$ rpki-client -vvf repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft File: 6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft (raw, json) Hash identifier: IgqD0yEWbBSwnSLF+fhICzUhC8hbX0F7fg+ihkyyAEg= Subject key identifier: A7:16:8D:F4:8E:14:B7:82:4F:E5:2A:FC:AB:8A:14:67:3F:01:73:17 Authority key identifier: 6D:34:40:FA:38:B5:13:21:C8:A8:FD:81:36:BA:70:59:7A:86:86:E0 Certificate issuer: /CN=6D3440FA38B51321C8A8FD8136BA70597A8686E0 Certificate serial: 1F8F159A00AE878DD4EF2F899042EA5E7AA5843F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft Manifest number: 017C Signing time: Fri 05 Sep 2025 18:00:38 +0000 Manifest this update: Fri 05 Sep 2025 17:55:38 +0000 Manifest next update: Mon 08 Sep 2025 21:30:38 +0000 Files and hashes: 1: 6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl (hash: DL8MX8DgjDjwxVqg7fNaZ0LhfcCSdOp5h0MMv1LiFBQ=) 2: 3130332e3136302e3139332e302f32342d3234203d3e20313530353433.roa (hash: 4Rc4ZkmdbbdveQiTO9ywjy41ILEiG5tUChzvFR34zXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 21:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:8f:15:9a:00:ae:87:8d:d4:ef:2f:89:90:42:ea:5e:7a:a5:84:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D3440FA38B51321C8A8FD8136BA70597A8686E0 Validity Not Before: Sep 5 17:55:38 2025 GMT Not After : Sep 8 21:30:38 2025 GMT Subject: CN=A7168DF48E14B7824FE52AFCAB8A14673F017317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1c:cc:fa:99:3b:4c:18:4f:3d:c4:e2:5f:9f: ec:de:2c:22:2e:5b:25:83:4d:62:cc:7c:d7:2a:4b: be:1a:60:38:13:c5:a5:97:79:6f:a6:02:eb:04:32: 85:1e:53:55:08:c4:51:07:21:e1:2d:49:97:f9:72: b9:5b:61:76:11:1c:62:5c:9b:b5:d8:fb:1c:d5:14: 81:c2:fa:97:a8:b4:eb:ca:6f:a0:c8:35:ad:79:a3: c0:3b:ef:7e:3a:b6:58:6a:dc:04:7e:dd:9c:e6:f8: f9:fe:93:b6:59:15:81:ca:da:fc:bb:a2:b3:6a:ea: 1a:14:2a:0e:b2:97:32:57:91:da:5c:fb:b5:c9:e3: ae:c9:51:8c:98:31:f4:36:11:35:39:dc:48:a7:fa: 4f:b0:e7:6c:a7:a9:5c:bd:1b:61:a5:b7:d9:8f:a3: 27:25:ab:e5:66:b7:e3:fa:a6:81:12:4c:4f:2c:c9: c8:60:b2:93:48:f9:a9:c8:a9:ce:a1:1c:ac:11:bf: b7:53:72:24:f5:23:7d:cf:6c:ca:c2:09:0e:1d:ce: 9c:f7:bf:fc:c2:ce:34:d7:f9:42:8c:85:e8:52:7f: 6f:9d:a2:cb:50:94:6f:28:90:82:6a:03:86:00:61: 59:ab:e4:f5:6a:1b:f7:20:3d:14:60:23:7a:97:28: 71:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:16:8D:F4:8E:14:B7:82:4F:E5:2A:FC:AB:8A:14:67:3F:01:73:17 X509v3 Authority Key Identifier: keyid:6D:34:40:FA:38:B5:13:21:C8:A8:FD:81:36:BA:70:59:7A:86:86:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:12:bf:35:c4:a7:9a:17:97:23:39:97:eb:be:e2:e2:14:a4: 