$ rpki-client -vvf repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft File: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft (raw, json) Hash identifier: d5KeqFC38YkHif9yvJ7lNvD3lGlb2OiKuOfBUzvd6Os= Subject key identifier: 95:3B:34:5F:47:01:6B:EB:77:80:0D:DB:1F:D6:33:AC:D0:61:5D:04 Authority key identifier: 6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 Certificate issuer: /CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Certificate serial: 0E3DFFE7B57A269296F7801DF22753FFA63B6570 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft Manifest number: 01B7 Signing time: Sat 19 Jul 2025 01:40:39 +0000 Manifest this update: Sat 19 Jul 2025 01:35:39 +0000 Manifest next update: Tue 22 Jul 2025 04:46:39 +0000 Files and hashes: 1: 3130332e3132362e3131382e302f32342d3234203d3e20313338313136.roa (hash: IZ8KmdFwK5i2F35Ti/yV73rwyTaK/R/VAzY82jFEZs8=) 2: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl (hash: Mgq0NqyOqRJpk2REWBo9+n/3fLVGqFsFmqPeZ/0qTmU=) 3: 3130332e3132362e3131362e302f32342d3234203d3e20313338313136.roa (hash: JQnrpdZbIEjOMrJ0gY+bWa1ZiQUgvaTVgcxr/pouQFw=) 4: 3130332e3132362e3131372e302f32342d3234203d3e20313338313136.roa (hash: jIRxROaY+ZsyLOueu1pqPluvRpe9DT1746X5+JI8kKs=) 5: 3130332e3132362e3131392e302f32342d3234203d3e20313339393732.roa (hash: nPlUaL9yF2n402rwq54ga4y4IA8tmh1JYztdhgr/yzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 04:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:3d:ff:e7:b5:7a:26:92:96:f7:80:1d:f2:27:53:ff:a6:3b:65:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Validity Not Before: Jul 19 01:35:39 2025 GMT Not After : Jul 22 04:46:39 2025 GMT Subject: CN=953B345F47016BEB77800DDB1FD633ACD0615D04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b6:f9:ad:e9:ae:10:63:48:e5:54:83:b9:f2: 70:f3:83:ea:10:cd:6b:81:f8:aa:92:83:54:71:0a: f4:a9:0f:49:fd:39:4c:b4:43:cb:92:fc:f4:f1:bb: f5:0d:1f:12:8f:45:bf:06:e2:df:fd:02:16:3c:24: 23:8a:d8:a3:3f:45:5f:3e:64:e6:f1:25:50:a2:8b: cc:6d:50:1e:09:78:93:b0:ac:d4:bb:3b:05:a5:11: 88:fb:ef:ae:54:5d:a1:18:be:fa:7b:61:2a:01:4f: ab:4a:b2:50:37:66:e9:f1:8e:39:56:46:bb:03:e5: 71:f9:d9:ee:74:e8:5f:40:ff:29:44:a7:f1:ce:4f: 15:09:d4:a2:c1:f8:ed:b0:81:3c:62:8e:5c:78:20: 4c:a2:42:dd:02:be:97:5d:c3:d7:47:c1:22:4c:aa: cd:49:cc:c3:7e:3d:e2:0c:54:08:33:49:a0:70:e9: 5b:73:9a:9d:2a:f9:5b:30:f7:3a:e3:b4:d5:c0:9c: 1e:0a:ae:3c:35:7a:82:01:6d:f9:0d:56:e0:88:cc: ed:01:85:7a:a7:aa:e5:01:62:c0:e9:ce:59:08:31: 86:f9:8a:ac:f0:d7:e8:bf:31:ba:c6:39:a0:eb:25: 88:f8:6f:ea:11:d3:69:11:6b:ec:eb:4a:f9:01:06: 