$ rpki-client -vvf repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft File: 6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft (raw, json) Hash identifier: h3gGSdTwaHlAfzeNDqSaisI4RiPhVENQ6WXDXVT4/Hc= Subject key identifier: 78:3C:B1:E6:23:CC:BD:05:7E:C0:B5:E5:DF:30:2A:43:DE:2A:17:D3 Authority key identifier: 6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92 Certificate issuer: /CN=6A200D6FC5434DAD6106CEE5439CA1270DDCBC92 Certificate serial: 4FB405DFD97871059461CCAFA3697AB425F95FCA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft Manifest number: 92 Signing time: Mon 21 Jul 2025 01:41:07 +0000 Manifest this update: Mon 21 Jul 2025 01:36:07 +0000 Manifest next update: Thu 24 Jul 2025 04:42:07 +0000 Files and hashes: 1: 6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl (hash: x4fjPK1sDVkJI85cqLVxhpycEuQJTuNom9hBpnBvUGE=) 2: 3130332e3130332e3138302e302f32332d3234203d3e20313336383437.roa (hash: z7JSBWPGJlOn/ZqqGa8az/lIZkw26RQslHPZ9GMpJ4M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 04:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:b4:05:df:d9:78:71:05:94:61:cc:af:a3:69:7a:b4:25:f9:5f:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A200D6FC5434DAD6106CEE5439CA1270DDCBC92 Validity Not Before: Jul 21 01:36:07 2025 GMT Not After : Jul 24 04:42:07 2025 GMT Subject: CN=783CB1E623CCBD057EC0B5E5DF302A43DE2A17D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:36:3c:eb:9f:ee:7a:86:9e:7b:bf:76:07:48: 93:2d:71:93:39:95:aa:ce:48:73:14:25:c3:5b:e1: cf:d0:ba:1b:f1:41:8a:bf:07:1f:86:f3:9f:85:33: 7a:35:b5:72:17:de:18:f3:3a:87:d3:47:13:3a:61: 94:b3:00:34:18:a4:d3:25:5d:0d:fe:5d:83:c1:63: 14:6e:f0:a1:7b:93:14:7b:e0:bc:16:7a:26:b3:5f: 2c:f5:93:0c:f6:bc:40:83:97:3a:ce:91:d8:e9:81: e9:70:42:b5:07:f9:69:c6:18:d4:89:19:a3:dd:f8: 1a:4a:a5:40:08:a9:d4:3a:c6:e3:11:45:e4:44:12: ab:4c:d7:67:48:74:dd:4f:ca:29:fc:f2:94:00:34: ea:b0:6c:6e:75:e6:ed:99:b3:cb:34:f4:b2:35:03: 70:52:52:ea:1b:77:7d:05:1f:c7:a2:76:73:0f:24: 09:59:97:f6:5d:e9:ed:89:2e:7e:b5:9d:41:4a:eb: e6:d2:bc:be:ed:b4:c4:42:28:57:a2:9d:30:48:eb: 16:0c:45:24:33:2f:60:63:5d:34:c2:aa:e9:82:44: 56:de:c5:bf:ae:2e:06:0f:24:f3:2d:d0:7d:f4:11: 4b:b4:fd:85:de:2e:e2:62:65:4e:62:51:37:9a:08: 93:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3C:B1:E6:23:CC:BD:05:7E:C0:B5:E5:DF:30:2A:43:DE:2A:17:D3 X509v3 Authority Key Identifier: keyid:6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:80:41:f9:2d:17:a0:d1:22:62:c4:aa:c5:8f:cb:dc:3b:fd: 