$ rpki-client -vvf repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft File: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft (raw, json) Hash identifier: WPE0YKm3sLEVboL90JwUC4ozYsOl8VnodHGeU36PGp8= Subject key identifier: C3:CB:45:C5:D3:EA:0B:1E:43:89:51:55:C8:3F:D9:48:6E:BA:02:61 Authority key identifier: 6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 Certificate issuer: /CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Certificate serial: 7AC4A9A16FEF012D8280701001C85C01B43EFE88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft Manifest number: 01C9 Signing time: Fri 22 Aug 2025 09:40:39 +0000 Manifest this update: Fri 22 Aug 2025 09:35:39 +0000 Manifest next update: Mon 25 Aug 2025 17:27:39 +0000 Files and hashes: 1: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl (hash: alYYiJ4+kBuOqPmTV40EbUvgPwIrkfDRg09mdVYQA9s=) 2: 3130332e3132362e3131392e302f32342d3234203d3e20313339393732.roa (hash: nPlUaL9yF2n402rwq54ga4y4IA8tmh1JYztdhgr/yzQ=) 3: 3130332e3132362e3131362e302f32332d3234203d3e20313333383030.roa (hash: xdEDtfm0tP7FMpWiWg9KdIp8IvvJjKZMSw6HMfYr844=) 4: 3130332e3132362e3131382e302f32342d3234203d3e20313338313136.roa (hash: IZ8KmdFwK5i2F35Ti/yV73rwyTaK/R/VAzY82jFEZs8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 17:27:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:c4:a9:a1:6f:ef:01:2d:82:80:70:10:01:c8:5c:01:b4:3e:fe:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Validity Not Before: Aug 22 09:35:39 2025 GMT Not After : Aug 25 17:27:39 2025 GMT Subject: CN=C3CB45C5D3EA0B1E43895155C83FD9486EBA0261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:27:0d:36:81:79:99:0f:40:19:56:2c:98:d9: 3d:d0:fa:cc:74:49:b9:01:53:ed:a3:9d:fb:f6:a4: c2:c8:e1:59:fd:59:c2:24:96:6b:bf:0a:a2:27:a4: 04:b1:9f:c7:e6:28:b8:e7:c7:2f:2f:90:0a:52:2f: 2c:eb:9c:aa:33:76:a0:1d:f2:30:3e:b8:c3:6d:88: 08:18:88:a2:46:86:7d:1d:fb:78:79:56:73:b2:cf: 29:7a:fa:d3:b5:4c:cf:50:bf:b4:b7:f9:50:15:ab: 8c:ec:4c:78:30:3a:59:63:92:9b:89:7a:81:e2:26: fb:51:36:93:ba:9b:3f:ad:1c:30:1a:33:36:45:05: a8:cd:a8:f7:c5:e7:68:1c:dc:11:4e:2f:0a:c9:0c: 0e:68:f2:e7:de:92:b5:bd:eb:44:3d:dc:96:66:33: f6:89:e4:d2:1b:b3:18:0e:17:0c:d9:e3:3b:d6:8e: 45:2b:84:cc:ee:a7:89:39:10:a1:e3:ef:fc:65:4f: a1:6d:3d:2a:3f:2f:97:d1:7d:a0:85:51:e3:fd:85: 95:02:51:51:c7:2a:e7:65:ef:5c:e3:08:f8:4c:55: c2:47:4a:af:04:78:d7:a6:bc:9e:51:7a:06:b3:31: 40:e2:86:94:fe:52:26:e8:9d:b4:8c:96:54:15:30: 54:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CB:45:C5:D3:EA:0B:1E:43:89:51:55:C8:3F:D9:48:6E:BA:02:61 