$ rpki-client -vvf repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft File: 6D2120D281865021E16D49A2451DC53A851B5BBD.mft (raw, json) Hash identifier: Acot8tFqNTklE3qdg1CZ3hyu74fKe84gm3E0P/nPsm4= Subject key identifier: 93:62:78:63:93:46:E0:94:D6:2F:F5:12:3F:16:E1:87:60:97:6C:31 Authority key identifier: 6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD Certificate issuer: /CN=6D2120D281865021E16D49A2451DC53A851B5BBD Certificate serial: 374B6BBC821610FFE4C5AD7A9215736B541A58CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft Manifest number: 77 Signing time: Tue 22 Jul 2025 12:51:35 +0000 Manifest this update: Tue 22 Jul 2025 12:46:35 +0000 Manifest next update: Fri 25 Jul 2025 20:20:35 +0000 Files and hashes: 1: 3130332e3234352e31382e302f32342d3234203d3e203436303233.roa (hash: AShL+HPisPSiiNmtbZE+edgEgIJDv3kNOSZOwH9eeKo=) 2: 3130332e3234352e31362e302f32322d3234203d3e203436303233.roa (hash: PpALimtbBE16UsxvYAE3t7KXuw0rzaxc/sz7ukHKaaU=) 3: 3130332e3234352e31372e302f32342d3234203d3e203436303233.roa (hash: b+Xtzw+6na2a+xMS20wYCYPacvkf2l2PSoCEFblC4OY=) 4: 3130332e3234352e31362e302f32342d3234203d3e203436303233.roa (hash: oc7a2yZBp9q1BdzfUR+tIB5Dtqa/efadojr7/o0DfQ4=) 5: 3130332e3234352e31362e302f32332d3234203d3e203436303233.roa (hash: r+Lb1druh87TuPBvbGkUhC/GpzU18DRigq7n/TRclBo=) 6: 6D2120D281865021E16D49A2451DC53A851B5BBD.crl (hash: AzQMCPpbBBu5niEDGpXiFFuvWqzE1jlaHMTmkvr46do=) 7: 3130332e3234352e31392e302f32342d3234203d3e203436303233.roa (hash: GFImrwcqsA1f+8jAtf3KA9NFE2jyS21niSNaMCPf864=) 8: 3130332e3234352e31382e302f32332d3234203d3e203436303233.roa (hash: LiUE5E5NP3y/9rJb+3iR5iXWUeVWyAD0Ol8W0BAVcIY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:20:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:4b:6b:bc:82:16:10:ff:e4:c5:ad:7a:92:15:73:6b:54:1a:58:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D2120D281865021E16D49A2451DC53A851B5BBD Validity Not Before: Jul 22 12:46:35 2025 GMT Not After : Jul 25 20:20:35 2025 GMT Subject: CN=936278639346E094D62FF5123F16E18760976C31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e6:56:d2:f6:8a:3e:18:ee:a1:59:fa:51:ac: 97:29:43:06:f7:55:91:1c:67:57:00:69:01:fc:a2: be:66:65:70:1b:7e:af:06:07:3f:98:af:48:9c:65: 75:45:13:3c:4c:e6:2e:7c:5d:8b:0d:c9:ac:74:f7: 1e:df:2d:0a:e5:ca:5e:90:42:5c:51:cc:ef:00:1d: 19:cc:40:bb:9d:47:e7:73:01:b3:0c:1d:2e:92:33: 73:58:07:6b:3f:57:06:d1:59:9a:82:c4:f9:18:7e: 5d:2d:9b:76:cb:27:4c:6a:1f:d3:98:6f:70:31:93: b3:1d:40:1d:ab:a5:9f:19:f3:fb:d3:8c:23:3f:90: 65:f1:02:bd:15:61:ac:00:03:02:fa:ae:0c:b6:59: 0b:6a:cb:a0:d1:f5:c3:00:54:56:82:f4:54:fd:23: 45:36:74:28:e1:39:78:c0:d8:4c:2a:c9:2d:5b:0f: 5b:40:de:3e:28:0f:e8:bc:48:ce:76:60:64:98:3a: 2b:d3:5b:c7:72:2a:90:f4:dd:93:42:b8:aa:22:90: 3e:b0:f4:90:34:f8:ae:ef:c4:d8:41:b9:e2:d5:32: 