$ rpki-client -vvf repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft File: 6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft (raw, json) Hash identifier: zaWC2KYOGXr+9b+AfUaxMfzaSL3/btohRf3/HAu0Udo= Subject key identifier: DD:82:FA:3B:FB:FF:1D:8C:EE:B5:08:60:BA:98:E0:60:04:D0:92:4A Authority key identifier: 6D:CC:69:50:8E:F4:E6:70:EF:BC:5C:69:20:3D:6B:12:0F:A9:39:2F Certificate issuer: /CN=6DCC69508EF4E670EFBC5C69203D6B120FA9392F Certificate serial: 24B7C256C5AA8F88D7D949A82F1D6792EAC7F0E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft Manifest number: 0504 Signing time: Thu 21 Aug 2025 14:30:44 +0000 Manifest this update: Thu 21 Aug 2025 14:25:44 +0000 Manifest next update: Sun 24 Aug 2025 15:35:44 +0000 Files and hashes: 1: 6DCC69508EF4E670EFBC5C69203D6B120FA9392F.crl (hash: rLvrGszz/C1V+6klB04JyO0gWXVAlTemU/3hLDsQNWc=) 2: 3130332e3135322e3131382e302f32342d3234203d3e20313430343433.roa (hash: E4zG118v/qHLN7ZNOQGDXXsw7DicdH5quyuAOIhYJfs=) 3: 3130332e3135322e3131392e302f32342d3234203d3e20313430343433.roa (hash: OYW0otw/C3geO3TMH4Vh+kOExJnpA1YbtcKJkivMvls=) 4: 3130332e3135322e3131382e302f32332d3233203d3e20313430343433.roa (hash: /yZJ48q5869CHyqd6SiEVpfiGq8gtKkTaa5YhAFQVoI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.crl rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 15:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b7:c2:56:c5:aa:8f:88:d7:d9:49:a8:2f:1d:67:92:ea:c7:f0:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DCC69508EF4E670EFBC5C69203D6B120FA9392F Validity Not Before: Aug 21 14:25:44 2025 GMT Not After : Aug 24 15:35:44 2025 GMT Subject: CN=DD82FA3BFBFF1D8CEEB50860BA98E06004D0924A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d4:c9:0c:f9:69:03:48:c8:80:db:53:13:ca: d3:d9:06:9d:a6:59:72:ea:b3:a2:a0:94:d5:55:bd: 30:43:71:c8:b1:b2:4b:65:9e:23:e7:f3:cb:6e:8d: 16:2f:2f:a9:ef:85:77:4b:a3:12:ef:76:a6:3e:c9: 03:df:b0:43:78:45:ad:d5:9a:9f:ab:d1:1c:4f:d3: de:86:b2:c7:97:93:bc:fe:b8:76:8c:43:7c:a4:ab: d7:99:dc:55:96:96:81:59:79:d4:9b:ae:1e:82:25: 47:27:57:69:e3:ea:07:4c:18:c3:31:36:7f:ad:b0: 34:1c:95:19:7a:13:af:db:60:70:c1:41:d1:fa:18: 34:1a:f6:54:00:87:31:28:2f:e6:ac:5c:64:89:48: a2:2d:49:f2:a7:53:c0:e5:63:3d:44:95:da:6b:b2: 6c:f4:28:c2:0a:b6:14:b5:8a:f4:df:d2:a2:72:e3: 0d:df:ed:72:6a:72:ae:7c:d5:bd:5a:50:20:56:37: a6:84:a1:7d:13:9f:ad:1d:95:a0:f5:19:cb:ea:3e: b8:5d:03:bd:6b:99:24:fa:4d:4a:bc:30:76:95:03: ec:a5:5d:a3:24:8b:71:60:77:f1:bb:52:92:57:63: 6a:05:fd:a6:3d:7b:c1:cd:6c:c6:b1:12:0b:90:48: ec:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:82:FA:3B:FB:FF:1D:8C:EE:B5:08:60:BA:98:E0:60:04:D0:92:4A X509v3 Authority