$ rpki-client -vvf repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft File: 6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft (raw, json) Hash identifier: ZPsb4U8yHGqTIZIRnpYM6n2MqXvnOOW830z65DYZRd8= Subject key identifier: 44:91:7C:28:C3:17:C7:1B:BF:FB:58:87:EC:D4:F5:F7:01:76:9B:62 Authority key identifier: 6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19 Certificate issuer: /CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19 Certificate serial: 4A527D86C3EE39239279F2CE4306D2838CE27E73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft Manifest number: 04FA Signing time: Thu 21 Aug 2025 12:30:39 +0000 Manifest this update: Thu 21 Aug 2025 12:25:39 +0000 Manifest next update: Sun 24 Aug 2025 21:42:39 +0000 Files and hashes: 1: 3130332e3132372e3134352e302f32342d3234203d3e203633383732.roa (hash: MXaL0QCe5+IS+MABtk7XIsAr+HW38yfYtKBH23S5G78=) 2: 3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa (hash: dT1Ez91RELEcb3/us3FXp8X3LrIGPlHAyCw3ou4h/Pw=) 3: 3130332e3132372e3134342e302f32332d3233203d3e203633383732.roa (hash: ej36uL5q6V5lzJlk2/mVmLfbDb6eLchafID3r1d/Uc0=) 4: 3130332e35322e3137312e302f32342d3234203d3e203633383732.roa (hash: 8GeHpy3P984a7HFNxAJwy8wpU0ns8pabD1WKnP4tvuw=) 5: 6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl (hash: iLfwgFRH834o5P7pNz/DknGscFqnoSuNntV1uNg2P+4=) 6: 3130332e35322e3137302e302f32342d3234203d3e203633383732.roa (hash: Z+FoVz2t/bU9Oh29fvVmEj58qbcaPFxm8OsmszzE23M=) 7: 3130332e35322e3137302e302f32332d3233203d3e203633383732.roa (hash: brSZ0m97l9z7YCV2zCWTUJDAsUOi5NNl8YP1n7Hn+04=) 8: 323030313a6466333a6330303a3a2f34382d3438203d3e203633383732.roa (hash: DbPoZnzVJDn8t1MnQ7X+537hTvhkD/yKBSWUNPseJA0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 21:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:52:7d:86:c3:ee:39:23:92:79:f2:ce:43:06:d2:83:8c:e2:7e:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19 Validity Not Before: Aug 21 12:25:39 2025 GMT Not After : Aug 24 21:42:39 2025 GMT Subject: CN=44917C28C317C71BBFFB5887ECD4F5F701769B62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7c:79:39:b6:8b:e8:44:1f:71:70:8c:48:cb: de:df:b2:e6:84:07:96:7c:35:cf:04:bd:62:5f:96: da:f5:da:68:2f:cd:90:57:85:bd:bc:ab:56:f1:60: 34:c0:4e:82:9a:eb:a2:4a:81:4a:ac:0d:cd:ca:53: 29:97:92:72:f8:05:10:96:ff:3e:cf:7b:24:a3:d9: cc:1e:24:c3:aa:72:b5:57:3e:73:44:fb:7a:d1:05: 70:0a:08:fc:32:0e:a2:64:c6:06:b7:1a:ab:42:3b: 9e:43:7b:a5:a6:29:30:35:04:4b:8d:03:01:f5:d3: a9:34:ae:5b:cc:79:fd:fa:b3:3f:df:4c:c8:c9:e7: 1f:85:7a:36:55:c5:21:50:da:cd:e0:95:c0:1d:84: 58:e4:7e:92:a3:51:83:6d:72:5e:d2:d7:8f:c7:a5: 18:2e:9c:40:2f:68:10:3c:a1:0d:2f:ad:44:3d:15: 83:43:8d:46:09:76:67:69:26:c8:8b:7f:21:a9:19: 5b:b6:05:b4:da:a5:8d:cf:7b:a5:83:2e:43:5e:bf: 04:47:f5:b1:6c:89:6b:13:f6:38:a3:7f:ec:3b:b9: 