$ rpki-client -vvf repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft File: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft (raw, json) Hash identifier: +zPuHpRkw09Bs6j0pKKc70vp97tjQ6WaPKJ7IrC4PpY= Subject key identifier: 2A:7B:80:CB:AD:17:42:9B:19:A3:F6:F6:91:B5:4E:17:3A:85:1B:EA Authority key identifier: 6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 Certificate issuer: /CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Certificate serial: 60CE30D82A5601F6370048F4B87F371F6BFECA45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft Manifest number: 021F Signing time: Wed 03 Sep 2025 06:10:51 +0000 Manifest this update: Wed 03 Sep 2025 06:05:51 +0000 Manifest next update: Sat 06 Sep 2025 12:15:51 +0000 Files and hashes: 1: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl (hash: TNakF1i6Q9azRvz30jVOqzyYgTfIjMlO6asT5qaUQ1o=) 2: 3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa (hash: 8i2rkzBjlPEti5Kr8Zm8/78pVX8xhxtJgE0QaB9hDOo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 12:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ce:30:d8:2a:56:01:f6:37:00:48:f4:b8:7f:37:1f:6b:fe:ca:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Validity Not Before: Sep 3 06:05:51 2025 GMT Not After : Sep 6 12:15:51 2025 GMT Subject: CN=2A7B80CBAD17429B19A3F6F691B54E173A851BEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f8:ac:64:aa:67:61:21:cd:3c:e7:89:93:e1: 39:60:af:e3:1b:09:93:87:5a:49:b4:3a:3a:cd:09: 17:d5:22:08:5c:94:7d:f0:86:ce:93:50:85:2e:f8: 63:f0:79:46:7b:23:18:25:ab:6a:b9:a3:0f:1a:39: a4:8a:ad:dc:2f:8f:c3:92:b6:db:ff:c0:b4:8e:3e: 36:33:c2:b5:47:aa:21:40:a6:1e:07:7a:42:34:a9: a0:4d:b6:67:b8:c2:e6:b1:77:78:c6:f1:4c:43:b5: b5:11:8b:5f:93:f3:e1:4d:ae:48:30:d6:a8:4c:e9: 4c:ee:ad:2d:44:3d:02:79:a5:b2:95:6a:03:ce:d3: 4c:45:63:66:b3:c4:2b:4c:ee:c8:f4:ee:9c:2d:d2: ae:d7:2e:0c:0a:bf:a1:90:50:34:96:62:26:d8:1c: 13:77:e4:bd:bc:f2:60:83:94:57:e7:30:c0:af:61: 85:e8:13:cc:f3:29:04:31:d1:3d:40:c3:d0:7d:4f: 74:bc:cc:3e:58:c6:0f:38:bf:16:ea:a8:e3:38:bb: 0f:e3:4b:f5:c1:71:52:92:b5:e4:e2:13:17:2d:3e: e8:47:f7:85:ef:c7:50:fa:49:66:7e:d4:b8:86:ff: 69:69:9c:7f:83:64:99:c3:a6:77:c9:ae:0a:0b:1b: 3e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:7B:80:CB:AD:17:42:9B:19:A3:F6:F6:91:B5:4E:17:3A:85:1B:EA X509v3 Authority Key Identifier: keyid:6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ce:b8:79:e9:d0:1f:46:0e:19:8f:b3:50:78:04:de:11:d5: d1:d4:82:0d:6a:e1:3a:8b:b9:fc:fe:4a:c6:41:42:e2:c2:6c: 89:b1:3a:6a:ae:e4:75:1e:94:3c:a0:f6:1c:e9:f8:62:86:b1: 39:f5:2b:26:61:16:f3:6e:92:c2:f8:b2:b0:b0:81:0c:c5:26: 19:99:82:25:7b:e4:0f:02:c0:e4:a0:9d:97:8d:dd:99:ea:3d: 22:5f:ca:50:9c:08:61:63:f1:a1:e5:64:fa:e4:d7:e8:8c:26: 4f:47:93:22:ce:e2:1e:89:b8:cd:e2:4a:6f:17:f9:81:bf:13: 68:42:ab:64:28:cc:26:55:bd:b0:e1:a8:55:da:2b:a7:4c:2b: 5a:b6:bb:f1:cf:f9:92:a0:46:17:77:a5:de:76:8b:d1:3e:45: b8:48:88:f0:a8:b1:41:96:46:4e:39:c9:a3:43:c6:89:a0:82: e6:60:10:e7:af:5b:5c:cf:42:82:dd:94:e5:a1:fa:53:c7:c9: f5:62:43:f6:ef:1a:e2:92:ac:23:a5:fd:d3:70:e8:35:8c:16: 6b:ff:40:90:a6:c9:29:86:39:ff:23:a4:08:d2:07:c9:9d:e5: 20:b5:c8:82:e6:db:1e:6a:e7:09:4a:db:9d:e9:f4:e7:b3:29: 6e:a0:80:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYM4w2CpWAfY3AEj0uH83H2v+ykUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1 RkUwQkUxMTAeFw0yNTA5MDMwNjA1NTFaFw0yNTA5MDYxMjE1NTFaMDMxMTAvBgNV BAMTKDJBN0I4MENCQUQxNzQyOUIxOUEzRjZGNjkxQjU0RTE3M0E4NTFCRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo+KxkqmdhIc0854mT4Tlgr+Mb CZOHWkm0OjrNCRfVIghclH3whs6TUIUu+GPweUZ7Ixglq2q5ow8aOaSKrdwvj8OS ttv/wLSOPjYzwrVHqiFAph4HekI0qaBNtme4wuaxd3jG8UxDtbURi1+T8+FNrkgw 1qhM6UzurS1EPQJ5pbKVagPO00xFY2azxCtM7sj07pwt0q7XLgwKv6GQUDSWYibY HBN35L288mCDlFfnMMCvYYXoE8zzKQQx0T1Aw9B9T3S8zD5Yxg84vxbqqOM4uw/j S/XBcVKSteTiExctPuhH94Xvx1D6SWZ+1LiG/2lpnH+DZJnDpnfJrgoLGz71AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKnuAy60XQpsZo/b2kbVOFzqFG+owHwYDVR0j BBgwFoAUb8hX33/lNQpsBaHxE/PcLl/gvhEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTIzOGE2Mi02YTk2LTQzYmMtODdhZi0wMmRiNjQxZjcxMDkvMC82RkM4NTdERjdG RTUzNTBBNkMwNUExRjExM0YzREMyRTVGRTBCRTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1RkUw QkUxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGEyMzhhNjItNmE5Ni00M2JjLTg3 YWYtMDJkYjY0MWY3MTA5LzAvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RD MkU1RkUwQkUxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/OuHnp0B9GDhmPs1B4BN4R1dHUgg1q4TqL ufz+SsZBQuLCbImxOmqu5HUelDyg9hzp+GKGsTn1KyZhFvNuksL4srCwgQzFJhmZ giV75A8CwOSgnZeN3ZnqPSJfylCcCGFj8aHlZPrk1+iMJk9HkyLO4h6JuM3iSm8X +YG/E2hCq2QozCZVvbDhqFXaK6dMK1q2u/HP+ZKgRhd3pd52i9E+RbhIiPCosUGW Rk45yaNDxomgguZgEOevW1zPQoLdlOWh+lPHyfViQ/bvGuKSrCOl/dNw6DWMFmv/ QJCmySmGOf8jpAjSB8md5SC1yILm2x5q5wlK253p9OezKW6ggPI= -----END CERTIFICATE-----Generated at Fri Sep 5 12:44:21 2025 by rpki-client