33:e1:8d:21:93:85:d9:5b:fa:d4:69:c9:20:75:c0: 14:b0:fe:38:61:e1:6b:f2:bc:48:1d:86:19:60:c3: 28:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:62:78:63:93:46:E0:94:D6:2F:F5:12:3F:16:E1:87:60:97:6C:31 X509v3 Authority Key Identifier: keyid:6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:b1:70:2a:33:d2:04:dc:46:3b:3b:ac:92:01:fd:bd:e8:27: d1:b1:27:77:79:c9:dd:41:c2:c8:0c:1c:85:2a:73:ad:f5:93: fd:81:0d:61:26:29:ba:41:bb:64:3e:4d:7e:e3:9e:d7:86:c1: cd:1d:f5:49:27:a2:bb:d5:04:3d:53:c4:ef:8e:c4:f9:56:b9: 1e:2d:22:43:0b:2e:1f:48:91:23:08:31:d9:e1:c2:8a:89:1c: 19:68:76:b9:f0:d9:89:e3:22:81:6d:73:2d:59:b1:15:91:91: d6:c4:4a:6a:63:94:af:b1:22:d5:26:6f:6c:fb:36:3e:50:68: a4:10:88:35:ed:db:fc:da:90:8c:96:e4:e4:f6:aa:62:d7:6f: 07:26:5a:8f:2f:95:54:cf:b8:f2:9b:03:18:f2:78:80:e2:4d: 0a:81:29:00:5c:4f:56:4e:94:67:77:63:7f:7a:2b:3b:da:77: 54:2c:7e:5b:cf:72:47:6c:3c:82:df:ae:50:e2:64:aa:8b:8f: a7:d5:fd:d3:45:98:13:35:77:2f:9e:12:c2:86:1f:90:06:65: ba:da:08:36:43:50:76:0b:c4:1a:7f:a5:96:16:a9:7c:49:b6: 91:2d:2b:b0:10:3a:53:7c:22:66:b9:52:72:9b:f8:00:16:2e: 7d:05:6c:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN0trvIIWEP/kxa16khVza1QaWMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4 NTFCNUJCRDAeFw0yNTA3MjIxMjQ2MzVaFw0yNTA3MjUyMDIwMzVaMDMxMTAvBgNV BAMTKDkzNjI3ODYzOTM0NkUwOTRENjJGRjUxMjNGMTZFMTg3NjA5NzZDMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn5lbS9oo+GO6hWfpRrJcpQwb3 VZEcZ1cAaQH8or5mZXAbfq8GBz+Yr0icZXVFEzxM5i58XYsNyax09x7fLQrlyl6Q QlxRzO8AHRnMQLudR+dzAbMMHS6SM3NYB2s/VwbRWZqCxPkYfl0tm3bLJ0xqH9OY b3Axk7MdQB2rpZ8Z8/vTjCM/kGXxAr0VYawAAwL6rgy2WQtqy6DR9cMAVFaC9FT9 I0U2dCjhOXjA2EwqyS1bD1tA3j4oD+i8SM52YGSYOivTW8dyKpD03ZNCuKoikD6w 9JA0+K7vxNhBueLVMjPhjSGThdlb+tRpySB1wBSw/jhh4WvyvEgdhhlgwyhFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk2J4Y5NG4JTWL/USPxbhh2CXbDEwHwYDVR0j BBgwFoAUbSEg0oGGUCHhbUmiRR3FOoUbW70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTI3MmY3Yi1kNjU2LTQwNTgtYTdiNi1mMjVhZGYzZWQxYmUvMC82RDIxMjBEMjgx ODY1MDIxRTE2RDQ5QTI0NTFEQzUzQTg1MUI1QkJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4NTFC NUJCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTUyNzJmN2ItZDY1Ni00MDU4LWE3 YjYtZjI1YWRmM2VkMWJlLzAvNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1 M0E4NTFCNUJCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGxcCoz0gTcRjs7rJIB/b3oJ9GxJ3d5yd1B wsgMHIUqc631k/2BDWEmKbpBu2Q+TX7jnteGwc0d9UknorvVBD1TxO+OxPlWuR4t IkMLLh9IkSMIMdnhwoqJHBlodrnw2YnjIoFtcy1ZsRWRkdbESmpjlK+xItUmb2z7 Nj5QaKQQiDXt2/zakIyW5OT2qmLXbwcmWo8vlVTPuPKbAxjyeIDiTQqBKQBcT1ZO lGd3Y396Kzvad1QsflvPckdsPILfrlDiZKqLj6fV/dNFmBM1dy+eEsKGH5AGZbra CDZDUHYLxBp/pZYWqXxJtpEtK7AQOlN8Ima5UnKb+AAWLn0FbPo= -----END CERTIFICATE-----Generated at Wed Jul 23 02:00:40 2025 by rpki-client