$ rpki-client -vvf repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft File: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft (raw, json) Hash identifier: 4gHIiPA8D1nNO+fljcmxEeikmC2Wn0jS+zMAynxqIZc= Subject key identifier: 2F:98:88:CA:CD:A4:64:2B:2F:F1:42:7F:F7:04:BB:2C:24:4F:40:B9 Authority key identifier: 6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E Certificate issuer: /CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Certificate serial: 23B5A10D375B1E52C7B7A400943BF2D144671F83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft Manifest number: C4 Signing time: Sat 19 Jul 2025 05:22:09 +0000 Manifest this update: Sat 19 Jul 2025 05:17:09 +0000 Manifest next update: Tue 22 Jul 2025 07:47:09 +0000 Files and hashes: 1: 33362e35302e3231362e302f32332d3233203d3e20313437313238.roa (hash: TzFqnwzzY9xia0s3waMLkiGG8A7BVi2jn0Tebn9ZTXg=) 2: 33362e35302e3231372e302f32342d3234203d3e20313437313238.roa (hash: suvA+Wk962jHlhC9+yItBsXmZi+V1BXvTufHDqbDzJE=) 3: 33362e35302e3231362e302f32342d3234203d3e20313437313238.roa (hash: knY/ggPl78wk2nvRxnL0Ik6PzIK0DYSQq15iPy2gM40=) 4: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl (hash: tDuxlsbNXUTVXBbN/QtmC2ALQp5M5yLVK/zkcMoJb5M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 07:47:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b5:a1:0d:37:5b:1e:52:c7:b7:a4:00:94:3b:f2:d1:44:67:1f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Validity Not Before: Jul 19 05:17:09 2025 GMT Not After : Jul 22 07:47:09 2025 GMT Subject: CN=2F9888CACDA4642B2FF1427FF704BB2C244F40B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bb:ab:59:22:bd:6f:fe:cc:2f:8a:a1:37:50: a1:16:6a:17:41:9e:37:b9:95:40:0d:7e:8c:e6:a3: a5:7f:2c:01:6f:76:46:7a:01:75:57:8e:f0:46:18: 2e:10:40:f0:55:e8:28:98:77:4c:76:f3:ad:54:7c: f1:46:16:9c:df:a4:8d:aa:5b:58:60:b8:ad:0b:97: 8f:35:b7:80:ff:36:5f:60:23:53:e8:48:a9:93:fc: ec:9b:23:43:82:69:8e:51:7a:7a:d5:48:0d:01:1a: b1:ae:f8:90:0d:09:70:1b:d1:4e:eb:72:74:98:36: f3:52:ad:c6:f5:d3:c6:ab:51:65:83:6d:41:01:ec: 51:ad:8f:bc:38:3c:27:fd:5c:30:14:88:a5:66:49: 06:7c:e4:92:c4:62:4e:ed:77:a1:3c:ef:85:d6:82: ff:63:2a:7f:7b:4d:8b:3e:e7:e9:fa:cb:df:38:58: 26:a1:4a:d0:59:c9:14:0f:4e:e7:59:11:c6:65:c0: a3:f1:b4:a7:4d:5b:10:d9:f4:25:7f:c9:21:16:80: 60:33:d1:34:fa:15:3f:eb:87:4f:c3:8e:b9:7f:e6: 3c:22:85:60:7c:07:25:13:a1:e5:c8:1d:60:a9:87: 69:f9:28:65:ae:02:84:05:26:07:4a:dd:11:b1:ed: c3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:98:88:CA:CD:A4:64:2B:2F:F1:42:7F:F7:04:BB:2C:24:4F:40:B9 X509v3 