$ rpki-client -vvf repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft File: 6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft (raw, json) Hash identifier: h7nbeJRyNguDPDrE2vrVEwUlH/EXZvpxdTBFU4dfi5c= Subject key identifier: 13:A0:7C:1D:B6:85:EA:D8:C9:42:3E:95:EF:2E:C5:A0:57:98:43:8A Authority key identifier: 6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 Certificate issuer: /CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Certificate serial: 3ACB6B78E160CF67D49ED169FB827CFF70AFDAB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft Manifest number: 0346 Signing time: Sun 20 Jul 2025 01:01:29 +0000 Manifest this update: Sun 20 Jul 2025 00:56:29 +0000 Manifest next update: Wed 23 Jul 2025 01:40:29 +0000 Files and hashes: 1: 6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl (hash: cXLWQyxlk52kojIekCUsfzoVtrzHNudphBGwqCEwqCM=) 2: 3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa (hash: G1U9gODI47ty2yrLIvmBDS+xG1WkgDbqidFt5qR0lew=) 3: 3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa (hash: lkrHej4FZPJ4f2E40DosArf8hhkwpkjiPyYFXEzD3uU=) 4: 3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa (hash: QReThr3L/8y8L/3AEdob8H7epOdOKEjss3T3HzyvfMI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 01:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:cb:6b:78:e1:60:cf:67:d4:9e:d1:69:fb:82:7c:ff:70:af:da:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Validity Not Before: Jul 20 00:56:29 2025 GMT Not After : Jul 23 01:40:29 2025 GMT Subject: CN=13A07C1DB685EAD8C9423E95EF2EC5A05798438A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ef:ed:6c:ff:0f:96:b6:de:82:6f:84:33:43: 7d:db:f6:2a:99:2e:73:ff:bb:6b:5d:01:3b:f8:c6: 5c:6c:a8:ef:76:17:a0:bd:ba:ac:ce:1c:dd:d7:e4: ad:dc:a7:08:85:86:3d:59:9c:d6:06:96:78:0d:cd: c4:95:01:9b:d8:0d:d2:fc:95:26:4a:ae:d0:b5:2c: 78:b7:ab:a9:8d:d5:19:bd:0a:96:25:fe:56:ba:4e: 23:16:0a:3e:79:04:38:52:f4:7a:31:6f:3d:ce:57: bd:1e:63:4b:68:7e:b8:d5:0a:79:5c:d6:e2:1a:20: 8a:65:76:ae:f9:c5:d8:5d:b5:8f:fc:8e:b5:84:99: 21:1c:af:5f:9e:42:b0:f5:bb:5d:3c:30:69:0f:64: 17:42:d2:4d:8e:a9:62:ce:35:fa:81:4e:62:62:6c: c1:f0:69:b1:f2:0a:74:b7:86:3c:56:e5:a9:0d:01: 52:f2:eb:8b:e1:40:54:b5:9a:94:81:b7:08:bf:9e: fa:0d:f7:b2:89:de:60:d4:70:d8:9b:59:29:d9:fc: 3b:68:9f:92:29:12:32:c4:e4:f5:27:1c:f9:43:f6: 17:04:51:35:70:ee:0b:41:08:e9:47:a2:b6:27:ba: 41:2b:4c:3e:c0:30:80:82:a9:e5:9c:20:91:02:db: 65:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A0:7C:1D:B6:85:EA:D8:C9:42:3E:95:EF:2E:C5:A0:57:98:43:8A X509v3 