$ rpki-client -vvf repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft File: 6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft (raw, json) Hash identifier: bVf9PNSnzZvD4PhWV17LK8B8fdFVwvmcsS3heRbym54= Subject key identifier: 02:61:E2:CF:DE:0B:23:AF:C3:BF:7F:2A:68:97:34:E6:C0:07:E4:7C Authority key identifier: 6C:F6:DF:7E:65:16:A6:AB:F5:39:F0:39:6C:B6:C0:D4:DB:50:F4:D8 Certificate issuer: /CN=6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8 Certificate serial: 223734B68E98BC4E814D1C5645B43A5242A5B6C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft Manifest number: 01E8 Signing time: Sun 20 Jul 2025 10:51:50 +0000 Manifest this update: Sun 20 Jul 2025 10:46:50 +0000 Manifest next update: Wed 23 Jul 2025 12:03:50 +0000 Files and hashes: 1: 6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl (hash: DNkwR+/FDt9n3zed92C9U4QfUuPSEtuuUkQfqbhWMfM=) 2: 3130332e3139312e3134382e302f32332d3234203d3e2034383030.roa (hash: LB25lzl1k2b8wSXRCoswASZkgaqBVFdROFOv1MVYW7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 12:03:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:37:34:b6:8e:98:bc:4e:81:4d:1c:56:45:b4:3a:52:42:a5:b6:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8 Validity Not Before: Jul 20 10:46:50 2025 GMT Not After : Jul 23 12:03:50 2025 GMT Subject: CN=0261E2CFDE0B23AFC3BF7F2A689734E6C007E47C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:28:8d:ff:0d:d7:68:43:36:ad:8d:ef:9b:11: e0:3f:0d:f0:5c:15:7d:09:35:e6:2c:ca:8a:d9:66: dc:53:b4:d6:41:89:e1:00:64:80:b6:88:13:76:2c: 46:e0:9e:17:d2:a9:1f:3e:18:aa:a4:df:3c:f0:26: 7a:f2:d9:91:98:44:3c:98:29:ce:c6:ff:d5:05:c9: af:4b:fa:e8:f3:da:ee:59:e2:09:80:ae:24:c0:b6: b3:3b:05:79:6a:aa:f8:21:98:f3:e6:d3:e6:61:9c: c9:c9:79:f1:d5:53:3c:85:49:25:a9:c7:10:39:9a: 85:d3:ac:9e:2f:22:f0:ca:28:87:cf:92:7c:b6:9f: 81:4d:da:de:20:2f:db:fe:4b:d8:9f:17:2f:af:ae: 45:4a:15:06:21:72:3e:3e:42:e2:42:f1:2f:fa:c5: 10:2c:c8:27:f1:11:03:b5:76:37:04:5a:59:e0:ab: d0:77:db:9e:c5:7c:95:86:df:64:4a:56:26:00:f3: 59:1a:87:7d:9f:35:c9:cf:3e:51:0e:98:02:73:19: 7d:39:f0:04:af:e6:9c:12:32:ae:e3:d0:e7:db:33: 5c:b1:50:6f:82:19:70:bb:65:cc:10:81:ad:92:94: a5:22:c8:8b:8d:24:17:a7:ad:0c:52:65:b1:81:41: 95:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:61:E2:CF:DE:0B:23:AF:C3:BF:7F:2A:68:97:34:E6:C0:07:E4:7C X509v3 Authority Key Identifier: keyid:6C:F6:DF:7E:65:16:A6:AB:F5:39:F0:39:6C:B6:C0:D4:DB:50:F4:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a1:37:9e:d4:2d:84:70:7f:fd:b3:5a:52:e5:c8:9a:0b:02: ca:0b:a6:ae:98:53:a1:6e:13:cd:d8:95:2b:8a:ab:7d:f4:4d: 03:7d:ce:41:01:de:62:b8:82:cf:55:68:a0:44:f0:1c:2b:be: 5b:ec:4a:a2:59:67:90:41:3f:44:64:91:64:30:d6:2c:54:51: 0b:94:90:7b:dd:6b:92:03:cc:a7:5b:43:df:b4:b1:1b:ad:19: 30:cd:42:53:ab:e3:09:a9:ce:1f:49:0c:c5:6f:1d:34:1e:a5: 48:81:7e:d6:f1:7b:87:00:65:a2:d5:ca:24:9e:1f:91:7d:ae: 53:87:f1:5d:d9:a8:9e:fa:13:f1:f2:3c:4a:06:97:c2:25:ee: 3a:cd:4b:28:b9:69:d7:b5:7c:1c:1e:a7:65:11:66:6d:ca:ce: 2b:b7:ff:37:66:80:89:3b:8b:36:97:6c:94:ea:11:40:e4:ae: 17:96:45:51:77:b8:3b:7f:01:64:01:d8:2c:46:d3:d5:b4:76: 12:23:1a:78:a3:26:8d:6d:b5:ab:c7:6c:6f:e4:d5:c3:cc:99: 40:29:84:df:b7:5c:06:42:31:73:ae:92:5c:b4:82:50:30:44: 16:b6:a6:0f:97:40:af:b8:f5:fe:f8:ed:01:95:57:4d:4b:9c: d5:78:77:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIjc0to6YvE6BTRxWRbQ6UkKltscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMwRDRE QjUwRjREODAeFw0yNTA3MjAxMDQ2NTBaFw0yNTA3MjMxMjAzNTBaMDMxMTAvBgNV BAMTKDAyNjFFMkNGREUwQjIzQUZDM0JGN0YyQTY4OTczNEU2QzAwN0U0N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGKI3/DddoQzatje+bEeA/DfBc FX0JNeYsyorZZtxTtNZBieEAZIC2iBN2LEbgnhfSqR8+GKqk3zzwJnry2ZGYRDyY Kc7G/9UFya9L+ujz2u5Z4gmAriTAtrM7BXlqqvghmPPm0+ZhnMnJefHVUzyFSSWp xxA5moXTrJ4vIvDKKIfPkny2n4FN2t4gL9v+S9ifFy+vrkVKFQYhcj4+QuJC8S/6 xRAsyCfxEQO1djcEWlngq9B3257FfJWG32RKViYA81kah32fNcnPPlEOmAJzGX05 8ASv5pwSMq7j0OfbM1yxUG+CGXC7ZcwQga2SlKUiyIuNJBenrQxSZbGBQZUvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAmHiz94LI6/Dv38qaJc05sAH5HwwHwYDVR0j BBgwFoAUbPbffmUWpqv1OfA5bLbA1NtQ9NgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDkwNmZjMC00MzYzLTRmNDYtOWIxNC01YzFhYjgyNWEzMzUvMC82Q0Y2REY3RTY1 MTZBNkFCRjUzOUYwMzk2Q0I2QzBENERCNTBGNEQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMwRDREQjUw RjREOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ5MDZmYzAtNDM2My00ZjQ2LTli MTQtNWMxYWI4MjVhMzM1LzAvNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMw RDREQjUwRjREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqhN57ULYRwf/2zWlLlyJoLAsoLpq6YU6Fu E83YlSuKq330TQN9zkEB3mK4gs9VaKBE8BwrvlvsSqJZZ5BBP0RkkWQw1ixUUQuU kHvda5IDzKdbQ9+0sRutGTDNQlOr4wmpzh9JDMVvHTQepUiBftbxe4cAZaLVyiSe H5F9rlOH8V3ZqJ76E/HyPEoGl8Il7jrNSyi5ade1fBwep2URZm3Kziu3/zdmgIk7 izaXbJTqEUDkrheWRVF3uDt/AWQB2CxG09W0dhIjGnijJo1ttavHbG/k1cPMmUAp hN+3XAZCMXOukly0glAwRBa2pg+XQK+49f747QGVV01LnNV4d7Y= -----END CERTIFICATE-----Generated at Mon Jul 21 10:34:09 2025 by rpki-client