$ rpki-client -vvf repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft File: 6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft (raw, json) Hash identifier: Fd6e988wdblAWq90aNuJhKSDuOq6HT1/T1NPhGVFZ80= Subject key identifier: D8:84:17:8D:4F:C2:DB:AD:A5:6E:15:2E:C8:6A:E5:C5:39:42:97:AA Authority key identifier: 6D:CC:69:50:8E:F4:E6:70:EF:BC:5C:69:20:3D:6B:12:0F:A9:39:2F Certificate issuer: /CN=6DCC69508EF4E670EFBC5C69203D6B120FA9392F Certificate serial: 7806D2B3A533208DACAAAEEA2FF1F937C9BEAD86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft Manifest number: 04F8 Signing time: Fri 25 Jul 2025 09:50:50 +0000 Manifest this update: Fri 25 Jul 2025 09:45:50 +0000 Manifest next update: Mon 28 Jul 2025 16:20:50 +0000 Files and hashes: 1: 6DCC69508EF4E670EFBC5C69203D6B120FA9392F.crl (hash: EJwDkwH9WtMSj1yaP0SKc3oc64hco+P9mgvS3Zxxl9k=) 2: 3130332e3135322e3131382e302f32342d3234203d3e20313430343433.roa (hash: E4zG118v/qHLN7ZNOQGDXXsw7DicdH5quyuAOIhYJfs=) 3: 3130332e3135322e3131382e302f32332d3233203d3e20313430343433.roa (hash: /yZJ48q5869CHyqd6SiEVpfiGq8gtKkTaa5YhAFQVoI=) 4: 3130332e3135322e3131392e302f32342d3234203d3e20313430343433.roa (hash: OYW0otw/C3geO3TMH4Vh+kOExJnpA1YbtcKJkivMvls=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.crl rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 16:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:06:d2:b3:a5:33:20:8d:ac:aa:ae:ea:2f:f1:f9:37:c9:be:ad:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DCC69508EF4E670EFBC5C69203D6B120FA9392F Validity Not Before: Jul 25 09:45:50 2025 GMT Not After : Jul 28 16:20:50 2025 GMT Subject: CN=D884178D4FC2DBADA56E152EC86AE5C5394297AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:95:91:47:00:48:5e:f1:07:12:6f:93:64:70: c2:f4:6a:fc:80:c8:62:1b:10:41:3d:e2:e2:21:d9: 36:95:53:63:0c:ea:de:2f:33:bf:24:dc:73:ca:dd: 0e:ce:c1:55:6f:7b:be:7e:f2:0e:7e:47:66:6f:20: ce:da:c4:5d:b7:ef:79:76:d1:a5:f3:50:1c:fd:db: fe:21:33:6b:4e:6c:cd:ef:ca:87:22:65:95:75:73: 21:ec:23:d7:23:1c:ec:59:11:c3:e1:82:7f:8b:0e: 0b:5e:82:84:dd:76:39:a0:71:6f:42:10:5c:b9:4c: 5a:e1:2a:e5:85:f5:52:0b:be:d5:1f:ad:ab:cf:85: 54:d5:27:f8:dc:ed:a2:54:f3:ff:55:a6:66:64:8b: 5f:1d:4e:ca:aa:fb:12:42:3f:62:85:8d:61:4a:46: 28:7e:59:07:48:42:fd:74:26:8b:f0:b5:12:d9:99: de:24:75:b8:c3:ea:89:e8:fd:be:64:75:43:72:ff: bd:c8:53:f8:68:bb:3f:9f:a1:b6:ee:43:f4:5a:8d: 29:f5:1b:ac:8d:b3:3e:cc:c9:e1:5e:0f:b2:c7:f9: 85:37:36:db:a1:82:81:7c:5c:6e:75:90:43:d9:a2: 0c:9c:70:ed:1f:e2:e6:e3:5d:01:8c:28:c3:53:55: bb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:84:17:8D:4F:C2:DB:AD:A5:6E:15:2E:C8:6A:E5:C5:39:42:97:AA X509v3 Authority