$ rpki-client -vvf repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft File: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft (raw, json) Hash identifier: NItq3orDt7nBZjbzllF59tH3NHmXXGi0gu4oFIeXYHI= Subject key identifier: FA:7C:7D:44:45:9A:98:F8:F1:3A:7D:15:24:59:A6:4A:77:46:54:AF Authority key identifier: 6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA Certificate issuer: /CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Certificate serial: 615CECA21396E8CF644C3556B5CF19B605987BD7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft Manifest number: 0208 Signing time: Sun 07 Sep 2025 13:40:03 +0000 Manifest this update: Sun 07 Sep 2025 13:35:03 +0000 Manifest next update: Thu 11 Sep 2025 00:47:03 +0000 Files and hashes: 1: 3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa (hash: jcYNuwq5tBbtUM+5LFf+gih2lHYu/silWmdWErgVy5M=) 2: 3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa (hash: XLXbrSM75a4OOhdIFSVSWGya3QA7TZER3P7tGhI+wW0=) 3: 3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa (hash: R1C6O4ul1Ppozfaiesg+Uhn8MwDAOfzdAmq+sSEet2w=) 4: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl (hash: MOW8lucFdDtqtxQmAFZbx4XLrKmZUxntPJiFygqZQfo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:5c:ec:a2:13:96:e8:cf:64:4c:35:56:b5:cf:19:b6:05:98:7b:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Validity Not Before: Sep 7 13:35:03 2025 GMT Not After : Sep 11 00:47:03 2025 GMT Subject: CN=FA7C7D44459A98F8F13A7D152459A64A774654AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:df:5e:d4:f5:56:13:5f:90:9e:88:9b:1e:f6: 98:42:1b:e6:1f:23:44:42:e3:83:de:fb:b2:3a:a3: 95:3d:8f:f2:9e:0b:62:fa:01:4e:76:e1:dc:09:2a: 22:5d:13:25:4f:4c:6a:17:a9:82:45:d1:78:c9:82: bc:0f:06:d8:7c:04:20:fc:be:31:d6:3a:96:5c:44: 17:9c:1c:64:7f:04:3d:e3:3e:5e:73:8f:30:57:8d: 8b:84:f5:db:bc:6f:7a:d5:67:4d:90:a9:73:e7:92: b5:7b:db:e4:e6:e5:14:65:92:00:d2:4e:60:4f:54: 80:20:6b:04:e8:be:70:49:1e:0b:fb:1e:59:54:ee: a4:5c:8d:b3:76:86:3e:5c:cc:f2:f9:45:78:b0:4c: 0a:a1:30:74:7e:8e:29:7a:d1:2d:f7:f9:70:0c:8c: 57:30:4b:e2:4f:e8:42:a5:90:26:9a:b6:68:aa:93: 06:8a:48:bb:18:f1:9d:da:bc:d5:ed:ee:0b:c0:2a: 76:e8:71:3e:44:c9:f5:e5:24:62:9d:ab:0b:a0:16: 94:ad:50:8c:5f:5f:bb:10:54:80:54:e9:47:17:52: 29:15:eb:36:23:ce:bf:61:c0:d0:18:5b:ab:f9:26: 4f:53:0a:be:7b:7f:22:bd:a4:34:45:41:1e:7b:bc: f1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7C:7D:44:45:9A:98:F8:F1:3A:7D:15:24:59:A6:4A:77:46:54:AF X509v3 Authority Key Identifier: keyid:6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:36:d7:1f:26:f9:17:42:68:89:2c:7c:9b:b4:cd:96:4a:e2: 27:be:8a:bb:00:ad:85:fb:f5:b1:41:dc:7e:32:a5:39:81:cc: 1e:1d:3c:9b:64:56:cc:2e:10:4d:99:90:71:83:87:64:e4:cd: be:81:4e:96:08:db:cd:cf:3a:2a:29:cb:f4:48:10:52:4a:f4: 94:55:a1:75:0a:12:00:c0:30:cb:d5:97:fa:a4:c4:d4:4c:8f: 90:d1:f1:4a:c6:75:33:1d:01:bb:91:43:98:f1:2b:23:8d:d7: 75:d1:47:f9:ba:a3:53:a4:cd:85:d3:c7:47:de:0b:7d:04:24: d7:87:71:4a:db:96:bd:6f:3b:71:25:5e:54:3b:b4:39:e5:3e: d6:50:8a:eb:ad:78:18:af:0b:5d:8c:72:1f:e8:be:9b:27:a7: 90:c9:7d:80:ae:7e:9c:15:01:78:ac:64:84:0b:06:e1:de:55: ba:72:5d:c9:f1:c0:62:d4:3b:26:82:d4:ea:de:62:51:da:b9: 80:0a:88:72:ad:85:ed:ed:be:39:c0:d5:29:b8:28:4d:95:ee: ff:2e:cd:25:a4:62:06:00:2a:a2:75:87:98:1c:29:09:7b:7f: 3c:e8:e8:7a:57:c7:51:ec:da:08:ba:65:09:ad:c6:b7:cc:af: 50:46:e7:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYVzsohOW6M9kTDVWtc8ZtgWYe9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMx REIwOEZEQTAeFw0yNTA5MDcxMzM1MDNaFw0yNTA5MTEwMDQ3MDNaMDMxMTAvBgNV BAMTKEZBN0M3RDQ0NDU5QTk4RjhGMTNBN0QxNTI0NTlBNjRBNzc0NjU0QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA317U9VYTX5CeiJse9phCG+Yf I0RC44Pe+7I6o5U9j/KeC2L6AU524dwJKiJdEyVPTGoXqYJF0XjJgrwPBth8BCD8 vjHWOpZcRBecHGR/BD3jPl5zjzBXjYuE9du8b3rVZ02QqXPnkrV72+Tm5RRlkgDS TmBPVIAgawTovnBJHgv7HllU7qRcjbN2hj5czPL5RXiwTAqhMHR+jil60S33+XAM jFcwS+JP6EKlkCaatmiqkwaKSLsY8Z3avNXt7gvAKnbocT5EyfXlJGKdqwugFpSt UIxfX7sQVIBU6UcXUikV6zYjzr9hwNAYW6v5Jk9TCr57fyK9pDRFQR57vPHHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+nx9REWamPjxOn0VJFmmSndGVK8wHwYDVR0j BBgwFoAUb8DJM0D/c1k0NMjv/O2Osx2wj9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjY1OTkwNC0zNzAyLTQ3OTctYmQxYi00NDdhYjhjOTRlMGMvMC82RkMwQzkzMzQw RkY3MzU5MzQzNEM4RUZGQ0VEOEVCMzFEQjA4RkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMxREIw OEZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY2NTk5MDQtMzcwMi00Nzk3LWJk MWItNDQ3YWI4Yzk0ZTBjLzAvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhF QjMxREIwOEZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALI21x8m+RdCaIksfJu0zZZK4ie+irsArYX7 9bFB3H4ypTmBzB4dPJtkVswuEE2ZkHGDh2Tkzb6BTpYI283POiopy/RIEFJK9JRV oXUKEgDAMMvVl/qkxNRMj5DR8UrGdTMdAbuRQ5jxKyON13XRR/m6o1OkzYXTx0fe C30EJNeHcUrblr1vO3ElXlQ7tDnlPtZQiuuteBivC12Mch/ovpsnp5DJfYCufpwV AXisZIQLBuHeVbpyXcnxwGLUOyaC1OreYlHauYAKiHKthe3tvjnA1Sm4KE2V7v8u zSWkYgYAKqJ1h5gcKQl7fzzo6HpXx1Hs2gi6ZQmtxrfMr1BG50s= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:13 2025 by rpki-client