$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft File: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft (raw, json) Hash identifier: 71rTTboJmjlUKJ7/nJjinMESJriyVJQ84juzSqbPjKE= Subject key identifier: 49:CF:48:9A:7F:DB:AE:2B:E3:1B:57:DE:C4:7A:9C:02:5E:2F:7D:BF Authority key identifier: 69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E Certificate issuer: /CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Certificate serial: 5F9283262E352F4E61402A2AFD3C5EA9B5FAF48C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft Manifest number: 01F2 Signing time: Fri 22 Aug 2025 22:20:06 +0000 Manifest this update: Fri 22 Aug 2025 22:15:06 +0000 Manifest next update: Tue 26 Aug 2025 05:07:06 +0000 Files and hashes: 1: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl (hash: caT1eW9zVxtj6tbOZ8NgHLJ3OVGkLuHSyLCxuILvr4k=) 2: 323430303a666230303a3a2f33322d3438203d3e203535363730.roa (hash: FVA48wGL4/cskX5JvDPv5QyssORBEsld3N+rmhCU4Gc=) 3: 3130312e302e342e302f32322d3234203d3e203438343635.roa (hash: 0Vbzbdds4DlTIQ/frtEsWuiBQ6OCjLTHiqaNJsXbu/0=) 4: 3130332e31322e32382e302f32322d3234203d3e203438343635.roa (hash: hq6fcTyLZ0Befnc7SCHGWV/VgoDOfnIfMb9/pRr7Usc=) 5: 3130332e31322e32382e302f32322d3234203d3e203535363730.roa (hash: 56/u0yMrkC94FdPOEf+mn1+2joJi+oVC5l6/K3alTgQ=) 6: 3130312e302e342e302f32322d3234203d3e203535363730.roa (hash: 7ECSmeZAaiWw7xemuyw220yGHio1fDg8eukqs4CuhkU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:92:83:26:2e:35:2f:4e:61:40:2a:2a:fd:3c:5e:a9:b5:fa:f4:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Validity Not Before: Aug 22 22:15:06 2025 GMT Not After : Aug 26 05:07:06 2025 GMT Subject: CN=49CF489A7FDBAE2BE31B57DEC47A9C025E2F7DBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:97:d3:30:aa:36:24:98:0c:4b:ab:33:2e:0c: 60:30:15:8c:42:03:2a:88:c6:16:05:61:59:d4:55: b7:89:4d:10:d7:17:e4:e1:a6:a7:eb:34:8a:b1:4f: 8d:86:bd:4e:eb:76:5c:d5:68:89:ae:7f:7a:b2:f8: 79:f3:dc:51:b1:c8:23:ad:0b:09:e6:18:a2:1c:92: d0:9b:3f:8b:11:30:22:1e:fc:6a:d2:15:78:b3:b3: 8f:b4:b8:2d:1e:9e:61:7e:55:c4:6f:ff:c9:05:7b: b6:e4:db:59:54:81:52:c8:5e:81:1b:4a:81:09:3e: 2c:0e:53:1e:3b:61:e1:8d:07:8a:cd:28:b2:cc:b7: 87:63:e3:b3:b8:13:c7:95:72:c1:51:5d:95:7c:92: 84:df:1a:d2:75:ec:bf:0a:81:43:41:fe:92:2a:db: ff:1a:80:43:14:86:b1:b7:f0:e7:b5:5e:29:52:0e: 8e:f5:b2:68:02:15:0f:af:61:76:f6:c2:32:d0:23: 8b:b5:0f:13:b8:e8:c5:21:a6:c9:ff:de:cd:fe:ae: 4e:19:a9:77:ff:ea:dc:72:e5:e1:9f:93:bb:90:12: 40:29:c9:75:62:07:95:ec:97:98:1c:50:3b:21:4e: 89:e0:c6:69:39:c3:34:42:d2:c6:e7:5b:cd:d5:24: 94:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CF:48:9A:7F:DB:AE:2B:E3:1B:57:DE:C4:7A:9C:02:5E:2F:7D:BF X509v3 Authority Key Identifier: keyid:69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f9:b9:95:3f:84:a4:72:77:1a:8e:c0:83:d4:1c:c0:74:4b: 08:a9:98:7b:d7:9c:e9:b9:fe:5c:d5:c4:05:6f:90:69:9e:97: d6:8a:97:89:36:8d:e2:71:6d:0b:a7:c7:ca:47:ef:92:7d:52: bc:be:01:98:a9:61:c2:d3:a1:3f:38:9d:5a:4c:a4:a6:3b:6e: c2:8b:0c:58:82:21:7f:77:20:d8:50:6c:a1:5b:cc:a9:c8:cc: a6:bf:6a:d6:1b:52:e8:19:0a:be:d9:c3:50:00:c3:e4:c3:ab: 1e:27:8c:6f:0f:74:bd:6c:53:fd:b4:53:d4:09:ae:24:52:f4: 09:f6:ec:e4:7f:10:5d:6f:a8:e2:c0:92:f0:e8:7f:b8:28:70: 6d:4f:72:5e:aa:97:54:0e:da:12:37:0b:db:b1:a0:cb:ac:61: c3:bf:27:87:2b:86:a9:14:0f:3a:bc:5e:e2:7e:65:d6:25:b6: ef:c0:bc:5f:7b:a4:4b:f3:d4:1d:99:78:8b:06:f4:2e:29:6c: 64:59:71:e1:ca:17:65:c5:d3:ba:28:c1:45:40:7f:95:28:d5: d8:63:b2:4a:ec:a0:48:8f:eb:b7:4b:45:7b:d2:b6:18:ef:89: 9d:7f:89:e9:1e:e1:ff:bd:6f:a2:b1:96:04:1a:b3:1a:e0:21: 9f:ff:fa:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX5KDJi41L05hQCoq/TxeqbX69IwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVG RTNFN0MzRTAeFw0yNTA4MjIyMjE1MDZaFw0yNTA4MjYwNTA3MDZaMDMxMTAvBgNV BAMTKDQ5Q0Y0ODlBN0ZEQkFFMkJFMzFCNTdERUM0N0E5QzAyNUUyRjdEQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLl9MwqjYkmAxLqzMuDGAwFYxC AyqIxhYFYVnUVbeJTRDXF+ThpqfrNIqxT42GvU7rdlzVaImuf3qy+Hnz3FGxyCOt CwnmGKIcktCbP4sRMCIe/GrSFXizs4+0uC0enmF+VcRv/8kFe7bk21lUgVLIXoEb SoEJPiwOUx47YeGNB4rNKLLMt4dj47O4E8eVcsFRXZV8koTfGtJ17L8KgUNB/pIq 2/8agEMUhrG38Oe1XilSDo71smgCFQ+vYXb2wjLQI4u1DxO46MUhpsn/3s3+rk4Z qXf/6txy5eGfk7uQEkApyXViB5Xsl5gcUDshTongxmk5wzRC0sbnW83VJJSXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSc9Imn/brivjG1fexHqcAl4vfb8wHwYDVR0j BBgwFoAUaWcBLvykNpjo4bckuR38Xv4+fD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDZlYTdmYS05NGQyLTRkZGMtYThlNi01ZGM2MjZjMjkxZDQvMC82OTY3MDEyRUZD QTQzNjk4RThFMUI3MjRCOTFERkM1RUZFM0U3QzNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVGRTNF N0MzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4 ZTYtNWRjNjI2YzI5MWQ0LzAvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZD NUVGRTNFN0MzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB75uZU/hKRydxqOwIPUHMB0SwipmHvXnOm5 /lzVxAVvkGmel9aKl4k2jeJxbQunx8pH75J9Ury+AZipYcLToT84nVpMpKY7bsKL DFiCIX93INhQbKFbzKnIzKa/atYbUugZCr7Zw1AAw+TDqx4njG8PdL1sU/20U9QJ riRS9An27OR/EF1vqOLAkvDof7gocG1Pcl6ql1QO2hI3C9uxoMusYcO/J4crhqkU Dzq8XuJ+ZdYltu/AvF97pEvz1B2ZeIsG9C4pbGRZceHKF2XF07oowUVAf5Uo1dhj skrsoEiP67dLRXvSthjviZ1/ieke4f+9b6KxlgQasxrgIZ//+g0= -----END CERTIFICATE-----Generated at Sat Aug 23 17:40:53 2025 by rpki-client