$ rpki-client -vvf repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft File: 6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft (raw, json) Hash identifier: LddJMMSqBTfqvYxCt+PEShJtFS19dHv52AE08d96bzM= Subject key identifier: 40:BD:B8:F5:37:1C:9F:23:C9:51:9B:0D:47:C0:2E:E4:B8:1A:D6:28 Authority key identifier: 6F:EA:E1:20:D8:CD:63:D6:82:4D:82:61:F7:B0:98:63:1E:F4:12:E0 Certificate issuer: /CN=6FEAE120D8CD63D6824D8261F7B098631EF412E0 Certificate serial: 61AE7ADF54B6936CAD3AB80DE8C155689EAA9116 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft Manifest number: 03A6 Signing time: Mon 08 Sep 2025 07:11:24 +0000 Manifest this update: Mon 08 Sep 2025 07:06:24 +0000 Manifest next update: Thu 11 Sep 2025 18:03:24 +0000 Files and hashes: 1: 3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa (hash: GVGKM4eV+MMT2LsZ6I2vKHLbSn/15kKEM082mCeNaT8=) 2: 3130332e3136332e3130332e302f32342d3234203d3e20313431363733.roa (hash: nbSzLxkTgg1Fhd955VZ38kl51XuK78f19xIlXEphedE=) 3: 6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl (hash: P4yHIbiW3Wyv+/P2fPnbHxXuSGZ3BUj1c84Lvu21CuU=) 4: 3130332e3136332e3130322e302f32342d3234203d3e20313431363733.roa (hash: HBCSlYe9SztvZ5iSEatkCght6QFzU9643YFr0LJkHe0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 18:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ae:7a:df:54:b6:93:6c:ad:3a:b8:0d:e8:c1:55:68:9e:aa:91:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FEAE120D8CD63D6824D8261F7B098631EF412E0 Validity Not Before: Sep 8 07:06:24 2025 GMT Not After : Sep 11 18:03:24 2025 GMT Subject: CN=40BDB8F5371C9F23C9519B0D47C02EE4B81AD628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2f:45:0d:e5:b7:0f:3b:54:44:72:09:5b:63: 33:fc:b0:cf:4a:b9:8d:3e:39:37:c3:f9:a2:c2:c0: 11:08:bb:e3:63:5c:f0:9e:f6:e6:2f:d0:ae:e9:e9: 67:58:a3:4d:2a:21:22:61:5c:16:7a:62:40:5a:5d: cf:2c:08:76:7e:84:15:e5:2b:19:1a:37:4e:30:0b: 59:a3:64:85:0a:38:13:e2:8b:56:33:7e:9c:59:f3: fd:7e:3b:18:69:78:cf:44:e4:8b:66:ac:f2:be:8a: 21:d7:d1:50:de:8d:77:84:51:d8:7c:7a:5c:1e:b9: 59:0e:13:6a:8b:df:1b:35:95:24:3f:3f:10:0a:f4: 52:a4:2b:ae:c8:29:fa:93:66:58:3b:f8:95:cf:1f: ea:4e:45:08:a3:9f:75:2f:c0:43:70:09:ad:64:3c: 02:c9:34:0f:dc:56:81:6c:df:4c:aa:fc:70:5c:a3: bc:5b:1d:66:4b:bd:17:31:9c:96:87:ab:97:c0:0b: 4f:b9:c7:c3:4d:f6:04:55:c3:7b:fe:67:bb:c3:2e: 6b:da:d5:8a:a8:ef:5e:72:f8:04:b8:93:6b:69:d7: bb:41:e0:c7:c1:21:4b:18:4c:e1:f8:c6:6b:d9:a7: 57:e3:be:12:67:1e:e2:54:07:51:06:d6:b8:e8:7d: 3e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:BD:B8:F5:37:1C:9F:23:C9:51:9B:0D:47:C0:2E:E4:B8:1A:D6:28 X509v3 Authority