$ rpki-client -vvf repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft File: 06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft (raw, json) Hash identifier: zWnW7MqKZB7w0kasZbIJOqh9kaq8j4zFn770i6gD/Uk= Subject key identifier: B6:C3:12:E7:29:C3:CE:D3:27:7C:3B:03:C8:E5:F2:29:D1:BD:47:58 Authority key identifier: 06:A0:35:96:D6:FA:10:E3:F5:08:10:F5:86:E3:F6:3A:EE:96:F9:8E Certificate issuer: /CN=06A03596D6FA10E3F50810F586E3F63AEE96F98E Certificate serial: 7CBA73E7831E1BF36C6BCA1DB6A92C7514F95EAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft Manifest number: E2 Signing time: Fri 22 Aug 2025 06:41:06 +0000 Manifest this update: Fri 22 Aug 2025 06:36:06 +0000 Manifest next update: Mon 25 Aug 2025 12:55:06 +0000 Files and hashes: 1: 3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa (hash: c4zKb4BC8Sb0059Tmuc8jeyTEWO85EjEdef3ktgt6EU=) 2: 06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl (hash: UPdIcsJbHU1aT/c5Iw/VQw01Bi5wb0kCbC+llgUR2GQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 12:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ba:73:e7:83:1e:1b:f3:6c:6b:ca:1d:b6:a9:2c:75:14:f9:5e:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06A03596D6FA10E3F50810F586E3F63AEE96F98E Validity Not Before: Aug 22 06:36:06 2025 GMT Not After : Aug 25 12:55:06 2025 GMT Subject: CN=B6C312E729C3CED3277C3B03C8E5F229D1BD4758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ac:8a:05:87:9c:fd:a9:f9:95:7d:7c:b9:55: 9c:49:a2:bc:55:07:36:bb:cc:31:8f:17:8d:6a:3d: f9:c0:ed:52:77:f0:5f:40:57:e6:0f:91:e4:8f:a7: e7:c0:c2:c5:e4:74:b4:cd:67:30:7d:53:82:f8:a1: 81:bc:f7:bb:da:56:8f:9f:c6:a1:55:cd:e1:b0:bc: 0d:80:09:b1:79:a9:e4:5e:8d:aa:fd:00:4d:f1:7e: a8:56:cc:68:59:90:9d:9e:f7:34:12:d1:b3:fa:1e: 2c:07:24:ef:a2:fa:34:a8:29:be:1e:b4:d0:6c:52: ce:be:be:54:f5:1a:36:af:18:d4:c1:7f:bd:fc:3f: f3:ef:dd:d2:a5:65:ef:0e:9a:0b:e7:c7:f5:1e:e1: aa:eb:23:43:6c:cb:54:3b:b5:f9:12:08:89:ad:b8: 54:0f:3b:55:5b:62:b4:e6:4f:7f:71:2a:51:6d:6f: b3:99:cf:2c:92:af:c8:6a:31:b8:eb:e4:5f:9c:b9: 1a:69:1d:06:d0:6f:d8:6a:cd:fc:60:28:78:fd:68: 44:3b:5c:f0:28:83:aa:a3:2d:73:bd:46:d2:f2:31: 15:69:3c:47:7e:03:54:a4:8d:7a:71:95:d0:d1:95: 76:d9:f1:64:42:e7:46:3f:1d:45:d9:8d:ce:c5:41: f8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C3:12:E7:29:C3:CE:D3:27:7C:3B:03:C8:E5:F2:29:D1:BD:47:58 X509v3 Authority Key Identifier: keyid:06:A0:35:96:D6:FA:10:E3:F5:08:10:F5:86:E3:F6:3A:EE:96:F9:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:14:fd:2e:47:48:92:8c:b6:f0:8e:31:2d:a7:74:60:a4:d7: