$ rpki-client -vvf repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft File: C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft (raw, json) Hash identifier: 7DsecrFuI7IHv+dUlR0Tq5k7Yf/f4SYzOjWxj2z4slQ= Subject key identifier: 97:09:63:20:87:03:DE:E7:69:28:F2:1C:DC:A8:B1:BC:74:DA:00:78 Authority key identifier: C6:07:6E:33:0D:46:79:EF:04:55:EA:40:0D:11:58:D4:F4:9B:0B:F1 Certificate issuer: /CN=C6076E330D4679EF0455EA400D1158D4F49B0BF1 Certificate serial: 59AA43F1755515CE2E9F21950BAE89D2698E6254 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft Manifest number: 027F Signing time: Thu 21 Aug 2025 16:02:03 +0000 Manifest this update: Thu 21 Aug 2025 15:57:03 +0000 Manifest next update: Mon 25 Aug 2025 01:36:03 +0000 Files and hashes: 1: 3130332e3137382e322e302f32332d3234203d3e20313431303737.roa (hash: 0uhRI2twQUwOL4bXfxCRKkhSHjZlw1Z+9ZZ7PGpOhe4=) 2: C6076E330D4679EF0455EA400D1158D4F49B0BF1.crl (hash: VH6fWcQd8tOXDz5GHFeVdp6kUceWpDKQ1g/O6aAT+wk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.crl rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 01:36:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:aa:43:f1:75:55:15:ce:2e:9f:21:95:0b:ae:89:d2:69:8e:62:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6076E330D4679EF0455EA400D1158D4F49B0BF1 Validity Not Before: Aug 21 15:57:03 2025 GMT Not After : Aug 25 01:36:03 2025 GMT Subject: CN=970963208703DEE76928F21CDCA8B1BC74DA0078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:88:6f:8d:0d:7e:29:80:aa:f0:eb:bf:7c:77: af:1d:58:c7:b9:37:9d:95:a7:11:82:70:9d:f1:1e: 7f:c7:5e:5b:18:d6:45:00:f7:93:17:23:26:86:7d: 99:0e:cc:ca:2d:5f:4c:c2:10:b8:b0:4e:0e:4f:ca: e4:e9:11:3d:54:5c:c8:f0:e3:21:47:36:56:1e:80: 3e:20:13:15:b6:11:65:96:d2:96:dd:c5:dc:5d:ee: 02:b4:5d:3b:d1:a2:5b:d8:0f:38:6f:ce:4d:08:86: 54:4c:1b:21:24:cb:7c:31:a0:ac:67:b2:1b:e3:7f: 33:2f:91:20:d6:88:83:38:c5:ab:1c:af:db:e9:5e: a2:49:00:7c:b3:35:50:dd:1b:e7:73:84:3c:de:f2: 84:80:77:01:14:41:39:04:a0:eb:65:ed:b0:5c:1d: f9:8b:f4:55:f6:46:0d:1f:fb:59:1f:d5:30:c7:4d: 9f:78:1a:61:37:e6:e5:19:3c:39:92:81:95:f0:9b: 4e:ee:22:c3:24:d1:6a:de:f1:4e:b5:ee:23:30:1b: 9f:96:0a:78:1c:e6:da:e5:70:1f:be:76:8b:80:2b: 44:5d:c9:b3:e3:80:aa:7b:88:0e:54:07:c3:03:fb: 2e:ff:30:7f:fd:26:84:56:73:a9:f9:de:3f:11:fb: 7f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:09:63:20:87:03:DE:E7:69:28:F2:1C:DC:A8:B1:BC:74:DA:00:78 X509v3 Authority Key Identifier: keyid:C6:07:6E:33:0D:46:79:EF:04:55:EA:40:0D:11:58:D4:F4:9B:0B:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:f1:dc:01:8f:a6:4a:c7:b9:1a:32:36:f8:a2:82:8d:87:3a: 