$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft File: 6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft (raw, json) Hash identifier: 9wOQkuzHnT7SkKRWDIvSZaSicMZG2xrnV0yVceWquSs= Subject key identifier: 24:58:93:85:B2:55:22:38:7F:B1:E8:59:4F:7F:E2:C0:75:33:9B:BA Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Certificate serial: 5048B86D9DA3A6A0FF1C81BADE9AB51AF714E591 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft Manifest number: 05A4 Signing time: Thu 21 Aug 2025 20:01:37 +0000 Manifest this update: Thu 21 Aug 2025 19:56:37 +0000 Manifest next update: Mon 25 Aug 2025 07:40:37 +0000 Files and hashes: 1: AS140421.roa (hash: RfoESpxBfC9xRwHZO2fU/8RUGYVevfom5f/XSg00ECU=) 2: AS38768.roa (hash: 1MWEV5tgHs2Zer2TXzzjNIdBv6VOof5lbDzM+kS3Zcs=) 3: AS137346.roa (hash: PdCcl7m4oX+SJS93oiHUxTuOW/ltjw+gLpTGiEDO7T8=) 4: 6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl (hash: 6P6NnPx/6dYcomJhAlr0YE5wFCo5tda3vfRKo5fD+qY=) 5: AS24520.roa (hash: /X2OowKvSum0rz+umcdT3kPQkSHfCFlWzy8KzFiLuzk=) 6: AS138885.roa (hash: /n3QwdVfZD0QCe9dNF/CT2sxuwEtNa1/FhrwvyPZKsA=) 7: AS135457.roa (hash: Laio/RIOlqnhOFofbIiXLzFmTpeQDF+7GIIdTet4ZB8=) 8: AS38496.roa (hash: hnS3ZSoX0phLGwoHdG0C5h9+644LISrLfUDeK/ON/To=) 9: AS38755.roa (hash: js+OcGH/znL82r1Bq/i751nV9v0ky8Qg2sTbyo8OyDQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 07:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:48:b8:6d:9d:a3:a6:a0:ff:1c:81:ba:de:9a:b5:1a:f7:14:e5:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Validity Not Before: Aug 21 19:56:37 2025 GMT Not After : Aug 25 07:40:37 2025 GMT Subject: CN=24589385B25522387FB1E8594F7FE2C075339BBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c6:6f:b5:eb:af:f1:5d:8f:e8:1a:cc:ad:e8: 37:e7:4d:d4:01:17:90:92:e5:60:74:8c:77:c8:f5: 41:62:5b:b3:f1:c8:1c:93:98:7d:41:c7:32:1d:f5: 51:6a:4c:3d:ab:a5:c2:f8:bd:4a:7b:ed:d9:f8:c7: 74:4d:55:fe:f1:4c:26:2e:b5:14:4e:83:c3:9b:a5: e0:80:ae:34:70:ec:08:f8:b3:0f:4f:a7:6f:c1:f6: b6:38:0c:a7:54:08:e3:f5:ad:39:6a:fc:9b:f3:ec: 33:da:ec:a9:1a:b2:ec:42:2d:73:23:d3:a0:17:92: af:45:a9:c0:5c:a9:07:ce:18:33:bb:4a:b6:28:4f: 27:f5:77:b0:66:15:fc:8e:6d:59:88:33:90:6c:15: c7:7b:67:1c:61:d8:8f:16:f7:5e:de:39:89:8e:6c: 2a:4c:75:bf:0d:3d:0e:36:a6:bc:4b:f3:24:bb:ae: 40:4d:b3:65:f8:ce:a3:ec:3e:65:c7:92:a5:02:b0: 41:89:6c:d4:16:99:ef:02:3d:5e:bf:23:4e:38:33: e9:17:8d:9d:bd:1c:21:6a:5c:83:c2:0a:22:b5:b5: 90:03:1d:46:4e:b5:45:74:6f:8e:b1:89:26:c7:95: 86:d6:90:18:2a:90:4b:d6:1a:e9:a6:62:ca:59:7e: 