$ rpki-client -vvf repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft File: 6437999FD06F2C7F0F16F8160CD6145F775884A4.mft (raw, json) Hash identifier: VuQPmfQoMBLEOmpS8E9om9hfcz+38sOTuPybi8KFlGI= Subject key identifier: C8:3A:81:7F:8B:B0:CA:5F:B0:A6:1A:44:33:23:F9:55:42:61:E3:8A Authority key identifier: 64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 Certificate issuer: /CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Certificate serial: 584BDB29B4E8FD77EEAEB108C4624050AB2843FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft Manifest number: 0236 Signing time: Sat 23 Aug 2025 02:10:03 +0000 Manifest this update: Sat 23 Aug 2025 02:05:03 +0000 Manifest next update: Tue 26 Aug 2025 13:54:03 +0000 Files and hashes: 1: 6437999FD06F2C7F0F16F8160CD6145F775884A4.crl (hash: lDM8WTNVGBq9ZlMuXt/JXdQ77+KnPKL4gx9QNUF7PIo=) 2: 3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa (hash: b3wEoQmduATe2XsB1+5lzcIjLJ7k0E7+xb68g1ewVFQ=) 3: 3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa (hash: 6kBcLlz4I+EwiYd/zHv8YINF31MEROhjhbQ+A0qjPjE=) 4: 3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa (hash: FtQ7YyJ/nXZZN06U1YB5sNs24X+l1RzMYb5gI1y1G9M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:4b:db:29:b4:e8:fd:77:ee:ae:b1:08:c4:62:40:50:ab:28:43:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Validity Not Before: Aug 23 02:05:03 2025 GMT Not After : Aug 26 13:54:03 2025 GMT Subject: CN=C83A817F8BB0CA5FB0A61A443323F9554261E38A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:6b:24:3a:8e:6d:d5:f8:d4:b2:84:83:c9:49: e5:ff:c9:f6:e8:13:32:18:0b:dd:af:2c:40:4c:a2: be:1c:05:ea:dd:8a:bd:4f:f5:c3:28:25:62:f0:a8: 34:2b:ce:40:b5:e9:07:67:29:7f:f7:e9:b1:a4:87: 53:eb:57:8f:d4:cd:b2:e8:89:9a:47:2b:5f:2c:35: da:2d:22:74:ea:35:59:95:3b:1c:ac:5d:1f:3d:95: 0e:e8:1a:77:75:5a:74:c2:9c:26:65:f7:d1:d8:45: 48:d3:28:a6:00:09:54:a1:09:66:55:76:d2:64:7a: bc:bc:2e:ec:c9:1f:47:b9:18:d1:16:71:c1:4e:b6: 51:49:3b:36:78:e4:fc:78:5b:98:10:e6:0f:69:c0: 91:36:52:2f:82:bb:7d:95:05:d2:77:f5:c1:b8:61: c5:60:0a:ad:a0:71:e2:ce:6b:e8:9e:73:e9:4b:ee: 33:a5:9b:d1:aa:01:28:1b:c8:1e:d6:f8:14:a9:ec: 0a:ee:0b:2a:76:2c:3c:9d:7b:80:b6:8d:d5:8b:6d: a8:da:4f:b7:c9:23:7c:87:9a:ea:f0:ea:69:eb:94: 76:41:be:da:2b:f8:26:ac:18:d7:ed:b5:25:e6:a6: af:c4:3f:9a:31:4a:b4:c8:34:f5:9c:f9:c8:43:85: 40:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3A:81:7F:8B:B0:CA:5F:B0:A6:1A:44:33:23:F9:55:42:61:E3:8A X509v3 Authority Key Identifier: