$ rpki-client -vvf repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft File: C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft (raw, json) Hash identifier: GDbYFBAZzIesDdpTr9hsckccGnAJtWavyD6pJdOmQQo= Subject key identifier: 1A:A7:CF:E4:D4:6E:1E:41:1A:54:31:79:D5:73:71:B3:39:64:E2:32 Authority key identifier: C6:07:6E:33:0D:46:79:EF:04:55:EA:40:0D:11:58:D4:F4:9B:0B:F1 Certificate issuer: /CN=C6076E330D4679EF0455EA400D1158D4F49B0BF1 Certificate serial: 067E68ADD81AE5004ABC4E3ECB5E26C7B15F342D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft Manifest number: 0271 Signing time: Sun 20 Jul 2025 18:42:00 +0000 Manifest this update: Sun 20 Jul 2025 18:37:00 +0000 Manifest next update: Thu 24 Jul 2025 06:21:00 +0000 Files and hashes: 1: C6076E330D4679EF0455EA400D1158D4F49B0BF1.crl (hash: Qvrm+mhDtrxqB5XgmZXVa3/62F3fazUNKHOpkTUn6bk=) 2: 3130332e3137382e322e302f32332d3234203d3e20313431303737.roa (hash: 0uhRI2twQUwOL4bXfxCRKkhSHjZlw1Z+9ZZ7PGpOhe4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.crl rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:7e:68:ad:d8:1a:e5:00:4a:bc:4e:3e:cb:5e:26:c7:b1:5f:34:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6076E330D4679EF0455EA400D1158D4F49B0BF1 Validity Not Before: Jul 20 18:37:00 2025 GMT Not After : Jul 24 06:21:00 2025 GMT Subject: CN=1AA7CFE4D46E1E411A543179D57371B33964E232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cf:c8:cf:e2:d7:c1:6e:24:52:f1:fc:b5:7d: f8:93:8e:1e:86:c1:0d:3e:54:e5:d9:a6:e6:8c:7f: 6c:da:60:7b:97:e3:77:70:d3:46:39:45:47:69:e0: b4:b2:dc:98:12:06:05:32:f2:bf:10:94:18:aa:51: a1:e3:3f:64:2b:f8:20:29:a5:52:5c:98:f8:c4:dc: d4:71:91:40:6f:e2:9b:b5:20:8a:1b:49:b0:94:b9: 07:83:c1:9f:2b:28:71:27:66:fd:cd:ec:25:16:96: 8e:9d:fd:88:9c:75:29:88:b9:56:e6:6a:29:aa:3a: 07:c4:79:ac:e6:39:db:77:33:51:d6:70:fc:08:88: bc:22:d7:33:39:1f:f3:ec:f0:d3:9b:fa:c9:8a:38: 7f:58:f0:9e:50:bc:59:28:86:f1:fe:23:c0:ed:33: 4d:c6:1c:e3:1a:1b:e7:2b:65:b7:df:88:d4:3a:c8: 1a:b7:62:41:d9:d2:d8:4b:33:35:c5:4d:bc:8b:72: bf:df:ca:bd:f7:d9:0a:6c:95:4b:47:fe:62:ca:d1: 75:4b:88:e3:0c:db:c5:03:67:1e:72:17:61:7a:36: 55:f8:1b:b8:b8:85:dc:32:b9:18:89:f8:58:f8:30: d4:ef:a8:65:bd:6c:19:66:39:82:58:e3:fa:c4:75: 04:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A7:CF:E4:D4:6E:1E:41:1A:54:31:79:D5:73:71:B3:39:64:E2:32 X509v3 Authority Key Identifier: keyid:C6:07:6E:33:0D:46:79:EF:04:55:EA:40:0D:11:58:D4:F4:9B:0B:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:ed:18:c9:ce:bf:72:cb:5e:f7:5d:b2:92:6e:35:7d:c8:89: 