Authority Key Identifier: keyid:6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:dc:40:f4:45:41:88:0b:e2:f5:b9:c0:45:38:95:67:44:86: 7a:4e:1d:d2:42:14:70:be:52:1b:8f:aa:e3:90:9b:ba:43:89: 4e:86:e3:ba:f0:32:4b:f9:7c:f5:dd:79:38:76:7b:07:59:3f: 38:08:fa:c4:fb:1c:4c:bd:56:f8:cc:3f:73:17:6d:2e:56:1d: 9b:2c:6d:f0:b9:90:03:13:ee:c7:33:41:27:72:bd:b1:15:27: 58:bf:7c:53:33:47:fe:90:4e:11:e6:18:cf:63:94:6e:c4:6b: 68:3a:85:6b:5c:d4:59:8d:e2:0f:da:64:7c:ea:4a:f6:12:c5: 78:a8:76:b4:15:0b:37:c8:24:4c:1c:5d:5a:ca:07:12:89:e6: d7:f7:48:04:f5:11:87:17:c3:ab:d8:dc:43:a5:80:90:9c:8d: 90:33:6d:4c:52:93:b0:39:e0:31:79:13:80:c1:42:b4:d1:0c: ca:09:dd:e4:53:70:9a:a5:c2:3c:97:94:01:16:51:f6:c2:b3: 7d:7b:4a:2e:b2:44:f8:df:4e:fd:b1:f6:5f:41:79:9c:62:cd: cb:07:97:0c:eb:62:f7:ee:10:c8:d8:d5:72:d9:11:4a:7d:5f: 6d:fb:ef:05:e9:e2:47:d4:89:3d:cf:5d:91:18:21:97:92:2f: 00:7f:7e:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI7WhDTdbHlLHt6QAlDvy0URnH4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3 QTk4MDk5RTAeFw0yNTA3MTkwNTE3MDlaFw0yNTA3MjIwNzQ3MDlaMDMxMTAvBgNV BAMTKDJGOTg4OENBQ0RBNDY0MkIyRkYxNDI3RkY3MDRCQjJDMjQ0RjQwQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCku6tZIr1v/swviqE3UKEWahdB nje5lUANfozmo6V/LAFvdkZ6AXVXjvBGGC4QQPBV6CiYd0x2861UfPFGFpzfpI2q W1hguK0Ll481t4D/Nl9gI1PoSKmT/OybI0OCaY5RenrVSA0BGrGu+JANCXAb0U7r cnSYNvNSrcb108arUWWDbUEB7FGtj7w4PCf9XDAUiKVmSQZ85JLEYk7td6E874XW gv9jKn97TYs+5+n6y984WCahStBZyRQPTudZEcZlwKPxtKdNWxDZ9CV/ySEWgGAz 0TT6FT/rh0/Djrl/5jwihWB8ByUToeXIHWCph2n5KGWuAoQFJgdK3RGx7cOZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL5iIys2kZCsv8UJ/9wS7LCRPQLkwHwYDVR0j BBgwFoAUbbsQDY1GaauKXH7gVyKO1nqYCZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTk4OWZhZi00OGZiLTRmNDAtOWU3Ny0yNDNkNzhhNWI1YzQvMC82REJCMTAwRDhE NDY2OUFCOEE1QzdFRTA1NzIyOEVENjdBOTgwOTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3QTk4 MDk5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU5ODlmYWYtNDhmYi00ZjQwLTll NzctMjQzZDc4YTViNWM0LzAvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhF RDY3QTk4MDk5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbcQPRFQYgL4vW5wEU4lWdEhnpOHdJCFHC+ UhuPquOQm7pDiU6G47rwMkv5fPXdeTh2ewdZPzgI+sT7HEy9VvjMP3MXbS5WHZss bfC5kAMT7sczQSdyvbEVJ1i/fFMzR/6QThHmGM9jlG7Ea2g6hWtc1FmN4g/aZHzq SvYSxXiodrQVCzfIJEwcXVrKBxKJ5tf3SAT1EYcXw6vY3EOlgJCcjZAzbUxSk7A5 4DF5E4DBQrTRDMoJ3eRTcJqlwjyXlAEWUfbCs317Si6yRPjfTv2x9l9BeZxizcsH lwzrYvfuEMjY1XLZEUp9X2377wXp4kfUiT3PXZEYIZeSLwB/ftU= -----END CERTIFICATE-----Generated at Mon Jul 21 02:04:55 2025 by rpki-client