$ rpki-client -vvf repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft File: 6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft (raw, json) Hash identifier: n9AThKSrUGYXYswy3krAaqhkPEDtWDVnyBVDu1FLt+w= Subject key identifier: 90:A4:21:6B:A1:01:60:40:4B:50:4A:41:AC:A5:B6:E6:FC:21:2D:BF Authority key identifier: 6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 Certificate issuer: /CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31 Certificate serial: 1032F85C17DDFFC4E1BB399F8DB044CEE63C1834 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft Manifest number: B9 Signing time: Sat 23 Aug 2025 00:00:46 +0000 Manifest this update: Fri 22 Aug 2025 23:55:46 +0000 Manifest next update: Tue 26 Aug 2025 04:33:46 +0000 Files and hashes: 1: 3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa (hash: nPtUGKaHPiIgcmd7zVYYYWB0FNbLMK1i/rlw7h+2X4I=) 2: 3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa (hash: hNrDFdJZIJVijEPlIae7oRd0LDEkkVmTrltcwdQNZWQ=) 3: 6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl (hash: OLrgkGPCMnVY+XRewKAYiYkLHzVDn8EfqJ0K/6BfASw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 04:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:32:f8:5c:17:dd:ff:c4:e1:bb:39:9f:8d:b0:44:ce:e6:3c:18:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31 Validity Not Before: Aug 22 23:55:46 2025 GMT Not After : Aug 26 04:33:46 2025 GMT Subject: CN=90A4216BA10160404B504A41ACA5B6E6FC212DBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a0:7a:91:cb:fd:89:2e:3d:49:d3:64:a4:19: e2:3d:b6:4a:2c:04:b8:ca:3d:d1:ea:fa:a8:9c:db: 2a:a2:ef:ba:f5:d5:da:45:6e:95:c1:84:0a:ff:17: b9:53:af:b1:61:e2:3e:a6:4d:35:f6:ce:59:50:16: 68:47:24:d1:b3:d9:fb:da:d1:03:12:2c:dd:88:64: de:b2:a2:df:98:55:a3:36:4c:7f:94:da:cd:f8:f6: 38:23:e4:ec:17:43:a7:04:5c:07:21:ef:2b:54:37: 84:30:53:73:d7:d3:d9:40:43:0a:69:a9:93:1f:0c: 58:e5:50:2f:af:ce:9d:84:4d:ea:8a:6b:a3:e9:d5: 81:9c:a2:62:74:39:80:37:7f:88:ff:f5:62:af:2f: be:28:8a:83:8c:7a:39:f7:0c:e3:14:92:54:29:c9: 32:3a:49:ec:a4:31:e7:b4:21:ca:5a:2e:60:4f:bb: 79:74:b3:66:22:9f:c8:ca:76:f3:db:71:0d:a4:60: e9:94:48:ae:57:a8:84:e1:f4:cf:0c:93:e7:bc:e6: 96:87:1a:00:10:19:99:63:a7:b2:16:9d:2f:50:94: f0:17:15:e4:98:3e:48:ed:71:33:81:fb:ff:17:6e: 3d:10:93:59:38:2c:d6:cd:c5:b9:5d:67:eb:79:dd: 8f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A4:21:6B:A1:01:60:40:4B:50:4A:41:AC:A5:B6:E6:FC:21:2D:BF X509v3 Authority Key Identifier: