$ rpki-client -vvf repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft File: 6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft (raw, json) Hash identifier: V8gxFqfVXbg/dlHn5sz1J5vLbZP6xEkZRSy05e+q4UQ= Subject key identifier: A1:55:47:F1:87:E4:35:E7:34:91:56:54:AF:61:11:3D:B7:4A:12:97 Authority key identifier: 6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 Certificate issuer: /CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53 Certificate serial: 06518B32CBCA15F8E2B0A922B231B3B831565DD1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer Subject info access: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft Manifest number: 70 Signing time: Thu 21 Aug 2025 20:02:29 +0000 Manifest this update: Thu 21 Aug 2025 19:57:29 +0000 Manifest next update: Mon 25 Aug 2025 01:19:29 +0000 Files and hashes: 1: 6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl (hash: oQJrN3u1TLurl+awt+MHNYv7t7y+7lpIwKsD7G+O+HE=) 2: 3130332e3133362e31322e302f32342d3234203d3e20313338383231.roa (hash: Lk7MgzxdNvFWTQC60iPK0vpuf42JvMwfykIHdcb6dFo=) 3: 3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa (hash: R+IkOnhEEkrZOxf8Y3xufcx4Q4z9+2sI/l2mQF5vKrU=) 4: 3130332e3133362e31322e302f32322d3234203d3e20313338383231.roa (hash: Cb5AEtlH1NnuqmCvEw1t1v8nRYfGeJ7DwpY/kiNXrBE=) 5: 3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa (hash: 4xFtj009j2KyXApXnh4MToBnYNS6TXxPJe0g07ZPzfw=) 6: 3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa (hash: b3FwlMsLVeDm7arhAC1MOxAg/+Ixy8Gs1MmwDRmmqco=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 01:19:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:51:8b:32:cb:ca:15:f8:e2:b0:a9:22:b2:31:b3:b8:31:56:5d:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53 Validity Not Before: Aug 21 19:57:29 2025 GMT Not After : Aug 25 01:19:29 2025 GMT Subject: CN=A15547F187E435E734915654AF61113DB74A1297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:78:79:54:37:fb:64:17:c4:f5:1f:cf:9d:ad: f0:52:49:b3:c8:06:d7:8a:2d:a2:6f:05:4e:87:5a: 4c:e2:69:bc:ad:d1:19:6c:6e:db:4f:74:e0:9e:db: ea:e0:43:de:9b:59:02:f9:c7:f5:6a:b6:e3:b3:9a: a3:5d:6f:60:89:21:25:60:8b:09:f0:f3:33:88:cc: a6:54:17:e8:62:c7:ab:ca:5e:f9:1b:8e:d5:f1:71: 8c:ad:43:88:73:ad:0b:7e:35:98:c1:31:0f:9d:62: a8:c9:45:58:88:80:72:ce:95:8e:a6:77:92:56:0b: f4:71:06:c9:a1:ad:cc:b3:8a:35:39:7a:46:9c:dd: af:e9:93:ec:7e:a3:d9:3d:66:00:b3:18:13:df:20: 64:62:07:f0:c5:90:df:91:98:68:67:d7:35:3f:62: 2d:1b:86:77:d5:54:c5:8d:18:a3:8a:4c:ae:6f:db: b0:d7:76:1a:c5:c6:f5:36:58:fe:65:b8:09:6b:4e: 97:f5:c9:8b:d7:66:0f:92:ae:69:60:55:fe:d9:94: 0c:40:a3:eb:32:e3:33:d1:6e:15:91:17:08:c2:a5: 85:ad:a1:eb:39:fb:c9:ae:16:12:ca:db:2c:02:b5: