$ rpki-client -vvf repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft File: D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft (raw, json) Hash identifier: kYzOzjXZyE0UQW+agzARHhS5IavufKkv+1xg3Nq9PYg= Subject key identifier: BE:81:D0:64:5A:C0:BE:89:88:F1:99:A2:99:FC:8A:FA:26:F1:2A:69 Authority key identifier: D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 Certificate issuer: /CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Certificate serial: 0E77F2BB6020CEDEC79F7AD5342896BA7DAE8C61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft Manifest number: 02B9 Signing time: Sun 20 Jul 2025 20:50:01 +0000 Manifest this update: Sun 20 Jul 2025 20:45:01 +0000 Manifest next update: Wed 23 Jul 2025 21:54:01 +0000 Files and hashes: 1: 3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa (hash: EWRSldncuijDwUH5kmTIxzgLmknYFLpjI5NK+K1R4Fw=) 2: D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl (hash: J8balHhSFT7ZJP09Ir1GBctyL6WWB5yFP/gmSwSUszA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 21:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:77:f2:bb:60:20:ce:de:c7:9f:7a:d5:34:28:96:ba:7d:ae:8c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Validity Not Before: Jul 20 20:45:01 2025 GMT Not After : Jul 23 21:54:01 2025 GMT Subject: CN=BE81D0645AC0BE8988F199A299FC8AFA26F12A69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:23:4a:d1:44:17:b6:5f:50:fe:5d:19:df:fc: fc:be:59:6e:0d:33:5c:c6:dd:28:ba:07:e8:34:54: 9d:ea:c8:f8:37:ca:62:33:1e:ee:2d:3c:57:41:39: b0:7d:4c:54:db:6b:42:bf:33:3d:a6:3b:4d:8b:95: 4a:ec:f3:89:13:34:e8:92:9c:81:0a:56:d3:26:ab: 6f:b3:65:ae:0f:bf:e7:64:57:03:98:bd:ec:1d:35: 3d:62:a5:fc:14:3c:76:e3:7a:ba:a7:dd:1f:d8:56: 15:af:94:6c:38:4f:16:b9:08:69:c2:3b:5d:c1:30: 94:a7:05:a6:85:9f:ec:ab:42:c3:cd:be:c9:a8:dc: 75:0e:5b:69:84:ac:2e:36:66:53:a9:2d:53:0e:be: ce:1d:b5:ce:21:4e:22:cb:01:42:04:f4:14:f2:d4: f7:e3:aa:fc:0d:21:6a:e7:22:07:07:85:26:3f:2b: c9:ac:86:8b:49:aa:70:8c:0e:23:95:cb:70:44:b0: dc:55:d5:c6:80:1c:f9:66:76:b0:04:28:08:27:89: 1e:48:e9:96:c4:a2:9c:6d:c9:21:b3:c6:56:cd:03: 5a:20:a2:18:35:e8:0e:11:77:b8:42:e6:85:21:f4: 6a:70:3d:e1:2b:37:9d:74:f7:2b:cc:99:11:69:10: 5b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:81:D0:64:5A:C0:BE:89:88:F1:99:A2:99:FC:8A:FA:26:F1:2A:69 X509v3 Authority Key Identifier: keyid:D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:1c:7a:28:9c:b0:01:c1:73:2e:12:58:60:e4:be:17:b8:31: 1d:60:91:94:a8:65:68:ca:b4:7d:98:06:8d:85:ca:e7:fd:80: 59:99:97:b0:34:8d:34:bb:ee:e3:b5:f0:20:96:e0:18:ef:2d: 0d:1c:64:29:3b:3a:39:44:7a:22:6c:1b:df:7f:25:01:ce:b1: f8:0f:5c:ed:42:4f:29:db:13:c2:db:d6:a6:ba:9e:1f:53:93: 38:1b:99:e1:7c:62:5e:89:20:a5:5e:5b:e5:e7:eb:75:b6:0e: 72:42:8a:5a:fd:f5:9f:be:82:d7:a7:c3:99:d4:9d:96:90:ba: 7b:b0:7f:cb:f4:29:47:5e:56:da:5e:e8:0b:b5:97:21:dc:1c: f4:e4:5e:bf:73:d0:00:4b:63:39:af:36:94:2e:ab:68:d3:95: c9:00:72:6e:0c:30:7c:ce:b3:50:90:7d:cd:34:92:99:f5:cb: de:c7:c9:85:b3:7e:8f:04:4c:b2:a5:b6:9e:5e:70:83:04:61: 05:51:c9:73:0b:d8:01:8e:6a:fe:96:db:cd:5a:82:2f:f1:86: 31:51:3b:a0:13:ca:76:6b:1d:a7:2c:10:4d:a4:40:da:a5:04: 20:a6:37:63:47:67:d8:c0:a7:26:82:23:d0:92:60:b0:1c:43: 8f:b0:61:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDnfyu2Agzt7Hn3rVNCiWun2ujGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVB M0ZDRUI2NjAeFw0yNTA3MjAyMDQ1MDFaFw0yNTA3MjMyMTU0MDFaMDMxMTAvBgNV BAMTKEJFODFEMDY0NUFDMEJFODk4OEYxOTlBMjk5RkM4QUZBMjZGMTJBNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEI0rRRBe2X1D+XRnf/Py+WW4N M1zG3Si6B+g0VJ3qyPg3ymIzHu4tPFdBObB9TFTba0K/Mz2mO02LlUrs84kTNOiS nIEKVtMmq2+zZa4Pv+dkVwOYvewdNT1ipfwUPHbjerqn3R/YVhWvlGw4Txa5CGnC O13BMJSnBaaFn+yrQsPNvsmo3HUOW2mErC42ZlOpLVMOvs4dtc4hTiLLAUIE9BTy 1PfjqvwNIWrnIgcHhSY/K8mshotJqnCMDiOVy3BEsNxV1caAHPlmdrAEKAgniR5I 6ZbEopxtySGzxlbNA1ogohg16A4Rd7hC5oUh9GpwPeErN5109yvMmRFpEFtTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvoHQZFrAvomI8ZmimfyK+ibxKmkwHwYDVR0j BBgwFoAU1sHxPGfNAlRd66qEbrKPbqP862YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2EyZTBkYi1lMjkzLTQxYzUtODU4My0zODAxNTc1ODQyMWMvMC9ENkMxRjEzQzY3 Q0QwMjU0NURFQkFBODQ2RUIyOEY2RUEzRkNFQjY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVBM0ZD RUI2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NhMmUwZGItZTI5My00MWM1LTg1 ODMtMzgwMTU3NTg0MjFjLzAvRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhG NkVBM0ZDRUI2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8ceiicsAHBcy4SWGDkvhe4MR1gkZSoZWjK tH2YBo2Fyuf9gFmZl7A0jTS77uO18CCW4BjvLQ0cZCk7OjlEeiJsG99/JQHOsfgP XO1CTynbE8Lb1qa6nh9TkzgbmeF8Yl6JIKVeW+Xn63W2DnJCilr99Z++gtenw5nU nZaQunuwf8v0KUdeVtpe6Au1lyHcHPTkXr9z0ABLYzmvNpQuq2jTlckAcm4MMHzO s1CQfc00kpn1y97HyYWzfo8ETLKltp5ecIMEYQVRyXML2AGOav6W281agi/xhjFR O6ATynZrHacsEE2kQNqlBCCmN2NHZ9jApyaCI9CSYLAcQ4+wYes= -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:14 2025 by rpki-client