$ rpki-client -vvf repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft File: 6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft (raw, json) Hash identifier: oEQh/V2xm9QW9Kbzud4ArqdWTV1R/RjOphlK7uZAw+A= Subject key identifier: 33:45:2F:7B:19:9D:A2:48:8B:16:3E:B7:EA:7F:79:9A:57:15:1C:64 Authority key identifier: 6D:39:05:08:CE:26:22:C5:BA:AA:3B:EE:95:AA:61:27:FE:5B:E5:F4 Certificate issuer: /CN=6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4 Certificate serial: 77780793D8EB69D3C8951BC1C20FA93AECFEA3D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft Manifest number: 0294 Signing time: Sun 20 Jul 2025 08:11:15 +0000 Manifest this update: Sun 20 Jul 2025 08:06:15 +0000 Manifest next update: Wed 23 Jul 2025 19:54:15 +0000 Files and hashes: 1: 3130332e3137342e31362e302f32342d3234203d3e20313437303933.roa (hash: KF7nH5pW5/ZblyJqWbcvRko2OuzeK910SdQ0o3we0k8=) 2: 6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.crl (hash: 7wO3SH8GSUwZUglH3kQ7cNmpDylVGkyID3sAfjRXD3k=) 3: 3130332e3137342e31372e302f32342d3234203d3e20313437303933.roa (hash: 1qisgGmZ4ZLz1lme/uSxLcvbwX2pXl2QEYezWVi61a0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.crl rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 19:54:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:78:07:93:d8:eb:69:d3:c8:95:1b:c1:c2:0f:a9:3a:ec:fe:a3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4 Validity Not Before: Jul 20 08:06:15 2025 GMT Not After : Jul 23 19:54:15 2025 GMT Subject: CN=33452F7B199DA2488B163EB7EA7F799A57151C64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e1:52:6e:4e:f2:f1:23:47:19:cc:58:e0:ad: 90:47:0b:ad:4f:76:1d:07:32:9c:f0:28:f3:aa:0f: 1e:76:2c:e0:60:43:ec:95:5f:ed:e0:6e:ba:fa:05: dc:de:f4:64:f3:6f:3f:e5:5b:b4:1e:f7:2f:26:bf: 07:9c:1c:dd:6e:ca:c4:06:9d:38:0e:5d:8a:0c:2f: 3b:21:9c:03:59:cb:e0:60:92:66:16:25:10:90:95: e0:d6:3d:22:96:f0:16:a2:1f:7b:99:ab:d4:98:a1: 36:c3:5f:d6:95:3a:8c:ca:65:7c:27:bf:cd:4a:25: f0:dd:2b:83:ad:ee:8f:1d:3d:6a:71:0a:91:ad:e0: d3:72:37:d8:96:de:41:e5:75:ca:8c:c8:24:f5:a0: a5:ea:a5:00:d2:66:da:16:e7:1c:cf:02:dd:e5:b7: f3:91:84:1d:ba:cb:f3:a7:61:7e:c0:8a:45:d3:fd: 28:fc:92:57:ad:1e:3f:f9:6b:5e:4a:ee:2f:46:64: 68:fb:21:7a:ea:ae:4d:dc:b8:bd:17:09:09:b4:7e: e8:06:02:70:f2:78:36:af:c6:dc:29:ee:1b:17:84: ff:e3:71:a3:fe:5a:fe:9a:15:25:4e:4a:f3:c1:63: a6:68:9e:d9:5d:0a:ed:5c:da:d9:a2:fe:09:e3:cb: d9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:45:2F:7B:19:9D:A2:48:8B:16:3E:B7:EA:7F:79:9A:57:15:1C:64 X509v3 Authority Key Identifier: