$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft File: 6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft (raw, json) Hash identifier: vf34sIxy7mE6uvEvc7d1ssLHGlqeXw8fgiOD0isHaWo= Subject key identifier: 9C:23:85:C2:3C:2F:05:D2:B0:4C:6B:EF:4E:BD:54:C2:53:C9:63:37 Authority key identifier: 6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8 Certificate issuer: /CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8 Certificate serial: 2790780CFD668D986B8C99B77A1A075F01F17684 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft Manifest number: 86 Signing time: Sat 23 Aug 2025 01:41:29 +0000 Manifest this update: Sat 23 Aug 2025 01:36:29 +0000 Manifest next update: Tue 26 Aug 2025 03:08:29 +0000 Files and hashes: 1: 323030313a6466343a353663303a3a2f34382d3438203d3e20313533313231.roa (hash: zTJG58E9CdtcpbOn2YccIUm1CoDteBuPCbelkCQEFPE=) 2: 6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl (hash: Ja78avYdKqmm4+TV26TUsHckpkVjQwNToEiTB2j5LCU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 03:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:90:78:0c:fd:66:8d:98:6b:8c:99:b7:7a:1a:07:5f:01:f1:76:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8 Validity Not Before: Aug 23 01:36:29 2025 GMT Not After : Aug 26 03:08:29 2025 GMT Subject: CN=9C2385C23C2F05D2B04C6BEF4EBD54C253C96337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:52:50:61:54:80:18:f0:60:20:b0:fa:62:eb: f0:20:2d:e6:c9:6e:24:80:de:be:c4:a2:11:ee:71: 13:db:3e:47:51:fe:9c:de:8d:b8:ac:0e:ce:0c:04: f1:ad:47:18:9c:43:b8:e9:18:ca:53:95:57:59:f6: ca:7c:dd:98:0b:c0:de:20:25:b6:0d:e2:6d:0f:35: 87:6f:68:c9:4c:9b:c3:45:18:46:1a:7b:c1:e7:8d: 4f:e4:ab:97:0b:19:61:1b:94:7d:2d:94:09:81:f3: b7:64:52:6a:c9:a3:98:b1:b7:66:92:fb:d0:3a:9a: 4f:57:75:fc:10:71:ba:08:a2:e3:6d:ac:25:d1:ed: da:bb:47:5c:0d:88:be:9a:f1:58:63:5a:80:91:9f: 90:bb:17:c4:d8:76:b9:bb:2e:ca:7a:89:0a:81:bc: 86:22:42:4c:8f:7f:a5:8e:7e:92:d4:60:0c:35:4f: 0f:59:cc:0b:43:56:2f:34:56:7d:4e:ab:79:b7:c5: 35:0d:0a:e0:1f:ff:86:9c:83:6f:74:39:2e:86:d8: 45:b9:e2:a0:bf:35:e1:fe:ab:02:95:3e:f5:0e:ce: 46:13:8a:21:06:f2:4c:db:6f:1c:97:8b:d2:3d:95: 8d:77:26:6c:a9:5f:3e:0d:b2:97:e6:73:30:a3:88: 2c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:23:85:C2:3C:2F:05:D2:B0:4C:6B:EF:4E:BD:54:C2:53:C9:63:37 X509v3 Authority Key Identifier: keyid:6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:82:d7:6f:c3:3a:5e:2e:63:d6:d6:99:40:6a:91:95:1d:77: b0:44:7b:f5:9c:ea:9d:06:18:42:72:cd:8f:bf:6e:a0:76:57: 5c:09:32:b4:37:a7:19:ee:68:f5:a3:34:29:e5:94:9e:91:e8: 0c:36:99:5d:1a:f4:1d:a5:5c:00:b3:44:18:cc:d6:d8:0f:78: b0:dc:1a:59:0e:db:05:0f:0f:46:61:7e:f9:c5:fb:6d:c1:32: bb:d3:7e:d4:d1:eb:24:c8:ce:4b:64:57:a4:e9:09:ec:6c:07: 47:10:92:24:bc:36:b2:ff:61:a7:72:2b:7d:e7:59:87:53:07: 18:71:8c:a1:04:1b:f7:26:ce:5c:c2:0c:ae:a1:38:c3:d8:75: a3:c9:ce:50:90:17:40:4b:48:3d:07:ac:e5:22:99:47:42:3c: 65:4b:9a:ba:6c:39:9b:95:8c:7d:b0:e7:63:c8:12:12:fb:55: 6e:71:95:2f:a4:f2:84:08:c1:1c:c9:08:b7:6c:f8:bb:77:fc: 0f:a1:73:12:39:1a:a9:44:96:42:f9:ac:91:5d:47:7c:3f:9c: 35:35:36:fc:a9:e6:39:15:b3:47:d9:d6:81:c7:96:fb:a0:8a: b9:09:cc:cf:ff:b7:46:a8:33:b6:35:52:a5:54:6a:da:bb:79: da:32:c9:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ5B4DP1mjZhrjJm3ehoHXwHxdoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEzOTk2QUZFMTEzODIzODUzMEMyRkM5MkIyQUI2NzVG Q0QyMThDODAeFw0yNTA4MjMwMTM2MjlaFw0yNTA4MjYwMzA4MjlaMDMxMTAvBgNV BAMTKDlDMjM4NUMyM0MyRjA1RDJCMDRDNkJFRjRFQkQ1NEMyNTNDOTYzMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvUlBhVIAY8GAgsPpi6/AgLebJ biSA3r7EohHucRPbPkdR/pzejbisDs4MBPGtRxicQ7jpGMpTlVdZ9sp83ZgLwN4g JbYN4m0PNYdvaMlMm8NFGEYae8HnjU/kq5cLGWEblH0tlAmB87dkUmrJo5ixt2aS +9A6mk9XdfwQcboIouNtrCXR7dq7R1wNiL6a8VhjWoCRn5C7F8TYdrm7Lsp6iQqB vIYiQkyPf6WOfpLUYAw1Tw9ZzAtDVi80Vn1Oq3m3xTUNCuAf/4acg290OS6G2EW5 4qC/NeH+qwKVPvUOzkYTiiEG8kzbbxyXi9I9lY13JmypXz4NspfmczCjiCyNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnCOFwjwvBdKwTGvvTr1UwlPJYzcwHwYDVR0j BBgwFoAUajmWr+ETgjhTDC/JKyq2dfzSGMgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTg5YjdkZC05OWE3LTQ1MGUtYmU4NC1iM2JmYzczNDBmMWYvMS82QTM5OTZBRkUx MTM4MjM4NTMwQzJGQzkyQjJBQjY3NUZDRDIxOEM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEzOTk2QUZFMTEzODIzODUzMEMyRkM5MkIyQUI2NzVGQ0Qy MThDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzEvNkEzOTk2QUZFMTEzODIzODUzMEMyRkM5MkIyQUI2 NzVGQ0QyMThDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSC12/DOl4uY9bWmUBqkZUdd7BEe/Wc6p0G GEJyzY+/bqB2V1wJMrQ3pxnuaPWjNCnllJ6R6Aw2mV0a9B2lXACzRBjM1tgPeLDc GlkO2wUPD0ZhfvnF+23BMrvTftTR6yTIzktkV6TpCexsB0cQkiS8NrL/YadyK33n WYdTBxhxjKEEG/cmzlzCDK6hOMPYdaPJzlCQF0BLSD0HrOUimUdCPGVLmrpsOZuV jH2w52PIEhL7VW5xlS+k8oQIwRzJCLds+Lt3/A+hcxI5GqlElkL5rJFdR3w/nDU1 Nvyp5jkVs0fZ1oHHlvugirkJzM//t0aoM7Y1UqVUatq7edoyyYE= -----END CERTIFICATE-----Generated at Sat Aug 23 17:42:24 2025 by rpki-client