$ rpki-client -vvf repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft File: A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft (raw, json) Hash identifier: GOtcISx1uAJvPOHkgHTznnNaex0wy6GDuaJcwG1g/Hk= Subject key identifier: E0:39:2D:C7:46:D2:1B:DF:80:CD:E8:97:CC:FF:83:13:D9:DB:48:DB Authority key identifier: A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D Certificate issuer: /CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D Certificate serial: 1FCB8D77C7A4ADA2EEA79422FE7F5180A7AE5838 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft Manifest number: 04CB Signing time: Tue 22 Jul 2025 10:50:49 +0000 Manifest this update: Tue 22 Jul 2025 10:45:49 +0000 Manifest next update: Fri 25 Jul 2025 16:19:49 +0000 Files and hashes: 1: 323430353a633563303a666630303a3a2f34302d3438203d3e20313334363534.roa (hash: Q46pxbm+TVjkz99t2lUyFhkKtMbUjt5MtTd3GxK/1m0=) 2: 3130332e3134372e3235342e302f32342d3234203d3e203234353231.roa (hash: dCZQHb1/mNChkTEJirijmXVaqX+lOIlWrCfuCDw3sig=) 3: A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl (hash: vfeX6CCOeNR4/ETZP7/BMPfM9wwfPi9AKuXhVSYHzug=) 4: 3130332e3134372e3235342e302f32332d3234203d3e20313339393736.roa (hash: 08jBcNx1kR5QT3XJw/Wus46y7ZQ7OENig0oq8qJMp8E=) 5: 323430353a633563303a3a2f33322d3438203d3e20313339393736.roa (hash: 1oSAlGyCAQ5BsCDikGrzZ8Xay1TMu0rXb0E3UWwkSO0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:cb:8d:77:c7:a4:ad:a2:ee:a7:94:22:fe:7f:51:80:a7:ae:58:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D Validity Not Before: Jul 22 10:45:49 2025 GMT Not After : Jul 25 16:19:49 2025 GMT Subject: CN=E0392DC746D21BDF80CDE897CCFF8313D9DB48DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6d:68:7e:c0:3d:85:ba:d9:10:fe:a6:b4:51: 63:14:15:7f:3e:30:06:e8:e1:a9:4d:3d:2a:af:c8: c8:3d:44:7e:63:0a:22:c4:ce:fe:ca:6d:cb:63:38: c9:fa:3d:79:ae:f4:4f:9b:98:e0:30:b3:ea:10:2e: 09:16:55:89:c9:18:b9:50:ae:b5:b4:fd:e6:d5:87: 8a:51:36:9f:7b:bb:d1:95:d9:a4:1e:9d:fd:85:6f: 59:fd:9d:d6:af:d8:84:0b:15:05:9b:bd:77:ca:cf: 7e:50:15:e3:e3:65:b5:04:98:e3:5c:b0:4c:76:68: b3:f9:2d:ae:25:bc:a2:c8:af:a4:81:4c:25:fd:0e: d1:a1:5a:b0:f4:ed:a2:b3:df:d6:ca:18:d0:0f:72: fe:f9:ed:f6:f7:e9:ac:cc:4f:c9:5c:d5:1a:5f:ab: 08:1d:79:b7:ae:d4:bb:ce:a7:de:19:2a:4d:86:4a: 71:1e:bd:1e:30:ec:ec:1e:04:57:5e:0f:6c:55:2f: ea:db:4f:e8:e6:18:61:04:2a:1f:55:40:29:f5:16: f0:1a:08:96:78:5b:88:ca:4d:8e:17:4a:d1:6e:94: 71:6f:96:2e:d5:38:de:86:23:2c:46:02:05:28:6c: 89:81:94:ff:c4:08:6d:f2:b1:c5:1f:76:16:e0:d7: d0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:39:2D:C7:46:D2:1B:DF:80:CD:E8:97:CC:FF:83:13:D9:DB:48:DB