$ rpki-client -vvf repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft File: 6DA2B28F4391C01434B7229FD4D68E661BF13061.mft (raw, json) Hash identifier: X7SIU8JFeWBt/o6jcgPEfQfiUd8o1KacppvaV/LvThs= Subject key identifier: 51:F1:C3:57:79:F1:2B:53:29:9D:D1:3A:53:6C:E7:2C:BC:E9:3E:7A Authority key identifier: 6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61 Certificate issuer: /CN=6DA2B28F4391C01434B7229FD4D68E661BF13061 Certificate serial: 5AF5C208208280B1A16CCBD6BF78D4BE4A3F9895 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft Manifest number: 025F Signing time: Sun 20 Jul 2025 15:11:24 +0000 Manifest this update: Sun 20 Jul 2025 15:06:24 +0000 Manifest next update: Wed 23 Jul 2025 21:00:24 +0000 Files and hashes: 1: 34392e3233362e3231382e302f32342d3234203d3e203535363638.roa (hash: cndHnN7Y2CkZsc1bcXRUS17ntMjtPGamuBmM/0sBScA=) 2: 6DA2B28F4391C01434B7229FD4D68E661BF13061.crl (hash: s12oHUC/F1MaKGiRKNLcF3qOc73+RcTSvCvduG7mBuw=) 3: 34392e3233362e3232312e302f32342d3234203d3e203535363638.roa (hash: P3qaAQS+9Hmz4InOLYsrCr6O0nuBDwpieqmijzpxLgQ=) 4: 34392e3233362e3232302e302f32342d3234203d3e203535363638.roa (hash: KZESdVYPyK5UDmppEqYu4UgDw6S2JiyC9Aylq3V7KK8=) 5: 34392e3233362e3231362e302f32342d3234203d3e203535363638.roa (hash: C1ful6krFD/D/NQklV2H82Wf+t1lC80LwN0uOUSrxSc=) 6: 34392e3233362e3232322e302f32342d3234203d3e203535363638.roa (hash: 7nW2fdNzQ/pw6iueKs/nit/sd4D7nCLJjKMOnmFO3+c=) 7: 34392e3233362e3231372e302f32342d3234203d3e203535363638.roa (hash: SptXDMlN81cXVQItr4QSDBANvjvdA+fjiFu71V/b7e4=) 8: 34392e3233362e3232332e302f32342d3234203d3e203535363638.roa (hash: 6Ss/J4jbsHWttbGBWZAXrFLeP7zMzLu10fV9oC9kRxs=) 9: 34392e3233362e3231392e302f32342d3234203d3e203535363638.roa (hash: 3dUHFOcTvL6SRCYfkh3xOumINLAjfoUSiaeyY80AmMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 21:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:f5:c2:08:20:82:80:b1:a1:6c:cb:d6:bf:78:d4:be:4a:3f:98:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DA2B28F4391C01434B7229FD4D68E661BF13061 Validity Not Before: Jul 20 15:06:24 2025 GMT Not After : Jul 23 21:00:24 2025 GMT Subject: CN=51F1C35779F12B53299DD13A536CE72CBCE93E7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7c:d4:de:6d:32:62:11:ba:3c:03:59:8d:c8: 9b:0b:76:86:21:3b:61:d9:d3:11:63:4e:d5:06:6f: c6:54:a4:38:4c:c1:ef:b4:1e:eb:bc:c9:a8:8d:ba: 46:91:08:d1:5b:26:7b:95:70:9a:8b:94:34:9d:09: 15:2c:1f:96:11:4e:52:3b:bb:89:8d:4d:db:da:cb: e1:75:09:85:6a:12:bc:02:7c:e8:cf:53:73:ac:e2: f4:62:a5:4f:1a:3c:55:a9:8e:8c:68:7e:47:16:ec: d2:95:5f:b8:00:4b:d4:4e:79:93:76:53:ee:57:7c: 6a:f3:5c:e0:28:2e:a3:36:ce:5e:92:5f:90:b6:64: 19:46:99:7e:02:97:08:8d:3a:6a:55:da:d8:99:38: 19:7b:c1:dd:7e:3a:d4:58:68:1e:78:c0:5f:79:21: 26:be:14:1e:a4:5a:26:27:f9:52:23:9b:23:36:e5: fd:6e:0a:7c:8b:d4:95:6d:39:ec:58:3d:f4:1e:f8: