$ rpki-client -vvf repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft File: 6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft (raw, json) Hash identifier: vLGt5YCKSfrrLHaGmdypl4YVoKCFnbouJUqhSoCWQaw= Subject key identifier: CC:58:EB:FC:74:52:38:A6:3B:29:7E:4C:78:0E:ED:91:F4:A1:C3:F4 Authority key identifier: 6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8 Certificate issuer: /CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8 Certificate serial: 502CC375CEDFF61180745027500D8D4902306012 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft Manifest number: 044E Signing time: Thu 04 Sep 2025 18:51:22 +0000 Manifest this update: Thu 04 Sep 2025 18:46:22 +0000 Manifest next update: Sun 07 Sep 2025 20:56:22 +0000 Files and hashes: 1: 3130332e34322e3131372e302f32342d3234203d3e20313431393638.roa (hash: crt2F/X+RQnPJrrglVZI7zbLddWcN6j7uVz/Xw4zeS8=) 2: 3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa (hash: FZlGjWO2QHYzsNelbvnW9T+cFLiq8WyISsSRf/rM5oc=) 3: 6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl (hash: BzSszNzr+JxVEusLUlfOmIRsYQiz/QOS1P2AdveI3GQ=) 4: 3130332e34322e3131362e302f32332d3233203d3e20313431393638.roa (hash: deSk7dhV94Q/bI20PuBTuLDi+FeXmglvV/8pK3EJY0A=) 5: 3130332e34322e3131392e302f32342d3234203d3e203234353139.roa (hash: tlMLEqQhJ1FXYwOLCCvAFRe52QGRRF02EIII3xVkWN0=) 6: 3130332e34322e3131382e302f32332d3233203d3e203234353139.roa (hash: HHqxnvo/jJQgCNZXpj544snDh99Z+fGyg/N/7YitJ5U=) 7: 3130332e34322e3131382e302f32342d3234203d3e203234353139.roa (hash: vCgDnA33NAkXtanYsGnqZiMWsel/bsPJTrf5ZDKywHU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 20:56:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:2c:c3:75:ce:df:f6:11:80:74:50:27:50:0d:8d:49:02:30:60:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8 Validity Not Before: Sep 4 18:46:22 2025 GMT Not After : Sep 7 20:56:22 2025 GMT Subject: CN=CC58EBFC745238A63B297E4C780EED91F4A1C3F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8c:c9:5d:7a:11:c8:f5:36:c2:28:e0:36:37: f0:8f:f5:a3:fd:b0:5b:2e:45:da:e4:f7:bf:1b:78: 76:87:d2:51:ad:57:39:42:75:30:4e:ac:ab:16:a2: 20:91:d6:01:e6:bb:19:1d:6e:8c:8f:c8:80:c5:85: 82:a9:52:28:6b:ae:2c:ed:3c:27:65:f2:41:b5:c3: 80:2a:95:63:08:b9:df:7e:b7:d4:f2:ea:21:4d:ba: 0f:d8:7e:34:e8:8d:4a:c8:11:70:ef:dc:4c:34:83: d0:8e:5a:37:07:b6:f1:6c:6f:87:c2:09:d0:2c:8a: 8a:5c:12:dc:d6:b3:13:82:d3:27:9f:d1:c5:6d:f6: 26:57:38:15:20:43:bd:58:d8:0a:09:d5:67:e7:eb: 04:7f:66:d9:41:87:84:40:a2:45:e4:a0:ed:57:15: c8:c9:e9:79:b4:5f:54:df:57:48:76:31:88:54:a1: 5c:81:2e:5a:66:36:11:a0:8e:d9:46:04:e8:53:c5: c6:96:cd:bd:37:3c:eb:28:4c:ce:8a:31:bf:46:df: c4:50:1d:78:34:de:e8:58:ad:04:e7:3f:59:9b:70: 85:e3:0e:6a:5f:71:ac:98:9c:db:17:b5:3e:f7:97: cd:2d:66:81:e1:f8:70:7d:69:ae:0f:5b:11:73:dd: 23:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:58:EB:FC:74:52:38:A6:3B:29:7E:4C:78:0E:ED:91:F4:A1:C3:F4 X509v3 Authority Key Identifier: keyid:6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:07:ef:73:49:a5:66:7c:97:e2:01:97:7a:b9:15:da:ac:36: 78:8f:f5:ef:df:ff:51:16:15:96:78:fe:3a:42:94:c4:fb:c8: 32:9f:1e:d5:bb:ca:57:42:2d:b0:bd:9d:44:93:a2:57:b7:d3: 23:03:b8:73:bd:e3:8e:c4:bc:0b:f7:df:ed:db:80:e4:9d:52: 34:2e:ea:ef:af:e8:0c:b5:cd:4b:d6:9e:52:96:03:d4:af:e5: ac:b8:33:46:7b:54:14:28:74:31:1c:3e:0f:69:9f:2e:06:24: 74:bb:dd:25:38:bc:34:3c:4d:e5:a6:b9:32:0c:35:ef:b4:14: de:ca:94:ab:f4:8c:51:b3:07:7c:72:ab:9a:39:1e:ce:45:f4: f6:4f:8e:7c:25:0d:0d:87:c4:88:c3:09:c7:33:6f:dc:f6:27: e4:03:68:93:99:7b:1f:22:28:64:17:b6:97:5b:e7:64:e6:e5: 66:a7:8d:e7:15:14:c3:ef:7f:6e:e1:68:d5:a1:1a:cc:c3:f6: 44:a7:e0:d3:03:34:1d:17:55:d6:b8:1b:fb:8c:f1:e7:88:be: 13:cd:fb:2d:e9:c7:05:cf:2d:12:7e:dd:f6:b0:00:b9:f2:53: 3d:54:8f:a5:66:0c:bd:83:8a:29:43:bf:c5:49:fd:70:67:23: f9:9c:03:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUCzDdc7f9hGAdFAnUA2NSQIwYBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY0ODVBREFEMjA2ODMzN0ZERjhCMjhGRjAwN0JDREM1 QjQ5OTlEODAeFw0yNTA5MDQxODQ2MjJaFw0yNTA5MDcyMDU2MjJaMDMxMTAvBgNV BAMTKENDNThFQkZDNzQ1MjM4QTYzQjI5N0U0Qzc4MEVFRDkxRjRBMUMzRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsjMldehHI9TbCKOA2N/CP9aP9 sFsuRdrk978beHaH0lGtVzlCdTBOrKsWoiCR1gHmuxkdboyPyIDFhYKpUihrrizt PCdl8kG1w4AqlWMIud9+t9Ty6iFNug/YfjTojUrIEXDv3Ew0g9COWjcHtvFsb4fC CdAsiopcEtzWsxOC0yef0cVt9iZXOBUgQ71Y2AoJ1Wfn6wR/ZtlBh4RAokXkoO1X FcjJ6Xm0X1TfV0h2MYhUoVyBLlpmNhGgjtlGBOhTxcaWzb03POsoTM6KMb9G38RQ HXg03uhYrQTnP1mbcIXjDmpfcayYnNsXtT73l80tZoHh+HB9aa4PWxFz3SPDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzFjr/HRSOKY7KX5MeA7tkfShw/QwHwYDVR0j BBgwFoAUb0ha2tIGgzf9+LKP8Ae83FtJmdgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjU4OTM0ZC0xYjAwLTQ0ODktOTJlZC0xY2E2ZGM0YjI5MGYvMC82RjQ4NUFEQUQy MDY4MzM3RkRGOEIyOEZGMDA3QkNEQzVCNDk5OUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkY0ODVBREFEMjA2ODMzN0ZERjhCMjhGRjAwN0JDREM1QjQ5 OTlEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY1ODkzNGQtMWIwMC00NDg5LTky ZWQtMWNhNmRjNGIyOTBmLzAvNkY0ODVBREFEMjA2ODMzN0ZERjhCMjhGRjAwN0JD REM1QjQ5OTlEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcH73NJpWZ8l+IBl3q5FdqsNniP9e/f/1EW FZZ4/jpClMT7yDKfHtW7yldCLbC9nUSTole30yMDuHO9447EvAv33+3bgOSdUjQu 6u+v6Ay1zUvWnlKWA9Sv5ay4M0Z7VBQodDEcPg9pny4GJHS73SU4vDQ8TeWmuTIM Ne+0FN7KlKv0jFGzB3xyq5o5Hs5F9PZPjnwlDQ2HxIjDCcczb9z2J+QDaJOZex8i KGQXtpdb52Tm5WanjecVFMPvf27haNWhGszD9kSn4NMDNB0XVda4G/uM8eeIvhPN +y3pxwXPLRJ+3fawALnyUz1Uj6VmDL2DiilDv8VJ/XBnI/mcA+Q= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:57 2025 by rpki-client