Key Identifier: keyid:6D:CC:69:50:8E:F4:E6:70:EF:BC:5C:69:20:3D:6B:12:0F:A9:39:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:fc:25:5b:a0:86:45:85:21:30:b5:f9:36:d6:56:f7:5a:ba: 49:3d:53:56:99:6c:bc:47:dd:8b:b0:60:cc:97:d8:79:e2:ab: c3:c8:d8:e1:72:8f:d0:94:74:b8:63:1f:6e:0a:d4:67:4e:b7: 92:94:14:df:9c:21:58:13:0f:15:b2:0e:c7:a7:bf:f4:5c:83: c3:6b:a1:bf:69:9b:e9:33:90:3e:fe:d4:f9:1e:33:8e:e4:b3: 01:1d:92:bf:3e:a4:59:c6:b5:66:b0:e6:f7:1b:5a:33:83:e6: b4:27:92:3d:25:e2:ea:98:b8:b4:f3:af:8c:10:1f:ff:9a:14: 7b:11:1e:0a:f7:c9:86:d3:19:ab:7a:1d:93:80:fe:84:7a:48: 31:35:eb:8c:87:f4:73:3a:ca:e9:ad:e6:d9:8a:e7:e1:f5:01: 80:64:b5:b3:a9:ca:fd:f2:c6:31:af:54:2f:9d:33:18:30:6d: 39:cb:1b:06:fa:fb:77:cd:3a:c0:a0:6a:3f:27:81:73:76:7a: 64:45:11:84:fe:3b:66:c5:cc:f1:5c:04:83:0c:c2:d8:0a:04: f5:c6:7c:3f:39:98:d3:93:48:c0:15:a2:26:c4:d0:96:79:e0: 66:96:08:22:33:e9:92:a0:49:9c:f6:26:e7:21:19:d7:21:f9: cc:e4:76:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeAbSs6UzII2sqq7qL/H5N8m+rYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRDQzY5NTA4RUY0RTY3MEVGQkM1QzY5MjAzRDZCMTIw RkE5MzkyRjAeFw0yNTA3MjUwOTQ1NTBaFw0yNTA3MjgxNjIwNTBaMDMxMTAvBgNV BAMTKEQ4ODQxNzhENEZDMkRCQURBNTZFMTUyRUM4NkFFNUM1Mzk0Mjk3QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOlZFHAEhe8QcSb5NkcML0avyA yGIbEEE94uIh2TaVU2MM6t4vM78k3HPK3Q7OwVVve75+8g5+R2ZvIM7axF2373l2 0aXzUBz92/4hM2tObM3vyociZZV1cyHsI9cjHOxZEcPhgn+LDgtegoTddjmgcW9C EFy5TFrhKuWF9VILvtUfravPhVTVJ/jc7aJU8/9VpmZki18dTsqq+xJCP2KFjWFK Rih+WQdIQv10JovwtRLZmd4kdbjD6ono/b5kdUNy/73IU/houz+fobbuQ/RajSn1 G6yNsz7MyeFeD7LH+YU3NtuhgoF8XG51kEPZogyccO0f4ubjXQGMKMNTVbtjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2IQXjU/C262lbhUuyGrlxTlCl6owHwYDVR0j BBgwFoAUbcxpUI705nDvvFxpID1rEg+pOS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjA3M2FjZS1hNjkxLTQ4NjMtOWMxYy01OWIyZGI5Y2I0NjMvMC82RENDNjk1MDhF RjRFNjcwRUZCQzVDNjkyMDNENkIxMjBGQTkzOTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRDQzY5NTA4RUY0RTY3MEVGQkM1QzY5MjAzRDZCMTIwRkE5 MzkyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIwNzNhY2UtYTY5MS00ODYzLTlj MWMtNTliMmRiOWNiNDYzLzAvNkRDQzY5NTA4RUY0RTY3MEVGQkM1QzY5MjAzRDZC MTIwRkE5MzkyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACX8JVughkWFITC1+TbWVvdaukk9U1aZbLxH 3YuwYMyX2Hniq8PI2OFyj9CUdLhjH24K1GdOt5KUFN+cIVgTDxWyDsenv/Rcg8Nr ob9pm+kzkD7+1PkeM47kswEdkr8+pFnGtWaw5vcbWjOD5rQnkj0l4uqYuLTzr4wQ H/+aFHsRHgr3yYbTGat6HZOA/oR6SDE164yH9HM6yumt5tmK5+H1AYBktbOpyv3y xjGvVC+dMxgwbTnLGwb6+3fNOsCgaj8ngXN2emRFEYT+O2bFzPFcBIMMwtgKBPXG fD85mNOTSMAVoibE0JZ54GaWCCIz6ZKgSZz2JuchGdch+czkdmU= -----END CERTIFICATE-----Generated at Fri Jul 25 17:24:07 2025 by rpki-client