14:a0:3f:a6:59:67:cd:10:31:03:8d:f5:0b:c7:91: 43:c7:84:fd:48:e6:dd:de:bc:70:1d:75:4f:9c:c2: 78:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:91:7C:28:C3:17:C7:1B:BF:FB:58:87:EC:D4:F5:F7:01:76:9B:62 X509v3 Authority Key Identifier: keyid:6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:a4:cf:d4:0e:93:e6:25:49:56:c8:dd:76:d3:f0:b9:65:b2: 18:fc:e0:9e:88:6e:de:a1:94:cb:5b:92:a3:6b:a1:d5:83:40: 18:62:18:dc:f7:48:5f:78:3c:4f:46:9a:db:6e:fe:27:d6:9c: 74:af:16:7c:9a:8e:27:08:4d:f1:77:4c:d7:81:18:4e:60:29: 4f:b1:6b:cb:90:9d:4e:44:cd:70:d4:2a:b8:11:55:1e:a2:6c: a0:1d:4b:4f:1c:96:19:25:98:ac:a2:e4:d3:88:df:68:db:37: e2:47:f3:82:7a:f7:7f:c4:40:63:ca:b6:9a:b0:40:87:93:db: 45:a0:cf:84:c6:80:29:1f:da:ce:75:0b:e5:dc:c9:25:84:b2: 74:7e:0b:d9:90:18:e0:a1:d4:6b:71:52:76:b8:22:8c:a1:9e: a2:24:b0:4c:94:cf:6a:ad:92:a7:00:05:45:7d:00:8c:7c:42: 2e:d0:20:e2:4a:d8:02:fc:a8:04:a0:8e:c9:88:db:21:6a:be: 65:00:d8:f5:97:5f:a9:b3:a9:a7:3a:66:71:78:b4:80:63:34: 28:b0:f1:7d:bd:33:8e:a9:dc:b3:8a:81:8e:a2:10:92:42:6b: 03:63:39:08:ff:f6:f5:20:fa:82:04:2d:a5:3a:f0:db:ef:a2: d3:a9:f2:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSlJ9hsPuOSOSefLOQwbSg4zifnMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3MTYy N0JFN0IxOTAeFw0yNTA4MjExMjI1MzlaFw0yNTA4MjQyMTQyMzlaMDMxMTAvBgNV BAMTKDQ0OTE3QzI4QzMxN0M3MUJCRkZCNTg4N0VDRDRGNUY3MDE3NjlCNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4fHk5tovoRB9xcIxIy97fsuaE B5Z8Nc8EvWJfltr12mgvzZBXhb28q1bxYDTAToKa66JKgUqsDc3KUymXknL4BRCW /z7PeySj2cweJMOqcrVXPnNE+3rRBXAKCPwyDqJkxga3GqtCO55De6WmKTA1BEuN AwH106k0rlvMef36sz/fTMjJ5x+FejZVxSFQ2s3glcAdhFjkfpKjUYNtcl7S14/H pRgunEAvaBA8oQ0vrUQ9FYNDjUYJdmdpJsiLfyGpGVu2BbTapY3Pe6WDLkNevwRH 9bFsiWsT9jijf+w7uRSgP6ZZZ80QMQON9QvHkUPHhP1I5t3evHAddU+cwnhFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURJF8KMMXxxu/+1iH7NT19wF2m2IwHwYDVR0j BBgwFoAUbWuu2/27qka/PaIYVXB3Fie+exkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NmJiMzMzYy05ODJiLTRmY2UtYWM4MS1iYzA2OTIyOWUyNDMvMC82RDZCQUVEQkZE QkJBQTQ2QkYzREEyMTg1NTcwNzcxNjI3QkU3QjE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3MTYyN0JF N0IxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTZiYjMzM2MtOTgyYi00ZmNlLWFj ODEtYmMwNjkyMjllMjQzLzAvNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3 MTYyN0JFN0IxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCkz9QOk+YlSVbI3XbT8Lllshj84J6Ibt6h lMtbkqNrodWDQBhiGNz3SF94PE9Gmttu/ifWnHSvFnyajicITfF3TNeBGE5gKU+x a8uQnU5EzXDUKrgRVR6ibKAdS08clhklmKyi5NOI32jbN+JH84J693/EQGPKtpqw QIeT20Wgz4TGgCkf2s51C+XcySWEsnR+C9mQGOCh1GtxUna4IoyhnqIksEyUz2qt kqcABUV9AIx8Qi7QIOJK2AL8qASgjsmI2yFqvmUA2PWXX6mzqac6ZnF4tIBjNCiw 8X29M46p3LOKgY6iEJJCawNjOQj/9vUg+oIELaU68NvvotOp8qc= -----END CERTIFICATE-----Generated at Sat Aug 23 12:07:52 2025 by rpki-client