d1:45:25:a9:a1:7c:d6:0e:04:90:2a:7a:8a:62:23: cb:1a:92:96:b4:05:f8:ba:da:3c:ed:cd:27:a0:51: 01:0e:f2:7a:f0:93:1d:3f:e7:2d:6f:3b:16:b0:a7: e9:95:09:1d:43:2f:fa:bb:8e:88:5c:9b:63:8c:1f: 2c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F1:C3:57:79:F1:2B:53:29:9D:D1:3A:53:6C:E7:2C:BC:E9:3E:7A X509v3 Authority Key Identifier: keyid:6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:da:96:b0:d2:2d:ae:93:95:f5:3e:a7:c0:71:c7:cd:8e:99: 23:49:70:81:4b:eb:87:f2:71:b6:13:47:de:06:2a:9a:98:5c: 03:68:8c:35:3a:a1:7d:e4:1a:91:90:c9:68:69:f1:52:6a:6c: cc:af:74:94:c2:62:a1:19:f9:34:90:71:0c:55:bf:93:06:0c: 08:14:e5:58:dc:b3:d2:c5:6e:88:b6:cd:54:fb:cf:7b:a7:33: 5d:7f:a1:30:6c:14:82:25:a5:e4:7c:c6:ae:db:55:67:15:77: 77:10:3c:0b:b6:73:19:26:b8:d3:d4:9f:e2:37:1a:31:3d:05: 3a:79:f4:e1:80:fe:ff:78:d5:02:e8:2f:2b:c7:0e:6b:6f:db: 86:df:0b:cf:ac:07:27:7f:c3:59:28:63:bf:df:67:21:ce:2a: df:8c:70:fb:a3:03:03:8c:a6:f6:0a:68:90:cf:33:14:84:cb: 80:19:e9:1e:08:2d:07:23:3d:05:c5:5e:6b:91:25:07:66:ec: 38:9e:a9:9b:de:ee:a4:d9:15:76:d5:ab:14:66:ab:1e:5a:72: d8:29:5c:8c:f8:a4:bb:fa:a3:2c:0a:a3:81:a0:de:2a:be:0a: 46:64:ba:41:18:24:74:7b:8a:81:2f:8b:ef:bf:96:69:3b:aa: 95:e1:69:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWvXCCCCCgLGhbMvWv3jUvko/mJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhFNjYx QkYxMzA2MTAeFw0yNTA3MjAxNTA2MjRaFw0yNTA3MjMyMTAwMjRaMDMxMTAvBgNV BAMTKDUxRjFDMzU3NzlGMTJCNTMyOTlERDEzQTUzNkNFNzJDQkNFOTNFN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcfNTebTJiEbo8A1mNyJsLdoYh O2HZ0xFjTtUGb8ZUpDhMwe+0Huu8yaiNukaRCNFbJnuVcJqLlDSdCRUsH5YRTlI7 u4mNTdvay+F1CYVqErwCfOjPU3Os4vRipU8aPFWpjoxofkcW7NKVX7gAS9ROeZN2 U+5XfGrzXOAoLqM2zl6SX5C2ZBlGmX4ClwiNOmpV2tiZOBl7wd1+OtRYaB54wF95 ISa+FB6kWiYn+VIjmyM25f1uCnyL1JVtOexYPfQe+NFFJamhfNYOBJAqeopiI8sa kpa0Bfi62jztzSegUQEO8nrwkx0/5y1vOxawp+mVCR1DL/q7johcm2OMHyxVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUfHDV3nxK1MpndE6U2znLLzpPnowHwYDVR0j BBgwFoAUbaKyj0ORwBQ0tyKf1NaOZhvxMGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDBmOTljMy1lNTY3LTQxYWUtYWEwMC0yNmNiOTc4MWZiZTkvMC82REEyQjI4RjQz OTFDMDE0MzRCNzIyOUZENEQ2OEU2NjFCRjEzMDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhFNjYxQkYx MzA2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwZjk5YzMtZTU2Ny00MWFlLWFh MDAtMjZjYjk3ODFmYmU5LzAvNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhF NjYxQkYxMzA2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILalrDSLa6TlfU+p8Bxx82OmSNJcIFL64fy cbYTR94GKpqYXANojDU6oX3kGpGQyWhp8VJqbMyvdJTCYqEZ+TSQcQxVv5MGDAgU 5Vjcs9LFboi2zVT7z3unM11/oTBsFIIlpeR8xq7bVWcVd3cQPAu2cxkmuNPUn+I3 GjE9BTp59OGA/v941QLoLyvHDmtv24bfC8+sByd/w1koY7/fZyHOKt+McPujAwOM pvYKaJDPMxSEy4AZ6R4ILQcjPQXFXmuRJQdm7DieqZve7qTZFXbVqxRmqx5actgp XIz4pLv6oywKo4Gg3iq+CkZkukEYJHR7ioEvi++/lmk7qpXhae0= -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:58 2025 by rpki-client