$ rpki-client -vvf repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft File: 6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft (raw, json) Hash identifier: nR2/JLKY2exkI3/nfz7czBaOEGVf8pb1GCaK2UicWdo= Subject key identifier: 1A:F6:E5:3E:49:E2:AD:D1:E8:9E:1E:14:0A:1C:5D:F5:AF:99:3C:30 Authority key identifier: 6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9 Certificate issuer: /CN=6A75F95EA11C3F984C5C610FE9222026394BA8E9 Certificate serial: 6C3D88CF1D011E16A928BF3094EF13CC28EBB612 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft Manifest number: 04EF Signing time: Thu 24 Jul 2025 12:50:39 +0000 Manifest this update: Thu 24 Jul 2025 12:45:39 +0000 Manifest next update: Sun 27 Jul 2025 18:42:39 +0000 Files and hashes: 1: 323030313a6466333a623838303a3a2f34382d3438203d3e203137353338.roa (hash: UN/a2XRTw8081uL/ZY93JqlCc8U4ClmN/ji+ij6yORg=) 2: 6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl (hash: rq9vdjCy6TYFM1PVzfoIO3yBuudKmmD9f12/XbnPL54=) 3: 3130332e3135312e39352e302f32342d3234203d3e203137353338.roa (hash: GwFAfVLpG/ugaQYqpWQY09MQmCe9PdpSsGdhvKfZQm0=) 4: 3130332e3135312e39342e302f32342d3234203d3e203137353338.roa (hash: g0wg8Deehkfr6iJjF1icldun4thvTysDD1uiOyWBYM4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:3d:88:cf:1d:01:1e:16:a9:28:bf:30:94:ef:13:cc:28:eb:b6:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A75F95EA11C3F984C5C610FE9222026394BA8E9 Validity Not Before: Jul 24 12:45:39 2025 GMT Not After : Jul 27 18:42:39 2025 GMT Subject: CN=1AF6E53E49E2ADD1E89E1E140A1C5DF5AF993C30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:68:81:31:7e:80:84:18:e4:9a:d1:95:f9:ac: 91:60:aa:e9:f7:99:06:2f:d5:37:a2:59:0d:e5:aa: 7a:ad:7d:15:83:8f:18:42:3d:3d:5c:05:4d:3a:96: f2:a6:e2:6f:e9:fc:51:62:08:07:cc:27:d3:9a:31: b9:3c:58:bf:a4:a1:ef:04:e4:9b:60:8c:5d:24:52: e3:cf:a3:71:2d:a5:e0:ae:67:d8:09:1e:21:fa:94: 9d:30:24:e7:98:c4:b4:bb:3f:ae:96:78:28:fa:18: 4f:dc:4e:29:c3:66:ba:57:9c:3b:a2:14:09:28:10: 2b:ad:f8:8a:d7:36:56:db:58:cb:00:63:82:d3:db: c8:fb:47:ba:b5:6b:35:03:a7:7c:b9:40:69:87:b0: 88:79:0b:b5:0a:13:b5:82:50:a7:d6:97:a7:ab:4e: 72:13:4d:fe:d8:b0:c7:88:b9:14:43:a0:c3:0c:81: 94:b8:34:d2:eb:16:64:57:47:bb:42:77:32:a8:e2: fe:5b:50:37:23:e1:2b:2e:74:80:f0:e3:12:08:fe: ac:72:54:74:21:e2:1b:e0:d0:c3:3f:aa:a1:3b:69: 67:9f:27:33:10:c1:94:bc:d1:02:0c:ab:a3:61:e7: 29:3a:ea:3a:e4:9d:27:5d:55:88:76:62:72:fa:2f: 21:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F6:E5:3E:49:E2:AD:D1:E8:9E:1E:14:0A:1C:5D:F5:AF:99:3C:30 X509v3 Authority Key Identifier: keyid:6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:f1:55:07:9c:92:09:d9:44:70:40:9a:d3:80:ad:e1:20:95: 69:04:7c:4b:62:97:d7:2a:fd:d3:f1:19:a4:0c:9d:92:d3:7e: 6c:71:02:79:b3:f0:4c:91:d4:41:32:ba:d4:7e:8a:e7:75:2e: 5d:7d:9e:af:68:69:93:d3:e7:c9:86:1d:d7:9e:e7:ee:96:0a: 22:e4:1e:eb:0a:3e:21:55:21:4f:05:37:63:d3:03:7f:cc:a3: a3:99:a6:e7:39:e4:17:1a:95:6f:b6:0d:ff:66:ad:8f:74:39: 3d:16:95:74:ac:b5:3c:9f:84:85:63:62:99:2d:95:2c:d6:32: c8:be:1c:0e:2e:df:e8:78:29:1b:1e:d6:23:f5:1f:b3:f6:49: 62:2a:e0:5f:e6:db:30:b8:67:3c:63:d3:bf:d4:2a:db:c7:bc: ab:28:4b:2b:d8:f2:61:26:ff:c5:10:96:8e:00:dc:3b:0a:45: c5:21:45:18:82:90:a9:ad:8f:e3:f3:a4:3f:ba:77:d8:c1:b7: c6:74:4e:6c:3c:dd:69:40:da:09:a1:5e:d6:29:45:88:58:53: 30:f3:7e:eb:1a:fd:90:db:88:d6:60:64:a5:d4:f1:19:01:a1: f4:f1:2f:28:64:ba:c7:47:0a:36:70:ad:92:7b:4b:b3:b1:90: 19:4e:57:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbD2Izx0BHhapKL8wlO8TzCjrthIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE3NUY5NUVBMTFDM0Y5ODRDNUM2MTBGRTkyMjIwMjYz OTRCQThFOTAeFw0yNTA3MjQxMjQ1MzlaFw0yNTA3MjcxODQyMzlaMDMxMTAvBgNV BAMTKDFBRjZFNTNFNDlFMkFERDFFODlFMUUxNDBBMUM1REY1QUY5OTNDMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5aIExfoCEGOSa0ZX5rJFgqun3 mQYv1TeiWQ3lqnqtfRWDjxhCPT1cBU06lvKm4m/p/FFiCAfMJ9OaMbk8WL+koe8E 5JtgjF0kUuPPo3EtpeCuZ9gJHiH6lJ0wJOeYxLS7P66WeCj6GE/cTinDZrpXnDui FAkoECut+IrXNlbbWMsAY4LT28j7R7q1azUDp3y5QGmHsIh5C7UKE7WCUKfWl6er TnITTf7YsMeIuRRDoMMMgZS4NNLrFmRXR7tCdzKo4v5bUDcj4SsudIDw4xII/qxy VHQh4hvg0MM/qqE7aWefJzMQwZS80QIMq6Nh5yk66jrknSddVYh2YnL6LyGDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGvblPknirdHonh4UChxd9a+ZPDAwHwYDVR0j BBgwFoAUanX5XqEcP5hMXGEP6SIgJjlLqOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTQzMzkzNC0zODQ0LTQ2NTMtOGZhYy0xODU4YjI4MjNkMWMvMC82QTc1Rjk1RUEx MUMzRjk4NEM1QzYxMEZFOTIyMjAyNjM5NEJBOEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE3NUY5NUVBMTFDM0Y5ODRDNUM2MTBGRTkyMjIwMjYzOTRC QThFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE0MzM5MzQtMzg0NC00NjUzLThm YWMtMTg1OGIyODIzZDFjLzAvNkE3NUY5NUVBMTFDM0Y5ODRDNUM2MTBGRTkyMjIw MjYzOTRCQThFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKTxVQeckgnZRHBAmtOAreEglWkEfEtil9cq /dPxGaQMnZLTfmxxAnmz8EyR1EEyutR+iud1Ll19nq9oaZPT58mGHdee5+6WCiLk HusKPiFVIU8FN2PTA3/Mo6OZpuc55BcalW+2Df9mrY90OT0WlXSstTyfhIVjYpkt lSzWMsi+HA4u3+h4KRse1iP1H7P2SWIq4F/m2zC4Zzxj07/UKtvHvKsoSyvY8mEm /8UQlo4A3DsKRcUhRRiCkKmtj+PzpD+6d9jBt8Z0Tmw83WlA2gmhXtYpRYhYUzDz fusa/ZDbiNZgZKXU8RkBofTxLyhkusdHCjZwrZJ7S7OxkBlOVzE= -----END CERTIFICATE-----Generated at Sat Jul 26 01:59:10 2025 by rpki-client