$ rpki-client -vvf repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft File: 6A755F0ECD114936B4C154BE153030E6BFE42025.mft (raw, json) Hash identifier: C7Siltv0/BWvBpeOv7wUYJC+U97Apnf6Fk7w7TkGY3U= Subject key identifier: 09:8F:D0:C0:11:12:93:CD:5F:26:70:CB:75:A0:1A:01:79:54:F0:FA Authority key identifier: 6A:75:5F:0E:CD:11:49:36:B4:C1:54:BE:15:30:30:E6:BF:E4:20:25 Certificate issuer: /CN=6A755F0ECD114936B4C154BE153030E6BFE42025 Certificate serial: 167E37BE6E0D79E5F998B8AE60DB235945E54954 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft Manifest number: 87 Signing time: Fri 22 Aug 2025 22:22:18 +0000 Manifest this update: Fri 22 Aug 2025 22:17:18 +0000 Manifest next update: Tue 26 Aug 2025 03:49:18 +0000 Files and hashes: 1: 6A755F0ECD114936B4C154BE153030E6BFE42025.crl (hash: rezA6Rt+gbZ6AWbE492BksLN+CVB/T7o9xhU4FSrOLY=) 2: 3136302e32352e3234342e302f32342d3234203d3e20313533313131.roa (hash: 4PEyPB4qmPb2e/bBEQkgXwV9i5IzOHIeX5E1aebL4mE=) 3: 3136302e32352e3234352e302f32342d3234203d3e20313533313131.roa (hash: UFu8HMSGf8XDsGbPsoU1Eu+n+uIdk0W8r+YUHRms9EI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.crl rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 03:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:7e:37:be:6e:0d:79:e5:f9:98:b8:ae:60:db:23:59:45:e5:49:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A755F0ECD114936B4C154BE153030E6BFE42025 Validity Not Before: Aug 22 22:17:18 2025 GMT Not After : Aug 26 03:49:18 2025 GMT Subject: CN=098FD0C0111293CD5F2670CB75A01A017954F0FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b9:52:24:d8:08:6f:7e:fa:cc:22:0b:e9:41: e7:2a:d1:81:92:a6:15:c2:1f:1b:8d:2e:b4:9b:08: 63:1a:b1:93:08:23:49:de:b5:f7:0c:06:59:91:6b: 07:5e:7d:50:ca:7a:35:66:72:64:02:93:71:3f:36: e7:b5:cc:2e:fb:06:f6:12:7a:f5:e7:b9:ae:9a:71: 07:87:d5:35:bc:57:d7:a2:fd:af:f7:86:d3:9a:34: 00:93:aa:cb:66:f2:df:40:5b:f8:1b:97:14:73:49: 12:d2:50:d5:e4:43:4d:7b:7a:7a:43:f3:d2:53:43: e7:a9:9f:52:5d:1d:6f:d3:84:73:fc:3a:8f:20:8a: d5:5b:17:31:80:4d:82:38:2b:eb:9a:aa:3e:6a:a7: dc:90:63:44:ca:95:74:b7:92:3b:64:8e:46:78:1a: 08:96:c7:ff:a2:ba:f3:43:b9:c1:dd:f2:a7:5c:12: 54:c2:42:38:46:10:d4:88:f9:27:97:50:53:f2:29: 99:ce:1e:34:ac:fb:4d:8a:37:53:69:48:eb:ba:07: c5:52:2a:06:89:fa:30:99:8d:72:7f:39:20:5e:7c: a0:84:40:da:01:b9:94:e7:01:d8:2e:2d:91:80:d8: 93:d4:b9:18:4f:bb:5b:12:9b:84:91:67:e7:3d:32: 34:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:8F:D0:C0:11:12:93:CD:5F:26:70:CB:75:A0:1A:01:79:54:F0:FA X509v3 Authority Key Identifier: