$ rpki-client -vvf repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft File: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft (raw, json) Hash identifier: TkeklZiM9me4IkCm3kWkuguLE2eigjCzlS6YFGFHhFg= Subject key identifier: A4:97:D4:A1:26:31:C7:12:5F:79:50:B8:3E:37:A1:BD:CE:7B:28:11 Authority key identifier: 62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 Certificate issuer: /CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Certificate serial: 0A58111C8A3FD33BBF0A182A8696B1713AA96861 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft Manifest number: 7C Signing time: Fri 22 Aug 2025 22:01:21 +0000 Manifest this update: Fri 22 Aug 2025 21:56:21 +0000 Manifest next update: Tue 26 Aug 2025 06:52:21 +0000 Files and hashes: 1: 3136302e3139312e3138312e302f32342d3234203d3e20313533313530.roa (hash: R1Eo64irF2fqBU24QMOkIR4K/Db3F6prGasQKdzareI=) 2: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl (hash: vM4vngtkWoEbIrwGn2w9z3+ZrYo/TKNJ9rPTCJ6/YZk=) 3: 3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa (hash: lqWm7H1VLaNogQYDvPWFxyEVAtvNrhxj3L3hhsj87j0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 06:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:58:11:1c:8a:3f:d3:3b:bf:0a:18:2a:86:96:b1:71:3a:a9:68:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Validity Not Before: Aug 22 21:56:21 2025 GMT Not After : Aug 26 06:52:21 2025 GMT Subject: CN=A497D4A12631C7125F7950B83E37A1BDCE7B2811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9b:23:d3:1c:9b:33:dc:09:b0:2b:c4:83:d5: f2:36:43:38:fa:87:61:8e:47:35:44:cb:26:a2:c8: ed:44:7a:bd:a2:41:a9:69:c1:bd:84:bb:8c:2e:8c: 47:4b:b5:a0:45:08:db:60:0c:37:a8:28:7b:10:02: 48:29:e8:b5:d0:8d:e4:23:db:e4:a9:fb:4e:e8:66: 4d:3c:01:e6:95:01:13:76:24:5c:27:2a:7f:d8:10: d5:12:d1:d9:85:8f:ed:6d:78:6e:43:59:51:52:8c: ff:94:26:08:de:4d:c9:f4:dc:4a:de:4f:c5:ab:47: 0d:3b:2d:4c:08:2d:82:8e:16:17:45:32:b1:1a:c5: a5:53:79:64:66:aa:ef:53:c5:9f:a0:ad:79:e9:8d: 4d:67:28:0a:56:d4:28:ba:32:49:3b:0b:45:94:4b: 69:16:f3:4a:3c:9d:47:30:f3:85:dc:50:23:54:52: 6e:16:20:ae:f1:09:12:9a:87:1f:00:3b:cd:1b:d8: 9d:9c:78:77:d0:04:ed:16:8d:70:0a:3f:e3:dc:b0: 04:74:71:c4:5a:bf:7e:71:28:c5:d3:8e:b3:aa:51: ab:0a:66:14:23:2b:32:48:3c:36:69:81:ab:60:81: 7f:61:82:40:45:97:5b:64:14:45:d0:15:c7:9f:fc: 3e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:97:D4:A1:26:31:C7:12:5F:79:50:B8:3E:37:A1:BD:CE:7B:28:11 X509v3 Authority Key Identifier: keyid:62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:cd:f8:50:d8:35:96:61:c1:5c:51:90:46:cf:c5:3f:ea:4a: aa:1e:01:06:8a:18:76:eb:57:a0:ef:14:b1:78:c5:68:17:74: 80:56:a5:2e:91:14:e5:ca:b0:70:f7:df:4e:6c:fa:a7:dd:6f: a1:3a:22:97:00:1c:a3:da:d4:c8:9c:52:01:46:72:55:f8:1a: 59:4d:45:c7:29:09:de:91:dc:e4:86:0a:cc:ca:7d:3c:17:6f: cd:32:5a:55:e5:b6:82:f1:88:1a:8d:74:55:3c:63:7d:b8:c8: d6:b8:e3:c4:ad:06:6a:df:e0:28:f4:52:51:da:19:0b:30:14: 51:fe:dd:6e:1a:5b:67:49:5c:34:25:f7:74:2c:2b:4d:a2:4e: 40:30:e1:61:74:b9:7d:ab:2b:a2:7a:f5:d8:a4:b7:81:97:0e: ae:6a:e5:e1:e3:e7:6f:10:ac:cc:1d:78:87:5e:bd:cf:8a:37: ad:90:f5:2f:16:9c:27:5c:19:99:33:51:d1:4f:e5:a5:26:f0: d0:e2:70:c6:3c:39:61:b4:60:72:f0:fe:b2:f7:16:d3:a7:a9: ae:99:f3:f9:5e:6d:a7:f4:23:6d:bc:ec:bc:78:3d:01:d7:2f: 13:6a:9a:b5:db:b5:21:c0:b2:68:67:72:6e:a6:a9:94:6e:89: 7d:7c:59:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUClgRHIo/0zu/ChgqhpaxcTqpaGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAw Qjk0RjhBNDAeFw0yNTA4MjIyMTU2MjFaFw0yNTA4MjYwNjUyMjFaMDMxMTAvBgNV BAMTKEE0OTdENEExMjYzMUM3MTI1Rjc5NTBCODNFMzdBMUJEQ0U3QjI4MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSmyPTHJsz3AmwK8SD1fI2Qzj6 h2GORzVEyyaiyO1Eer2iQalpwb2Eu4wujEdLtaBFCNtgDDeoKHsQAkgp6LXQjeQj 2+Sp+07oZk08AeaVARN2JFwnKn/YENUS0dmFj+1teG5DWVFSjP+UJgjeTcn03Ere T8WrRw07LUwILYKOFhdFMrEaxaVTeWRmqu9TxZ+grXnpjU1nKApW1Ci6Mkk7C0WU S2kW80o8nUcw84XcUCNUUm4WIK7xCRKahx8AO80b2J2ceHfQBO0WjXAKP+PcsAR0 ccRav35xKMXTjrOqUasKZhQjKzJIPDZpgatggX9hgkBFl1tkFEXQFcef/D5JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpJfUoSYxxxJfeVC4Pjehvc57KBEwHwYDVR0j BBgwFoAUYkfRqvOxW1DTpz5E5Z4sAAuU+KQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTk2MTJhMi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMC82MjQ3RDFBQUYz QjE1QjUwRDNBNzNFNDRFNTlFMkMwMDBCOTRGOEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAwQjk0 RjhBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzAvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJD MDAwQjk0RjhBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLN+FDYNZZhwVxRkEbPxT/qSqoeAQaKGHbr V6DvFLF4xWgXdIBWpS6RFOXKsHD3305s+qfdb6E6IpcAHKPa1MicUgFGclX4GllN RccpCd6R3OSGCszKfTwXb80yWlXltoLxiBqNdFU8Y324yNa448StBmrf4Cj0UlHa GQswFFH+3W4aW2dJXDQl93QsK02iTkAw4WF0uX2rK6J69dikt4GXDq5q5eHj528Q rMwdeIdevc+KN62Q9S8WnCdcGZkzUdFP5aUm8NDicMY8OWG0YHLw/rL3FtOnqa6Z 8/lebaf0I2287Lx4PQHXLxNqmrXbtSHAsmhncm6mqZRuiX18Wbk= -----END CERTIFICATE-----Generated at Sun Aug 24 06:32:06 2025 by rpki-client