8c:28:67:bc:60:e9:69:95:56:88:94:84:d9:b1:50:f7:90:70: 4c:b3:82:66:a3:f5:0d:5d:67:bc:79:28:92:6a:24:83:5a:85: 35:4e:8e:8c:66:3b:3e:86:10:fa:d7:5c:b8:6b:8d:85:c6:ed: 0f:1c:b6:e7:c0:f1:d9:f4:db:74:d2:6e:51:0a:50:69:09:a2: 45:b4:e2:7a:9c:31:62:2d:7c:29:1d:36:a1:88:82:ae:3e:ab: 7c:d0:a6:56:c2:8a:72:50:53:f4:8a:72:5d:c5:e5:08:97:f1: a4:b9:32:e4:b3:68:94:69:ce:31:86:f4:88:46:ab:65:23:41: d9:c3:61:fd:5a:3d:03:a9:43:be:be:0d:cd:17:1d:a6:2e:f7: ac:f1:75:fc:53:0f:55:19:26:5f:84:9e:e3:84:80:02:07:53: a8:3a:22:63:0b:38:f2:02:ad:a6:1f:92:cb:52:5d:74:49:ec: 3f:ac:80:d3:a2:1e:ca:9a:28:06:79:b3:db:2e:42:16:6c:4e: 19:7f:dd:53:bb:b0:05:3a:5b:01:3a:5e:2f:22:a7:29:20:c1: 8b:c8:b6:22:28:3d:ec:bf:8a:5e:cb:85:d2:a3:41:61:c0:48: 97:db:c5:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWapD8XVVFc4unyGVC66J0mmOYlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYwNzZFMzMwRDQ2NzlFRjA0NTVFQTQwMEQxMTU4RDRG NDlCMEJGMTAeFw0yNTA4MjExNTU3MDNaFw0yNTA4MjUwMTM2MDNaMDMxMTAvBgNV BAMTKDk3MDk2MzIwODcwM0RFRTc2OTI4RjIxQ0RDQThCMUJDNzREQTAwNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbiG+NDX4pgKrw6798d68dWMe5 N52VpxGCcJ3xHn/HXlsY1kUA95MXIyaGfZkOzMotX0zCELiwTg5PyuTpET1UXMjw 4yFHNlYegD4gExW2EWWW0pbdxdxd7gK0XTvRolvYDzhvzk0IhlRMGyEky3wxoKxn shvjfzMvkSDWiIM4xascr9vpXqJJAHyzNVDdG+dzhDze8oSAdwEUQTkEoOtl7bBc HfmL9FX2Rg0f+1kf1TDHTZ94GmE35uUZPDmSgZXwm07uIsMk0Wre8U617iMwG5+W Cngc5trlcB++douAK0RdybPjgKp7iA5UB8MD+y7/MH/9JoRWc6n53j8R+39bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlwljIIcD3udpKPIc3KixvHTaAHgwHwYDVR0j BBgwFoAUxgduMw1Gee8EVepADRFY1PSbC/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmZhZTU2NS00MTE0LTQ0MzQtOTQwZC03YzAxOTI4YzhhYjEvMC9DNjA3NkUzMzBE NDY3OUVGMDQ1NUVBNDAwRDExNThENEY0OUIwQkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYwNzZFMzMwRDQ2NzlFRjA0NTVFQTQwMEQxMTU4RDRGNDlC MEJGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JmYWU1NjUtNDExNC00NDM0LTk0 MGQtN2MwMTkyOGM4YWIxLzAvQzYwNzZFMzMwRDQ2NzlFRjA0NTVFQTQwMEQxMTU4 RDRGNDlCMEJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAITx3AGPpkrHuRoyNviigo2HOowoZ7xg6WmV VoiUhNmxUPeQcEyzgmaj9Q1dZ7x5KJJqJINahTVOjoxmOz6GEPrXXLhrjYXG7Q8c tufA8dn023TSblEKUGkJokW04nqcMWItfCkdNqGIgq4+q3zQplbCinJQU/SKcl3F 5QiX8aS5MuSzaJRpzjGG9IhGq2UjQdnDYf1aPQOpQ76+Dc0XHaYu96zxdfxTD1UZ Jl+EnuOEgAIHU6g6ImMLOPICraYfkstSXXRJ7D+sgNOiHsqaKAZ5s9suQhZsThl/ 3VO7sAU6WwE6Xi8ipykgwYvItiIoPey/il7LhdKjQWHASJfbxb0= -----END CERTIFICATE-----Generated at Sat Aug 23 10:36:09 2025 by rpki-client