$ rpki-client -vvf repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft File: 6D2120D281865021E16D49A2451DC53A851B5BBD.mft (raw, json) Hash identifier: LYdWuU9relfzpdnAcoirr9vtGaD2uNyx5UQ6wsk5/o4= Subject key identifier: 69:C7:4A:57:F5:13:C9:C5:CC:0D:22:EC:A4:36:12:91:FC:3B:F7:A8 Authority key identifier: 6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD Certificate issuer: /CN=6D2120D281865021E16D49A2451DC53A851B5BBD Certificate serial: 6864581219769766C6875D65D90B51599427C5A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft Manifest number: 8C Signing time: Mon 08 Sep 2025 08:01:39 +0000 Manifest this update: Mon 08 Sep 2025 07:56:39 +0000 Manifest next update: Thu 11 Sep 2025 15:23:39 +0000 Files and hashes: 1: 3130332e3234352e31362e302f32332d3234203d3e203436303233.roa (hash: r+Lb1druh87TuPBvbGkUhC/GpzU18DRigq7n/TRclBo=) 2: 3130332e3234352e31362e302f32322d3234203d3e203436303233.roa (hash: PpALimtbBE16UsxvYAE3t7KXuw0rzaxc/sz7ukHKaaU=) 3: 3130332e3234352e31382e302f32332d3234203d3e203436303233.roa (hash: LiUE5E5NP3y/9rJb+3iR5iXWUeVWyAD0Ol8W0BAVcIY=) 4: 3130332e3234352e31382e302f32342d3234203d3e203436303233.roa (hash: AShL+HPisPSiiNmtbZE+edgEgIJDv3kNOSZOwH9eeKo=) 5: 3130332e3234352e31392e302f32342d3234203d3e203436303233.roa (hash: GFImrwcqsA1f+8jAtf3KA9NFE2jyS21niSNaMCPf864=) 6: 3130332e3234352e31362e302f32342d3234203d3e203436303233.roa (hash: oc7a2yZBp9q1BdzfUR+tIB5Dtqa/efadojr7/o0DfQ4=) 7: 3130332e3234352e31372e302f32342d3234203d3e203436303233.roa (hash: b+Xtzw+6na2a+xMS20wYCYPacvkf2l2PSoCEFblC4OY=) 8: 6D2120D281865021E16D49A2451DC53A851B5BBD.crl (hash: fiWfRjIuNf6hlacORxDF56gjqNOVUeFstLxatlWR1XA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 15:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:64:58:12:19:76:97:66:c6:87:5d:65:d9:0b:51:59:94:27:c5:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D2120D281865021E16D49A2451DC53A851B5BBD Validity Not Before: Sep 8 07:56:39 2025 GMT Not After : Sep 11 15:23:39 2025 GMT Subject: CN=69C74A57F513C9C5CC0D22ECA4361291FC3BF7A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b0:c0:18:e3:12:b4:53:3e:0a:6c:a7:d2:10: bb:40:a0:fb:f2:d7:7b:59:9f:d9:7e:cd:0f:80:0e: 95:d7:e0:7d:36:f8:01:86:db:5a:db:e2:8f:1f:fc: 96:7f:c4:41:c3:d6:f9:ab:10:5f:71:aa:fd:36:fd: bf:7b:1d:48:cd:5f:c2:8b:75:28:36:fc:32:66:2a: e5:56:64:dc:ec:d4:32:f9:16:d2:b5:29:88:7d:c4: 7e:3f:f3:37:ce:ef:fd:f1:ec:68:bc:2f:63:b5:fd: 8a:ba:05:14:53:97:51:c2:7c:8f:35:e8:6e:52:11: 84:5d:94:bd:3b:03:b0:32:9c:09:8d:21:0d:e1:51: 6d:b1:f8:be:ec:b2:be:69:c3:54:ba:12:a7:cb:33: 