$ rpki-client -vvf repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft File: 6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft (raw, json) Hash identifier: U53GtgSRYhqGVRSWgGtA7QJsrplFjksN1nNcW1DUUmM= Subject key identifier: FA:3A:01:E4:4F:24:BA:FC:A2:A5:FB:FD:CA:3F:6E:8C:8E:E3:A2:ED Authority key identifier: 6F:EA:E1:20:D8:CD:63:D6:82:4D:82:61:F7:B0:98:63:1E:F4:12:E0 Certificate issuer: /CN=6FEAE120D8CD63D6824D8261F7B098631EF412E0 Certificate serial: 324523AD3824A2D7E94E854ABED4822F8751E3F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft Manifest number: 0391 Signing time: Tue 22 Jul 2025 12:11:23 +0000 Manifest this update: Tue 22 Jul 2025 12:06:23 +0000 Manifest next update: Fri 25 Jul 2025 17:52:23 +0000 Files and hashes: 1: 3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa (hash: GVGKM4eV+MMT2LsZ6I2vKHLbSn/15kKEM082mCeNaT8=) 2: 6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl (hash: HKV+hsYfvlNxaTgvZchJZnbO7AJx0cdnQiWtdwWVKyg=) 3: 3130332e3136332e3130322e302f32342d3234203d3e20313431363733.roa (hash: HBCSlYe9SztvZ5iSEatkCght6QFzU9643YFr0LJkHe0=) 4: 3130332e3136332e3130332e302f32342d3234203d3e20313431363733.roa (hash: nbSzLxkTgg1Fhd955VZ38kl51XuK78f19xIlXEphedE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:52:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:45:23:ad:38:24:a2:d7:e9:4e:85:4a:be:d4:82:2f:87:51:e3:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FEAE120D8CD63D6824D8261F7B098631EF412E0 Validity Not Before: Jul 22 12:06:23 2025 GMT Not After : Jul 25 17:52:23 2025 GMT Subject: CN=FA3A01E44F24BAFCA2A5FBFDCA3F6E8C8EE3A2ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f6:b2:86:b7:55:d1:dd:23:0f:84:9e:26:07: 30:fa:12:6d:40:a7:fe:86:e6:d4:82:05:36:13:e8: f4:43:51:e1:95:1b:6b:da:76:56:82:ad:59:ee:f9: 27:aa:46:87:eb:37:27:f2:6f:88:bd:17:47:62:45: 59:d6:60:fc:f1:f9:7f:f8:51:db:77:c4:c5:0e:31: 1d:7e:22:d3:18:a8:2e:29:17:38:d7:d3:df:dc:60: 73:6d:bb:6a:11:ec:23:fa:4e:34:43:35:1f:82:fe: d7:11:d8:cc:57:20:78:67:db:36:34:a1:76:c9:19: d0:a2:4e:d3:c1:47:29:0c:25:e8:8d:31:75:ee:55: 55:96:87:97:e4:29:16:fd:a4:45:1c:c7:71:4a:ff: 52:bb:dc:6c:b3:83:38:29:1e:3c:67:d1:f7:c8:9c: 84:90:71:f8:69:ad:a9:04:49:12:70:54:a9:e2:b5: 5b:66:e5:d3:42:a3:27:42:22:57:e4:92:b6:c9:01: cd:99:d3:5f:2b:b6:fd:42:05:81:2a:af:fa:46:a3: d0:dd:75:eb:b4:7b:95:bd:2c:66:1b:61:d6:bf:bf: b9:a9:75:ef:19:be:ff:94:0b:1e:08:a0:e5:85:76: 45:a3:ad:97:42:73:71:24:eb:fe:a3:09:dc:2a:ad: fa:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3A:01:E4:4F:24:BA:FC:A2:A5:FB:FD:CA:3F:6E:8C:8E:E3:A2:ED X509v3 Authority