$ rpki-client -vvf repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft File: 6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft (raw, json) Hash identifier: /T4wP/5e7dSq+dFCkok6eiZtvtx7eyttKplw/E84IyI= Subject key identifier: 60:46:7E:4C:66:75:87:7B:AC:23:6D:1F:A4:1A:4C:7E:5E:5D:C9:B5 Authority key identifier: 6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19 Certificate issuer: /CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19 Certificate serial: 56D42D7A3489989047DD835ECA4E3C41C38414D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft Manifest number: 04EC Signing time: Sun 20 Jul 2025 03:10:38 +0000 Manifest this update: Sun 20 Jul 2025 03:05:38 +0000 Manifest next update: Wed 23 Jul 2025 08:34:38 +0000 Files and hashes: 1: 3130332e3132372e3134342e302f32332d3233203d3e203633383732.roa (hash: ej36uL5q6V5lzJlk2/mVmLfbDb6eLchafID3r1d/Uc0=) 2: 323030313a6466333a6330303a3a2f34382d3438203d3e203633383732.roa (hash: DbPoZnzVJDn8t1MnQ7X+537hTvhkD/yKBSWUNPseJA0=) 3: 3130332e35322e3137312e302f32342d3234203d3e203633383732.roa (hash: 8GeHpy3P984a7HFNxAJwy8wpU0ns8pabD1WKnP4tvuw=) 4: 3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa (hash: dT1Ez91RELEcb3/us3FXp8X3LrIGPlHAyCw3ou4h/Pw=) 5: 6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl (hash: eOKg80QMst0TOiRond9N0FMEJ7PhVCMQjxPMdSMyveY=) 6: 3130332e35322e3137302e302f32342d3234203d3e203633383732.roa (hash: Z+FoVz2t/bU9Oh29fvVmEj58qbcaPFxm8OsmszzE23M=) 7: 3130332e3132372e3134352e302f32342d3234203d3e203633383732.roa (hash: MXaL0QCe5+IS+MABtk7XIsAr+HW38yfYtKBH23S5G78=) 8: 3130332e35322e3137302e302f32332d3233203d3e203633383732.roa (hash: brSZ0m97l9z7YCV2zCWTUJDAsUOi5NNl8YP1n7Hn+04=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 08:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d4:2d:7a:34:89:98:90:47:dd:83:5e:ca:4e:3c:41:c3:84:14:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19 Validity Not Before: Jul 20 03:05:38 2025 GMT Not After : Jul 23 08:34:38 2025 GMT Subject: CN=60467E4C6675877BAC236D1FA41A4C7E5E5DC9B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fd:54:41:0b:89:87:93:f1:ed:e1:bd:b2:36: ab:f8:a2:70:d9:44:b6:56:1c:a1:a3:25:bd:9f:32: 5d:3c:2e:30:06:56:fb:bc:97:d8:87:f2:38:e7:af: f2:a8:7e:8b:1e:ef:52:de:58:24:9b:a5:c1:a6:2c: 90:a0:81:5b:d3:06:dc:ff:dd:a9:9d:02:aa:9e:24: 44:20:bd:19:60:70:af:c7:4e:02:dc:06:2c:8a:64: c1:6b:e1:36:6f:4d:87:96:f5:8b:9c:cf:85:3d:22: 8f:30:d4:90:a8:50:32:a1:c0:fe:b2:0d:46:b0:53: cf:ab:13:28:18:8f:35:c3:49:85:e2:c1:82:0f:80: cc:80:21:a5:95:e4:9c:8c:d4:f6:a3:3d:d0:83:be: 24:90:c3:5d:91:79:f9:46:c7:2f:d1:ba:9d:fc:3a: b4:05:5c:9c:59:db:c0:40:7b:d6:64:42:0b:3b:8a: 19:1e:7d:6d:3e:a2:48:d5:2e:25:20:90:81:6d:26: 3c:98:dd:c8:7a:c2:47:e2:ba:fa:8b:70:c8:50:8d: 00:68:33:29:64:37:6d:33:eb:ca:64:91:81:d9:c6: c2:7e:e9:bb:93:59:45:8a:cc:3b:4c:7d:17:2f:56: 59:24:5a:c7:04:55:15:3b:13:6a:e9:71:83:21:4e: 2f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:46:7E:4C:66:75:87:7B:AC:23:6D:1F:A4:1A:4C:7E:5E:5D:C9:B5 X509v3 Authority Key Identifier: keyid:6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:cb:98:c1:e5:07:8e:7e:29:16:28:7f:77:c6:db:a5:bf:5b: cf:1a:54:d5:16:89:3c:cf:0e:d0:8f:2c:39:72:ae:36:0d:a0: 6f:f7:9d:3a:5c:d1:57:a1:9c:54:16:3e:bb:5d:f1:3a:f2:90: 59:d5:52:04:1a:64:d3:e7:a6:db:0c:75:46:3a:d4:a1:a9:3f: 75:7a:f3:a5:de:b4:d9:74:84:ff:1f:de:f3:75:7a:86:98:01: e2:fa:a7:1a:a7:72:4a:c4:32:43:0b:b5:2d:e3:68:f8:e0:f2: cb:fe:b7:fe:0f:05:60:0b:14:53:ff:09:36:4d:50:fa:4b:52: 3e:97:33:c4:1b:91:4f:8f:66:e6:65:11:5c:a6:32:1b:54:0e: e3:9e:af:a4:27:ec:a5:91:16:a7:9b:5e:dd:08:0e:fa:8a:ff: b2:c0:5c:ad:a1:06:60:57:8d:36:10:5c:75:ef:5c:8f:07:84: 1b:8c:fb:7d:2d:13:b6:90:ba:5f:fb:1f:a3:6f:ad:ca:e6:66: 6f:9b:72:c4:78:56:5f:58:21:df:57:28:ca:cf:c9:9f:08:0c: 84:9e:38:d6:35:c0:5c:e2:5a:15:4d:5d:99:7d:35:3b:52:1b: 0b:b5:a6:66:dd:06:80:57:91:89:02:9a:11:a7:a3:2e:6c:f3: 79:9d:be:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVtQtejSJmJBH3YNeyk48QcOEFNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3MTYy N0JFN0IxOTAeFw0yNTA3MjAwMzA1MzhaFw0yNTA3MjMwODM0MzhaMDMxMTAvBgNV BAMTKDYwNDY3RTRDNjY3NTg3N0JBQzIzNkQxRkE0MUE0QzdFNUU1REM5QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9/VRBC4mHk/Ht4b2yNqv4onDZ RLZWHKGjJb2fMl08LjAGVvu8l9iH8jjnr/Kofose71LeWCSbpcGmLJCggVvTBtz/ 3amdAqqeJEQgvRlgcK/HTgLcBiyKZMFr4TZvTYeW9Yucz4U9Io8w1JCoUDKhwP6y DUawU8+rEygYjzXDSYXiwYIPgMyAIaWV5JyM1PajPdCDviSQw12ReflGxy/Rup38 OrQFXJxZ28BAe9ZkQgs7ihkefW0+okjVLiUgkIFtJjyY3ch6wkfiuvqLcMhQjQBo MylkN20z68pkkYHZxsJ+6buTWUWKzDtMfRcvVlkkWscEVRU7E2rpcYMhTi8BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYEZ+TGZ1h3usI20fpBpMfl5dybUwHwYDVR0j BBgwFoAUbWuu2/27qka/PaIYVXB3Fie+exkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NmJiMzMzYy05ODJiLTRmY2UtYWM4MS1iYzA2OTIyOWUyNDMvMC82RDZCQUVEQkZE QkJBQTQ2QkYzREEyMTg1NTcwNzcxNjI3QkU3QjE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3MTYyN0JF N0IxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTZiYjMzM2MtOTgyYi00ZmNlLWFj ODEtYmMwNjkyMjllMjQzLzAvNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3 MTYyN0JFN0IxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFXLmMHlB45+KRYof3fG26W/W88aVNUWiTzP DtCPLDlyrjYNoG/3nTpc0VehnFQWPrtd8TrykFnVUgQaZNPnptsMdUY61KGpP3V6 86XetNl0hP8f3vN1eoaYAeL6pxqnckrEMkMLtS3jaPjg8sv+t/4PBWALFFP/CTZN UPpLUj6XM8QbkU+PZuZlEVymMhtUDuOer6Qn7KWRFqebXt0IDvqK/7LAXK2hBmBX jTYQXHXvXI8HhBuM+30tE7aQul/7H6NvrcrmZm+bcsR4Vl9YId9XKMrPyZ8IDISe ONY1wFziWhVNXZl9NTtSGwu1pmbdBoBXkYkCmhGnoy5s83mdviM= -----END CERTIFICATE-----Generated at Sun Jul 20 21:25:17 2025 by rpki-client