$ rpki-client -vvf repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft File: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft (raw, json) Hash identifier: yYVMUFZMNXefz4fYRv+14mbNT6634cpsXLKWbljy+XY= Subject key identifier: EE:F0:6E:7A:58:7E:38:33:8C:88:DF:25:D2:B3:C4:A7:67:AB:DC:2F Authority key identifier: 6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E Certificate issuer: /CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Certificate serial: 70952DE77365EE7A779C05D2E2407EE9E35EE304 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft Manifest number: D3 Signing time: Thu 21 Aug 2025 13:52:14 +0000 Manifest this update: Thu 21 Aug 2025 13:47:14 +0000 Manifest next update: Sun 24 Aug 2025 15:26:14 +0000 Files and hashes: 1: 33362e35302e3231372e302f32342d3234203d3e20313437313238.roa (hash: suvA+Wk962jHlhC9+yItBsXmZi+V1BXvTufHDqbDzJE=) 2: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl (hash: bjMbBZMgTR3x/AekL+WG321jsCOiAswF9NNJXYmFLCU=) 3: 33362e35302e3231362e302f32332d3233203d3e20313437313238.roa (hash: TzFqnwzzY9xia0s3waMLkiGG8A7BVi2jn0Tebn9ZTXg=) 4: 33362e35302e3231362e302f32342d3234203d3e20313437313238.roa (hash: knY/ggPl78wk2nvRxnL0Ik6PzIK0DYSQq15iPy2gM40=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 15:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:95:2d:e7:73:65:ee:7a:77:9c:05:d2:e2:40:7e:e9:e3:5e:e3:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Validity Not Before: Aug 21 13:47:14 2025 GMT Not After : Aug 24 15:26:14 2025 GMT Subject: CN=EEF06E7A587E38338C88DF25D2B3C4A767ABDC2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1d:31:6a:b4:d6:be:3b:b9:6a:06:39:9a:76: ae:27:60:b8:ab:bc:12:57:da:6a:b3:81:86:6a:48: 37:e3:78:58:10:52:2c:73:dc:bb:ac:7b:c5:d8:70: 0b:a6:ff:ff:dc:19:ee:97:ae:c0:f3:e5:cd:ae:a9: 8b:36:f7:85:3f:58:83:a5:ba:15:ad:f5:6b:2a:12: 86:89:cc:8b:78:e6:79:1b:bd:da:07:99:59:08:f9: f6:cc:31:b2:2d:85:a7:d1:91:5e:09:36:c7:2d:09: 19:da:34:50:4e:fc:f1:f6:bc:f4:30:7e:54:80:c4: 28:dc:d8:c0:b9:2b:dc:b6:e5:8c:a5:47:bc:ab:c0: ae:5d:b5:98:7f:ae:2c:f9:1d:6b:9c:32:2a:77:2c: 6b:82:ac:d5:86:8a:f5:aa:dc:33:be:e1:cf:32:49: ca:29:79:93:f9:f0:53:2a:b6:ab:68:54:48:04:1c: 37:25:50:a1:e9:b6:58:10:cd:58:26:4d:48:f7:e1: 1e:24:1a:8d:33:48:32:3f:f7:82:ac:c8:25:d2:7d: d0:4f:9a:92:b3:72:1c:62:34:13:78:16:bc:c6:67: 79:6b:22:d6:26:2e:6a:4d:13:7e:5f:28:32:de:41: 76:12:99:fa:f7:1f:77:01:14:73:32:67:28:e0:45: d9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F0:6E:7A:58:7E:38:33:8C:88:DF:25:D2:B3:C4:A7:67:AB:DC:2F X509v3 