X509v3 Authority Key Identifier: keyid:6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:a7:84:05:c1:cb:6f:af:c6:32:cd:97:13:71:58:9d:e1:bb: a8:8b:8a:0e:b1:24:bb:1e:48:00:ef:11:09:ce:85:3a:ba:a4: 5f:e2:33:2d:e7:6a:95:df:1e:8c:3b:fb:83:48:68:45:f9:ee: 22:50:c1:3c:41:94:f9:a8:fd:54:44:bc:da:99:57:1f:05:0a: 04:12:81:76:b4:fc:35:3b:4b:35:4d:bc:12:53:00:62:5d:39: 09:76:da:19:d5:04:e6:38:80:55:73:fa:4f:75:48:3d:91:68: 75:b7:bf:11:f6:1a:ab:6e:50:9f:0a:3a:cc:21:d3:0e:05:cf: cb:ee:a1:70:6e:8d:0e:8a:d3:95:4d:cc:a9:32:60:3e:76:5b: 1b:cd:a0:03:1b:40:2c:31:17:ef:d9:99:9d:c5:bf:1d:ec:f1: 5d:6c:80:2e:f4:ea:e3:b2:ec:45:12:31:98:dc:4a:fd:55:cd: 5f:22:ef:b4:a5:54:78:5e:6c:65:2b:f4:2b:44:0a:13:3e:40: 1a:3b:1b:3f:b4:bc:ac:f5:87:77:6b:88:87:cc:24:0a:15:a6: 8b:7e:81:15:22:9c:77:58:91:ac:0b:40:1c:ab:9c:32:8c:63: 87:c5:9b:40:29:2f:63:8c:bb:31:ca:7f:7f:ef:56:a2:f4:f1: ff:bf:05:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUesSpoW/vAS2CgHAQAchcAbQ+/ogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdE MDJGNDdFODAeFw0yNTA4MjIwOTM1MzlaFw0yNTA4MjUxNzI3MzlaMDMxMTAvBgNV BAMTKEMzQ0I0NUM1RDNFQTBCMUU0Mzg5NTE1NUM4M0ZEOTQ4NkVCQTAyNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyJw02gXmZD0AZViyY2T3Q+sx0 SbkBU+2jnfv2pMLI4Vn9WcIklmu/CqInpASxn8fmKLjnxy8vkApSLyzrnKozdqAd 8jA+uMNtiAgYiKJGhn0d+3h5VnOyzyl6+tO1TM9Qv7S3+VAVq4zsTHgwOlljkpuJ eoHiJvtRNpO6mz+tHDAaMzZFBajNqPfF52gc3BFOLwrJDA5o8ufekrW960Q93JZm M/aJ5NIbsxgOFwzZ4zvWjkUrhMzup4k5EKHj7/xlT6FtPSo/L5fRfaCFUeP9hZUC UVHHKudl71zjCPhMVcJHSq8EeNemvJ5RegazMUDihpT+UibonbSMllQVMFQhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw8tFxdPqCx5DiVFVyD/ZSG66AmEwHwYDVR0j BBgwFoAUbfioc7cLqMytoxqt2CFf99AvR+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 N2QyNmRlMC02OGNmLTQyOWMtOGIwZS04ZDY0Yjc2MmY4MjQvMC82REY4QTg3M0I3 MEJBOENDQURBMzFBQUREODIxNUZGN0QwMkY0N0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdEMDJG NDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTdkMjZkZTAtNjhjZi00MjljLThi MGUtOGQ2NGI3NjJmODI0LzAvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVG RjdEMDJGNDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCnhAXBy2+vxjLNlxNxWJ3hu6iLig6xJLse SADvEQnOhTq6pF/iMy3napXfHow7+4NIaEX57iJQwTxBlPmo/VREvNqZVx8FCgQS gXa0/DU7SzVNvBJTAGJdOQl22hnVBOY4gFVz+k91SD2RaHW3vxH2GqtuUJ8KOswh 0w4Fz8vuoXBujQ6K05VNzKkyYD52WxvNoAMbQCwxF+/ZmZ3Fvx3s8V1sgC706uOy 7EUSMZjcSv1VzV8i77SlVHhebGUr9CtEChM+QBo7Gz+0vKz1h3driIfMJAoVpot+ gRUinHdYkawLQByrnDKMY4fFm0ApL2OMuzHKf3/vVqL08f+/BUI= -----END CERTIFICATE-----Generated at Sat Aug 23 17:41:52 2025 by rpki-client