keyid:64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:d6:58:d1:9e:43:8f:a9:7f:e6:9b:35:55:90:36:fe:17:bf: af:b8:f3:9c:aa:a5:ed:a4:47:e3:62:58:c4:eb:2d:c3:bf:da: 31:e0:f2:46:b2:d5:93:52:20:21:61:ff:16:e6:2b:f3:2b:02: cb:7a:3d:95:e7:67:ae:41:80:4b:3b:75:c0:c6:ac:52:f9:e0: 0d:4a:a9:b7:d2:db:38:cd:1f:01:00:c9:8b:9d:3a:5d:39:dc: 14:5c:4a:88:d3:7e:b9:35:e2:4f:81:7a:4c:0b:f3:39:f9:14: cc:32:f0:8e:9d:f7:f4:97:0a:37:2b:47:ed:11:93:d0:0a:21: 42:31:6c:ef:59:a9:67:a2:f9:c9:13:79:ae:54:04:83:22:31: cc:3a:ff:8e:06:72:ca:fc:6f:52:1a:af:e0:e3:3b:9b:c2:58: c9:a7:b3:64:29:75:b3:a4:76:c0:49:30:cd:e0:7a:24:c0:af: 58:f4:9f:05:7f:c7:2e:d9:21:f7:93:35:a0:e6:7e:44:0f:eb: 23:37:9e:b1:4d:61:59:01:83:2a:b8:e3:21:95:51:13:90:4a: 38:79:b5:87:29:62:30:e4:87:37:2a:84:a8:0a:15:40:17:16: 73:12:c3:8c:1a:a6:10:10:62:07:26:e7:a2:c8:f7:84:ef:84: d5:4f:fb:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWEvbKbTo/XfurrEIxGJAUKsoQ/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3 NzU4ODRBNDAeFw0yNTA4MjMwMjA1MDNaFw0yNTA4MjYxMzU0MDNaMDMxMTAvBgNV BAMTKEM4M0E4MTdGOEJCMENBNUZCMEE2MUE0NDMzMjNGOTU1NDI2MUUzOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvayQ6jm3V+NSyhIPJSeX/yfbo EzIYC92vLEBMor4cBerdir1P9cMoJWLwqDQrzkC16QdnKX/36bGkh1PrV4/UzbLo iZpHK18sNdotInTqNVmVOxysXR89lQ7oGnd1WnTCnCZl99HYRUjTKKYACVShCWZV dtJkery8LuzJH0e5GNEWccFOtlFJOzZ45Px4W5gQ5g9pwJE2Ui+Cu32VBdJ39cG4 YcVgCq2gceLOa+iec+lL7jOlm9GqASgbyB7W+BSp7AruCyp2LDyde4C2jdWLbaja T7fJI3yHmurw6mnrlHZBvtor+CasGNfttSXmpq/EP5oxSrTINPWc+chDhUBPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyDqBf4uwyl+wphpEMyP5VUJh44owHwYDVR0j BBgwFoAUZDeZn9BvLH8PFvgWDNYUX3dYhKQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzZmZGM2MC04MDIzLTQwY2QtYWFhNC1jZDZlZDIyYzRkNDUvMC82NDM3OTk5RkQw NkYyQzdGMEYxNkY4MTYwQ0Q2MTQ1Rjc3NTg4NEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3NzU4 ODRBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc2ZmRjNjAtODAyMy00MGNkLWFh YTQtY2Q2ZWQyMmM0ZDQ1LzAvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0 NUY3NzU4ODRBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGzWWNGeQ4+pf+abNVWQNv4Xv6+485yqpe2k R+NiWMTrLcO/2jHg8kay1ZNSICFh/xbmK/MrAst6PZXnZ65BgEs7dcDGrFL54A1K qbfS2zjNHwEAyYudOl053BRcSojTfrk14k+BekwL8zn5FMwy8I6d9/SXCjcrR+0R k9AKIUIxbO9ZqWei+ckTea5UBIMiMcw6/44Gcsr8b1Iar+DjO5vCWMmns2QpdbOk dsBJMM3geiTAr1j0nwV/xy7ZIfeTNaDmfkQP6yM3nrFNYVkBgyq44yGVUROQSjh5 tYcpYjDkhzcqhKgKFUAXFnMSw4waphAQYgcm56LI94TvhNVP+wI= -----END CERTIFICATE-----Generated at Sat Aug 23 14:13:11 2025 by rpki-client