keyid:6A:75:5F:0E:CD:11:49:36:B4:C1:54:BE:15:30:30:E6:BF:E4:20:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:e9:05:a8:a6:e6:4b:51:92:5a:cb:d2:87:2c:15:06:cd:c6: 13:a9:d3:a5:2d:96:59:8e:ad:9c:28:da:d5:80:84:79:c5:65: d4:b6:2b:fe:7e:74:1e:9c:3b:08:50:a8:32:6f:8f:f4:41:4e: 1d:33:2c:0c:df:60:49:80:a1:4b:5c:43:e9:44:8d:fc:14:73: c0:13:9c:83:f1:e4:c6:bd:3e:77:f0:1d:cd:50:ca:d1:dc:09: 19:38:5b:79:99:b8:be:b8:f3:74:ee:6f:2c:f0:2e:35:b9:6e: e9:fd:60:dd:1b:84:bb:4b:fe:ce:d7:bb:65:64:a6:b3:64:02: 82:c6:00:93:0f:f8:c7:bd:30:89:45:cc:86:b3:1b:76:d0:81: 90:eb:d0:e9:d4:8f:9b:24:ac:c9:0b:ed:33:08:87:80:a2:70: 6c:e6:d7:b0:83:f4:fc:e2:2c:a0:75:b1:30:bc:a9:a9:ec:61: 58:69:50:0d:a2:a5:08:45:39:dc:94:ef:48:bb:26:e3:af:39: cc:6e:d6:25:ae:9d:45:1f:d7:93:e4:27:ad:91:78:2a:50:f9: cf:fe:78:2d:a7:31:36:38:fd:f1:ba:99:0d:98:04:f5:d0:02: f6:4a:45:fa:8c:65:af:e8:98:c3:76:22:be:e9:12:2b:c8:03: 4b:8d:90:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFn43vm4NeeX5mLiuYNsjWUXlSVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE3NTVGMEVDRDExNDkzNkI0QzE1NEJFMTUzMDMwRTZC RkU0MjAyNTAeFw0yNTA4MjIyMjE3MThaFw0yNTA4MjYwMzQ5MThaMDMxMTAvBgNV BAMTKDA5OEZEMEMwMTExMjkzQ0Q1RjI2NzBDQjc1QTAxQTAxNzk1NEYwRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCouVIk2AhvfvrMIgvpQecq0YGS phXCHxuNLrSbCGMasZMII0netfcMBlmRawdefVDKejVmcmQCk3E/Nue1zC77BvYS evXnua6acQeH1TW8V9ei/a/3htOaNACTqstm8t9AW/gblxRzSRLSUNXkQ017enpD 89JTQ+epn1JdHW/ThHP8Oo8gitVbFzGATYI4K+uaqj5qp9yQY0TKlXS3kjtkjkZ4 GgiWx/+iuvNDucHd8qdcElTCQjhGENSI+SeXUFPyKZnOHjSs+02KN1NpSOu6B8VS KgaJ+jCZjXJ/OSBefKCEQNoBuZTnAdguLZGA2JPUuRhPu1sSm4SRZ+c9MjQ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCY/QwBESk81fJnDLdaAaAXlU8PowHwYDVR0j BBgwFoAUanVfDs0RSTa0wVS+FTAw5r/kICUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGNjMWM3ZS1kYTc0LTRiMTEtYjY3YS1kNWYyN2Q5ODE3NTcvMC82QTc1NUYwRUNE MTE0OTM2QjRDMTU0QkUxNTMwMzBFNkJGRTQyMDI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkE3NTVGMEVDRDExNDkzNkI0QzE1NEJFMTUzMDMwRTZCRkU0 MjAyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhjYzFjN2UtZGE3NC00YjExLWI2 N2EtZDVmMjdkOTgxNzU3LzAvNkE3NTVGMEVDRDExNDkzNkI0QzE1NEJFMTUzMDMw RTZCRkU0MjAyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFbpBaim5ktRklrL0ocsFQbNxhOp06UtllmO rZwo2tWAhHnFZdS2K/5+dB6cOwhQqDJvj/RBTh0zLAzfYEmAoUtcQ+lEjfwUc8AT nIPx5Ma9PnfwHc1QytHcCRk4W3mZuL6483TubyzwLjW5bun9YN0bhLtL/s7Xu2Vk prNkAoLGAJMP+Me9MIlFzIazG3bQgZDr0OnUj5skrMkL7TMIh4CicGzm17CD9Pzi LKB1sTC8qansYVhpUA2ipQhFOdyU70i7JuOvOcxu1iWunUUf15PkJ62ReCpQ+c/+ eC2nMTY4/fG6mQ2YBPXQAvZKRfqMZa/omMN2Ir7pEivIA0uNkBg= -----END CERTIFICATE-----Generated at Sat Aug 23 18:35:30 2025 by rpki-client