$ rpki-client -vvf repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft File: D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft (raw, json) Hash identifier: dKLgwyeOvWaAT2de1gVKew97t+X3SgBuDX1/ED06HUA= Subject key identifier: 3A:DC:FE:99:7E:22:9C:E2:B4:D1:0C:7E:43:68:AC:D4:77:C1:66:56 Authority key identifier: D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29 Certificate issuer: /CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29 Certificate serial: 268353B171D141EBBAE0502600FB5B09F9309648 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft Manifest number: 01BB Signing time: Sat 06 Sep 2025 03:52:15 +0000 Manifest this update: Sat 06 Sep 2025 03:47:15 +0000 Manifest next update: Tue 09 Sep 2025 14:53:15 +0000 Files and hashes: 1: D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl (hash: 4QNBfrq885OofPRmKVglBu2NsrjbGe0WXsTyI1gu8PU=) 2: 3130332e33392e37332e302f32342d3234203d3e20313530343838.roa (hash: 7nqCoBs4UD5Q0zFXqw657mJUgZK2hC/5uxbKdURPAzM=) 3: 3130332e33392e37322e302f32342d3234203d3e20313530343838.roa (hash: owzFX97yUwQlgrwuIyX44838/uUdwYXvl6IShRtLOss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 14:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:83:53:b1:71:d1:41:eb:ba:e0:50:26:00:fb:5b:09:f9:30:96:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29 Validity Not Before: Sep 6 03:47:15 2025 GMT Not After : Sep 9 14:53:15 2025 GMT Subject: CN=3ADCFE997E229CE2B4D10C7E4368ACD477C16656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:97:36:51:28:d1:dd:a4:4d:6f:0d:ce:69:8b: 89:55:c6:11:85:1a:f4:62:c8:97:f0:b2:43:51:b7: f9:c8:d8:2b:ae:8c:98:2e:04:8f:20:2c:b2:47:b3: 06:4d:51:d3:fb:a0:5a:54:a5:a5:a8:4b:69:3e:c5: 09:a7:f4:0f:9d:4e:ad:4e:00:f6:07:c6:9d:a8:94: 3b:5c:f7:32:30:f7:58:0c:dd:a5:5d:f1:5c:84:dd: dc:08:c5:c1:8f:a1:50:6a:9b:0d:54:11:ca:fc:4c: 80:fe:5c:d7:a0:3f:44:f0:c8:54:f8:94:5c:58:3b: 06:60:aa:dd:9f:7a:fa:13:40:bd:a4:13:37:3c:d7: 74:cf:12:a3:05:0a:67:eb:33:df:2f:69:9c:fc:be: 8e:ba:a6:a9:2b:97:5d:86:f2:ed:84:45:55:88:83: 07:6b:31:af:75:7e:6c:37:3f:47:72:8e:69:a6:f9: 3f:50:da:cc:38:85:1b:7e:6c:af:16:e1:1d:b6:ec: 64:2c:7f:a6:53:3d:93:63:fc:d3:0a:30:32:d7:da: ea:bf:64:c6:0b:30:46:d5:6a:f6:b3:a1:d8:95:24: f7:7f:e6:d5:14:bb:2c:1d:e6:d5:47:e1:4f:59:ba: f5:e6:25:3b:0a:b5:4f:c3:ca:ae:e3:b4:55:df:90: ea:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DC:FE:99:7E:22:9C:E2:B4:D1:0C:7E:43:68:AC:D4:77:C1:66:56 X509v3 Authority Key Identifier: keyid:D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:36:79:af:97:90:fd:85:ee:3c:33:3d:09:be:f5:40:3c:64: 