$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft File: 6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft (raw, json) Hash identifier: 4yHh+skIj974JfEsn+uvdqYDZHuMyBickxIh2DTQ9KA= Subject key identifier: 77:F6:89:BC:E3:1A:23:4E:E1:A4:68:81:F9:42:48:3F:BD:1D:B9:D3 Authority key identifier: 6F:29:B5:AE:A0:FD:7E:C5:68:AA:45:A1:72:1D:8E:5D:EA:92:6C:0F Certificate issuer: /CN=6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F Certificate serial: 1C9FABC78132792178E2D71DCCB74D02771A25AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft Manifest number: BD Signing time: Tue 22 Jul 2025 15:21:08 +0000 Manifest this update: Tue 22 Jul 2025 15:16:08 +0000 Manifest next update: Sat 26 Jul 2025 00:30:08 +0000 Files and hashes: 1: 323030313a6466333a636634303a3a2f34382d3438203d3e20313532373536.roa (hash: EPGT5ryhDc35QQ+8DPj3Jot3CoQO1ERUPuwysJ3MS7U=) 2: 6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl (hash: HdbGVvhnAh5C+dgqLOjsozjTDfHeS76UST5HEVaBNiQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:9f:ab:c7:81:32:79:21:78:e2:d7:1d:cc:b7:4d:02:77:1a:25:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F Validity Not Before: Jul 22 15:16:08 2025 GMT Not After : Jul 26 00:30:08 2025 GMT Subject: CN=77F689BCE31A234EE1A46881F942483FBD1DB9D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ba:c7:06:18:15:84:25:1b:11:ae:50:20:94: 96:7d:3c:a4:f6:08:80:84:b9:d5:5a:db:68:97:bb: d4:b6:18:69:22:22:bc:cc:d7:50:24:fa:ca:a3:35: c0:4e:8c:d4:aa:e0:da:73:2a:61:dc:67:c3:96:03: 4b:15:6f:e6:ea:de:01:be:fd:01:85:ac:f6:0b:a8: 64:0f:28:d0:70:ee:21:eb:3d:53:52:2a:ef:ea:96: 6e:fa:6f:e2:a9:f9:36:5b:90:a8:bd:7e:06:ef:d5: 7e:a7:2e:73:10:89:a8:e6:3d:e8:32:86:d7:a6:b4: 59:89:b2:ac:00:f3:47:29:98:f9:89:11:fc:c3:d8: 1a:2e:84:36:27:af:32:ce:3a:8b:0c:7d:ad:5b:28: 8a:66:5a:b9:d2:95:e2:c0:07:ea:8a:81:0e:df:30: 6d:39:d0:86:d4:07:62:8e:9e:38:4c:6e:f2:18:a0: 61:20:96:cf:bc:35:2d:b2:b9:cc:64:80:be:2e:1a: 67:f9:57:9c:30:49:d4:83:e2:09:e6:64:26:07:58: 42:34:03:8d:08:43:34:85:25:2d:a8:34:fd:15:a2: d3:5b:1b:b7:0a:09:1a:f2:a5:fb:b7:53:35:a0:db: a4:c7:f4:eb:67:1f:2b:ff:3b:9a:0f:47:80:5d:6e: 14:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F6:89:BC:E3:1A:23:4E:E1:A4:68:81:F9:42:48:3F:BD:1D:B9:D3 X509v3 Authority Key Identifier: keyid:6F:29:B5:AE:A0:FD:7E:C5:68:AA:45:A1:72:1D:8E:5D:EA:92:6C:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c3:84:0c:95:b9:1d:63:24:8e:87:55:9d:fb:98:60:b9:36: