$ rpki-client -vvf repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft File: D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft (raw, json) Hash identifier: +gie6Vbd/DYDBt3AJU1ixZHlGW82qBEoDWaDgerr/Pw= Subject key identifier: 6B:2C:80:60:A3:6D:89:38:AF:68:1E:B4:94:84:9B:00:30:85:A2:E1 Authority key identifier: D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12 Certificate issuer: /CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312 Certificate serial: 53221663E4F3945ADE5D12544BF6D8AEAB7DA4B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft Manifest number: 01C6 Signing time: Thu 21 Aug 2025 10:11:09 +0000 Manifest this update: Thu 21 Aug 2025 10:06:09 +0000 Manifest next update: Sun 24 Aug 2025 21:26:09 +0000 Files and hashes: 1: 32372e3131322e37302e302f32342d3234203d3e203436303633.roa (hash: 52rz8OVXlsR9PhF7qpvjq+LgVmTdcv6Xc2HRbxBYnZs=) 2: 32372e3131322e37312e302f32342d3234203d3e203436303633.roa (hash: yO9dnKFN9zlpHOZzkZ8VS+2FhIP3vvVtlP91AUvmN9o=) 3: 32372e3131322e36372e302f32342d3234203d3e203436303633.roa (hash: urQF+d1uZLCb/Xxspk6boWaqVo9lHrklUsdPM9s+cao=) 4: D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl (hash: i4AvGdXmn6hUjxK+ExTCT4Fe4Yh3/1+4PAyqqDGPUBI=) 5: 32372e3131322e36362e302f32342d3234203d3e203436303633.roa (hash: F6GRhs4Ym7cQbHiZ1S3rtjfG9sguZ904TOjc50vTNgY=) 6: 32372e3131322e36342e302f32342d3234203d3e203436303633.roa (hash: dbIV4xMO/kmp5beqpQZbhg9DwG+mNr8YalPBQGlisqE=) 7: 32372e3131322e36382e302f32342d3234203d3e203436303633.roa (hash: IYrgvyCjCXmDttoq8fGjccS1fVVmTtZWCeE52GEwc2U=) 8: 32372e3131322e36392e302f32342d3234203d3e203436303633.roa (hash: K7v4mVMrOGRH9uwLIAKHJnQcmHP3SMpJcQP3rkEuNE0=) 9: 32372e3131322e36352e302f32342d3234203d3e203436303633.roa (hash: hLB0u4Pvac766uVNNHRQldQ+SI0MJNlYhxvuGaXeDIA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 21:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:22:16:63:e4:f3:94:5a:de:5d:12:54:4b:f6:d8:ae:ab:7d:a4:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312 Validity Not Before: Aug 21 10:06:09 2025 GMT Not After : Aug 24 21:26:09 2025 GMT Subject: CN=6B2C8060A36D8938AF681EB494849B003085A2E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:de:9c:e4:5f:f0:86:48:77:03:06:24:58:a9: 7e:06:86:63:fc:df:ae:d2:1e:f2:96:c8:a5:94:7b: 03:12:c7:d7:f7:43:ca:f3:7c:d8:35:25:14:e7:3e: 77:aa:b5:1f:9c:f1:ae:28:9a:9c:6c:96:49:85:16: 87:bd:eb:a5:45:c6:59:48:f3:48:41:e0:24:25:4f: 53:bb:86:c9:3b:de:2b:61:42:8b:28:66:00:fb:fb: 73:e5:d8:5b:59:0d:9c:92:b0:e5:3e:f0:37:2c:4a: ec:bf:19:f2:6e:e4:66:a4:84:50:ec:1c:49:89:f9: 9d:eb:31:51:05:3f:80:6b:5a:5c:a2:d4:7c:28:cd: 67:13:22:62:de:29:e1:09:be:1c:56:41:5f:a2:3e: 4a:b6:68:f1:20:2b:c7:7f:1c:fe:a9:75:93:04:0e: f4:6c:fd:d8:93:d2:47:d4:dc:66:0c:7b:74:c3:e3: 84:36:2f:1c:79:7c:9b:b8:cf:31:c5:7d:d7:f4:f2: 0f:a5:cb:56:27:66:ab:b8:cb:9e:64:1b:6b:05:8f: 