$ rpki-client -vvf repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft File: 6DA2B28F4391C01434B7229FD4D68E661BF13061.mft (raw, json) Hash identifier: UYbmxrqsmRIiH/Tr/NqB/asOCLaU/BblULNyji+YkP0= Subject key identifier: 02:D1:76:A7:09:43:44:BD:17:95:28:90:F9:68:B6:30:61:2B:C2:93 Authority key identifier: 6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61 Certificate issuer: /CN=6DA2B28F4391C01434B7229FD4D68E661BF13061 Certificate serial: 700412ED6B6F87B8F4CA5932ED060A2AC99CFFAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft Manifest number: 026E Signing time: Sat 23 Aug 2025 06:31:34 +0000 Manifest this update: Sat 23 Aug 2025 06:26:34 +0000 Manifest next update: Tue 26 Aug 2025 17:25:34 +0000 Files and hashes: 1: 34392e3233362e3231392e302f32342d3234203d3e203535363638.roa (hash: 3dUHFOcTvL6SRCYfkh3xOumINLAjfoUSiaeyY80AmMU=) 2: 34392e3233362e3231372e302f32342d3234203d3e203535363638.roa (hash: SptXDMlN81cXVQItr4QSDBANvjvdA+fjiFu71V/b7e4=) 3: 6DA2B28F4391C01434B7229FD4D68E661BF13061.crl (hash: oupskl2SV8Zf4WHUYpzYN2HWRw9fv+obipOjEEgrFbg=) 4: 34392e3233362e3232322e302f32342d3234203d3e203535363638.roa (hash: 7nW2fdNzQ/pw6iueKs/nit/sd4D7nCLJjKMOnmFO3+c=) 5: 34392e3233362e3232302e302f32342d3234203d3e203535363638.roa (hash: KZESdVYPyK5UDmppEqYu4UgDw6S2JiyC9Aylq3V7KK8=) 6: 34392e3233362e3232312e302f32342d3234203d3e203535363638.roa (hash: P3qaAQS+9Hmz4InOLYsrCr6O0nuBDwpieqmijzpxLgQ=) 7: 34392e3233362e3232332e302f32342d3234203d3e203535363638.roa (hash: 6Ss/J4jbsHWttbGBWZAXrFLeP7zMzLu10fV9oC9kRxs=) 8: 34392e3233362e3231362e302f32342d3234203d3e203535363638.roa (hash: C1ful6krFD/D/NQklV2H82Wf+t1lC80LwN0uOUSrxSc=) 9: 34392e3233362e3231382e302f32342d3234203d3e203535363638.roa (hash: cndHnN7Y2CkZsc1bcXRUS17ntMjtPGamuBmM/0sBScA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:04:12:ed:6b:6f:87:b8:f4:ca:59:32:ed:06:0a:2a:c9:9c:ff:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DA2B28F4391C01434B7229FD4D68E661BF13061 Validity Not Before: Aug 23 06:26:34 2025 GMT Not After : Aug 26 17:25:34 2025 GMT Subject: CN=02D176A7094344BD17952890F968B630612BC293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ea:e1:65:15:8a:7b:78:01:75:9a:ed:eb:e6: 53:1a:56:29:69:0d:f7:80:bd:ff:4f:52:fa:11:61: 63:0b:eb:d9:3a:57:f6:44:5a:87:fe:67:8a:dd:d1: 32:5f:2d:ba:3f:22:7f:60:7d:42:e8:36:1a:17:14: 4b:e3:b5:45:90:9d:df:0e:98:91:da:63:52:48:e9: 29:cd:3a:e8:84:f0:07:bb:23:e1:2a:de:fc:7d:e5: 9b:73:4b:4f:33:96:c7:9d:10:e8:ba:20:cf:3e:2c: ff:f6:43:4f:8b:ec:9d:2c:b0:d5:a9:99:8e:ff:bc: a6:49:7c:e9:50:78:e3:63:1e:00:71:44:fb:42:fa: d5:ee:a7:9e:a5:ad:fb:c1:1e:c5:dd:6a:64:3b:fe: af:11:24:59:3e:01:3c:2f:34:d3:9c:61:21:07:9b: c2:dd:db:47:1c:1b:7e:b0:1a:86:ed:3e:fd:01:ca: e3:c7:d6:fd:00:2d:ad:64:14:c6:9b:b3:e6:51:3e: 38:d8:6d:7a:82:88:1e:26:00:0f:15:d7:1c:82:4a: 