4d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:58:93:85:B2:55:22:38:7F:B1:E8:59:4F:7F:E2:C0:75:33:9B:BA X509v3 Authority Key Identifier: keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:29:2e:9e:d7:78:f6:ca:7a:ac:64:cc:6f:f5:00:3f:40:a0: 4f:c5:b5:69:3f:dd:a6:f9:fe:c3:c1:e5:e4:96:22:cb:db:8c: f8:a1:1e:f8:f7:ba:bd:0d:c2:3c:5e:ec:a1:6a:8a:4e:8d:fa: fe:9a:5a:19:47:a1:73:df:2a:fc:07:07:e4:23:e0:83:0f:d9: 6f:54:f4:5d:b1:23:6f:d0:d5:d9:9c:1a:f1:ec:c8:5a:db:08: 88:64:9c:ff:e7:ce:72:2e:cc:45:da:ef:3c:25:76:37:62:4f: f9:89:2b:e1:43:3d:b0:64:89:59:22:e0:ae:7e:08:f1:c1:63: 2c:95:6d:50:4e:e2:08:f5:05:b8:da:60:24:28:48:30:2a:18: 04:41:81:4d:d6:05:8a:08:c9:f1:c1:2d:6a:01:10:3d:8e:4b: 00:7d:c8:52:66:3f:15:03:90:92:ef:29:56:c8:1a:7d:4a:84: 9a:b5:db:dc:ef:d3:7c:41:ac:7d:26:37:9c:3b:31:22:2d:d2: 1c:32:bb:65:25:19:9a:3c:a2:a7:8e:53:13:fd:61:d0:93:c5: 07:34:57:1b:37:bb:ca:05:43:da:5a:13:07:18:c8:7c:d6:8e: 3a:69:2f:c4:18:1e:bc:72:84:65:4d:bc:dd:5f:0c:73:8a:04: e3:61:9e:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUEi4bZ2jpqD/HIG63pq1GvcU5ZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG OEZDMDZFQzAeFw0yNTA4MjExOTU2MzdaFw0yNTA4MjUwNzQwMzdaMDMxMTAvBgNV BAMTKDI0NTg5Mzg1QjI1NTIyMzg3RkIxRTg1OTRGN0ZFMkMwNzUzMzlCQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNxm+166/xXY/oGsyt6DfnTdQB F5CS5WB0jHfI9UFiW7PxyByTmH1BxzId9VFqTD2rpcL4vUp77dn4x3RNVf7xTCYu tRROg8ObpeCArjRw7Aj4sw9Pp2/B9rY4DKdUCOP1rTlq/Jvz7DPa7KkasuxCLXMj 06AXkq9FqcBcqQfOGDO7SrYoTyf1d7BmFfyObVmIM5BsFcd7Zxxh2I8W917eOYmO bCpMdb8NPQ42prxL8yS7rkBNs2X4zqPsPmXHkqUCsEGJbNQWme8CPV6/I044M+kX jZ29HCFqXIPCCiK1tZADHUZOtUV0b46xiSbHlYbWkBgqkEvWGummYspZfk1FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJFiThbJVIjh/sehZT3/iwHUzm7owHwYDVR0j BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2 QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD MDZFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTg3MzQ5ZmItNDY1ZS00ZThiLWE5 NzQtOTBlOTM5YmNiMGZiLzAvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZE NTFGOEZDMDZFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUpLp7XePbKeqxkzG/1AD9AoE/FtWk/3ab5 /sPB5eSWIsvbjPihHvj3ur0Nwjxe7KFqik6N+v6aWhlHoXPfKvwHB+Qj4IMP2W9U 9F2xI2/Q1dmcGvHsyFrbCIhknP/nznIuzEXa7zwldjdiT/mJK+FDPbBkiVki4K5+ CPHBYyyVbVBO4gj1BbjaYCQoSDAqGARBgU3WBYoIyfHBLWoBED2OSwB9yFJmPxUD kJLvKVbIGn1KhJq129zv03xBrH0mN5w7MSIt0hwyu2UlGZo8oqeOUxP9YdCTxQc0 Vxs3u8oFQ9paEwcYyHzWjjppL8QYHrxyhGVNvN1fDHOKBONhnqQ= -----END CERTIFICATE-----Generated at Sat Aug 23 10:12:47 2025 by rpki-client