$ rpki-client -vvf repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft File: 6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft (raw, json) Hash identifier: GojHInPPOnSNcB6cos8m8l5OzR/vU9jlCO+85V6OIc4= Subject key identifier: 0B:6D:39:33:1B:10:C7:B5:8F:FC:93:9E:A0:F9:54:2E:D0:D2:F2:25 Authority key identifier: 6C:F6:DF:7E:65:16:A6:AB:F5:39:F0:39:6C:B6:C0:D4:DB:50:F4:D8 Certificate issuer: /CN=6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8 Certificate serial: 1CE318C68BCD27A2090D5B5B89468201BB843619 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft Manifest number: 01F7 Signing time: Fri 22 Aug 2025 02:21:52 +0000 Manifest this update: Fri 22 Aug 2025 02:16:52 +0000 Manifest next update: Mon 25 Aug 2025 11:44:52 +0000 Files and hashes: 1: 6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl (hash: Exa0zHwrw6rnDZLH1HA4hklsLXCtesHlr6FBvJsNyTE=) 2: 3130332e3139312e3134382e302f32332d3234203d3e2034383030.roa (hash: LB25lzl1k2b8wSXRCoswASZkgaqBVFdROFOv1MVYW7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:44:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:e3:18:c6:8b:cd:27:a2:09:0d:5b:5b:89:46:82:01:bb:84:36:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8 Validity Not Before: Aug 22 02:16:52 2025 GMT Not After : Aug 25 11:44:52 2025 GMT Subject: CN=0B6D39331B10C7B58FFC939EA0F9542ED0D2F225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c6:ca:42:18:d9:f8:92:32:0b:8a:42:d7:c4: 58:32:ae:e9:24:31:94:c9:b0:73:0c:97:94:8c:c5: 2a:df:29:1b:4c:4c:c5:b7:c6:75:08:fa:22:6c:56: 11:45:61:0a:8a:85:ca:60:68:6e:97:5e:5a:64:2d: 4d:62:bd:1c:18:7d:1c:9d:fa:94:60:b9:c2:d8:dd: f0:7b:0f:6d:1d:44:da:b8:5e:77:c4:5e:94:65:7e: 3f:4d:d2:82:e2:d7:12:73:0c:c9:f9:bb:2a:f3:15: 5a:50:9d:87:c2:2e:6a:ad:6a:7e:bd:37:7a:88:d8: 48:df:81:ab:bf:76:eb:a5:2c:44:f8:43:4c:a6:b7: 59:bf:03:7e:36:f2:64:d2:ea:40:bb:90:b4:db:e8: f1:a9:99:50:17:d4:9c:2f:8a:69:12:83:21:a9:84: b3:a2:09:90:1d:eb:dd:a6:9c:7a:bf:a9:54:72:bd: 42:b9:ec:9c:49:d8:78:55:6b:ae:2e:1f:92:4e:d6: 7b:b2:d3:0f:a7:ff:7c:0a:38:50:d6:75:2d:3b:63: cd:09:e6:3a:08:a7:f7:42:7c:4d:01:fa:ad:d9:50: 5b:81:55:48:ec:14:e8:34:53:8d:b5:b6:a1:4a:19: 46:33:0d:8b:cc:92:0c:3c:b2:4a:f4:6b:b8:84:21: 2f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:6D:39:33:1B:10:C7:B5:8F:FC:93:9E:A0:F9:54:2E:D0:D2:F2:25 X509v3 Authority Key Identifier: keyid:6C:F6:DF:7E:65:16:A6:AB:F5:39:F0:39:6C:B6:C0:D4:DB:50:F4:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:70:dd:c0:df:9c:ec:0e:b0:d2:9f:dc:14:2e:6b:30:11:1a: ab:84:e9:7e:79:f6:0e:a9:f8:c0:47:b3:b7:77:07:bc:23:99: 70:36:a7:f3:30:31:cf:59:8e:0f:b5:b8:db:8f:1a:d0:03:6a: 80:d1:86:c1:2a:eb:b3:b0:e6:98:d2:71:e2:ff:35:c4:12:8c: d5:f1:e5:2e:77:a9:62:d0:b9:b2:d9:60:f7:5a:25:c8:93:a7: 70:b7:95:95:d5:7b:78:45:5e:d1:e4:23:10:09:db:22:c0:6e: 8e:1d:8f:a2:a9:c7:bc:d2:b5:4b:ed:be:b1:e7:03:5c:be:47: d5:e2:5e:08:d4:b8:cc:87:19:f4:0c:22:7e:49:8f:1a:98:34: 93:a7:01:5e:bd:46:32:3f:b4:20:eb:d9:e1:1c:48:58:77:83: 56:9d:61:63:41:a5:e4:49:09:3f:62:48:b2:34:0f:b3:14:d4: da:43:73:c6:97:68:85:70:db:b3:df:01:e4:0d:a3:90:2b:a6: 7f:72:37:8f:4f:bf:65:c5:79:a5:03:c0:36:49:68:34:b5:31: 5a:98:ba:91:72:c1:4d:e1:12:df:a2:16:99:b1:14:68:db:59: 64:59:6b:ff:99:ea:39:ec:b8:5c:b3:c2:e3:ee:38:66:d3:c0: 62:45:b4:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHOMYxovNJ6IJDVtbiUaCAbuENhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMwRDRE QjUwRjREODAeFw0yNTA4MjIwMjE2NTJaFw0yNTA4MjUxMTQ0NTJaMDMxMTAvBgNV BAMTKDBCNkQzOTMzMUIxMEM3QjU4RkZDOTM5RUEwRjk1NDJFRDBEMkYyMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5xspCGNn4kjILikLXxFgyrukk MZTJsHMMl5SMxSrfKRtMTMW3xnUI+iJsVhFFYQqKhcpgaG6XXlpkLU1ivRwYfRyd +pRgucLY3fB7D20dRNq4XnfEXpRlfj9N0oLi1xJzDMn5uyrzFVpQnYfCLmqtan69 N3qI2Ejfgau/duulLET4Q0ymt1m/A3428mTS6kC7kLTb6PGpmVAX1JwvimkSgyGp hLOiCZAd692mnHq/qVRyvUK57JxJ2HhVa64uH5JO1nuy0w+n/3wKOFDWdS07Y80J 5joIp/dCfE0B+q3ZUFuBVUjsFOg0U421tqFKGUYzDYvMkgw8skr0a7iEIS9NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC205MxsQx7WP/JOeoPlULtDS8iUwHwYDVR0j BBgwFoAUbPbffmUWpqv1OfA5bLbA1NtQ9NgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDkwNmZjMC00MzYzLTRmNDYtOWIxNC01YzFhYjgyNWEzMzUvMC82Q0Y2REY3RTY1 MTZBNkFCRjUzOUYwMzk2Q0I2QzBENERCNTBGNEQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMwRDREQjUw RjREOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ5MDZmYzAtNDM2My00ZjQ2LTli MTQtNWMxYWI4MjVhMzM1LzAvNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMw RDREQjUwRjREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFw3cDfnOwOsNKf3BQuazARGquE6X559g6p +MBHs7d3B7wjmXA2p/MwMc9Zjg+1uNuPGtADaoDRhsEq67Ow5pjSceL/NcQSjNXx 5S53qWLQubLZYPdaJciTp3C3lZXVe3hFXtHkIxAJ2yLAbo4dj6Kpx7zStUvtvrHn A1y+R9XiXgjUuMyHGfQMIn5JjxqYNJOnAV69RjI/tCDr2eEcSFh3g1adYWNBpeRJ CT9iSLI0D7MU1NpDc8aXaIVw27PfAeQNo5Arpn9yN49Pv2XFeaUDwDZJaDS1MVqY upFywU3hEt+iFpmxFGjbWWRZa/+Z6jnsuFyzwuPuOGbTwGJFtLk= -----END CERTIFICATE-----Generated at Sat Aug 23 15:32:23 2025 by rpki-client