keyid:6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f4:44:d3:9f:ba:31:56:d4:4e:05:5d:fc:51:da:4c:41:5f: 31:03:b8:e1:6f:b9:33:ee:5d:ae:98:08:18:06:e6:4c:3d:2f: 0a:2a:26:2c:0b:28:c8:c8:10:39:e6:ab:86:eb:c3:3f:bb:76: 39:ba:ae:9b:e0:c3:a5:3e:6d:d2:48:34:4d:c8:a0:9b:15:f2: 7d:fb:d6:8c:26:5f:75:b7:0c:a6:f0:5c:86:76:b4:90:67:f7: 7c:63:a3:e0:c3:22:fa:c8:b1:e0:a3:a6:2d:5a:a0:f5:4b:fb: a1:a3:b9:8c:d3:4d:59:76:32:e9:93:ae:28:af:e0:63:70:48: af:f1:b1:84:6b:f0:ac:81:d3:67:30:02:73:ac:f0:bc:35:84: 72:c5:bb:38:ef:71:b6:bd:b3:fe:2b:a0:12:98:72:a5:d3:e5: bb:15:91:26:b9:d9:90:b4:53:86:83:1e:cd:fb:cf:38:f3:33: d9:0f:99:d1:ab:a3:7d:3a:55:8f:6e:6a:b8:9d:12:36:8c:8f: 97:93:f2:e5:b4:2c:24:2e:17:1b:1c:d1:9b:7e:80:77:5b:37: bf:21:bd:09:e4:69:0f:4a:08:e0:f1:d5:95:cf:c9:ae:7a:3f: e0:6f:6d:cc:38:39:9b:c4:9f:3e:83:ff:56:e0:68:23:1e:51: e6:eb:d5:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEDL4XBfd/8ThuzmfjbBEzuY8GDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFBRTlF M0QxOEQzMTAeFw0yNTA4MjIyMzU1NDZaFw0yNTA4MjYwNDMzNDZaMDMxMTAvBgNV BAMTKDkwQTQyMTZCQTEwMTYwNDA0QjUwNEE0MUFDQTVCNkU2RkMyMTJEQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAoHqRy/2JLj1J02SkGeI9tkos BLjKPdHq+qic2yqi77r11dpFbpXBhAr/F7lTr7Fh4j6mTTX2zllQFmhHJNGz2fva 0QMSLN2IZN6yot+YVaM2TH+U2s349jgj5OwXQ6cEXAch7ytUN4QwU3PX09lAQwpp qZMfDFjlUC+vzp2ETeqKa6Pp1YGcomJ0OYA3f4j/9WKvL74oioOMejn3DOMUklQp yTI6SeykMee0IcpaLmBPu3l0s2Yin8jKdvPbcQ2kYOmUSK5XqITh9M8Mk+e85paH GgAQGZljp7IWnS9QlPAXFeSYPkjtcTOB+/8Xbj0Qk1k4LNbNxbldZ+t53Y91AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkKQha6EBYEBLUEpBrKW25vwhLb8wHwYDVR0j BBgwFoAUaizJ08cxSOJl6ZZhkpwa6ePRjTEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjJhOTE2YS1hZDIyLTQ5NzktYmU0My05NTFjNzZmMmY5MjAvMC82QTJDQzlEM0M3 MzE0OEUyNjVFOTk2NjE5MjlDMUFFOUUzRDE4RDMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFBRTlFM0Qx OEQzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2IyYTkxNmEtYWQyMi00OTc5LWJl NDMtOTUxYzc2ZjJmOTIwLzAvNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFB RTlFM0QxOEQzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/0RNOfujFW1E4FXfxR2kxBXzEDuOFvuTPu Xa6YCBgG5kw9LwoqJiwLKMjIEDnmq4brwz+7djm6rpvgw6U+bdJINE3IoJsV8n37 1owmX3W3DKbwXIZ2tJBn93xjo+DDIvrIseCjpi1aoPVL+6GjuYzTTVl2MumTriiv 4GNwSK/xsYRr8KyB02cwAnOs8Lw1hHLFuzjvcba9s/4roBKYcqXT5bsVkSa52ZC0 U4aDHs37zzjzM9kPmdGro306VY9uaridEjaMj5eT8uW0LCQuFxsc0Zt+gHdbN78h vQnkaQ9KCODx1ZXPya56P+Bvbcw4OZvEnz6D/1bgaCMeUebr1XE= -----END CERTIFICATE-----Generated at Sat Aug 23 21:00:56 2025 by rpki-client