$ rpki-client -vvf repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft File: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft (raw, json) Hash identifier: 7Qg4SbR3jilaxsdCINXp/8+3N6nsN8Xnw7PiBylKJ3I= Subject key identifier: A3:31:D9:52:70:EF:35:A1:70:53:5C:34:AB:DF:65:FB:08:97:B6:41 Authority key identifier: 6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA Certificate issuer: /CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Certificate serial: 23EF06C79B6DFD11B915FCEA513B7BCC32741502 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft Manifest number: 01F2 Signing time: Sun 20 Jul 2025 01:40:02 +0000 Manifest this update: Sun 20 Jul 2025 01:35:02 +0000 Manifest next update: Wed 23 Jul 2025 05:27:02 +0000 Files and hashes: 1: 3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa (hash: jcYNuwq5tBbtUM+5LFf+gih2lHYu/silWmdWErgVy5M=) 2: 3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa (hash: XLXbrSM75a4OOhdIFSVSWGya3QA7TZER3P7tGhI+wW0=) 3: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl (hash: rLxZMZA7variW4Fk/VyLSoI/puvozR2FLBQ7oCr5JBk=) 4: 3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa (hash: R1C6O4ul1Ppozfaiesg+Uhn8MwDAOfzdAmq+sSEet2w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 05:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ef:06:c7:9b:6d:fd:11:b9:15:fc:ea:51:3b:7b:cc:32:74:15:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Validity Not Before: Jul 20 01:35:02 2025 GMT Not After : Jul 23 05:27:02 2025 GMT Subject: CN=A331D95270EF35A170535C34ABDF65FB0897B641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:33:46:a4:82:eb:ae:00:f9:5f:c2:c2:cd:46: 24:4a:f0:85:44:11:75:cf:bb:08:a6:e9:10:c6:e9: 49:b9:93:bf:56:86:ff:ef:99:5b:10:29:1f:3e:c9: e8:f6:18:f2:d6:71:ff:8f:b5:45:15:9f:9e:f0:7e: 5e:71:93:29:51:d5:58:ab:77:ec:57:e1:f1:a8:3b: a3:2f:90:f0:22:8d:0a:6c:63:97:75:43:61:ef:c8: c3:41:10:34:2e:be:ae:57:af:13:a4:d0:39:6e:1b: b5:92:0c:5f:47:47:10:55:e2:0c:3f:b4:13:d5:92: 69:c8:0d:88:4b:ac:88:18:c8:00:37:44:69:f3:bf: c7:e7:56:87:d0:e5:21:6b:49:f5:1a:02:9f:c3:3d: 30:be:34:fe:42:5d:c1:63:28:fb:95:f7:3f:0b:17: ea:a6:ff:b7:40:89:8b:2d:be:53:b5:09:61:b4:dd: 33:53:af:58:e7:a2:36:a7:d5:ac:16:16:66:05:d1: 65:75:6f:99:f4:4f:6b:0f:7c:c1:41:e7:de:98:6b: 35:1e:58:40:92:65:bb:f2:e7:44:43:14:5b:f1:bd: 35:97:41:0a:02:9b:f4:f7:06:9b:39:db:dc:2d:05: 4e:7d:df:f4:78:19:7c:e5:5d:e7:38:8e:2c:72:00: 2d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:31:D9:52:70:EF:35:A1:70:53:5C:34:AB:DF:65:FB:08:97:B6:41 X509v3 