$ rpki-client -vvf repo-rpki.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.mft File: 6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.mft (raw, json) Hash identifier: u6iFiXvZHAAKfA8EcLfS48WnKgaekg9mNhMre+gWNKI= Subject key identifier: 32:F8:18:B9:B5:B5:27:70:DF:54:02:BD:F1:86:8A:5F:E2:5D:4B:C1 Authority key identifier: 67:75:D0:05:3C:ED:1C:5F:FF:BB:3D:5E:F0:FD:EC:48:05:2F:23:3E Certificate issuer: /CN=6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E Certificate serial: 44083B986079DDFE3CF9FF89FB76B4F019BFD94C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.mft Manifest number: 036E Signing time: Tue 22 Jul 2025 00:01:33 +0000 Manifest this update: Mon 21 Jul 2025 23:56:33 +0000 Manifest next update: Fri 25 Jul 2025 07:01:33 +0000 Files and hashes: 1: 3130332e3136372e32322e302f32332d3234203d3e203137393935.roa (hash: FyrexX/jhtYGwL3nRNrIPwKqkGnYG70zKQsrYMLW9zk=) 2: 6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.crl (hash: /MqkZGoP9DwUdC2I5KQIHDeXvleQZQ/25bJzV+GF3l0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.crl rsync://repo-rpki.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 07:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:08:3b:98:60:79:dd:fe:3c:f9:ff:89:fb:76:b4:f0:19:bf:d9:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E Validity Not Before: Jul 21 23:56:33 2025 GMT Not After : Jul 25 07:01:33 2025 GMT Subject: CN=32F818B9B5B52770DF5402BDF1868A5FE25D4BC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f9:8f:b5:e5:b4:92:f1:f7:5d:6b:d3:a6:1c: 20:65:a4:78:1f:9a:de:7f:58:da:ab:81:83:63:c8: 97:8a:65:83:e0:ab:ef:b4:12:f2:29:96:87:b8:38: 53:df:46:d1:05:82:24:1b:b6:1c:6b:b6:b3:e2:4b: 65:f6:6e:41:af:e1:0f:82:35:75:a5:d6:d8:79:3e: 16:78:b1:0b:2d:f9:67:cb:a2:9b:c9:22:e5:7f:d4: 53:36:b0:eb:31:0b:1b:64:4b:7e:9d:e7:2b:4a:78: da:97:d6:c7:41:e3:5e:8b:1f:4a:e2:7f:16:19:ce: 38:0a:60:fe:8f:65:0d:9c:04:71:3a:42:23:87:02: bb:91:ad:64:1d:f5:4f:96:14:cb:2f:bf:c4:39:c2: 96:51:37:f3:bb:1e:78:cc:98:ac:6c:8d:33:47:34: e4:8e:90:b3:a6:61:bf:43:e1:87:f3:ea:85:ab:87: 2b:db:a5:04:96:e3:7d:87:12:00:41:5a:47:ac:b1: 57:1a:b4:7f:5a:64:df:41:c7:e9:3c:d4:58:97:1f: 37:62:06:ff:9c:7c:2f:32:1c:e0:1e:28:ad:bb:5a: 1c:02:9c:73:e4:f9:c7:f7:ce:55:05:a8:c3:32:5b: 4d:49:67:1f:1e:4b:32:f9:10:fe:d1:4d:5c:ac:fa: 20:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F8:18:B9:B5:B5:27:70:DF:54:02:BD:F1:86:8A:5F:E2:5D:4B:C1 X509v3 Authority Key Identifier: keyid:67:75:D0:05:3C:ED:1C:5F:FF:BB:3D:5E:F0:FD:EC:48:05:2F:23:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:18:8a:92:46:86:7f:81:15:bf:e3:09:d0:07:6d:a7:b5:64: 