Key Identifier: keyid:6F:EA:E1:20:D8:CD:63:D6:82:4D:82:61:F7:B0:98:63:1E:F4:12:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:7f:55:f9:b0:72:e0:df:ab:8c:15:fc:ff:fa:a7:b3:25:4c: 71:fc:33:f9:5f:89:b2:82:03:c0:73:53:df:8f:ed:0e:e7:47: 31:63:f0:bc:8e:33:a8:96:b9:12:ff:63:ec:3e:b8:0d:68:2a: 4d:37:aa:10:b4:10:84:c7:20:90:f1:f7:27:49:54:35:6b:98: ee:f8:65:54:41:ec:d1:4e:71:6b:ca:62:b0:f4:63:30:48:46: 20:a1:32:99:38:2d:93:c9:f1:c7:ce:e4:c1:4b:29:e9:a9:24: 12:ff:f6:e2:ee:a6:46:32:c2:8d:57:73:2a:82:29:d5:8e:f3: 34:9c:d4:d3:2b:db:da:f0:4c:28:ea:97:e8:61:87:dd:78:20: e4:2b:75:a2:03:da:8b:52:c9:8f:ef:98:0e:15:e8:08:43:7e: 54:cb:56:4f:a4:fb:24:89:df:27:c2:85:66:95:5d:06:5c:14: 32:42:72:08:c3:ed:60:36:13:95:fb:43:d9:1b:d5:fc:c5:ef: c8:ac:49:30:0f:97:a1:b6:c3:b1:46:04:f0:22:58:28:c5:c0: 17:fa:b7:08:a8:0e:9f:ff:68:4a:ab:1b:1a:f5:6e:a4:88:69: a7:05:95:c6:e9:79:5d:92:f6:cd:2a:17:8d:b0:c1:1e:dd:aa: d3:30:6d:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYa5631S2k2ytOrgN6MFVaJ6qkRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4NjMx RUY0MTJFMDAeFw0yNTA5MDgwNzA2MjRaFw0yNTA5MTExODAzMjRaMDMxMTAvBgNV BAMTKDQwQkRCOEY1MzcxQzlGMjNDOTUxOUIwRDQ3QzAyRUU0QjgxQUQ2MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkL0UN5bcPO1REcglbYzP8sM9K uY0+OTfD+aLCwBEIu+NjXPCe9uYv0K7p6WdYo00qISJhXBZ6YkBaXc8sCHZ+hBXl KxkaN04wC1mjZIUKOBPii1YzfpxZ8/1+OxhpeM9E5ItmrPK+iiHX0VDejXeEUdh8 elweuVkOE2qL3xs1lSQ/PxAK9FKkK67IKfqTZlg7+JXPH+pORQijn3UvwENwCa1k PALJNA/cVoFs30yq/HBco7xbHWZLvRcxnJaHq5fAC0+5x8NN9gRVw3v+Z7vDLmva 1Yqo715y+AS4k2tp17tB4MfBIUsYTOH4xmvZp1fjvhJnHuJUB1EG1rjofT5VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQL249TccnyPJUZsNR8Au5Lga1igwHwYDVR0j BBgwFoAUb+rhINjNY9aCTYJh97CYYx70EuAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzFlNDlhYi01MGNhLTRiM2UtODIzYy04YjNkMzFiYTg1ZjIvMC82RkVBRTEyMEQ4 Q0Q2M0Q2ODI0RDgyNjFGN0IwOTg2MzFFRjQxMkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4NjMxRUY0 MTJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGMxZTQ5YWItNTBjYS00YjNlLTgy M2MtOGIzZDMxYmE4NWYyLzAvNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4 NjMxRUY0MTJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9/VfmwcuDfq4wV/P/6p7MlTHH8M/lfibKC A8BzU9+P7Q7nRzFj8LyOM6iWuRL/Y+w+uA1oKk03qhC0EITHIJDx9ydJVDVrmO74 ZVRB7NFOcWvKYrD0YzBIRiChMpk4LZPJ8cfO5MFLKempJBL/9uLupkYywo1XcyqC KdWO8zSc1NMr29rwTCjql+hhh914IOQrdaID2otSyY/vmA4V6AhDflTLVk+k+ySJ 3yfChWaVXQZcFDJCcgjD7WA2E5X7Q9kb1fzF78isSTAPl6G2w7FGBPAiWCjFwBf6 twioDp//aEqrGxr1bqSIaacFlcbpeV2S9s0qF42wwR7dqtMwbXU= -----END CERTIFICATE-----Generated at Wed Sep 10 00:14:17 2025 by rpki-client