e9:48:bf:79:9d:10:ed:b3:17:10:9b:f5:57:e9:4b: 5b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:55:47:F1:87:E4:35:E7:34:91:56:54:AF:61:11:3D:B7:4A:12:97 X509v3 Authority Key Identifier: keyid:6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:8d:1f:69:c3:71:55:92:c5:14:2d:9d:06:66:6d:34:71:ff: ef:a5:b6:75:b6:69:5e:b0:0e:c0:3d:df:47:7b:e2:c3:98:ef: 76:73:84:f1:95:58:9b:51:12:a5:a3:6a:3e:82:f1:b2:51:76: 2e:7d:b0:b1:ec:b2:7b:f9:c3:81:0e:75:a2:5a:32:56:d8:a8: b3:44:74:6e:8e:df:24:ec:da:d4:89:ba:01:78:f4:e9:f2:41: e1:c8:6a:12:a8:89:1a:16:d5:c4:f2:c6:99:38:8c:b1:af:e0: 69:13:de:44:7d:19:ef:1b:1f:02:05:80:bc:49:9d:04:0b:61: f2:d3:8a:dd:39:86:43:5d:cf:d1:3d:9c:75:7f:75:5c:30:1f: 05:94:cd:56:97:87:30:85:55:bd:7a:11:fa:48:43:26:e6:42: 88:a3:fa:39:05:24:d2:8d:9c:78:d3:c4:24:e5:b8:f6:d4:ab: f0:2c:28:af:bf:76:07:56:00:aa:94:12:6a:50:e1:eb:03:cf: 80:c5:39:ea:13:17:af:33:9e:2f:aa:03:1f:65:f4:61:df:df: 88:91:a1:a6:5d:64:08:4d:b8:08:3c:02:00:ba:10:53:9e:d7: bb:d5:2b:b1:3b:25:cb:6d:49:3f:2f:e8:2a:f4:00:2b:d7:b9: b8:4c:29:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBlGLMsvKFfjisKkisjGzuDFWXdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNC RkIzN0I1MzAeFw0yNTA4MjExOTU3MjlaFw0yNTA4MjUwMTE5MjlaMDMxMTAvBgNV BAMTKEExNTU0N0YxODdFNDM1RTczNDkxNTY1NEFGNjExMTNEQjc0QTEyOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBeHlUN/tkF8T1H8+drfBSSbPI BteKLaJvBU6HWkziabyt0RlsbttPdOCe2+rgQ96bWQL5x/VqtuOzmqNdb2CJISVg iwnw8zOIzKZUF+hix6vKXvkbjtXxcYytQ4hzrQt+NZjBMQ+dYqjJRViIgHLOlY6m d5JWC/RxBsmhrcyzijU5ekac3a/pk+x+o9k9ZgCzGBPfIGRiB/DFkN+RmGhn1zU/ Yi0bhnfVVMWNGKOKTK5v27DXdhrFxvU2WP5luAlrTpf1yYvXZg+SrmlgVf7ZlAxA o+sy4zPRbhWRFwjCpYWtoes5+8muFhLK2ywCtelIv3mdEO2zFxCb9VfpS1s3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoVVH8YfkNec0kVZUr2ERPbdKEpcwHwYDVR0j BBgwFoAUamnvxciXkHx0yKHr3Z03/L+ze1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDFiMWMxYi02NTZjLTQ4OWQtOWVkMy1jY2M3N2M4MzAxOGQvMC82QTY5RUZDNUM4 OTc5MDdDNzRDOEExRUJERDlEMzdGQ0JGQjM3QjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNCRkIz N0I1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAxYjFjMWItNjU2Yy00ODlkLTll ZDMtY2NjNzdjODMwMThkLzAvNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3 RkNCRkIzN0I1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFyNH2nDcVWSxRQtnQZmbTRx/++ltnW2aV6w DsA930d74sOY73ZzhPGVWJtREqWjaj6C8bJRdi59sLHssnv5w4EOdaJaMlbYqLNE dG6O3yTs2tSJugF49OnyQeHIahKoiRoW1cTyxpk4jLGv4GkT3kR9Ge8bHwIFgLxJ nQQLYfLTit05hkNdz9E9nHV/dVwwHwWUzVaXhzCFVb16EfpIQybmQoij+jkFJNKN nHjTxCTluPbUq/AsKK+/dgdWAKqUEmpQ4esDz4DFOeoTF68zni+qAx9l9GHf34iR oaZdZAhNuAg8AgC6EFOe17vVK7E7JcttST8v6Cr0ACvXubhMKSc= -----END CERTIFICATE-----Generated at Sat Aug 23 10:10:25 2025 by rpki-client