$ rpki-client -vvf repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft File: 6D958AAEBD8946E47C968284B2652E02A2017E9E.mft (raw, json) Hash identifier: skBPxrBBH+bIUwzqCLoUi/ZJuDV3ODdOkZ4mMxDnjjM= Subject key identifier: 26:0F:8D:54:77:51:54:38:51:9D:19:AD:D2:95:97:68:7E:D8:D4:97 Authority key identifier: 6D:95:8A:AE:BD:89:46:E4:7C:96:82:84:B2:65:2E:02:A2:01:7E:9E Certificate issuer: /CN=6D958AAEBD8946E47C968284B2652E02A2017E9E Certificate serial: 6D6717912B0DCDAB69B8BBAE4D69B3DBBFDDE027 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft Manifest number: 0187 Signing time: Mon 21 Jul 2025 05:00:04 +0000 Manifest this update: Mon 21 Jul 2025 04:55:04 +0000 Manifest next update: Thu 24 Jul 2025 12:17:04 +0000 Files and hashes: 1: 3130332e3136372e3135362e302f32342d3234203d3e20313530353534.roa (hash: 80t5eYSm2/YNhAieXcls0z7n1huVJvGeox5Fv2BAMW4=) 2: 6D958AAEBD8946E47C968284B2652E02A2017E9E.crl (hash: +rofSZUkte4xwYtjMCcH0O/ir4RxnHuuoLvq5obPfbY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.crl rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 12:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:67:17:91:2b:0d:cd:ab:69:b8:bb:ae:4d:69:b3:db:bf:dd:e0:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D958AAEBD8946E47C968284B2652E02A2017E9E Validity Not Before: Jul 21 04:55:04 2025 GMT Not After : Jul 24 12:17:04 2025 GMT Subject: CN=260F8D5477515438519D19ADD29597687ED8D497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f6:48:40:78:54:f5:d6:9d:1e:f4:53:17:38: 24:6c:01:bd:e1:af:e5:a5:5f:e9:f8:ce:e9:1b:58: cf:79:b8:f5:3f:18:c9:4d:ac:a5:36:42:57:8e:b3: 97:ba:b3:33:ca:f5:6a:49:1f:a1:67:01:73:cb:37: dd:90:35:c1:f9:cc:09:0d:65:6e:75:17:40:ae:5c: 1f:51:1b:3d:46:ac:ab:a9:20:64:71:f8:b3:aa:14: 5f:f9:db:0b:61:a9:fa:90:d7:d2:d6:bf:b2:1f:51: 83:b8:10:59:23:85:0c:8f:81:54:80:6d:3c:e7:9a: cd:5f:27:c9:fb:94:03:3b:39:17:1d:68:37:ac:72: 9a:e9:ed:96:d4:62:62:26:8d:d0:7d:be:33:bf:67: 51:f8:8d:6f:fb:2a:ff:7f:b3:ec:a0:d7:07:be:82: 0c:3a:58:6b:67:d9:e6:ce:6e:e1:78:5f:14:e0:4b: 77:9f:e5:6d:52:51:ac:97:0d:c2:ae:cc:44:ab:e7: 6e:90:c7:18:8f:d2:fe:54:eb:b4:09:30:0d:b5:8a: 56:c2:dd:b8:48:a5:67:8d:eb:82:c7:35:ec:c2:38: 6f:85:b0:69:ca:0b:59:71:b8:2d:2b:c9:75:4b:3e: a1:85:11:d9:1f:90:4d:a8:b8:8f:59:f5:26:77:c2: 54:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:0F:8D:54:77:51:54:38:51:9D:19:AD:D2:95:97:68:7E:D8:D4:97 X509v3 Authority Key Identifier: keyid:6D:95:8A:AE:BD:89:46:E4:7C:96:82:84:B2:65:2E:02:A2:01:7E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:e2:ac:93:b1:b3:12:56:41:8e:ad:d0:eb:b5:99:27:83:9c: 93:4b:07:6c:96:fa:9c:a3:b1:17:a8:1b:3b:91:44:b7:28:dc: a6:9b:d4:ed:41:59:91:23:90:ac:2a:f6:67:c6:bc:d4:91:04: 6d:f4:17:f1:e5:47:a0:47:4f:4b:27:bc:84:fb:d6:ad:c3:c3: 3c:a0:3b:f1:13:ed:17:37:2c:da:18:ec:15:dc:2b:cd:29:33: cf:e2:94:b5:5b:e1:77:7f:ec:b8:dc:0f:f6:a7:9a:d0:aa:05: c1:62:0a:0d:2f:da:cf:ff:ec:a5:57:a2:f3:d5:7d:96:c4:34: 2c:ab:d5:d0:4a:7c:27:55:ab:12:e8:2f:f2:c5:20:c0:10:e4: 1b:9d:0c:58:c7:02:36:e1:95:93:f1:fd:b9:34:9f:85:73:cc: ae:84:b4:93:d6:90:79:de:ff:1b:8a:fb:59:8a:11:75:dd:97: 7c:ad:3d:41:69:1a:83:22:38:a8:15:31:b5:6d:ba:2e:a4:01: 26:6d:13:0e:35:58:8a:64:2f:6a:fa:6b:12:71:a7:ba:d9:ba: 98:80:ef:ea:52:57:62:fa:27:43:6b:e5:2a:a7:ea:1c:6c:4d: 9f:66:b2:dd:6d:48:1d:f3:ff:78:c0:af:24:df:e7:95:db:98: 15:bf:d9:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbWcXkSsNzatpuLuuTWmz27/d4CcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJFMDJB MjAxN0U5RTAeFw0yNTA3MjEwNDU1MDRaFw0yNTA3MjQxMjE3MDRaMDMxMTAvBgNV BAMTKDI2MEY4RDU0Nzc1MTU0Mzg1MTlEMTlBREQyOTU5NzY4N0VEOEQ0OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi9khAeFT11p0e9FMXOCRsAb3h r+WlX+n4zukbWM95uPU/GMlNrKU2QleOs5e6szPK9WpJH6FnAXPLN92QNcH5zAkN ZW51F0CuXB9RGz1GrKupIGRx+LOqFF/52wthqfqQ19LWv7IfUYO4EFkjhQyPgVSA bTznms1fJ8n7lAM7ORcdaDescprp7ZbUYmImjdB9vjO/Z1H4jW/7Kv9/s+yg1we+ ggw6WGtn2ebObuF4XxTgS3ef5W1SUayXDcKuzESr526QxxiP0v5U67QJMA21ilbC 3bhIpWeN64LHNezCOG+FsGnKC1lxuC0ryXVLPqGFEdkfkE2ouI9Z9SZ3wlSnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJg+NVHdRVDhRnRmt0pWXaH7Y1JcwHwYDVR0j BBgwFoAUbZWKrr2JRuR8loKEsmUuAqIBfp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTgwMzEyNS1kNzc3LTQwNTYtODQ0ZC04ZDFiZWZkMDE2M2QvMC82RDk1OEFBRUJE ODk0NkU0N0M5NjgyODRCMjY1MkUwMkEyMDE3RTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJFMDJBMjAx N0U5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE4MDMxMjUtZDc3Ny00MDU2LTg0 NGQtOGQxYmVmZDAxNjNkLzAvNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJF MDJBMjAxN0U5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIvirJOxsxJWQY6t0Ou1mSeDnJNLB2yW+pyj sReoGzuRRLco3Kab1O1BWZEjkKwq9mfGvNSRBG30F/HlR6BHT0snvIT71q3Dwzyg O/ET7Rc3LNoY7BXcK80pM8/ilLVb4Xd/7LjcD/anmtCqBcFiCg0v2s//7KVXovPV fZbENCyr1dBKfCdVqxLoL/LFIMAQ5BudDFjHAjbhlZPx/bk0n4VzzK6EtJPWkHne /xuK+1mKEXXdl3ytPUFpGoMiOKgVMbVtui6kASZtEw41WIpkL2r6axJxp7rZupiA 7+pSV2L6J0Nr5Sqn6hxsTZ9mst1tSB3z/3jAryTf55XbmBW/2dw= -----END CERTIFICATE-----Generated at Mon Jul 21 12:29:16 2025 by rpki-client