$ rpki-client -vvf repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft File: 6D2120D281865021E16D49A2451DC53A851B5BBD.mft (raw, json) Hash identifier: /86sWCUXnkzHVEflOVsRL7wvr76NMyt+QImGGd8NKBM= Subject key identifier: BE:6C:93:73:D3:B5:10:DF:80:69:F3:3C:94:A0:9B:30:EE:D4:9F:B1 Authority key identifier: 6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD Certificate issuer: /CN=6D2120D281865021E16D49A2451DC53A851B5BBD Certificate serial: 7CF54190D11ED20960779096AA562FE741F00C8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft Manifest number: 84 Signing time: Thu 21 Aug 2025 06:01:40 +0000 Manifest this update: Thu 21 Aug 2025 05:56:40 +0000 Manifest next update: Sun 24 Aug 2025 14:27:40 +0000 Files and hashes: 1: 3130332e3234352e31382e302f32332d3234203d3e203436303233.roa (hash: LiUE5E5NP3y/9rJb+3iR5iXWUeVWyAD0Ol8W0BAVcIY=) 2: 3130332e3234352e31372e302f32342d3234203d3e203436303233.roa (hash: b+Xtzw+6na2a+xMS20wYCYPacvkf2l2PSoCEFblC4OY=) 3: 3130332e3234352e31362e302f32342d3234203d3e203436303233.roa (hash: oc7a2yZBp9q1BdzfUR+tIB5Dtqa/efadojr7/o0DfQ4=) 4: 3130332e3234352e31392e302f32342d3234203d3e203436303233.roa (hash: GFImrwcqsA1f+8jAtf3KA9NFE2jyS21niSNaMCPf864=) 5: 3130332e3234352e31382e302f32342d3234203d3e203436303233.roa (hash: AShL+HPisPSiiNmtbZE+edgEgIJDv3kNOSZOwH9eeKo=) 6: 6D2120D281865021E16D49A2451DC53A851B5BBD.crl (hash: s0cfZ3iKENFnzmrvVzLKBhzIfb98XtxLbhzx409dOaM=) 7: 3130332e3234352e31362e302f32322d3234203d3e203436303233.roa (hash: PpALimtbBE16UsxvYAE3t7KXuw0rzaxc/sz7ukHKaaU=) 8: 3130332e3234352e31362e302f32332d3234203d3e203436303233.roa (hash: r+Lb1druh87TuPBvbGkUhC/GpzU18DRigq7n/TRclBo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 14:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:f5:41:90:d1:1e:d2:09:60:77:90:96:aa:56:2f:e7:41:f0:0c:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D2120D281865021E16D49A2451DC53A851B5BBD Validity Not Before: Aug 21 05:56:40 2025 GMT Not After : Aug 24 14:27:40 2025 GMT Subject: CN=BE6C9373D3B510DF8069F33C94A09B30EED49FB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4d:ac:06:9a:d9:3f:d4:36:0b:4f:8f:42:8e: d8:82:4f:2d:03:34:dd:39:40:f2:06:3a:7c:aa:8f: 57:dc:2a:e2:fa:b4:70:76:69:ba:b8:2c:8e:2c:8e: 13:d4:86:c0:16:a1:66:79:1a:4e:7d:5f:80:56:2c: 11:03:ed:4f:a8:df:aa:1c:7f:ba:23:a2:ea:ed:c6: 22:55:1c:54:c8:ca:fb:33:18:a4:d2:f1:11:d6:8d: d9:44:68:c5:b6:e2:0a:4e:e6:fa:b0:f4:e9:c4:54: c3:55:9c:8b:3c:08:4c:ed:93:c5:fa:a4:77:9c:99: 32:5b:2b:04:92:93:ae:a9:5e:e9:59:4a:f1:a5:06: 70:7d:ba:71:78:1a:66:76:68:03:a9:f4:99:4c:ba: 6e:e3:e3:94:3a:cc:6a:e7:d8:56:76:f1:86:f2:0c: e8:19:ca:39:d2:2e:0f:ea:9f:ed:59:83:c0:d9:f1: f3:9a:98:20:08:6d:c4:7a:c8:1b:a2:33:3d:37:f6: f2:d7:af:ec:27:a7:12:0b:b9:79:54:88:e7:4e:c8: 64:d1:eb:49:7f:ab:ba:db:b9:75:f7:35:0e:5c:c9: c2:3a:48:1c:81:78:c9:d5:01:6f:a4:63:6d:b7:1f: 2b:4a:1f:ca:ce:66:61:26:21:91:1e:65:f4:dd:39: dd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:6C:93:73:D3:B5:10:DF:80:69:F3:3C:94:A0:9B:30:EE:D4:9F:B1 X509v3 Authority Key Identifier: keyid:6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:0b:a2:13:f5:e7:8b:99:f5:55:1b:ed:30:df:22:8e:0d:c5: bf:7d:44:4c:a4:4d:3b:8d:99:92:08:6a:7b:e9:93:0b:47:72: 7e:c7:ae:b9:a5:1f:c2:74:e2:2c:09:be:d4:cc:40:c3:02:92: bd:d6:00:56:3b:c4:c0:d8:ed:75:c0:69:77:2c:fd:77:bc:48: 20:ce:a3:f9:6c:66:90:36:6d:c4:40:ac:c9:d5:ff:ba:54:9b: 1c:8c:df:89:d8:bc:41:17:04:ae:ce:00:1e:0e:f9:1b:81:7f: e8:52:a6:bd:c0:b2:28:7b:0b:c2:dd:bc:f7:f3:ad:a7:b4:96: 1c:ef:07:22:73:c3:28:05:33:bb:5e:b5:8c:b2:56:30:3d:25: c1:c5:a4:63:44:83:1f:37:bd:dc:78:0c:44:4b:11:29:54:24: 1d:f8:77:58:ea:e7:4b:64:e5:98:c3:17:f5:77:73:11:b1:ec: 69:8d:6f:8e:47:3d:f1:68:4f:cc:01:fc:61:49:c9:00:0f:9d: ad:36:28:a4:d5:a9:f7:b3:f6:c5:ec:7b:bd:19:b2:49:a6:ca: 40:86:29:4a:79:bd:6a:51:4d:dc:26:3b:bc:69:eb:41:06:08: af:b8:14:e1:25:f3:48:24:7a:f8:f0:ce:6c:47:0e:fd:22:24: fb:c8:ff:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfPVBkNEe0glgd5CWqlYv50HwDIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4 NTFCNUJCRDAeFw0yNTA4MjEwNTU2NDBaFw0yNTA4MjQxNDI3NDBaMDMxMTAvBgNV BAMTKEJFNkM5MzczRDNCNTEwREY4MDY5RjMzQzk0QTA5QjMwRUVENDlGQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmTawGmtk/1DYLT49CjtiCTy0D NN05QPIGOnyqj1fcKuL6tHB2abq4LI4sjhPUhsAWoWZ5Gk59X4BWLBED7U+o36oc f7ojourtxiJVHFTIyvszGKTS8RHWjdlEaMW24gpO5vqw9OnEVMNVnIs8CEztk8X6 pHecmTJbKwSSk66pXulZSvGlBnB9unF4GmZ2aAOp9JlMum7j45Q6zGrn2FZ28Yby DOgZyjnSLg/qn+1Zg8DZ8fOamCAIbcR6yBuiMz039vLXr+wnpxILuXlUiOdOyGTR 60l/q7rbuXX3NQ5cycI6SByBeMnVAW+kY223HytKH8rOZmEmIZEeZfTdOd1TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvmyTc9O1EN+AafM8lKCbMO7Un7EwHwYDVR0j BBgwFoAUbSEg0oGGUCHhbUmiRR3FOoUbW70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTI3MmY3Yi1kNjU2LTQwNTgtYTdiNi1mMjVhZGYzZWQxYmUvMC82RDIxMjBEMjgx ODY1MDIxRTE2RDQ5QTI0NTFEQzUzQTg1MUI1QkJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4NTFC NUJCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTUyNzJmN2ItZDY1Ni00MDU4LWE3 YjYtZjI1YWRmM2VkMWJlLzAvNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1 M0E4NTFCNUJCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACsLohP154uZ9VUb7TDfIo4Nxb99REykTTuN mZIIanvpkwtHcn7HrrmlH8J04iwJvtTMQMMCkr3WAFY7xMDY7XXAaXcs/Xe8SCDO o/lsZpA2bcRArMnV/7pUmxyM34nYvEEXBK7OAB4O+RuBf+hSpr3Asih7C8LdvPfz rae0lhzvByJzwygFM7tetYyyVjA9JcHFpGNEgx83vdx4DERLESlUJB34d1jq50tk 5ZjDF/V3cxGx7GmNb45HPfFoT8wB/GFJyQAPna02KKTVqfez9sXse70ZskmmykCG KUp5vWpRTdwmO7xp60EGCK+4FOEl80gkevjwzmxHDv0iJPvI/70= -----END CERTIFICATE-----Generated at Sat Aug 23 12:21:31 2025 by rpki-client