X509v3 Authority Key Identifier: keyid:A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:f7:31:5c:4d:00:ff:a0:fc:00:af:6f:77:72:03:64:ce:3a: e3:3f:52:05:6b:94:a0:88:d8:5b:45:74:f0:cf:4b:f9:5a:f5: b5:cb:6e:4d:3b:96:e4:99:c5:1e:0e:65:8a:bd:ac:98:35:ca: 3a:f1:5f:f4:78:72:11:61:6d:f5:d8:7f:5e:1c:8e:dd:8c:5f: 6e:f5:87:c1:9c:e0:63:f2:b3:b8:37:5d:17:23:27:99:e5:bb: 50:e4:86:5f:53:35:41:d6:8e:e5:ec:2e:32:06:01:99:00:57: 54:b9:ce:18:1c:4e:82:00:26:0d:5c:dc:78:8d:15:ff:e5:da: 8b:e6:db:47:6d:09:03:99:45:df:3f:fd:84:e9:61:1f:d0:13: 0a:36:16:b5:c3:74:2e:61:70:7f:9c:1b:18:e2:77:1a:d5:e9: 1e:78:7f:1a:c5:ab:2b:4f:fe:b2:62:21:b6:dc:c5:93:3c:46: d7:48:c6:a5:db:55:00:85:eb:cb:ef:90:c8:6b:a1:cc:3a:47: 13:e8:dd:20:85:33:ae:34:96:09:08:98:75:da:96:cb:7e:74: b1:46:fa:7b:91:ad:9a:ef:93:6e:12:b5:8e:43:dd:c2:3c:7a: b9:cb:11:ef:01:29:0e:22:38:26:30:72:5a:65:92:a7:c5:01: af:d5:2e:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH8uNd8ekraLup5Qi/n9RgKeuWDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1QjU3 QzRDOEUwRDAeFw0yNTA3MjIxMDQ1NDlaFw0yNTA3MjUxNjE5NDlaMDMxMTAvBgNV BAMTKEUwMzkyREM3NDZEMjFCREY4MENERTg5N0NDRkY4MzEzRDlEQjQ4REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2bWh+wD2FutkQ/qa0UWMUFX8+ MAbo4alNPSqvyMg9RH5jCiLEzv7KbctjOMn6PXmu9E+bmOAws+oQLgkWVYnJGLlQ rrW0/ebVh4pRNp97u9GV2aQenf2Fb1n9ndav2IQLFQWbvXfKz35QFePjZbUEmONc sEx2aLP5La4lvKLIr6SBTCX9DtGhWrD07aKz39bKGNAPcv757fb36azMT8lc1Rpf qwgdebeu1LvOp94ZKk2GSnEevR4w7OweBFdeD2xVL+rbT+jmGGEEKh9VQCn1FvAa CJZ4W4jKTY4XStFulHFvli7VON6GIyxGAgUobImBlP/ECG3yscUfdhbg19A3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4Dktx0bSG9+AzeiXzP+DE9nbSNswHwYDVR0j BBgwFoAUpsexyguQiFXuWPGZHMyVtXxMjg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGU0NzUwZS00MzkzLTQzZWMtOWFiNS1kMjQ3YmJjMDdkODYvMC9BNkM3QjFDQTBC OTA4ODU1RUU1OEYxOTkxQ0NDOTVCNTdDNEM4RTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1QjU3QzRD OEUwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBlNDc1MGUtNDM5My00M2VjLTlh YjUtZDI0N2JiYzA3ZDg2LzAvQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1 QjU3QzRDOEUwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADj3MVxNAP+g/ACvb3dyA2TOOuM/UgVrlKCI 2FtFdPDPS/la9bXLbk07luSZxR4OZYq9rJg1yjrxX/R4chFhbfXYf14cjt2MX271 h8Gc4GPys7g3XRcjJ5nlu1Dkhl9TNUHWjuXsLjIGAZkAV1S5zhgcToIAJg1c3HiN Ff/l2ovm20dtCQOZRd8//YTpYR/QEwo2FrXDdC5hcH+cGxjidxrV6R54fxrFqytP /rJiIbbcxZM8RtdIxqXbVQCF68vvkMhrocw6RxPo3SCFM640lgkImHXalst+dLFG +nuRrZrvk24StY5D3cI8ernLEe8BKQ4iOCYwclplkqfFAa/VLkE= -----END CERTIFICATE-----Generated at Thu Jul 24 12:00:27 2025 by rpki-client