09:d1:aa:b9:16:1e:d9:0a:46:58:88:8f:00:c7:d7: 69:94:ee:7f:5d:0f:28:e7:5c:8c:66:58:57:3e:15: 05:4a:b5:37:98:10:cd:10:12:25:c2:55:f1:2e:29: da:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2C:80:60:A3:6D:89:38:AF:68:1E:B4:94:84:9B:00:30:85:A2:E1 X509v3 Authority Key Identifier: keyid:D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:ab:5c:f6:8b:85:c2:c9:90:ab:f5:03:26:f9:ed:d3:df:b3: ff:de:b9:70:ba:47:53:49:34:3a:14:f4:ea:4c:d4:50:20:ea: 90:b1:be:b0:0f:6a:b2:6d:70:b1:01:9e:4c:27:77:ab:91:40: 92:d1:fb:0e:84:77:c5:d9:04:bb:4b:8e:06:68:a2:cc:4a:0f: cb:ca:a6:06:de:bc:36:ed:a4:e2:29:bb:4d:f0:9f:1f:ed:aa: 19:b0:b2:84:86:5c:07:87:eb:55:df:d5:da:3e:7c:9e:02:b5: bc:c5:d0:55:2b:b1:b1:87:4e:06:bf:7d:8e:e2:73:8f:c2:fb: 0d:89:8b:e9:9a:fc:f0:0e:69:f9:43:d3:a3:9b:8a:f5:84:23: a7:73:ca:73:1e:38:39:07:0f:3b:33:9c:df:ec:74:02:b3:74: 29:f7:f0:97:f9:4e:bf:6d:bd:56:e7:8f:28:6d:cd:bd:e8:b2: f0:88:08:16:52:0a:9f:b7:32:f1:66:81:7c:80:94:ab:16:6e: 42:4c:45:c7:2b:43:a4:18:57:81:2b:30:89:68:a5:cb:eb:61: be:eb:13:e5:26:16:4f:07:fd:5e:43:d1:3a:bd:14:bb:48:78: d8:47:1a:56:2c:0d:93:0b:3e:a1:76:a2:2e:ce:6e:87:95:25: 3f:d8:58:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUyIWY+TzlFreXRJUS/bYrqt9pLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJBNkFCQ0ExRUY4OTcyNTEwOUNCRUE1RDQyRTY4M0M5 NTkyNTMxMjAeFw0yNTA4MjExMDA2MDlaFw0yNTA4MjQyMTI2MDlaMDMxMTAvBgNV BAMTKDZCMkM4MDYwQTM2RDg5MzhBRjY4MUVCNDk0ODQ5QjAwMzA4NUEyRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl3pzkX/CGSHcDBiRYqX4GhmP8 367SHvKWyKWUewMSx9f3Q8rzfNg1JRTnPneqtR+c8a4ompxslkmFFoe966VFxllI 80hB4CQlT1O7hsk73ithQosoZgD7+3Pl2FtZDZySsOU+8DcsSuy/GfJu5GakhFDs HEmJ+Z3rMVEFP4BrWlyi1HwozWcTImLeKeEJvhxWQV+iPkq2aPEgK8d/HP6pdZME DvRs/diT0kfU3GYMe3TD44Q2Lxx5fJu4zzHFfdf08g+ly1YnZqu4y55kG2sFjwnR qrkWHtkKRliIjwDH12mU7n9dDyjnXIxmWFc+FQVKtTeYEM0QEiXCVfEuKdrbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUayyAYKNtiTivaB60lISbADCFouEwHwYDVR0j BBgwFoAU0qaryh74lyUQnL6l1C5oPJWSUxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWQxZTE2YS0wYTRkLTQ0YjEtOTg0NS05YzBjZDdhNmYzOGYvMC9EMkE2QUJDQTFF Rjg5NzI1MTA5Q0JFQTVENDJFNjgzQzk1OTI1MzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJBNkFCQ0ExRUY4OTcyNTEwOUNCRUE1RDQyRTY4M0M5NTky NTMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFkMWUxNmEtMGE0ZC00NGIxLTk4 NDUtOWMwY2Q3YTZmMzhmLzAvRDJBNkFCQ0ExRUY4OTcyNTEwOUNCRUE1RDQyRTY4 M0M5NTkyNTMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABirXPaLhcLJkKv1Ayb57dPfs//euXC6R1NJ NDoU9OpM1FAg6pCxvrAParJtcLEBnkwnd6uRQJLR+w6Ed8XZBLtLjgZoosxKD8vK pgbevDbtpOIpu03wnx/tqhmwsoSGXAeH61Xf1do+fJ4CtbzF0FUrsbGHTga/fY7i c4/C+w2Ji+ma/PAOaflD06ObivWEI6dzynMeODkHDzsznN/sdAKzdCn38Jf5Tr9t vVbnjyhtzb3osvCICBZSCp+3MvFmgXyAlKsWbkJMRccrQ6QYV4ErMIlopcvrYb7r E+UmFk8H/V5D0Tq9FLtIeNhHGlYsDZMLPqF2oi7OboeVJT/YWFY= -----END CERTIFICATE-----Generated at Sat Aug 23 10:21:57 2025 by rpki-client