$ rpki-client -vvf repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft File: 6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft (raw, json) Hash identifier: UPgH8x4jxJtx5b9UTWos9eMwF9/+eVLveipirWas4VU= Subject key identifier: D9:9A:C3:B7:7A:BE:25:FA:D1:98:45:4A:11:3B:4D:66:77:4B:FB:F1 Authority key identifier: 6B:5E:67:7E:9A:47:13:3A:B5:F3:7B:3E:2C:11:19:3B:CF:66:B8:01 Certificate issuer: /CN=6B5E677E9A47133AB5F37B3E2C11193BCF66B801 Certificate serial: 496D8AB0247D315F330D09546CD43C27BE64744D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft Manifest number: 019C Signing time: Sat 23 Aug 2025 16:01:09 +0000 Manifest this update: Sat 23 Aug 2025 15:56:09 +0000 Manifest next update: Tue 26 Aug 2025 17:59:09 +0000 Files and hashes: 1: 3130332e3133312e3130342e302f32332d3234203d3e203539313531.roa (hash: B82wfhLkFG26Wgxhbhj75gasKnE7y0LTbhfYXiDw4Lc=) 2: 3130332e3235352e31352e302f32342d3234203d3e203539313531.roa (hash: clujjP0gMVXTK896cZFjDD0rWMqaqVNL/f+1BiuQ3UY=) 3: 323430303a653332303a3a2f33322d3438203d3e203539313531.roa (hash: 6P8mTgYGo32WPKmNCbLwXvT8t2XWCE8fFh2BcSizJBo=) 4: 3130332e3231302e33352e302f32342d3234203d3e203539313531.roa (hash: AiL+g1EooKWTtHWBu9kN++0bhh/1b9qWboQYM9JSjI0=) 5: 6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl (hash: tjOmV12arjRkzbxL1BUei5bXpi1WBFo9CHuYybNUXwU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 17:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:6d:8a:b0:24:7d:31:5f:33:0d:09:54:6c:d4:3c:27:be:64:74:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B5E677E9A47133AB5F37B3E2C11193BCF66B801 Validity Not Before: Aug 23 15:56:09 2025 GMT Not After : Aug 26 17:59:09 2025 GMT Subject: CN=D99AC3B77ABE25FAD198454A113B4D66774BFBF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ea:79:01:65:32:de:01:3d:46:61:71:d9:6a: 89:d9:ca:2b:b2:fa:1a:e1:f4:e4:ce:6c:b6:d2:37: 08:04:dd:dc:fc:0b:cc:6a:21:04:fd:07:9e:72:dc: f2:3c:13:13:3d:9e:aa:22:97:32:f9:a6:6c:f8:a6: 50:dd:b0:29:7f:3b:16:f9:ab:2a:8c:48:08:c2:d8: 37:eb:5b:25:de:25:ca:bc:4e:65:36:56:3c:f0:a5: 32:95:cd:0c:5e:66:d6:27:25:70:87:f4:9a:ab:4a: 09:76:aa:81:83:ad:85:34:b5:00:16:b9:df:33:1d: c7:f8:fc:32:61:f2:3d:85:01:c2:88:ba:ac:4d:74: d7:86:7e:f2:e5:c7:35:b6:99:2e:9e:a5:9b:69:96: 1a:80:f5:ec:90:52:14:2b:75:5c:35:d8:71:bb:3d: cc:12:c1:9a:7d:02:57:27:79:a9:65:a0:eb:21:2f: e2:10:a8:6b:1e:4e:39:77:82:29:bb:d2:24:2d:bc: 32:e3:68:e0:44:64:58:5d:9a:41:86:51:a9:47:7a: ac:fb:59:39:a2:8b:c3:89:70:f8:10:49:da:15:8b: a0:37:e8:89:89:de:82:bb:19:9a:49:c6:02:95:08: 0c:59:97:ef:0d:fe:10:bb:85:94:ac:fd:3a:0f:78: cd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9A:C3:B7:7A:BE:25:FA:D1:98:45:4A:11:3B:4D:66:77:4B:FB:F1 