$ rpki-client -vvf repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft File: D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft (raw, json) Hash identifier: PCYsrovT0hKgmJdcWisx4rxJeqWTItE5sw5Yg79Hly4= Subject key identifier: CE:C9:E0:A7:00:EA:6A:60:B1:7E:CF:AE:02:21:17:8C:33:DE:96:C8 Authority key identifier: D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 Certificate issuer: /CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Certificate serial: 7D987CCB5B745FDA2B013A465771B5F36292970F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft Manifest number: 02C8 Signing time: Fri 22 Aug 2025 19:00:00 +0000 Manifest this update: Fri 22 Aug 2025 18:55:00 +0000 Manifest next update: Tue 26 Aug 2025 00:22:00 +0000 Files and hashes: 1: 3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa (hash: EWRSldncuijDwUH5kmTIxzgLmknYFLpjI5NK+K1R4Fw=) 2: D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl (hash: zEzYhiPZg1y9vbMDPsYrHdGFLRo+h1QcMHBcGUWTCdk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 00:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:98:7c:cb:5b:74:5f:da:2b:01:3a:46:57:71:b5:f3:62:92:97:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Validity Not Before: Aug 22 18:55:00 2025 GMT Not After : Aug 26 00:22:00 2025 GMT Subject: CN=CEC9E0A700EA6A60B17ECFAE0221178C33DE96C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1e:db:b6:57:f5:23:b9:cc:06:6c:e2:e8:bf: fe:f3:4b:99:c7:33:e3:de:45:52:a4:d5:a7:3e:e0: c7:00:80:0f:5a:01:2d:38:7f:b4:68:af:00:d7:b9: 40:0f:4f:5d:b8:38:0f:77:ef:b4:f2:77:f5:1b:7a: c3:2e:72:53:65:c8:f3:12:5e:75:2c:49:b9:c8:08: 8c:f3:5c:d9:d2:97:ad:01:25:03:b8:65:a7:7f:6e: b5:4e:ad:cd:fc:ae:9f:b1:81:39:4c:24:12:93:2c: a8:a8:6f:e0:15:17:c5:5e:60:6d:57:f9:2c:83:55: e1:4a:8f:9e:6c:f6:a0:77:6a:10:d0:90:98:e9:71: f2:60:e4:9b:e6:cd:56:33:6a:00:a4:7e:e7:ae:bc: ae:70:ae:7e:8f:b8:4f:c0:ff:17:b7:d2:44:5d:51: 9b:20:80:fe:8a:1a:83:a9:4f:0e:76:fa:f4:a6:4e: 84:56:56:5f:18:98:37:fe:fd:19:89:e7:73:11:85: 30:d6:ba:91:24:57:e3:7d:0b:48:7d:55:aa:e5:53: 7e:3d:e2:c3:83:36:b1:b1:83:20:10:bc:c9:04:ff: 87:c0:82:15:90:57:ad:c7:f4:a5:3a:91:ba:e3:94: e2:26:9d:f9:58:88:f5:d2:97:1a:0e:30:ab:0a:d4: 89:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C9:E0:A7:00:EA:6A:60:B1:7E:CF:AE:02:21:17:8C:33:DE:96:C8 X509v3 Authority Key Identifier: keyid:D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:45:53:66:00:b6:0e:f9:27:4e:19:f4:3b:ea:48:e1:64:91: 4d:c5:b8:6c:0d:e7:42:65:96:f1:3a:9e:a2:6c:de:f0:f1:96: 0e:e2:39:4d:eb:88:b4:66:58:17:4b:79:29:49:3f:28:82:a6: b5:24:df:a5:47:6c:5f:56:1e:8f:c0:d2:3f:0c:d9:a1:85:e8: d5:d5:c0:71:6e:a0:c3:6f:da:18:5d:33:6f:9f:e5:39:4a:9b: 0e:20:9c:ca:dc:68:d5:92:ea:99:3c:04:dc:7c:63:31:2d:6d: 96:56:3b:9b:bd:3b:10:c9:8c:bb:1d:9c:4f:f4:0d:90:62:95: 05:36:3a:ca:52:93:3b:6d:6f:12:e8:10:ab:2e:c2:df:8a:c5: ae:63:4b:92:48:12:2d:98:9b:52:c0:82:ad:05:60:05:7e:0d: e3:18:73:7e:3a:8a:f9:58:13:e9:cf:a2:3b:42:eb:87:b9:94: d4:ae:47:b7:a4:0a:26:6c:b2:97:a0:fc:ae:23:30:22:ac:74: 15:dd:27:3b:21:c1:ac:a1:71:df:ad:dd:a3:71:ab:9e:54:fa: 2f:e1:7b:4e:e4:bb:1e:ae:f0:27:89:22:fd:cd:37:75:39:fb: f0:1d:0e:99:34:fe:1e:c0:7c:96:e0:fd:2f:93:ec:6f:dd:0b: 68:5f:31:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfZh8y1t0X9orATpGV3G182KSlw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVB M0ZDRUI2NjAeFw0yNTA4MjIxODU1MDBaFw0yNTA4MjYwMDIyMDBaMDMxMTAvBgNV BAMTKENFQzlFMEE3MDBFQTZBNjBCMTdFQ0ZBRTAyMjExNzhDMzNERTk2QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWHtu2V/UjucwGbOLov/7zS5nH M+PeRVKk1ac+4McAgA9aAS04f7RorwDXuUAPT124OA9377Tyd/UbesMuclNlyPMS XnUsSbnICIzzXNnSl60BJQO4Zad/brVOrc38rp+xgTlMJBKTLKiob+AVF8VeYG1X +SyDVeFKj55s9qB3ahDQkJjpcfJg5JvmzVYzagCkfueuvK5wrn6PuE/A/xe30kRd UZsggP6KGoOpTw52+vSmToRWVl8YmDf+/RmJ53MRhTDWupEkV+N9C0h9VarlU349 4sODNrGxgyAQvMkE/4fAghWQV63H9KU6kbrjlOImnflYiPXSlxoOMKsK1InrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzsngpwDqamCxfs+uAiEXjDPelsgwHwYDVR0j BBgwFoAU1sHxPGfNAlRd66qEbrKPbqP862YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2EyZTBkYi1lMjkzLTQxYzUtODU4My0zODAxNTc1ODQyMWMvMC9ENkMxRjEzQzY3 Q0QwMjU0NURFQkFBODQ2RUIyOEY2RUEzRkNFQjY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVBM0ZD RUI2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NhMmUwZGItZTI5My00MWM1LTg1 ODMtMzgwMTU3NTg0MjFjLzAvRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhG NkVBM0ZDRUI2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJFU2YAtg75J04Z9DvqSOFkkU3FuGwN50Jl lvE6nqJs3vDxlg7iOU3riLRmWBdLeSlJPyiCprUk36VHbF9WHo/A0j8M2aGF6NXV wHFuoMNv2hhdM2+f5TlKmw4gnMrcaNWS6pk8BNx8YzEtbZZWO5u9OxDJjLsdnE/0 DZBilQU2OspSkzttbxLoEKsuwt+Kxa5jS5JIEi2Ym1LAgq0FYAV+DeMYc346ivlY E+nPojtC64e5lNSuR7ekCiZsspeg/K4jMCKsdBXdJzshwayhcd+t3aNxq55U+i/h e07kux6u8CeJIv3NN3U5+/AdDpk0/h7AfJbg/S+T7G/dC2hfMUc= -----END CERTIFICATE-----Generated at Sat Aug 23 10:34:24 2025 by rpki-client