4d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:3B:34:5F:47:01:6B:EB:77:80:0D:DB:1F:D6:33:AC:D0:61:5D:04 X509v3 Authority Key Identifier: keyid:6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:8b:ec:c2:d0:e6:4c:0e:c9:23:24:0d:11:4d:68:ef:e4:d9: 51:49:de:6c:49:80:80:fa:3f:e4:fe:3b:5a:16:eb:c0:7e:23: 0d:ea:b3:8f:51:e6:e8:8c:53:05:d5:e7:46:61:b4:12:3f:93: 3d:27:61:67:9e:44:00:1f:56:ba:a8:37:79:ea:ec:5d:21:a3: 63:32:5e:0c:fc:7b:f4:8f:3d:c8:0f:dd:43:27:5f:f9:d6:63: 35:3f:f6:5f:9d:0a:30:a7:21:19:a3:7d:58:7c:48:2a:9a:46: cf:4b:c7:41:62:ff:5b:c7:08:5d:38:8a:de:e3:52:24:9a:12: b7:60:3b:ac:7b:e9:06:81:18:8c:38:53:58:ff:ac:69:e2:e1: 3d:2c:d1:4d:de:55:bc:4f:20:c0:08:50:7c:bf:30:15:a0:d1: 68:98:2b:86:98:33:ed:54:50:9c:58:95:53:00:c9:14:55:36: 2a:c5:c1:89:47:5f:2d:98:89:f8:06:5a:13:b8:80:1e:b6:24: bb:76:a7:27:68:c6:26:42:d7:9d:80:98:eb:a4:32:63:6f:42: 15:c2:4d:9b:e6:f4:a4:0f:e7:30:28:cf:56:c5:ad:97:83:1c: d8:32:03:e4:d4:48:1d:d8:b7:4e:a8:c2:81:7a:c0:a8:fb:89: 9a:c8:22:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDj3/57V6JpKW94Ad8idT/6Y7ZXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdE MDJGNDdFODAeFw0yNTA3MTkwMTM1MzlaFw0yNTA3MjIwNDQ2MzlaMDMxMTAvBgNV BAMTKDk1M0IzNDVGNDcwMTZCRUI3NzgwMEREQjFGRDYzM0FDRDA2MTVEMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXtvmt6a4QY0jlVIO58nDzg+oQ zWuB+KqSg1RxCvSpD0n9OUy0Q8uS/PTxu/UNHxKPRb8G4t/9AhY8JCOK2KM/RV8+ ZObxJVCii8xtUB4JeJOwrNS7OwWlEYj7765UXaEYvvp7YSoBT6tKslA3ZunxjjlW RrsD5XH52e506F9A/ylEp/HOTxUJ1KLB+O2wgTxijlx4IEyiQt0Cvpddw9dHwSJM qs1JzMN+PeIMVAgzSaBw6Vtzmp0q+Vsw9zrjtNXAnB4Krjw1eoIBbfkNVuCIzO0B hXqnquUBYsDpzlkIMYb5iqzw1+i/MbrGOaDrJYj4b+oR02kRa+zrSvkBBk3VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlTs0X0cBa+t3gA3bH9YzrNBhXQQwHwYDVR0j BBgwFoAUbfioc7cLqMytoxqt2CFf99AvR+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 N2QyNmRlMC02OGNmLTQyOWMtOGIwZS04ZDY0Yjc2MmY4MjQvMC82REY4QTg3M0I3 MEJBOENDQURBMzFBQUREODIxNUZGN0QwMkY0N0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdEMDJG NDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTdkMjZkZTAtNjhjZi00MjljLThi MGUtOGQ2NGI3NjJmODI0LzAvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVG RjdEMDJGNDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+L7MLQ5kwOySMkDRFNaO/k2VFJ3mxJgID6 P+T+O1oW68B+Iw3qs49R5uiMUwXV50ZhtBI/kz0nYWeeRAAfVrqoN3nq7F0ho2My Xgz8e/SPPcgP3UMnX/nWYzU/9l+dCjCnIRmjfVh8SCqaRs9Lx0Fi/1vHCF04it7j UiSaErdgO6x76QaBGIw4U1j/rGni4T0s0U3eVbxPIMAIUHy/MBWg0WiYK4aYM+1U UJxYlVMAyRRVNirFwYlHXy2YifgGWhO4gB62JLt2pydoxiZC152AmOukMmNvQhXC TZvm9KQP5zAoz1bFrZeDHNgyA+TUSB3Yt06owoF6wKj7iZrIImM= -----END CERTIFICATE-----Generated at Mon Jul 21 01:32:07 2025 by rpki-client