6a:97:22:b5:42:04:10:e5:47:a3:fc:3e:ad:07:09:ab:ba:86: 21:ea:9a:cf:2f:f1:ba:e0:af:37:ea:45:39:c3:f4:f9:5f:47: e5:17:c9:a6:3e:ba:7d:a3:1b:f9:88:4e:50:5b:35:06:e1:64: b2:eb:53:a5:5c:9f:d8:45:f5:85:16:94:8a:58:d6:bf:be:8c: 72:3c:33:35:e1:23:fc:3b:81:ff:62:da:05:41:49:6b:11:a6: d6:af:c1:f2:4c:93:10:31:4a:18:c0:8c:1b:1c:1a:2d:72:9e: 72:9c:ba:ff:fb:52:9b:92:48:03:79:69:f9:e7:c7:38:cf:7b: a8:4e:6f:db:95:92:b6:3a:d4:b9:b1:d8:84:18:5d:1d:91:5e: 0f:d3:2c:1e:38:67:aa:84:e1:15:e1:9c:d7:02:6b:3e:95:a8: 5f:57:25:a6:67:25:86:2b:92:33:07:b9:c1:3f:8e:06:bc:9e: ed:00:e2:79:ec:78:9e:1b:94:71:71:63:37:cd:fe:4b:32:3e: 3e:a3:11:bc:1f:0c:43:15:b8:56:f3:f1:42:f0:e0:15:a9:23: 2c:eb:a6:77:1f:94:54:8c:fe:27:fe:83:fc:a0:f6:d5:54:37: 17:7b:ae:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJoNTsXHRQeu64FAmAPtbCfkwlkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZFNTRBRjZDNDM3ODY4ODk5Qjk5RjQzMTJDRDNEQkI0 OTNCNUQyOTAeFw0yNTA5MDYwMzQ3MTVaFw0yNTA5MDkxNDUzMTVaMDMxMTAvBgNV BAMTKDNBRENGRTk5N0UyMjlDRTJCNEQxMEM3RTQzNjhBQ0Q0NzdDMTY2NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOlzZRKNHdpE1vDc5pi4lVxhGF GvRiyJfwskNRt/nI2CuujJguBI8gLLJHswZNUdP7oFpUpaWoS2k+xQmn9A+dTq1O APYHxp2olDtc9zIw91gM3aVd8VyE3dwIxcGPoVBqmw1UEcr8TID+XNegP0TwyFT4 lFxYOwZgqt2fevoTQL2kEzc813TPEqMFCmfrM98vaZz8vo66pqkrl12G8u2ERVWI gwdrMa91fmw3P0dyjmmm+T9Q2sw4hRt+bK8W4R227GQsf6ZTPZNj/NMKMDLX2uq/ ZMYLMEbVavazodiVJPd/5tUUuywd5tVH4U9ZuvXmJTsKtU/Dyq7jtFXfkOrxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOtz+mX4inOK00Qx+Q2is1HfBZlYwHwYDVR0j BBgwFoAU1uVK9sQ3hoiZuZ9DEs09u0k7XSkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGM3M2FmNS1hMmMwLTQyNGQtODYyZS0xMTJjNThiNzI3MGUvMC9ENkU1NEFGNkM0 Mzc4Njg4OTlCOTlGNDMxMkNEM0RCQjQ5M0I1RDI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDZFNTRBRjZDNDM3ODY4ODk5Qjk5RjQzMTJDRDNEQkI0OTNC NUQyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBjNzNhZjUtYTJjMC00MjRkLTg2 MmUtMTEyYzU4YjcyNzBlLzAvRDZFNTRBRjZDNDM3ODY4ODk5Qjk5RjQzMTJDRDNE QkI0OTNCNUQyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG02ea+XkP2F7jwzPQm+9UA8ZGqXIrVCBBDl R6P8Pq0HCau6hiHqms8v8brgrzfqRTnD9PlfR+UXyaY+un2jG/mITlBbNQbhZLLr U6Vcn9hF9YUWlIpY1r++jHI8MzXhI/w7gf9i2gVBSWsRptavwfJMkxAxShjAjBsc Gi1ynnKcuv/7UpuSSAN5afnnxzjPe6hOb9uVkrY61Lmx2IQYXR2RXg/TLB44Z6qE 4RXhnNcCaz6VqF9XJaZnJYYrkjMHucE/jga8nu0A4nnseJ4blHFxYzfN/ksyPj6j EbwfDEMVuFbz8ULw4BWpIyzrpncflFSM/if+g/yg9tVUNxd7rgE= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:12 2025 by rpki-client