d0:21:94:f3:2c:ba:84:12:1c:1c:02:7a:b5:e4:9b:63:b6:c1: 7a:be:d3:b1:40:bd:76:60:a3:f6:1c:59:b8:c6:f6:3d:54:65: 47:0a:c1:71:c3:46:09:50:34:20:fa:5f:f2:3c:e0:e5:f1:ff: 64:a8:fc:f6:8b:7e:37:c2:09:18:42:1e:28:75:98:9a:19:c5: e3:94:37:e1:ae:05:84:ef:aa:b9:ee:4c:88:bc:37:dc:58:44: 3b:8c:6a:42:45:35:38:bd:44:bd:c8:1d:7f:35:61:02:58:d3: 77:d3:36:b7:c5:2e:c6:30:10:26:ad:6b:2e:9d:dc:65:6e:a4: 3b:c2:37:4e:0e:00:2f:f2:f5:19:b1:22:87:05:72:04:cc:86: 83:2d:9a:b0:6f:0c:1a:f5:7a:0d:7a:a6:1c:ef:88:16:3c:84: 18:f9:b5:aa:ad:34:21:d2:40:b1:24:0f:5b:97:a3:53:04:7b: 3d:c8:91:ac:62:ca:af:bc:c6:4b:f6:ba:28:a7:51:ab:0d:51: 30:f3:3f:5f:a5:c6:a2:70:ad:41:d0:37:ee:43:82:de:97:cb: 7c:3d:aa:aa:00:3b:35:c6:fc:ec:cc:33:a4:fa:69:fb:0e:f6: f3:fa:fa:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHJ+rx4EyeSF44tcdzLdNAncaJawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkYyOUI1QUVBMEZEN0VDNTY4QUE0NUExNzIxRDhFNURF QTkyNkMwRjAeFw0yNTA3MjIxNTE2MDhaFw0yNTA3MjYwMDMwMDhaMDMxMTAvBgNV BAMTKDc3RjY4OUJDRTMxQTIzNEVFMUE0Njg4MUY5NDI0ODNGQkQxREI5RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKuscGGBWEJRsRrlAglJZ9PKT2 CICEudVa22iXu9S2GGkiIrzM11Ak+sqjNcBOjNSq4NpzKmHcZ8OWA0sVb+bq3gG+ /QGFrPYLqGQPKNBw7iHrPVNSKu/qlm76b+Kp+TZbkKi9fgbv1X6nLnMQiajmPegy htemtFmJsqwA80cpmPmJEfzD2BouhDYnrzLOOosMfa1bKIpmWrnSleLAB+qKgQ7f MG050IbUB2KOnjhMbvIYoGEgls+8NS2yucxkgL4uGmf5V5wwSdSD4gnmZCYHWEI0 A40IQzSFJS2oNP0VotNbG7cKCRrypfu3UzWg26TH9OtnHyv/O5oPR4BdbhSLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd/aJvOMaI07hpGiB+UJIP70dudMwHwYDVR0j BBgwFoAUbym1rqD9fsVoqkWhch2OXeqSbA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWI0ZTE0ZC0wMjFkLTQwZGMtOTIzYS1jMTJkMWFmNDQzYjUvMS82RjI5QjVBRUEw RkQ3RUM1NjhBQTQ1QTE3MjFEOEU1REVBOTI2QzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkYyOUI1QUVBMEZEN0VDNTY4QUE0NUExNzIxRDhFNURFQTky NkMwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky M2EtYzEyZDFhZjQ0M2I1LzEvNkYyOUI1QUVBMEZEN0VDNTY4QUE0NUExNzIxRDhF NURFQTkyNkMwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrDhAyVuR1jJI6HVZ37mGC5NtAhlPMsuoQS HBwCerXkm2O2wXq+07FAvXZgo/YcWbjG9j1UZUcKwXHDRglQNCD6X/I84OXx/2So /PaLfjfCCRhCHih1mJoZxeOUN+GuBYTvqrnuTIi8N9xYRDuMakJFNTi9RL3IHX81 YQJY03fTNrfFLsYwECatay6d3GVupDvCN04OAC/y9RmxIocFcgTMhoMtmrBvDBr1 eg16phzviBY8hBj5taqtNCHSQLEkD1uXo1MEez3Ikaxiyq+8xkv2uiinUasNUTDz P1+lxqJwrUHQN+5Dgt6Xy3w9qqoAOzXG/OzMM6T6afsO9vP6+vk= -----END CERTIFICATE-----Generated at Wed Jul 23 01:59:55 2025 by rpki-client