keyid:6D:39:05:08:CE:26:22:C5:BA:AA:3B:EE:95:AA:61:27:FE:5B:E5:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:de:47:7c:d7:0e:c4:9e:50:06:0d:ff:e5:c8:be:cd:b8:2f: 77:25:3b:a0:78:00:b3:4e:19:4a:3c:d1:9a:53:1a:ab:37:c3: 8a:ad:e6:51:e0:33:aa:ca:69:27:0a:a4:e4:9d:7a:e7:b3:f5: a4:fc:ab:1f:3f:a5:7e:f7:dd:80:22:2a:81:18:36:7d:0a:40: 9f:6f:75:16:1d:77:51:68:d5:75:c1:60:a6:ab:9c:32:ec:9a: e8:35:41:a9:af:f5:c5:86:15:bb:19:ff:bb:00:5e:4f:f7:fe: 20:3e:22:09:36:a7:d8:8f:91:bd:92:26:f1:e7:8f:f0:88:55: e2:9f:9e:82:fd:ae:c9:aa:71:6f:ac:35:d8:fa:28:18:27:bb: 25:6c:4f:3a:59:91:a6:ea:b4:97:b3:6c:43:6c:59:8a:4a:8d: 6c:61:fe:3b:7b:6a:2b:28:74:51:e4:54:4e:3a:f5:89:ea:79: 45:52:6d:f0:a3:fb:74:df:1d:c5:8c:60:14:2b:2f:41:3c:31: 89:2a:e5:8d:d9:73:55:de:d9:37:85:33:38:55:a7:df:7e:3d: c8:2a:6e:6f:85:73:08:51:77:0b:3a:1d:b3:b6:a6:ea:3f:67: b0:97:a2:a3:68:f1:75:e8:d7:07:95:4c:40:56:73:fe:c5:20: 5f:e0:e2:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd3gHk9jradPIlRvBwg+pOuz+o9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQzOTA1MDhDRTI2MjJDNUJBQUEzQkVFOTVBQTYxMjdG RTVCRTVGNDAeFw0yNTA3MjAwODA2MTVaFw0yNTA3MjMxOTU0MTVaMDMxMTAvBgNV BAMTKDMzNDUyRjdCMTk5REEyNDg4QjE2M0VCN0VBN0Y3OTlBNTcxNTFDNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS4VJuTvLxI0cZzFjgrZBHC61P dh0HMpzwKPOqDx52LOBgQ+yVX+3gbrr6Bdze9GTzbz/lW7Qe9y8mvwecHN1uysQG nTgOXYoMLzshnANZy+BgkmYWJRCQleDWPSKW8BaiH3uZq9SYoTbDX9aVOozKZXwn v81KJfDdK4Ot7o8dPWpxCpGt4NNyN9iW3kHldcqMyCT1oKXqpQDSZtoW5xzPAt3l t/ORhB26y/OnYX7AikXT/Sj8kletHj/5a15K7i9GZGj7IXrqrk3cuL0XCQm0fugG AnDyeDavxtwp7hsXhP/jcaP+Wv6aFSVOSvPBY6ZontldCu1c2tmi/gnjy9mnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM0UvexmdokiLFj636n95mlcVHGQwHwYDVR0j BBgwFoAUbTkFCM4mIsW6qjvulaphJ/5b5fQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTQ4MmFkYS1kMGM4LTQ2NGItYTAwNy04NTE5NDg5Y2IxYzQvMC82RDM5MDUwOENF MjYyMkM1QkFBQTNCRUU5NUFBNjEyN0ZFNUJFNUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQzOTA1MDhDRTI2MjJDNUJBQUEzQkVFOTVBQTYxMjdGRTVC RTVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U0ODJhZGEtZDBjOC00NjRiLWEw MDctODUxOTQ4OWNiMWM0LzAvNkQzOTA1MDhDRTI2MjJDNUJBQUEzQkVFOTVBQTYx MjdGRTVCRTVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzeR3zXDsSeUAYN/+XIvs24L3clO6B4ALNO GUo80ZpTGqs3w4qt5lHgM6rKaScKpOSdeuez9aT8qx8/pX733YAiKoEYNn0KQJ9v dRYdd1Fo1XXBYKarnDLsmug1Qamv9cWGFbsZ/7sAXk/3/iA+Igk2p9iPkb2SJvHn j/CIVeKfnoL9rsmqcW+sNdj6KBgnuyVsTzpZkabqtJezbENsWYpKjWxh/jt7aiso dFHkVE469YnqeUVSbfCj+3TfHcWMYBQrL0E8MYkq5Y3Zc1Xe2TeFMzhVp99+Pcgq bm+FcwhRdws6HbO2puo/Z7CXoqNo8XXo1weVTEBWc/7FIF/g4uE= -----END CERTIFICATE-----Generated at Mon Jul 21 02:07:30 2025 by rpki-client