47:35:e3:db:f5:3a:8f:5e:f2:5a:3d:29:58:97:01:89:8a:1a: 9d:e3:e5:d9:34:6b:74:48:a9:39:05:b6:c4:01:50:30:1c:67: cc:23:eb:91:bc:c1:ab:e0:0d:c2:24:43:53:0d:67:da:c6:df: c7:99:16:8a:90:5e:45:3c:98:c8:fc:86:e7:75:b3:80:7f:20: 9f:bf:30:11:a9:e2:dd:8e:de:8b:6f:2e:fd:b7:b0:1c:cc:ce: 26:d1:1a:f2:9b:1a:71:5f:e8:a8:a8:7e:0b:6e:91:cf:bf:ff: 40:59:b6:1f:72:67:1a:69:b0:3d:f4:14:9d:47:a5:d0:c4:a5: 62:6e:3c:43:d9:7b:0c:1f:a3:1a:c2:58:3f:05:8d:60:78:70: 44:f2:98:6c:3d:04:a9:4c:76:2b:66:63:58:fe:98:32:6c:d8: da:1d:2f:03:3b:2d:8c:fb:fd:30:da:77:34:70:75:a5:0e:32: 88:e7:27:c4:cc:93:b9:09:de:05:41:52:c2:96:af:5d:3b:a7: 90:bc:92:5e:8c:8d:86:53:4b:95:0c:65:fc:48:93:8a:7b:c9: 87:ab:d6:a7:ed:7a:67:7a:81:d7:39:e1:78:9d:bf:9d:ba:94: 56:1b:a4:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURAg7mGB53f48+f+J+3a08Bm/2UwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc3NUQwMDUzQ0VEMUM1RkZGQkIzRDVFRjBGREVDNDgw NTJGMjMzRTAeFw0yNTA3MjEyMzU2MzNaFw0yNTA3MjUwNzAxMzNaMDMxMTAvBgNV BAMTKDMyRjgxOEI5QjVCNTI3NzBERjU0MDJCREYxODY4QTVGRTI1RDRCQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX+Y+15bSS8fdda9OmHCBlpHgf mt5/WNqrgYNjyJeKZYPgq++0EvIploe4OFPfRtEFgiQbthxrtrPiS2X2bkGv4Q+C NXWl1th5PhZ4sQst+WfLopvJIuV/1FM2sOsxCxtkS36d5ytKeNqX1sdB416LH0ri fxYZzjgKYP6PZQ2cBHE6QiOHAruRrWQd9U+WFMsvv8Q5wpZRN/O7HnjMmKxsjTNH NOSOkLOmYb9D4Yfz6oWrhyvbpQSW432HEgBBWkessVcatH9aZN9Bx+k81FiXHzdi Bv+cfC8yHOAeKK27WhwCnHPk+cf3zlUFqMMyW01JZx8eSzL5EP7RTVys+iDvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMvgYubW1J3DfVAK98YaKX+JdS8EwHwYDVR0j BBgwFoAUZ3XQBTztHF//uz1e8P3sSAUvIz4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODFlMzA1Yi0wMDM5LTRiMGUtOGM1OS0yNDIzMjgwYjdjM2MvMC82Nzc1RDAwNTND RUQxQzVGRkZCQjNENUVGMEZERUM0ODA1MkYyMzNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjc3NUQwMDUzQ0VEMUM1RkZGQkIzRDVFRjBGREVDNDgwNTJG MjMzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTgxZTMwNWItMDAzOS00YjBlLThj NTktMjQyMzI4MGI3YzNjLzAvNjc3NUQwMDUzQ0VEMUM1RkZGQkIzRDVFRjBGREVD NDgwNTJGMjMzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACEYipJGhn+BFb/jCdAHbae1ZEc149v1Oo9e 8lo9KViXAYmKGp3j5dk0a3RIqTkFtsQBUDAcZ8wj65G8wavgDcIkQ1MNZ9rG38eZ FoqQXkU8mMj8hud1s4B/IJ+/MBGp4t2O3otvLv23sBzMzibRGvKbGnFf6Kiofgtu kc+//0BZth9yZxppsD30FJ1HpdDEpWJuPEPZewwfoxrCWD8FjWB4cETymGw9BKlM ditmY1j+mDJs2NodLwM7LYz7/TDadzRwdaUOMojnJ8TMk7kJ3gVBUsKWr107p5C8 kl6MjYZTS5UMZfxIk4p7yYer1qftemd6gdc54Xidv526lFYbpPI= -----END CERTIFICATE-----Generated at Wed Jul 23 02:01:39 2025 by rpki-client