$ rpki-client -vvf repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft File: 6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft (raw, json) Hash identifier: F8nMHQq2mGNwey7hYcgn4VcPrMd6MLC+ylwYlBv13aM= Subject key identifier: B8:B8:CF:8E:D8:2C:A4:2F:E1:D5:4E:27:B6:E1:00:70:A5:9C:12:3A Authority key identifier: 6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 Certificate issuer: /CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53 Certificate serial: 0866FECBAC5DD9E06BDFA61AD33A2AE0AAFB2F37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer Subject info access: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft Manifest number: 77 Signing time: Sat 06 Sep 2025 00:12:18 +0000 Manifest this update: Sat 06 Sep 2025 00:07:18 +0000 Manifest next update: Tue 09 Sep 2025 06:43:18 +0000 Files and hashes: 1: 3130332e3133362e31322e302f32322d3234203d3e20313338383231.roa (hash: Cb5AEtlH1NnuqmCvEw1t1v8nRYfGeJ7DwpY/kiNXrBE=) 2: 3130332e3133362e31322e302f32342d3234203d3e20313338383231.roa (hash: Lk7MgzxdNvFWTQC60iPK0vpuf42JvMwfykIHdcb6dFo=) 3: 6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl (hash: DhqUo6dA5+2Cs3zBGOoz5v9i8WiA9t7HfQGQGr/Gmkc=) 4: 3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa (hash: 4xFtj009j2KyXApXnh4MToBnYNS6TXxPJe0g07ZPzfw=) 5: 3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa (hash: b3FwlMsLVeDm7arhAC1MOxAg/+Ixy8Gs1MmwDRmmqco=) 6: 3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa (hash: R+IkOnhEEkrZOxf8Y3xufcx4Q4z9+2sI/l2mQF5vKrU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 06:43:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:66:fe:cb:ac:5d:d9:e0:6b:df:a6:1a:d3:3a:2a:e0:aa:fb:2f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53 Validity Not Before: Sep 6 00:07:18 2025 GMT Not After : Sep 9 06:43:18 2025 GMT Subject: CN=B8B8CF8ED82CA42FE1D54E27B6E10070A59C123A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fc:d5:2b:3d:8f:c0:4e:78:a8:05:d8:4e:ff: d0:a7:0d:99:81:99:67:7c:7c:a3:20:c7:53:2b:17: d5:87:88:bf:5b:b9:4c:a0:43:f5:ab:35:b0:5a:92: c0:e6:56:74:0a:41:83:4a:8e:6e:f9:65:12:37:44: 02:1f:47:e2:6d:c9:3c:63:03:1f:50:b5:0c:03:d3: 12:a1:f0:9e:ae:02:6d:77:19:2c:8b:f9:a4:4e:69: 6c:14:3d:cf:51:56:3a:f5:26:3f:61:3d:f4:83:06: 96:c1:e7:69:81:da:3e:f9:4f:46:a7:d7:1a:80:44: 30:8c:f7:0c:92:21:b5:05:6d:fc:44:45:36:1c:ad: 2e:87:c9:a7:51:81:4c:f6:2a:bd:2b:f1:9b:21:8b: 3a:a8:5d:50:a2:cb:ae:c1:71:a3:d8:0d:73:dd:a4: 0b:c5:46:b2:8b:50:69:cd:22:08:d8:73:a1:54:6c: d2:29:60:af:c9:a9:ef:5e:7f:a6:b8:bf:2e:af:2f: 6d:2e:de:8a:ac:c5:3b:bc:27:b0:c2:e4:b0:60:4d: 97:a1:4d:60:65:e1:c3:c5:60:93:7b:70:0e:a8:3e: c8:59:a4:25:a6:5b:34:71:bf:d1:39:52:16:94:4e: 