00:e3:d6:06:f2:86:2d:81:d4:3b:09:ab:91:f8:f3: 2a:8a:ca:22:e5:a1:50:45:71:92:85:b0:12:32:e8: 79:39:95:05:3d:51:53:b0:89:18:93:19:d0:67:5e: 77:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D1:76:A7:09:43:44:BD:17:95:28:90:F9:68:B6:30:61:2B:C2:93 X509v3 Authority Key Identifier: keyid:6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:56:97:be:69:b4:dc:6d:72:d0:a5:66:4b:8e:89:30:1e:29: a8:24:07:c8:d1:44:36:1e:c8:22:b6:18:cf:ac:bd:9b:44:5b: 73:6b:cf:87:ac:b0:60:7c:70:c4:fd:aa:4f:18:f6:3f:87:2c: a9:e8:0e:f2:fd:6d:90:1d:c2:f4:31:50:7e:5d:fa:1a:dc:05: 83:e5:af:08:ac:51:10:4c:7c:e3:9d:f2:53:e7:3d:14:51:9c: 11:4b:e6:7d:ee:ef:92:71:d9:0e:5f:46:05:91:10:f1:9a:78: d8:f7:c4:d1:37:32:75:f1:9a:87:c5:a0:ea:ae:9f:cd:08:d4: d3:d7:25:04:7b:23:e8:ca:f5:7f:04:0b:f4:19:5e:59:95:6f: 83:7f:62:94:b7:69:9d:b5:14:8d:36:79:5a:28:0f:23:38:a9: ec:cc:cd:d2:e3:80:e7:5c:07:7a:60:42:3b:ed:04:03:6b:86: b0:f2:20:d0:da:13:b8:f7:b2:3e:db:c2:62:45:b4:b1:dc:ef: 2a:6e:74:b1:81:e1:95:9b:18:c2:27:b3:0d:22:92:ed:c2:a1: a1:b5:0a:bc:77:9f:54:75:d1:50:76:13:80:49:5a:37:f2:43: bd:9e:3a:12:c7:13:0c:aa:b2:44:4f:54:5c:18:e4:92:75:3c: ee:c8:9a:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcAQS7Wtvh7j0ylky7QYKKsmc/6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhFNjYx QkYxMzA2MTAeFw0yNTA4MjMwNjI2MzRaFw0yNTA4MjYxNzI1MzRaMDMxMTAvBgNV BAMTKDAyRDE3NkE3MDk0MzQ0QkQxNzk1Mjg5MEY5NjhCNjMwNjEyQkMyOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH6uFlFYp7eAF1mu3r5lMaVilp DfeAvf9PUvoRYWML69k6V/ZEWof+Z4rd0TJfLbo/In9gfULoNhoXFEvjtUWQnd8O mJHaY1JI6SnNOuiE8Ae7I+Eq3vx95ZtzS08zlsedEOi6IM8+LP/2Q0+L7J0ssNWp mY7/vKZJfOlQeONjHgBxRPtC+tXup56lrfvBHsXdamQ7/q8RJFk+ATwvNNOcYSEH m8Ld20ccG36wGobtPv0ByuPH1v0ALa1kFMabs+ZRPjjYbXqCiB4mAA8V1xyCSgDj 1gbyhi2B1DsJq5H48yqKyiLloVBFcZKFsBIy6Hk5lQU9UVOwiRiTGdBnXnexAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAtF2pwlDRL0XlSiQ+Wi2MGErwpMwHwYDVR0j BBgwFoAUbaKyj0ORwBQ0tyKf1NaOZhvxMGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDBmOTljMy1lNTY3LTQxYWUtYWEwMC0yNmNiOTc4MWZiZTkvMC82REEyQjI4RjQz OTFDMDE0MzRCNzIyOUZENEQ2OEU2NjFCRjEzMDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhFNjYxQkYx MzA2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwZjk5YzMtZTU2Ny00MWFlLWFh MDAtMjZjYjk3ODFmYmU5LzAvNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhF NjYxQkYxMzA2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVWl75ptNxtctClZkuOiTAeKagkB8jRRDYe yCK2GM+svZtEW3Nrz4essGB8cMT9qk8Y9j+HLKnoDvL9bZAdwvQxUH5d+hrcBYPl rwisURBMfOOd8lPnPRRRnBFL5n3u75Jx2Q5fRgWREPGaeNj3xNE3MnXxmofFoOqu n80I1NPXJQR7I+jK9X8EC/QZXlmVb4N/YpS3aZ21FI02eVooDyM4qezMzdLjgOdc B3pgQjvtBANrhrDyINDaE7j3sj7bwmJFtLHc7ypudLGB4ZWbGMInsw0iku3CoaG1 Crx3n1R10VB2E4BJWjfyQ72eOhLHEwyqskRPVFwY5JJ1PO7Imr0= -----END CERTIFICATE-----Generated at Sat Aug 23 13:30:25 2025 by rpki-client