$ rpki-client -vvf repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft File: C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft (raw, json) Hash identifier: 4aCIHs1x/Aud1kETNEKJSahPSYBfxi9HcLOTBPGUyJo= Subject key identifier: 8F:95:A5:5A:7D:64:B0:1E:EC:E0:BB:F9:BA:CD:5D:9F:35:74:34:23 Authority key identifier: C6:95:0F:BC:93:F3:09:E8:39:CF:C5:E1:A2:EF:0F:6C:91:BF:09:C7 Certificate issuer: /CN=C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7 Certificate serial: 2AAFE608BD88FD987BB70060333B36A19B01AB28 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft Manifest number: 0102 Signing time: Fri 22 Aug 2025 01:01:02 +0000 Manifest this update: Fri 22 Aug 2025 00:56:02 +0000 Manifest next update: Mon 25 Aug 2025 05:19:02 +0000 Files and hashes: 1: C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl (hash: TZSc31vi2vEBsCXEeJmcR9J1OJBkXTqrQtKQeCd8CdA=) 2: 3130332e37382e35312e302f32342d3234203d3e20313530323536.roa (hash: IGaUhhhYSDgHiHBNKXPmkyIkbMtz8KycOxh90/k+Fes=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 05:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:af:e6:08:bd:88:fd:98:7b:b7:00:60:33:3b:36:a1:9b:01:ab:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7 Validity Not Before: Aug 22 00:56:02 2025 GMT Not After : Aug 25 05:19:02 2025 GMT Subject: CN=8F95A55A7D64B01EECE0BBF9BACD5D9F35743423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6a:82:78:86:4d:48:8b:da:a2:22:28:6e:22: ac:51:64:84:05:46:0f:67:f9:a9:9b:09:21:b2:2d: 74:ee:1c:4e:90:02:6a:cf:18:20:4a:d9:f7:c9:53: e0:43:cb:15:d4:bb:91:6c:9e:5d:aa:e3:26:dc:d0: 4e:19:18:c1:ef:ab:b5:4e:e6:27:ad:dd:7d:35:74: 77:5e:1d:fd:2b:c1:f7:7e:d0:dd:6a:96:02:ce:fe: a7:da:59:d1:ed:12:4a:20:3f:2d:3f:b4:b1:42:31: 1d:fe:7e:50:64:90:e1:c5:83:04:81:44:a8:e5:06: 78:06:1c:a8:0a:e5:b5:2e:9d:68:06:08:06:e2:2a: 48:40:b3:31:d8:ed:a2:17:f5:5e:5b:8f:18:03:13: 24:f6:d1:ec:b8:7c:27:7a:86:b0:79:12:5c:ef:37: 69:6e:4c:d9:a3:7f:bc:98:ab:dd:2a:49:1c:8e:9a: 45:7a:2f:43:7c:0d:3e:20:e2:0e:46:de:ec:e7:31: 81:14:8c:44:4e:c6:bb:17:d7:16:48:c9:e4:9a:0b: 11:64:c3:15:51:47:0a:04:f1:b4:27:66:18:23:94: 67:4a:6a:a5:bc:dc:ea:f3:76:3d:09:73:9b:7e:5a: 81:21:d0:d0:5e:96:ad:d8:15:71:5b:09:36:d2:0d: 3d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:95:A5:5A:7D:64:B0:1E:EC:E0:BB:F9:BA:CD:5D:9F:35:74:34:23 X509v3 Authority Key Identifier: keyid:C6:95:0F:BC:93:F3:09:E8:39:CF:C5:E1:A2:EF:0F:6C:91:BF:09:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:a0:85:5d:20:31:0a:47:59:2a:99:b3:37:56:ad:59:a9:20: ef:61:8d:d6:2f:23:f4:9b:6e:5d:69:5e:2d:15:b5:95:fb:c6: 99:ee:58:d3:a8:9f:f8:5b:09:a6:fd:da:80:7e:26:05:3f:1b: 95:8e:34:c4:23:4b:8f:f6:bf:2e:9a:b4:4f:99:81:e6:52:31: 8a:71:3c:57:82:10:1a:8a:3d:a4:fa:e4:f1:53:bb:20:45:91: 2c:f2:97:ca:7b:54:4b:03:08:71:10:53:b2:3b:90:da:b6:b6: 3a:3c:04:be:8d:18:2d:03:e8:0a:63:64:50:76:45:c5:fc:3a: 9e:c0:63:71:c9:12:41:4e:39:9b:36:1c:e2:a9:08:2f:b5:b3: a1:42:4a:33:26:33:1c:b3:59:6e:72:d1:62:77:84:87:e1:cd: 5d:3b:87:a8:6b:ae:09:fd:18:65:ed:c4:cd:3e:a9:2a:60:72: 27:5c:ae:9a:d1:ef:6e:b9:0b:4f:71:78:34:b0:a8:bf:fb:5e: 44:a4:97:61:24:1a:43:2c:c4:c0:87:49:c1:14:12:6c:bf:da: 51:11:25:7a:21:6b:7d:00:89:9f:06:d7:c2:56:1d:7c:a7:0e: a1:50:42:90:a1:b2:93:3b:22:41:cd:8d:4d:27:e8:61:e7:18: 63:09:72:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKq/mCL2I/Zh7twBgMzs2oZsBqygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5NTBGQkM5M0YzMDlFODM5Q0ZDNUUxQTJFRjBGNkM5 MUJGMDlDNzAeFw0yNTA4MjIwMDU2MDJaFw0yNTA4MjUwNTE5MDJaMDMxMTAvBgNV BAMTKDhGOTVBNTVBN0Q2NEIwMUVFQ0UwQkJGOUJBQ0Q1RDlGMzU3NDM0MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbaoJ4hk1Ii9qiIihuIqxRZIQF Rg9n+ambCSGyLXTuHE6QAmrPGCBK2ffJU+BDyxXUu5Fsnl2q4ybc0E4ZGMHvq7VO 5iet3X01dHdeHf0rwfd+0N1qlgLO/qfaWdHtEkogPy0/tLFCMR3+flBkkOHFgwSB RKjlBngGHKgK5bUunWgGCAbiKkhAszHY7aIX9V5bjxgDEyT20ey4fCd6hrB5Elzv N2luTNmjf7yYq90qSRyOmkV6L0N8DT4g4g5G3uznMYEUjEROxrsX1xZIyeSaCxFk wxVRRwoE8bQnZhgjlGdKaqW83Orzdj0Jc5t+WoEh0NBelq3YFXFbCTbSDT1lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj5WlWn1ksB7s4Lv5us1dnzV0NCMwHwYDVR0j BBgwFoAUxpUPvJPzCeg5z8Xhou8PbJG/CccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjUyMWJkMS0xZGEyLTRiODAtODQxNi1mMDVkZTI5MjIxNmUvMC9DNjk1MEZCQzkz RjMwOUU4MzlDRkM1RTFBMkVGMEY2QzkxQkYwOUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzY5NTBGQkM5M0YzMDlFODM5Q0ZDNUUxQTJFRjBGNkM5MUJG MDlDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI1MjFiZDEtMWRhMi00YjgwLTg0 MTYtZjA1ZGUyOTIyMTZlLzAvQzY5NTBGQkM5M0YzMDlFODM5Q0ZDNUUxQTJFRjBG NkM5MUJGMDlDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmghV0gMQpHWSqZszdWrVmpIO9hjdYvI/Sb bl1pXi0VtZX7xpnuWNOon/hbCab92oB+JgU/G5WONMQjS4/2vy6atE+ZgeZSMYpx PFeCEBqKPaT65PFTuyBFkSzyl8p7VEsDCHEQU7I7kNq2tjo8BL6NGC0D6ApjZFB2 RcX8Op7AY3HJEkFOOZs2HOKpCC+1s6FCSjMmMxyzWW5y0WJ3hIfhzV07h6hrrgn9 GGXtxM0+qSpgcidcrprR7265C09xeDSwqL/7XkSkl2EkGkMsxMCHScEUEmy/2lER JXoha30AiZ8G18JWHXynDqFQQpChspM7IkHNjU0n6GHnGGMJckc= -----END CERTIFICATE-----Generated at Sat Aug 23 22:05:53 2025 by rpki-client