9d:68:80:49:7a:dc:53:44:e2:6f:6a:d0:fb:b4:24:a6:47:66: 7d:c5:63:43:cc:5b:d3:c2:77:e2:aa:8d:4f:a1:ff:ca:18:e3: 86:6c:a1:bb:d4:6b:63:8a:f8:30:43:ae:df:2e:06:5a:4b:64: 71:2b:16:0a:3f:9b:29:47:5e:68:04:36:28:90:22:84:bf:dd: 15:d6:bc:ef:fc:c2:02:86:52:65:24:30:67:b8:1e:b0:a0:d4: 3d:21:fc:aa:96:44:c5:3d:4f:07:61:42:39:3e:37:18:6d:a8: 0e:91:52:42:44:96:2e:67:74:8b:08:25:1a:20:a0:2c:2d:33: 7f:3f:8b:6b:c0:0e:c7:e7:60:12:1d:3d:fa:29:df:76:16:4c: 3b:4c:d2:be:98:6d:a1:07:e6:1c:c1:37:cc:07:0f:12:81:8f: f1:54:4c:06:64:fd:6b:b4:f0:61:c7:93:f9:e1:fa:f6:ec:da: fe:87:2a:77:bf:52:58:a3:d8:70:b9:a6:5f:be:7e:db:5d:4a: 6f:5f:a2:89:77:bc:9a:40:96:d2:81:5a:79:49:17:9c:e6:38: ef:ee:aa:30:13:a6:a7:20:2c:55:b2:28:af:91:3d:9f:e5:3d: 37:c5:51:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBn5ordga5QBKvE4+y14mx7FfNC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYwNzZFMzMwRDQ2NzlFRjA0NTVFQTQwMEQxMTU4RDRG NDlCMEJGMTAeFw0yNTA3MjAxODM3MDBaFw0yNTA3MjQwNjIxMDBaMDMxMTAvBgNV BAMTKDFBQTdDRkU0RDQ2RTFFNDExQTU0MzE3OUQ1NzM3MUIzMzk2NEUyMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVz8jP4tfBbiRS8fy1ffiTjh6G wQ0+VOXZpuaMf2zaYHuX43dw00Y5RUdp4LSy3JgSBgUy8r8QlBiqUaHjP2Qr+CAp pVJcmPjE3NRxkUBv4pu1IIobSbCUuQeDwZ8rKHEnZv3N7CUWlo6d/YicdSmIuVbm aimqOgfEeazmOdt3M1HWcPwIiLwi1zM5H/Ps8NOb+smKOH9Y8J5QvFkohvH+I8Dt M03GHOMaG+crZbffiNQ6yBq3YkHZ0thLMzXFTbyLcr/fyr332QpslUtH/mLK0XVL iOMM28UDZx5yF2F6NlX4G7i4hdwyuRiJ+Fj4MNTvqGW9bBlmOYJY4/rEdQQTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGqfP5NRuHkEaVDF51XNxszlk4jIwHwYDVR0j BBgwFoAUxgduMw1Gee8EVepADRFY1PSbC/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmZhZTU2NS00MTE0LTQ0MzQtOTQwZC03YzAxOTI4YzhhYjEvMC9DNjA3NkUzMzBE NDY3OUVGMDQ1NUVBNDAwRDExNThENEY0OUIwQkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYwNzZFMzMwRDQ2NzlFRjA0NTVFQTQwMEQxMTU4RDRGNDlC MEJGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JmYWU1NjUtNDExNC00NDM0LTk0 MGQtN2MwMTkyOGM4YWIxLzAvQzYwNzZFMzMwRDQ2NzlFRjA0NTVFQTQwMEQxMTU4 RDRGNDlCMEJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjtGMnOv3LLXvddspJuNX3IiZ1ogEl63FNE 4m9q0Pu0JKZHZn3FY0PMW9PCd+KqjU+h/8oY44ZsobvUa2OK+DBDrt8uBlpLZHEr Fgo/mylHXmgENiiQIoS/3RXWvO/8wgKGUmUkMGe4HrCg1D0h/KqWRMU9TwdhQjk+ NxhtqA6RUkJEli5ndIsIJRogoCwtM38/i2vADsfnYBIdPfop33YWTDtM0r6YbaEH 5hzBN8wHDxKBj/FUTAZk/Wu08GHHk/nh+vbs2v6HKne/Ulij2HC5pl++fttdSm9f ool3vJpAltKBWnlJF5zmOO/uqjATpqcgLFWyKK+RPZ/lPTfFUfw= -----END CERTIFICATE-----Generated at Mon Jul 21 02:15:17 2025 by rpki-client