wjWBt0/5EJIV4HF02sVVHwPUEOOp NmhJ9eX7XlsGh8AqrEw7VrGqZbTACH7XC/eyVETVNU4rCN4yZTePdYwSc5l86XAv jSGTahASjGHfMkEcvYZQTdyZeoK/JXdutM/uEPZgQtHO9QgupNM= -----END CERTIFICATE-----Generated at Sat Aug 23 10:08:43 2025 by rpki-client