Key Identifier: keyid:6F:EA:E1:20:D8:CD:63:D6:82:4D:82:61:F7:B0:98:63:1E:F4:12:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:3a:af:af:a4:99:d5:bd:44:d1:9c:5a:ed:fc:e3:6d:f3:3b: 8c:0d:c9:4a:e1:f1:aa:f8:11:88:5b:7b:14:5f:db:94:0a:29: 6f:e5:54:f9:81:e4:a6:bf:ac:22:44:0c:de:45:5d:59:ca:f6: 0e:f0:d4:11:22:75:b7:21:ba:85:fb:2e:d3:30:19:5b:04:66: 37:7f:da:d3:d3:2a:ce:20:bc:61:cf:a8:df:16:ed:66:c1:01: 38:ef:e2:83:f5:6b:22:fa:17:25:16:40:53:6b:4f:5d:8a:a5: a9:79:36:12:db:63:04:c6:0a:b5:68:cc:26:df:7e:49:b5:b0: 60:f7:88:87:06:53:d3:9f:63:91:2b:6e:03:f1:23:3c:35:00: 9a:52:1c:95:09:df:ae:82:51:c6:71:a9:80:38:5b:02:fa:94: 81:85:96:27:27:87:55:94:39:79:f1:de:ad:63:b3:61:5a:a8: aa:48:27:df:f8:2f:e1:09:cc:a0:87:f9:e3:7e:25:a9:fd:08: 9c:89:1b:f0:f0:85:85:1f:db:5f:12:d9:b5:47:7d:c7:d9:74: e3:ab:5f:64:36:db:7d:2d:49:e2:4e:90:1f:01:55:6c:04:0a: 08:52:69:e1:d0:42:21:67:dc:89:29:cf:bb:4c:53:54:83:e3: 8a:09:45:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMkUjrTgkotfpToVKvtSCL4dR4/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4NjMx RUY0MTJFMDAeFw0yNTA3MjIxMjA2MjNaFw0yNTA3MjUxNzUyMjNaMDMxMTAvBgNV BAMTKEZBM0EwMUU0NEYyNEJBRkNBMkE1RkJGRENBM0Y2RThDOEVFM0EyRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr9rKGt1XR3SMPhJ4mBzD6Em1A p/6G5tSCBTYT6PRDUeGVG2vadlaCrVnu+SeqRofrNyfyb4i9F0diRVnWYPzx+X/4 Udt3xMUOMR1+ItMYqC4pFzjX09/cYHNtu2oR7CP6TjRDNR+C/tcR2MxXIHhn2zY0 oXbJGdCiTtPBRykMJeiNMXXuVVWWh5fkKRb9pEUcx3FK/1K73GyzgzgpHjxn0ffI nISQcfhprakESRJwVKnitVtm5dNCoydCIlfkkrbJAc2Z018rtv1CBYEqr/pGo9Dd deu0e5W9LGYbYda/v7mpde8Zvv+UCx4IoOWFdkWjrZdCc3Ek6/6jCdwqrfoFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+joB5E8kuvyipfv9yj9ujI7jou0wHwYDVR0j BBgwFoAUb+rhINjNY9aCTYJh97CYYx70EuAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzFlNDlhYi01MGNhLTRiM2UtODIzYy04YjNkMzFiYTg1ZjIvMC82RkVBRTEyMEQ4 Q0Q2M0Q2ODI0RDgyNjFGN0IwOTg2MzFFRjQxMkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4NjMxRUY0 MTJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGMxZTQ5YWItNTBjYS00YjNlLTgy M2MtOGIzZDMxYmE4NWYyLzAvNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4 NjMxRUY0MTJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACA6r6+kmdW9RNGcWu38423zO4wNyUrh8ar4 EYhbexRf25QKKW/lVPmB5Ka/rCJEDN5FXVnK9g7w1BEidbchuoX7LtMwGVsEZjd/ 2tPTKs4gvGHPqN8W7WbBATjv4oP1ayL6FyUWQFNrT12Kpal5NhLbYwTGCrVozCbf fkm1sGD3iIcGU9OfY5ErbgPxIzw1AJpSHJUJ366CUcZxqYA4WwL6lIGFlicnh1WU OXnx3q1js2FaqKpIJ9/4L+EJzKCH+eN+Jan9CJyJG/DwhYUf218S2bVHfcfZdOOr X2Q2230tSeJOkB8BVWwECghSaeHQQiFn3Ikpz7tMU1SD44oJRcY= -----END CERTIFICATE-----Generated at Wed Jul 23 02:15:50 2025 by rpki-client