3d:96:d0:cc:f5:9b:0d:87:2e:33:36:2a:fc:8c:a0:f9:b1:0e: 6d:48:d1:74:85:5d:85:ae:54:c2:a8:89:7d:51:49:27:cf:71: 69:c1:a7:b6:9e:b5:d0:10:39:8a:99:f0:0d:31:61:84:d5:00: 45:29:bb:5d:3a:93:ef:e6:c9:2b:09:2b:80:fe:62:63:d4:a8: 1f:11:90:35:68:1a:b4:af:6d:57:8c:e3:6e:67:c8:b5:e0:dd: 2c:d4:04:e3:a9:01:33:43:76:ee:89:63:5b:ca:bc:39:9c:94: 81:b4:4f:d2:0d:e1:15:de:6b:8b:21:13:f5:20:29:ef:84:8d: b2:bd:48:db:98:74:08:80:64:65:93:eb:be:d5:a7:02:e7:6c: 45:bf:00:74:5d:3b:b2:d0:3c:29:b9:6f:29:30:49:5b:0b:2a: 8b:96:87:a5:2c:fe:25:f9:8f:70:76:12:04:97:10:7a:7f:89: ee:0b:e2:e3:7e:c2:03:f1:9b:43:2c:91:3e:fb:96:27:a9:3c: 61:48:ec:4b:ee:9b:6e:47:25:f0:cf:33:ef:f4:4e:f0:5b:86: 73:22:55:da:44:a9:05:1f:16:f2:48:c8:3f:c0:cd:78:63:d3: e6:2f:29:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT7QF39l4cQWUYcyvo2l6tCX5X8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0ExMjcw RERDQkM5MjAeFw0yNTA3MjEwMTM2MDdaFw0yNTA3MjQwNDQyMDdaMDMxMTAvBgNV BAMTKDc4M0NCMUU2MjNDQ0JEMDU3RUMwQjVFNURGMzAyQTQzREUyQTE3RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgNjzrn+56hp57v3YHSJMtcZM5 larOSHMUJcNb4c/QuhvxQYq/Bx+G85+FM3o1tXIX3hjzOofTRxM6YZSzADQYpNMl XQ3+XYPBYxRu8KF7kxR74LwWeiazXyz1kwz2vECDlzrOkdjpgelwQrUH+WnGGNSJ GaPd+BpKpUAIqdQ6xuMRReREEqtM12dIdN1Pyin88pQANOqwbG515u2Zs8s09LI1 A3BSUuobd30FH8eidnMPJAlZl/Zd6e2JLn61nUFK6+bSvL7ttMRCKFeinTBI6xYM RSQzL2BjXTTCqumCRFbexb+uLgYPJPMt0H30EUu0/YXeLuJiZU5iUTeaCJMXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeDyx5iPMvQV+wLXl3zAqQ94qF9MwHwYDVR0j BBgwFoAUaiANb8VDTa1hBs7lQ5yhJw3cvJIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGQwZmNhOC01YzJkLTRlMzUtYmQ3ZC1iNDQ4YWE3NWYyYmUvMC82QTIwMEQ2RkM1 NDM0REFENjEwNkNFRTU0MzlDQTEyNzBERENCQzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0ExMjcwRERD QkM5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhkMGZjYTgtNWMyZC00ZTM1LWJk N2QtYjQ0OGFhNzVmMmJlLzAvNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0Ex MjcwRERDQkM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMaAQfktF6DRImLEqsWPy9w7/T2W0Mz1mw2H LjM2KvyMoPmxDm1I0XSFXYWuVMKoiX1RSSfPcWnBp7aetdAQOYqZ8A0xYYTVAEUp u106k+/mySsJK4D+YmPUqB8RkDVoGrSvbVeM425nyLXg3SzUBOOpATNDdu6JY1vK vDmclIG0T9IN4RXea4shE/UgKe+EjbK9SNuYdAiAZGWT677VpwLnbEW/AHRdO7LQ PCm5bykwSVsLKouWh6Us/iX5j3B2EgSXEHp/ie4L4uN+wgPxm0MskT77liepPGFI 7Evum25HJfDPM+/0TvBbhnMiVdpEqQUfFvJIyD/AzXhj0+YvKRU= -----END CERTIFICATE-----Generated at Mon Jul 21 21:20:11 2025 by rpki-client