Authority Key Identifier: keyid:6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:c0:26:e3:39:73:b5:24:32:52:ff:f5:96:df:6a:b8:d7:00: 21:83:fd:f8:52:6d:e1:ec:2d:be:5c:a3:65:dd:00:9f:71:42: f9:af:7c:ea:26:b4:bb:2a:9a:fe:f5:8d:c6:14:1b:ab:cd:8f: cf:ef:c8:a3:4a:0b:77:bd:5d:5e:a0:cf:f0:23:8d:f5:2a:03: 12:a1:9d:97:c8:45:51:3b:c8:10:1d:50:2a:51:24:aa:20:ee: cb:60:14:a4:35:f7:e2:91:0e:21:20:9b:90:eb:35:de:5c:82: c3:1b:b4:1b:ff:e4:62:2b:c4:50:fc:44:65:83:ab:00:de:f1: 17:60:0b:77:95:9c:6b:86:09:fe:6f:6f:25:a7:99:66:a3:01: 21:8b:f2:37:61:dc:ac:0e:40:99:6f:31:22:8d:48:c0:81:af: 2d:25:15:bc:d9:df:f5:ad:6f:cf:c2:cd:15:78:a8:38:25:ab: 1f:de:3b:60:88:fe:a4:b4:df:59:ed:38:07:66:38:be:41:c7: cb:6c:27:a2:12:28:0f:3d:3f:42:4e:0e:00:9b:e6:72:07:97: d1:a7:fd:63:68:f3:68:e0:bf:31:29:41:a3:69:d7:11:36:85: 02:fb:38:d0:c4:c4:7c:77:fa:ed:63:62:2b:89:b2:9e:30:0d: 59:00:6b:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcJUt53Nl7np3nAXS4kB+6eNe4wQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3 QTk4MDk5RTAeFw0yNTA4MjExMzQ3MTRaFw0yNTA4MjQxNTI2MTRaMDMxMTAvBgNV BAMTKEVFRjA2RTdBNTg3RTM4MzM4Qzg4REYyNUQyQjNDNEE3NjdBQkRDMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuHTFqtNa+O7lqBjmadq4nYLir vBJX2mqzgYZqSDfjeFgQUixz3Luse8XYcAum///cGe6XrsDz5c2uqYs294U/WIOl uhWt9WsqEoaJzIt45nkbvdoHmVkI+fbMMbIthafRkV4JNsctCRnaNFBO/PH2vPQw flSAxCjc2MC5K9y25YylR7yrwK5dtZh/riz5HWucMip3LGuCrNWGivWq3DO+4c8y ScopeZP58FMqtqtoVEgEHDclUKHptlgQzVgmTUj34R4kGo0zSDI/94KsyCXSfdBP mpKzchxiNBN4FrzGZ3lrItYmLmpNE35fKDLeQXYSmfr3H3cBFHMyZyjgRdnfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7vBuelh+ODOMiN8l0rPEp2er3C8wHwYDVR0j BBgwFoAUbbsQDY1GaauKXH7gVyKO1nqYCZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTk4OWZhZi00OGZiLTRmNDAtOWU3Ny0yNDNkNzhhNWI1YzQvMC82REJCMTAwRDhE NDY2OUFCOEE1QzdFRTA1NzIyOEVENjdBOTgwOTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3QTk4 MDk5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU5ODlmYWYtNDhmYi00ZjQwLTll NzctMjQzZDc4YTViNWM0LzAvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhF RDY3QTk4MDk5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPAJuM5c7UkMlL/9ZbfarjXACGD/fhSbeHs Lb5co2XdAJ9xQvmvfOomtLsqmv71jcYUG6vNj8/vyKNKC3e9XV6gz/AjjfUqAxKh nZfIRVE7yBAdUCpRJKog7stgFKQ19+KRDiEgm5DrNd5cgsMbtBv/5GIrxFD8RGWD qwDe8RdgC3eVnGuGCf5vbyWnmWajASGL8jdh3KwOQJlvMSKNSMCBry0lFbzZ3/Wt b8/CzRV4qDglqx/eO2CI/qS031ntOAdmOL5Bx8tsJ6ISKA89P0JODgCb5nIHl9Gn /WNo82jgvzEpQaNp1xE2hQL7ONDExHx3+u1jYiuJsp4wDVkAa5o= -----END CERTIFICATE-----Generated at Sat Aug 23 10:33:17 2025 by rpki-client