$ rpki-client -vvf repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft File: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft (raw, json) Hash identifier: eD2AuqzMxdGz9B9JW0oX/74RFLY7RYQKmH3AZTKenv0= Subject key identifier: A8:4C:F9:F4:F5:6A:9C:E9:89:F0:45:D2:13:3A:F6:DD:1F:39:B8:85 Authority key identifier: 6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 Certificate issuer: /CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Certificate serial: 5770B1F6309C18A04954E200F00014AF251FD59A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft Manifest number: 021A Signing time: Sat 23 Aug 2025 04:00:54 +0000 Manifest this update: Sat 23 Aug 2025 03:55:54 +0000 Manifest next update: Tue 26 Aug 2025 04:22:54 +0000 Files and hashes: 1: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl (hash: XPw1ctS+JpIJfZpACEH+dOFVRuXN2eG3nCSK6Q0NTwE=) 2: 3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa (hash: 8i2rkzBjlPEti5Kr8Zm8/78pVX8xhxtJgE0QaB9hDOo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 04:22:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:70:b1:f6:30:9c:18:a0:49:54:e2:00:f0:00:14:af:25:1f:d5:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Validity Not Before: Aug 23 03:55:54 2025 GMT Not After : Aug 26 04:22:54 2025 GMT Subject: CN=A84CF9F4F56A9CE989F045D2133AF6DD1F39B885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0d:f7:af:42:7a:1b:54:c0:e4:8e:53:25:8c: 90:42:e7:54:10:27:f9:26:bc:44:d8:31:73:38:bc: 95:c2:bf:62:08:26:6d:72:ee:0d:15:3d:04:be:f0: 12:0f:a5:8c:dc:e0:1b:b8:b0:b1:6c:38:96:d2:b1: c3:b3:19:8a:87:48:10:d1:e0:66:33:ce:de:b5:72: e4:a1:ab:aa:34:8e:4b:0a:e0:58:2b:2f:3f:0d:4d: 94:bd:5c:cc:3c:fa:df:cc:54:54:fe:a7:b3:5f:66: fb:43:17:ae:98:f5:42:42:15:b8:9b:46:5b:86:32: 26:f0:71:0d:35:00:68:b7:01:7b:6a:af:46:70:6c: a7:e9:ae:60:5a:86:7f:da:8c:12:47:09:71:b4:f8: a2:c0:b6:1f:18:8f:fc:24:b5:b4:cd:ff:08:d0:d1: 7b:28:10:27:c2:0a:9f:b4:a6:97:d6:fe:66:6b:4c: f6:e4:f5:20:74:fb:d7:11:58:b0:01:5c:3c:73:d6: 7e:00:5e:e6:70:c8:7f:d1:07:8f:8d:d0:fd:8d:79: a3:8d:bf:a9:f7:8e:b3:a9:f9:38:fd:e3:45:57:7d: 51:49:73:87:ea:03:61:b0:50:9e:a0:75:30:79:e9: f5:c9:c0:90:76:5d:2d:72:6b:ef:51:c7:9d:1f:f2: b6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4C:F9:F4:F5:6A:9C:E9:89:F0:45:D2:13:3A:F6:DD:1F:39:B8:85 X509v3 Authority Key Identifier: keyid:6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:1e:8b:d6:47:58:2c:3d:bd:77:29:9a:e8:51:ed:17:62:a2: bc:32:4c:bf:3c:27:75:60:51:26:2a:62:65:3d:8b:1f:27:40: b0:b2:9a:96:f0:4c:8c:97:5d:9b:f0:03:2b:64:86:f4:74:8a: 16:83:8f:b9:f1:71:e0:cf:7c:3a:35:44:d3:c2:c9:bb:8b:a6: ab:20:f7:7e:b3:b3:f8:fc:f9:94:ca:4d:e7:16:93:22:38:b9: 42:fc:1d:bc:67:67:7c:be:d6:0c:f3:6e:37:00:ae:fb:73:bb: fb:96:5d:72:1e:c3:b6:df:91:f8:05:59:97:9f:21:dc:ce:a4: 07:96:41:31:72:b4:66:f7:d5:b3:f8:ef:56:fc:f2:31:8e:46: 7a:da:7a:ac:18:bc:57:2f:a4:30:ae:bc:74:0d:4c:ba:ac:dc: a4:c1:92:3d:43:2d:8e:f0:c4:64:78:62:9b:90:04:82:13:ae: 3e:f4:30:4b:6b:27:86:ba:1d:ed:34:35:d1:9a:82:7a:28:e4: 4d:12:1a:e9:ee:aa:7a:09:1c:41:3b:38:c9:d9:d1:cc:f8:0f: 26:90:93:68:95:ea:9e:bd:ca:40:b3:3f:78:35:e1:f3:a0:1b: 66:ed:82:88:f6:61:16:e7:97:7e:1b:95:47:2b:37:01:b3:d5: 62:d6:c0:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV3Cx9jCcGKBJVOIA8AAUryUf1ZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1 RkUwQkUxMTAeFw0yNTA4MjMwMzU1NTRaFw0yNTA4MjYwNDIyNTRaMDMxMTAvBgNV BAMTKEE4NENGOUY0RjU2QTlDRTk4OUYwNDVEMjEzM0FGNkREMUYzOUI4ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1DfevQnobVMDkjlMljJBC51QQ J/kmvETYMXM4vJXCv2IIJm1y7g0VPQS+8BIPpYzc4Bu4sLFsOJbSscOzGYqHSBDR 4GYzzt61cuShq6o0jksK4FgrLz8NTZS9XMw8+t/MVFT+p7NfZvtDF66Y9UJCFbib RluGMibwcQ01AGi3AXtqr0ZwbKfprmBahn/ajBJHCXG0+KLAth8Yj/wktbTN/wjQ 0XsoECfCCp+0ppfW/mZrTPbk9SB0+9cRWLABXDxz1n4AXuZwyH/RB4+N0P2NeaON v6n3jrOp+Tj940VXfVFJc4fqA2GwUJ6gdTB56fXJwJB2XS1ya+9Rx50f8rbpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqEz59PVqnOmJ8EXSEzr23R85uIUwHwYDVR0j BBgwFoAUb8hX33/lNQpsBaHxE/PcLl/gvhEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTIzOGE2Mi02YTk2LTQzYmMtODdhZi0wMmRiNjQxZjcxMDkvMC82RkM4NTdERjdG RTUzNTBBNkMwNUExRjExM0YzREMyRTVGRTBCRTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1RkUw QkUxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGEyMzhhNjItNmE5Ni00M2JjLTg3 YWYtMDJkYjY0MWY3MTA5LzAvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RD MkU1RkUwQkUxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMIei9ZHWCw9vXcpmuhR7RdiorwyTL88J3Vg USYqYmU9ix8nQLCympbwTIyXXZvwAytkhvR0ihaDj7nxceDPfDo1RNPCybuLpqsg 936zs/j8+ZTKTecWkyI4uUL8HbxnZ3y+1gzzbjcArvtzu/uWXXIew7bfkfgFWZef IdzOpAeWQTFytGb31bP471b88jGORnraeqwYvFcvpDCuvHQNTLqs3KTBkj1DLY7w xGR4YpuQBIITrj70MEtrJ4a6He00NdGagnoo5E0SGunuqnoJHEE7OMnZ0cz4DyaQ k2iV6p69ykCzP3g14fOgG2btgoj2YRbnl34blUcrNwGz1WLWwBU= -----END CERTIFICATE-----Generated at Sat Aug 23 10:37:34 2025 by rpki-client