Authority Key Identifier: keyid:6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:6d:8e:75:34:88:1e:d9:c1:6a:c0:2f:1f:ee:22:10:9f:1b: 14:21:07:cb:60:40:e2:c0:47:af:36:2d:ed:a1:4a:79:ea:bb: 31:06:56:65:af:e2:96:07:c5:7e:b8:ff:0d:bc:12:c0:9e:ff: ff:dd:53:fd:34:6a:45:3d:94:c4:9a:2e:3b:70:4f:20:a6:86: 45:8a:e5:9b:b8:53:3d:b5:da:bf:6e:ce:f0:b6:8b:ae:d3:b1: 0f:a5:dd:76:25:51:76:4d:ae:f1:02:23:cc:07:07:bb:8f:e8: 64:9b:57:ab:16:e5:aa:d3:7f:b9:c9:71:cb:11:ad:06:06:42: f9:75:85:bf:e2:6e:a0:aa:b2:c6:b6:ad:4c:ee:cf:87:41:2a: 08:1a:8c:d1:be:e4:98:56:e9:e0:0c:05:c2:d7:7d:22:32:8f: 6f:06:60:7f:89:c6:63:c6:00:38:b0:74:b6:ef:eb:a2:ef:32: 47:9e:f1:bd:5e:85:79:59:62:11:a8:84:1d:3d:63:d7:cb:e6: b0:6f:a9:b8:54:72:fe:b5:2a:21:64:d7:c6:87:73:68:0d:1c: 17:85:22:c5:a9:f6:2b:db:9c:d3:67:d4:f1:63:f8:74:ff:7a: 4f:92:e6:fa:e3:4d:89:db:c6:9d:16:9e:9f:65:81:4e:4c:5e: 4c:6c:7b:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI+8Gx5tt/RG5FfzqUTt7zDJ0FQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMx REIwOEZEQTAeFw0yNTA3MjAwMTM1MDJaFw0yNTA3MjMwNTI3MDJaMDMxMTAvBgNV BAMTKEEzMzFEOTUyNzBFRjM1QTE3MDUzNUMzNEFCREY2NUZCMDg5N0I2NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzM0akguuuAPlfwsLNRiRK8IVE EXXPuwim6RDG6Um5k79Whv/vmVsQKR8+yej2GPLWcf+PtUUVn57wfl5xkylR1Vir d+xX4fGoO6MvkPAijQpsY5d1Q2HvyMNBEDQuvq5XrxOk0DluG7WSDF9HRxBV4gw/ tBPVkmnIDYhLrIgYyAA3RGnzv8fnVofQ5SFrSfUaAp/DPTC+NP5CXcFjKPuV9z8L F+qm/7dAiYstvlO1CWG03TNTr1jnojan1awWFmYF0WV1b5n0T2sPfMFB596YazUe WECSZbvy50RDFFvxvTWXQQoCm/T3Bps529wtBU593/R4GXzlXec4jixyAC1fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUozHZUnDvNaFwU1w0q99l+wiXtkEwHwYDVR0j BBgwFoAUb8DJM0D/c1k0NMjv/O2Osx2wj9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjY1OTkwNC0zNzAyLTQ3OTctYmQxYi00NDdhYjhjOTRlMGMvMC82RkMwQzkzMzQw RkY3MzU5MzQzNEM4RUZGQ0VEOEVCMzFEQjA4RkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMxREIw OEZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY2NTk5MDQtMzcwMi00Nzk3LWJk MWItNDQ3YWI4Yzk0ZTBjLzAvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhF QjMxREIwOEZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJtjnU0iB7ZwWrALx/uIhCfGxQhB8tgQOLA R682Le2hSnnquzEGVmWv4pYHxX64/w28EsCe///dU/00akU9lMSaLjtwTyCmhkWK 5Zu4Uz212r9uzvC2i67TsQ+l3XYlUXZNrvECI8wHB7uP6GSbV6sW5arTf7nJccsR rQYGQvl1hb/ibqCqssa2rUzuz4dBKggajNG+5JhW6eAMBcLXfSIyj28GYH+JxmPG ADiwdLbv66LvMkee8b1ehXlZYhGohB09Y9fL5rBvqbhUcv61KiFk18aHc2gNHBeF IsWp9ivbnNNn1PFj+HT/ek+S5vrjTYnbxp0Wnp9lgU5MXkxsez8= -----END CERTIFICATE-----Generated at Mon Jul 21 06:48:24 2025 by rpki-client