X509v3 Authority Key Identifier: keyid:6B:5E:67:7E:9A:47:13:3A:B5:F3:7B:3E:2C:11:19:3B:CF:66:B8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c1:7b:76:0d:29:6c:96:a0:fd:f3:fe:5a:b2:de:94:77:c3: a0:34:e5:d9:bd:1b:9c:ff:ce:7d:0a:0f:72:19:63:81:3d:17: 92:0b:c1:72:50:df:9f:6c:96:c4:8b:af:ad:72:a2:3d:9b:41: 4f:d2:0b:be:25:3f:3c:65:d4:50:53:21:70:41:86:48:8d:29: cb:2a:fe:8b:c0:68:39:9b:e7:30:02:ce:d0:9c:80:dc:26:8b: 1c:a8:c4:bb:a7:6a:2a:12:39:42:1a:73:3c:b4:81:f1:26:04: 67:52:fa:36:2e:be:62:75:58:9f:98:73:8b:6f:fb:fb:38:c1: a3:6c:8b:9d:66:12:77:e1:fe:33:79:18:0a:6d:9e:3a:53:d9: aa:62:5c:d9:14:85:f3:1e:c2:71:a4:55:8d:84:07:db:2d:e8: da:be:d5:24:8b:c7:e2:74:bb:1f:84:8c:e1:96:cc:69:06:bf: e1:b6:75:f1:82:5e:43:ab:01:d0:6c:15:59:fc:3a:26:36:af: 43:2f:64:c9:f2:ac:8d:50:38:8d:a7:9b:11:a1:99:dd:55:a1: 2c:a3:7f:7c:95:14:26:8e:7b:42:f1:99:15:84:e7:4e:99:d1: 7f:db:6b:eb:04:53:3d:6d:39:05:7d:40:39:e2:d1:81:11:4a: d7:90:13:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSW2KsCR9MV8zDQlUbNQ8J75kdE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI1RTY3N0U5QTQ3MTMzQUI1RjM3QjNFMkMxMTE5M0JD RjY2QjgwMTAeFw0yNTA4MjMxNTU2MDlaFw0yNTA4MjYxNzU5MDlaMDMxMTAvBgNV BAMTKEQ5OUFDM0I3N0FCRTI1RkFEMTk4NDU0QTExM0I0RDY2Nzc0QkZCRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS6nkBZTLeAT1GYXHZaonZyiuy +hrh9OTObLbSNwgE3dz8C8xqIQT9B55y3PI8ExM9nqoilzL5pmz4plDdsCl/Oxb5 qyqMSAjC2DfrWyXeJcq8TmU2VjzwpTKVzQxeZtYnJXCH9JqrSgl2qoGDrYU0tQAW ud8zHcf4/DJh8j2FAcKIuqxNdNeGfvLlxzW2mS6epZtplhqA9eyQUhQrdVw12HG7 PcwSwZp9AlcnealloOshL+IQqGseTjl3gim70iQtvDLjaOBEZFhdmkGGUalHeqz7 WTmii8OJcPgQSdoVi6A36ImJ3oK7GZpJxgKVCAxZl+8N/hC7hZSs/ToPeM1XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2ZrDt3q+JfrRmEVKETtNZndL+/EwHwYDVR0j BBgwFoAUa15nfppHEzq183s+LBEZO89muAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODc2NmQ2Ni0yOTIzLTRjZTAtYWE4NS05YzQ5ODhjYzhiYTEvMC82QjVFNjc3RTlB NDcxMzNBQjVGMzdCM0UyQzExMTkzQkNGNjZCODAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkI1RTY3N0U5QTQ3MTMzQUI1RjM3QjNFMkMxMTE5M0JDRjY2 QjgwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDg3NjZkNjYtMjkyMy00Y2UwLWFh ODUtOWM0OTg4Y2M4YmExLzAvNkI1RTY3N0U5QTQ3MTMzQUI1RjM3QjNFMkMxMTE5 M0JDRjY2QjgwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/Be3YNKWyWoP3z/lqy3pR3w6A05dm9G5z/ zn0KD3IZY4E9F5ILwXJQ359slsSLr61yoj2bQU/SC74lPzxl1FBTIXBBhkiNKcsq /ovAaDmb5zACztCcgNwmixyoxLunaioSOUIaczy0gfEmBGdS+jYuvmJ1WJ+Yc4tv +/s4waNsi51mEnfh/jN5GAptnjpT2apiXNkUhfMewnGkVY2EB9st6Nq+1SSLx+J0 ux+EjOGWzGkGv+G2dfGCXkOrAdBsFVn8OiY2r0MvZMnyrI1QOI2nmxGhmd1VoSyj f3yVFCaOe0LxmRWE506Z0X/ba+sEUz1tOQV9QDni0YERSteQE6M= -----END CERTIFICATE-----Generated at Sun Aug 24 02:51:12 2025 by rpki-client