6b:0c:8c:80:cf:b4:20:f5:c4:ea:6a:2b:cc:5e:bf: 48:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B8:CF:8E:D8:2C:A4:2F:E1:D5:4E:27:B6:E1:00:70:A5:9C:12:3A X509v3 Authority Key Identifier: keyid:6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:99:a2:e3:79:76:64:69:59:d0:9e:74:69:50:31:3c:dc:6d: 07:7a:3d:86:42:7b:c9:42:ec:80:5d:a1:a9:ff:dd:f7:8b:02: 8b:fe:42:bd:4f:fc:3f:de:a2:ec:a5:4c:cc:74:51:df:26:a6: ba:a9:c8:5d:0c:1f:83:c8:b7:0c:05:65:92:f1:2a:b9:d3:c2: 40:63:74:df:b3:c0:f7:1a:97:c5:05:20:f6:5a:52:24:d9:50: f0:e0:54:20:dd:87:81:0d:3a:bd:db:5c:86:a3:98:0d:ea:b5: 34:47:c7:eb:93:d3:ed:98:77:b5:2d:bb:e6:c8:d2:37:f6:0b: f1:49:8b:d7:39:bf:62:04:2d:7d:83:e5:9a:18:5f:7f:65:1b: 4a:2d:bf:e1:4f:17:d6:bc:10:30:be:28:0a:6c:18:7a:1e:85: 75:dc:5f:d3:c0:95:a0:12:0f:3a:5e:64:b3:30:b1:da:96:63: cf:07:09:80:df:27:0d:74:42:9f:6b:df:eb:be:47:9b:83:8e: ab:1f:26:cb:8b:a4:a3:e9:44:2b:16:6e:74:b9:50:99:0c:fb: 0a:85:88:26:9d:07:ba:1b:47:f4:ab:2d:e6:e0:53:e7:70:a8: 91:e0:be:40:4a:4d:4d:2c:ac:d3:50:bc:eb:2b:99:86:48:5c: 95:52:db:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCGb+y6xd2eBr36Ya0zoq4Kr7LzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNC RkIzN0I1MzAeFw0yNTA5MDYwMDA3MThaFw0yNTA5MDkwNjQzMThaMDMxMTAvBgNV BAMTKEI4QjhDRjhFRDgyQ0E0MkZFMUQ1NEUyN0I2RTEwMDcwQTU5QzEyM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ/NUrPY/ATnioBdhO/9CnDZmB mWd8fKMgx1MrF9WHiL9buUygQ/WrNbBaksDmVnQKQYNKjm75ZRI3RAIfR+JtyTxj Ax9QtQwD0xKh8J6uAm13GSyL+aROaWwUPc9RVjr1Jj9hPfSDBpbB52mB2j75T0an 1xqARDCM9wySIbUFbfxERTYcrS6HyadRgUz2Kr0r8ZshizqoXVCiy67BcaPYDXPd pAvFRrKLUGnNIgjYc6FUbNIpYK/Jqe9ef6a4vy6vL20u3oqsxTu8J7DC5LBgTZeh TWBl4cPFYJN7cA6oPshZpCWmWzRxv9E5UhaUTmsMjIDPtCD1xOpqK8xev0iZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuLjPjtgspC/h1U4ntuEAcKWcEjowHwYDVR0j BBgwFoAUamnvxciXkHx0yKHr3Z03/L+ze1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDFiMWMxYi02NTZjLTQ4OWQtOWVkMy1jY2M3N2M4MzAxOGQvMC82QTY5RUZDNUM4 OTc5MDdDNzRDOEExRUJERDlEMzdGQ0JGQjM3QjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNCRkIz N0I1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAxYjFjMWItNjU2Yy00ODlkLTll ZDMtY2NjNzdjODMwMThkLzAvNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3 RkNCRkIzN0I1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyZouN5dmRpWdCedGlQMTzcbQd6PYZCe8lC 7IBdoan/3feLAov+Qr1P/D/eouylTMx0Ud8mprqpyF0MH4PItwwFZZLxKrnTwkBj dN+zwPcal8UFIPZaUiTZUPDgVCDdh4ENOr3bXIajmA3qtTRHx+uT0+2Yd7Utu+bI 0jf2C/FJi9c5v2IELX2D5ZoYX39lG0otv+FPF9a8EDC+KApsGHoehXXcX9PAlaAS DzpeZLMwsdqWY88HCYDfJw10Qp9r3+u+R5uDjqsfJsuLpKPpRCsWbnS5UJkM+wqF iCadB7obR/SrLebgU+dwqJHgvkBKTU0srNNQvOsrmYZIXJVS20A= -----END CERTIFICATE-----Generated at Sun Sep 7 14:05:21 2025 by rpki-client