$ rpki-client -vvf repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft File: 6862B9697E607C0C4861E56917A18D87AC33A721.mft (raw, json) Hash identifier: Jjtcud3NAmQYZY5Fp+jl/8zTQUb0uwu0tTtBTl+eFNA= Subject key identifier: 4D:6D:21:20:9E:EB:BF:CD:4B:5B:31:95:BA:37:F1:B6:A9:32:B5:0A Authority key identifier: 68:62:B9:69:7E:60:7C:0C:48:61:E5:69:17:A1:8D:87:AC:33:A7:21 Certificate issuer: /CN=6862B9697E607C0C4861E56917A18D87AC33A721 Certificate serial: 6D364BB1C6B8806566ADA8A7C8BDA9BE3790A55C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer Subject info access: rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft Manifest number: 01B0 Signing time: Fri 22 Aug 2025 17:22:12 +0000 Manifest this update: Fri 22 Aug 2025 17:17:12 +0000 Manifest next update: Mon 25 Aug 2025 18:48:12 +0000 Files and hashes: 1: 3130332e36302e3233332e302f32342d3234203d3e20313530353034.roa (hash: dF+8Wtg6B9yArRChkZjRjTgsTdgcRkNXBMlkqZFq73s=) 2: 6862B9697E607C0C4861E56917A18D87AC33A721.crl (hash: 4/oSL3zKYKGpuUS9bnO3UOTOFuWb4WNL0WAyeVtJv2M=) 3: 3130332e36302e3233322e302f32342d3234203d3e20313530353034.roa (hash: mAaFNkz4VS/8CUTW6nLj8oCW6VaOOiFXLJeViPHtvE4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.crl rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:36:4b:b1:c6:b8:80:65:66:ad:a8:a7:c8:bd:a9:be:37:90:a5:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6862B9697E607C0C4861E56917A18D87AC33A721 Validity Not Before: Aug 22 17:17:12 2025 GMT Not After : Aug 25 18:48:12 2025 GMT Subject: CN=4D6D21209EEBBFCD4B5B3195BA37F1B6A932B50A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:36:e6:43:3d:62:8d:3b:3b:25:88:7e:67:91: b5:d6:45:69:ac:e7:24:ce:d5:46:c2:e8:89:48:15: e1:20:8f:d6:89:c8:68:1b:ac:a9:21:e9:dc:c3:1a: 3c:a1:f8:f1:b4:48:93:d8:ae:b2:fa:fc:ea:75:2f: f5:97:3d:36:ec:82:7b:95:4f:90:e6:aa:48:c8:0f: 2c:6d:7b:72:48:2a:64:cd:89:39:b0:39:47:53:9b: 27:84:87:7f:ab:74:33:32:37:47:00:7f:ce:7f:f9: 18:38:92:02:34:38:b2:be:b8:0f:54:6e:79:2f:dd: 5c:2b:26:3c:97:da:28:4b:2e:81:aa:46:b3:f3:89: 95:ae:bf:10:78:0a:82:96:9f:e5:b6:f4:b3:02:61: c1:98:8f:13:bc:88:41:bc:1b:a9:ce:5a:b3:80:68: bd:19:43:2e:8d:eb:d2:3a:38:ed:ac:e5:26:ba:fe: 2c:67:36:17:7d:99:37:9d:8d:36:2e:69:18:d3:2c: ce:62:30:d9:cd:97:2f:ae:e5:ef:b1:d2:b5:5b:9f: 0b:16:0c:39:45:b5:06:ba:8f:c4:e0:57:31:21:b1: 54:45:cb:46:25:60:36:12:6e:0d:32:51:4c:22:88: fe:d6:6c:0c:6f:e2:1e:83:5b:88:68:58:54:13:c9: dc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6D:21:20:9E:EB:BF:CD:4B:5B:31:95:BA:37:F1:B6:A9:32:B5:0A X509v3 Authority Key Identifier: keyid:68:62:B9:69:7E:60:7C:0C:48:61:E5:69:17:A1:8D:87:AC:33:A7:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:be:e1:40:71:48:31:b8:a2:b6:1f:a5:d7:21:a5:f5:be:fe: 60:44:73:94:b5:2d:db:e0:6e:c5:7a:ee:73:fc:d1:e6:82:4a: c9:05:f6:1f:5a:be:7f:cc:66:70:e0:cd:3b:43:4c:c9:0c:89: 94:d7:98:01:cd:9f:b4:2f:5d:ae:88:e2:e2:ab:f3:b3:b7:6d: 65:31:dc:eb:57:27:1e:14:b2:28:71:4d:91:de:11:ff:96:f6: b4:a4:d9:35:24:c1:40:1a:ee:1a:d0:82:a4:05:37:df:4b:ee: 18:aa:71:68:92:05:43:dc:fd:19:10:22:01:73:31:ce:dd:4f: f1:9f:53:a5:94:f5:e4:d1:a2:bf:f1:6e:41:12:0e:d9:c9:ea: 82:78:50:98:fb:33:17:9a:ad:83:3c:a0:44:a7:90:0f:75:a5: 53:68:35:7c:3f:12:1d:50:19:8a:07:2d:ed:69:f6:b0:8c:fb: b9:4e:9b:f4:4f:96:b4:6d:af:1b:ea:0b:52:ea:f6:f3:bb:db: 57:0a:f8:a3:5a:ae:f9:ba:ec:f2:be:78:ca:e4:5a:b6:9d:45: 42:90:6a:c1:37:da:ad:7a:b5:c5:45:fd:14:f8:03:2c:b6:46: 96:7d:05:e7:96:0c:46:de:0b:4e:d7:d0:1d:98:20:de:3c:53: d7:62:a1:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbTZLsca4gGVmrainyL2pvjeQpVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg2MkI5Njk3RTYwN0MwQzQ4NjFFNTY5MTdBMThEODdB QzMzQTcyMTAeFw0yNTA4MjIxNzE3MTJaFw0yNTA4MjUxODQ4MTJaMDMxMTAvBgNV BAMTKDRENkQyMTIwOUVFQkJGQ0Q0QjVCMzE5NUJBMzdGMUI2QTkzMkI1MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvNuZDPWKNOzsliH5nkbXWRWms 5yTO1UbC6IlIFeEgj9aJyGgbrKkh6dzDGjyh+PG0SJPYrrL6/Op1L/WXPTbsgnuV T5DmqkjIDyxte3JIKmTNiTmwOUdTmyeEh3+rdDMyN0cAf85/+Rg4kgI0OLK+uA9U bnkv3VwrJjyX2ihLLoGqRrPziZWuvxB4CoKWn+W29LMCYcGYjxO8iEG8G6nOWrOA aL0ZQy6N69I6OO2s5Sa6/ixnNhd9mTedjTYuaRjTLM5iMNnNly+u5e+x0rVbnwsW DDlFtQa6j8TgVzEhsVRFy0YlYDYSbg0yUUwiiP7WbAxv4h6DW4hoWFQTydy5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTW0hIJ7rv81LWzGVujfxtqkytQowHwYDVR0j BBgwFoAUaGK5aX5gfAxIYeVpF6GNh6wzpyEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjVlODhiZC03NWUyLTQ1ZGYtODg2Ny00NTQwMmZjN2M0YjEvMC82ODYyQjk2OTdF NjA3QzBDNDg2MUU1NjkxN0ExOEQ4N0FDMzNBNzIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg2MkI5Njk3RTYwN0MwQzQ4NjFFNTY5MTdBMThEODdBQzMz QTcyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI1ZTg4YmQtNzVlMi00NWRmLTg4 NjctNDU0MDJmYzdjNGIxLzAvNjg2MkI5Njk3RTYwN0MwQzQ4NjFFNTY5MTdBMThE ODdBQzMzQTcyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEC+4UBxSDG4orYfpdchpfW+/mBEc5S1Ldvg bsV67nP80eaCSskF9h9avn/MZnDgzTtDTMkMiZTXmAHNn7QvXa6I4uKr87O3bWUx 3OtXJx4UsihxTZHeEf+W9rSk2TUkwUAa7hrQgqQFN99L7hiqcWiSBUPc/RkQIgFz Mc7dT/GfU6WU9eTRor/xbkESDtnJ6oJ4UJj7MxearYM8oESnkA91pVNoNXw/Eh1Q GYoHLe1p9rCM+7lOm/RPlrRtrxvqC1Lq9vO721cK+KNarvm67PK+eMrkWradRUKQ asE32q16tcVF/RT4Ayy2RpZ9BeeWDEbeC07X0B2YIN48U9diodM= -----END CERTIFICATE-----Generated at Sat Aug 23 12:25:08 2025 by rpki-client