9c:02:0f:da:e4:2b:37:03:f6:bd:d8:e2:0a:12:19:25:2f:7b: d2:80:28:49:bf:60:89:72:a8:79:8d:b0:10:ab:99:a5:26:cf: f7:38:91:9c:ce:97:28:a1:02:a0:b6:bd:31:50:d7:79:bd:04: 18:21:03:fc:21:e2:09:ea:05:27:13:d1:96:6e:d8:9b:dc:50: 85:d4:8f:ea:fb:86:fd:26:98:95:2a:80:ca:dc:f3:06:e9:84: 67:53:92:c4:c2:84:57:0d:ef:8a:c0:03:34:05:89:c3:fe:d2: cf:09:22:16:5c:40:e7:83:0d:19:92:09:79:f0:1c:2e:32:6e: 68:3f:e4:64:da:96:2b:d3:82:cb:99:16:8b:da:2a:26:24:29: f2:98:59:79:b6:5e:94:3a:31:ec:70:3d:34:9c:bc:86:85:6d: 7b:6d:dc:d8:2b:3c:a9:10:63:ce:ff:4b:ba:a5:ce:6d:8e:f7: 95:1b:49:0f:03:ad:f5:da:b9:3a:3c:dc:5e:be:ae:61:ad:f7: 2a:da:5d:da:0d:94:66:72:b3:27:9f:b8:ef:d2:86:33:7b:8b: 7a:99:f4:6e:60:c0:7e:84:97:b0:b7:30:1d:b3:b8:ea:f7:da: 39:9d:b5:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH48VmgCuh43U7y+JkELqXnqlhD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQzNDQwRkEzOEI1MTMyMUM4QThGRDgxMzZCQTcwNTk3 QTg2ODZFMDAeFw0yNTA5MDUxNzU1MzhaFw0yNTA5MDgyMTMwMzhaMDMxMTAvBgNV BAMTKEE3MTY4REY0OEUxNEI3ODI0RkU1MkFGQ0FCOEExNDY3M0YwMTczMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIHMz6mTtMGE89xOJfn+zeLCIu WyWDTWLMfNcqS74aYDgTxaWXeW+mAusEMoUeU1UIxFEHIeEtSZf5crlbYXYRHGJc m7XY+xzVFIHC+peotOvKb6DINa15o8A77346tlhq3AR+3Zzm+Pn+k7ZZFYHK2vy7 orNq6hoUKg6ylzJXkdpc+7XJ467JUYyYMfQ2ETU53Ein+k+w52ynqVy9G2Glt9mP oyclq+Vmt+P6poESTE8sychgspNI+anIqc6hHKwRv7dTciT1I33PbMrCCQ4dzpz3 v/zCzjTX+UKMhehSf2+dostQlG8okIJqA4YAYVmr5PVqG/cgPRRgI3qXKHF9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpxaN9I4Ut4JP5Sr8q4oUZz8BcxcwHwYDVR0j BBgwFoAUbTRA+ji1EyHIqP2BNrpwWXqGhuAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2IzYjAwYi1hZDdiLTQ4NDktYjBiMi1lMjQ5YTJmYTYwNGEvMC82RDM0NDBGQTM4 QjUxMzIxQzhBOEZEODEzNkJBNzA1OTdBODY4NkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQzNDQwRkEzOEI1MTMyMUM4QThGRDgxMzZCQTcwNTk3QTg2 ODZFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NiM2IwMGItYWQ3Yi00ODQ5LWIw YjItZTI0OWEyZmE2MDRhLzAvNkQzNDQwRkEzOEI1MTMyMUM4QThGRDgxMzZCQTcw NTk3QTg2ODZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACISvzXEp5oXlyM5l+u+4uIUpJwCD9rkKzcD 9r3Y4goSGSUve9KAKEm/YIlyqHmNsBCrmaUmz/c4kZzOlyihAqC2vTFQ13m9BBgh A/wh4gnqBScT0ZZu2JvcUIXUj+r7hv0mmJUqgMrc8wbphGdTksTChFcN74rAAzQF icP+0s8JIhZcQOeDDRmSCXnwHC4ybmg/5GTalivTgsuZFovaKiYkKfKYWXm2XpQ6 MexwPTScvIaFbXtt3NgrPKkQY87/S7qlzm2O95UbSQ8DrfXauTo83F6+rmGt9yra XdoNlGZysyefuO/ShjN7i3qZ9G5gwH6El7C3MB2zuOr32jmdtQs= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:37 2025 by rpki-client