Authority Key Identifier: keyid:6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b2:66:d8:56:9f:e1:e4:b8:0f:ab:29:52:63:af:8d:df:fb: e7:16:94:62:cc:9e:f2:fc:92:25:24:fb:40:d6:a3:a4:03:d6: 16:f7:83:ed:61:b7:04:52:08:64:80:35:87:89:11:b4:1f:e7: e8:89:e1:6e:94:7a:d3:c6:46:7e:8d:6f:48:b1:d1:1b:42:6a: 39:f7:b3:01:6d:9c:e0:99:3a:5e:f0:5e:07:af:cd:3d:c6:f8: bb:00:11:ff:dd:bf:29:20:7b:a1:ec:0b:95:e2:34:8b:18:9e: 48:86:e3:50:01:ac:72:7f:65:cb:62:66:e1:9f:1d:ef:2e:a6: 4d:e0:b3:e2:7f:0b:dc:6b:f1:e1:0f:ae:f4:35:37:78:ec:75: cd:24:bb:96:2f:40:67:86:c0:b5:d7:d1:7b:47:4f:61:35:98: 02:d3:24:39:6e:49:ef:4a:92:9d:12:c8:a6:23:5d:9e:44:9f: 7d:e4:f2:8a:3a:a4:f0:59:f6:62:d7:07:3f:dd:5a:6a:6a:15: 51:72:8c:7d:ed:ce:15:2f:71:82:53:22:12:49:f4:8e:f7:0e: e6:26:2b:01:d8:1b:0b:db:79:6f:ec:64:1d:55:77:e0:a9:d1: e5:5c:90:76:81:8e:f5:3c:ea:87:6a:55:18:67:39:d2:0e:68: 81:a6:28:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOstreOFgz2fUntFp+4J8/3Cv2rEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlD MEYyRTNGNzAeFw0yNTA3MjAwMDU2MjlaFw0yNTA3MjMwMTQwMjlaMDMxMTAvBgNV BAMTKDEzQTA3QzFEQjY4NUVBRDhDOTQyM0U5NUVGMkVDNUEwNTc5ODQzOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL7+1s/w+Wtt6Cb4QzQ33b9iqZ LnP/u2tdATv4xlxsqO92F6C9uqzOHN3X5K3cpwiFhj1ZnNYGlngNzcSVAZvYDdL8 lSZKrtC1LHi3q6mN1Rm9CpYl/la6TiMWCj55BDhS9Hoxbz3OV70eY0tofrjVCnlc 1uIaIIpldq75xdhdtY/8jrWEmSEcr1+eQrD1u108MGkPZBdC0k2OqWLONfqBTmJi bMHwabHyCnS3hjxW5akNAVLy64vhQFS1mpSBtwi/nvoN97KJ3mDUcNibWSnZ/Dto n5IpEjLE5PUnHPlD9hcEUTVw7gtBCOlHorYnukErTD7AMICCqeWcIJEC22VRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE6B8HbaF6tjJQj6V7y7FoFeYQ4owHwYDVR0j BBgwFoAUagLcEPQfzg60l5jdvPMfycDy4/cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTQ2YmRhZC1mMTMwLTQ4YTktODUzNC01NGJhM2U4ZWQ2MWYvMC82QTAyREMxMEY0 MUZDRTBFQjQ5Nzk4RERCQ0YzMUZDOUMwRjJFM0Y3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlDMEYy RTNGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE0NmJkYWQtZjEzMC00OGE5LTg1 MzQtNTRiYTNlOGVkNjFmLzAvNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFG QzlDMEYyRTNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuyZthWn+HkuA+rKVJjr43f++cWlGLMnvL8 kiUk+0DWo6QD1hb3g+1htwRSCGSANYeJEbQf5+iJ4W6UetPGRn6Nb0ix0RtCajn3 swFtnOCZOl7wXgevzT3G+LsAEf/dvykge6HsC5XiNIsYnkiG41ABrHJ/ZctiZuGf He8upk3gs+J/C9xr8eEPrvQ1N3jsdc0ku5YvQGeGwLXX0XtHT2E1mALTJDluSe9K kp0SyKYjXZ5En33k8oo6pPBZ9mLXBz/dWmpqFVFyjH3tzhUvcYJTIhJJ9I73DuYm KwHYGwvbeW/sZB1Vd+Cp0eVckHaBjvU86odqVRhnOdIOaIGmKIY= -----END CERTIFICATE-----Generated at Mon Jul 21 08:55:06 2025 by rpki-client