ce:ba:f2:c8:1b:1c:ae:4a:e6:5b:fe:6d:c3:4a:aa:5b:97:fc: dc:82:d2:8a:1c:a1:06:cc:67:8e:f2:9e:a5:5c:88:b0:da:65: a9:a9:3d:ba:95:08:5d:26:ad:8e:4f:fc:a3:bb:4b:3c:5c:d7: 7f:65:fe:de:3c:5f:32:b4:6d:4b:21:8f:90:fe:39:f2:82:4d: 9d:99:88:ea:15:64:6b:58:e2:e6:03:b9:57:e4:e1:52:fa:cc: bf:52:18:6c:59:e6:c5:17:2c:7a:54:be:68:83:1b:26:68:05: e6:8a:31:33:85:1b:89:b4:14:6d:37:f7:2f:52:65:b9:1c:60: e8:69:ff:2a:31:d8:6f:d3:aa:56:b8:e9:92:e3:0f:6a:08:4b: 02:d5:c0:b6:10:4c:ec:4c:9e:9a:66:f2:a6:d8:39:5c:ab:1d: fa:8c:21:b4:a8:2a:9c:bf:4f:46:56:e9:93:72:73:40:17:9c: a5:32:cc:f7:72:9a:67:92:8b:b1:19:a0:ee:24:b8:04:ad:ef: a3:81:14:24:6f:80:4a:43:e7:49:aa:f7:21:40:90:ec:d4:79: a8:47:7d:f1:30:59:ad:2a:f3:ca:48:1f:67:9a:69:d6:ea:62: 97:44:85:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfLpz54MeG/Nsa8odtqksdRT5Xq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2M0FF RTk2Rjk4RTAeFw0yNTA4MjIwNjM2MDZaFw0yNTA4MjUxMjU1MDZaMDMxMTAvBgNV BAMTKEI2QzMxMkU3MjlDM0NFRDMyNzdDM0IwM0M4RTVGMjI5RDFCRDQ3NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDerIoFh5z9qfmVfXy5VZxJorxV Bza7zDGPF41qPfnA7VJ38F9AV+YPkeSPp+fAwsXkdLTNZzB9U4L4oYG897vaVo+f xqFVzeGwvA2ACbF5qeRejar9AE3xfqhWzGhZkJ2e9zQS0bP6HiwHJO+i+jSoKb4e tNBsUs6+vlT1GjavGNTBf738P/Pv3dKlZe8Omgvnx/Ue4arrI0Nsy1Q7tfkSCImt uFQPO1VbYrTmT39xKlFtb7OZzyySr8hqMbjr5F+cuRppHQbQb9hqzfxgKHj9aEQ7 XPAog6qjLXO9RtLyMRVpPEd+A1SkjXpxldDRlXbZ8WRC50Y/HUXZjc7FQfghAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtsMS5ynDztMnfDsDyOXyKdG9R1gwHwYDVR0j BBgwFoAUBqA1ltb6EOP1CBD1huP2Ou6W+Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGY3Yzc5MC03NmI1LTQ5NjctYjZmZi0xMmRjNzU2YmJmN2QvMC8wNkEwMzU5NkQ2 RkExMEUzRjUwODEwRjU4NkUzRjYzQUVFOTZGOThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2M0FFRTk2 Rjk4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmN2M3OTAtNzZiNS00OTY3LWI2 ZmYtMTJkYzc1NmJiZjdkLzAvMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2 M0FFRTk2Rjk4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsU/S5HSJKMtvCOMS2ndGCk18668sgbHK5K 5lv+bcNKqluX/NyC0oocoQbMZ47ynqVciLDaZampPbqVCF0mrY5P/KO7Szxc139l /t48XzK0bUshj5D+OfKCTZ2ZiOoVZGtY4uYDuVfk4VL6zL9SGGxZ5sUXLHpUvmiD GyZoBeaKMTOFG4m0FG039y9SZbkcYOhp/yox2G/Tqla46ZLjD2oISwLVwLYQTOxM nppm8qbYOVyrHfqMIbSoKpy/T0ZW6ZNyc0AXnKUyzPdymmeSi7EZoO4kuASt76OB FCRvgEpD50mq9yFAkOzUeahHffEwWa0q88pIH2eaadbqYpdEhV4= -----END CERTIFICATE-----Generated at Sun Aug 24 04:16:42 2025 by rpki-client