Key Identifier: keyid:6D:CC:69:50:8E:F4:E6:70:EF:BC:5C:69:20:3D:6B:12:0F:A9:39:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:aa:eb:87:17:e3:ea:df:df:2a:9e:db:3f:f6:04:58:e5:cf: 76:0c:ec:02:67:e8:b1:80:97:71:09:16:de:5d:04:64:8c:82: 73:83:8d:12:02:19:0d:89:f7:59:c5:8e:3a:77:3d:7e:ba:ca: 93:d0:d5:a7:40:4c:ef:23:8c:a5:08:b8:de:10:71:c3:f2:39: 12:6d:80:a0:e0:9f:e0:0f:67:5c:1a:44:7f:89:7f:a6:79:38: d9:04:d3:62:e4:17:3b:47:65:c3:9c:07:a1:b5:a0:78:f2:30: 0b:bc:ec:5b:18:05:de:73:19:81:ab:ce:4a:78:6e:ad:54:cd: 1d:cc:94:8b:82:e4:d3:a6:8f:6d:f2:60:22:61:31:84:b2:ae: 79:52:5a:08:58:81:a3:fd:f7:2e:4c:d8:db:4f:e2:4a:c9:fe: 10:d4:eb:f8:b5:6e:06:7d:d4:1a:a8:df:73:65:2b:29:31:c9: ec:51:b4:95:d5:77:d2:59:38:f3:0a:fb:d6:8c:c5:d6:1a:75: 07:52:56:a2:75:9c:51:21:e6:8e:a1:83:9f:e4:28:e7:b4:c2: 51:21:6a:fa:8b:e6:5f:bc:01:2d:42:e3:29:c7:4e:ca:c4:7a: 7b:f5:41:f9:f0:1b:23:da:79:f9:cd:ae:95:00:56:dd:1b:1d: 8e:7e:55:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJLfCVsWqj4jX2UmoLx1nkurH8OgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRDQzY5NTA4RUY0RTY3MEVGQkM1QzY5MjAzRDZCMTIw RkE5MzkyRjAeFw0yNTA4MjExNDI1NDRaFw0yNTA4MjQxNTM1NDRaMDMxMTAvBgNV BAMTKEREODJGQTNCRkJGRjFEOENFRUI1MDg2MEJBOThFMDYwMDREMDkyNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu1MkM+WkDSMiA21MTytPZBp2m WXLqs6KglNVVvTBDccixsktlniPn88tujRYvL6nvhXdLoxLvdqY+yQPfsEN4Ra3V mp+r0RxP096GsseXk7z+uHaMQ3ykq9eZ3FWWloFZedSbrh6CJUcnV2nj6gdMGMMx Nn+tsDQclRl6E6/bYHDBQdH6GDQa9lQAhzEoL+asXGSJSKItSfKnU8DlYz1Eldpr smz0KMIKthS1ivTf0qJy4w3f7XJqcq581b1aUCBWN6aEoX0Tn60dlaD1GcvqPrhd A71rmST6TUq8MHaVA+ylXaMki3Fgd/G7UpJXY2oF/aY9e8HNbMaxEguQSOx1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3YL6O/v/HYzutQhgupjgYATQkkowHwYDVR0j BBgwFoAUbcxpUI705nDvvFxpID1rEg+pOS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjA3M2FjZS1hNjkxLTQ4NjMtOWMxYy01OWIyZGI5Y2I0NjMvMC82RENDNjk1MDhF RjRFNjcwRUZCQzVDNjkyMDNENkIxMjBGQTkzOTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRDQzY5NTA4RUY0RTY3MEVGQkM1QzY5MjAzRDZCMTIwRkE5 MzkyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIwNzNhY2UtYTY5MS00ODYzLTlj MWMtNTliMmRiOWNiNDYzLzAvNkRDQzY5NTA4RUY0RTY3MEVGQkM1QzY5MjAzRDZC MTIwRkE5MzkyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABiq64cX4+rf3yqe2z/2BFjlz3YM7AJn6LGA l3EJFt5dBGSMgnODjRICGQ2J91nFjjp3PX66ypPQ1adATO8jjKUIuN4QccPyORJt gKDgn+APZ1waRH+Jf6Z5ONkE02LkFztHZcOcB6G1oHjyMAu87FsYBd5zGYGrzkp4 bq1UzR3MlIuC5NOmj23yYCJhMYSyrnlSWghYgaP99y5M2NtP4krJ/hDU6/i1bgZ9 1Bqo33NlKykxyexRtJXVd9JZOPMK+9aMxdYadQdSVqJ1nFEh5o6hg5/kKOe0wlEh avqL5l+8AS1C4ynHTsrEenv1QfnwGyPaefnNrpUAVt0bHY5+Ve0= -----END CERTIFICATE-----Generated at Sat Aug 23 12:30:35 2025 by rpki-client