49:02:1a:92:bc:a7:a7:45:86:9e:87:c2:70:f7:60: 77:2f:96:b0:54:3a:f2:fc:2a:3e:ac:ad:8d:50:ba: 38:8a:a8:44:3b:8c:76:10:2e:48:7f:9f:8c:18:47: 11:54:51:85:f7:55:ff:75:ad:aa:17:22:f5:b3:e0: 8c:71:7f:d6:9c:80:4b:fe:e7:03:df:66:7d:2f:5b: 7b:b5:d9:f0:2b:c7:39:83:b3:e3:3e:2d:f6:b1:77: be:61:d0:09:27:04:65:d5:d9:76:99:74:ae:ac:96: b3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C7:4A:57:F5:13:C9:C5:CC:0D:22:EC:A4:36:12:91:FC:3B:F7:A8 X509v3 Authority Key Identifier: keyid:6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:74:6a:4a:f9:44:bf:83:d8:9d:88:98:d5:3e:57:8d:8b:0d: 4a:50:a1:92:19:0f:a2:20:2d:ad:9c:8c:5b:11:6a:35:67:f3: ef:9c:d6:3d:23:be:31:be:67:fb:f1:53:45:fe:d2:58:f4:64: c7:6e:66:de:53:66:1e:c4:ea:95:14:30:cf:2a:a9:d8:02:1a: 2a:3c:4a:d5:e3:78:cf:c5:15:2d:a0:fe:42:e4:4a:2b:17:94: 70:b1:61:c4:24:48:fe:08:66:2c:cf:5e:8b:fe:a3:3d:89:50: 70:14:04:48:a1:b4:f6:2e:74:ad:f4:47:43:9b:f4:f0:8e:d7: 20:26:73:a9:cd:e6:18:42:15:37:4f:17:5a:be:9b:4f:83:3d: 6a:78:ce:1e:62:6d:44:cd:e4:e8:54:b2:19:7a:98:52:3b:de: 76:83:79:b6:89:5e:2d:c0:39:ea:d1:f2:fa:2b:c2:fa:33:14: 51:9a:c6:d4:50:29:d0:c7:60:a2:cb:45:f5:3d:3c:72:24:ba: 48:cf:26:73:8e:ef:8a:70:a6:6b:36:92:63:67:f0:32:d2:0a: 90:a1:57:d8:de:57:bb:79:91:28:d8:81:25:82:c4:6d:35:94: 20:69:4f:a3:8f:3a:e2:ff:cd:8d:86:44:cc:f2:08:01:40:27: aa:2c:e0:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaGRYEhl2l2bGh11l2QtRWZQnxakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4 NTFCNUJCRDAeFw0yNTA5MDgwNzU2MzlaFw0yNTA5MTExNTIzMzlaMDMxMTAvBgNV BAMTKDY5Qzc0QTU3RjUxM0M5QzVDQzBEMjJFQ0E0MzYxMjkxRkMzQkY3QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgsMAY4xK0Uz4KbKfSELtAoPvy 13tZn9l+zQ+ADpXX4H02+AGG21rb4o8f/JZ/xEHD1vmrEF9xqv02/b97HUjNX8KL dSg2/DJmKuVWZNzs1DL5FtK1KYh9xH4/8zfO7/3x7Gi8L2O1/Yq6BRRTl1HCfI81 6G5SEYRdlL07A7AynAmNIQ3hUW2x+L7ssr5pw1S6EqfLM0kCGpK8p6dFhp6HwnD3 YHcvlrBUOvL8Kj6srY1QujiKqEQ7jHYQLkh/n4wYRxFUUYX3Vf91raoXIvWz4Ixx f9acgEv+5wPfZn0vW3u12fArxzmDs+M+Lfaxd75h0AknBGXV2XaZdK6slrMBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUacdKV/UTycXMDSLspDYSkfw796gwHwYDVR0j BBgwFoAUbSEg0oGGUCHhbUmiRR3FOoUbW70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTI3MmY3Yi1kNjU2LTQwNTgtYTdiNi1mMjVhZGYzZWQxYmUvMC82RDIxMjBEMjgx ODY1MDIxRTE2RDQ5QTI0NTFEQzUzQTg1MUI1QkJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4NTFC NUJCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTUyNzJmN2ItZDY1Ni00MDU4LWE3 YjYtZjI1YWRmM2VkMWJlLzAvNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1 M0E4NTFCNUJCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG10akr5RL+D2J2ImNU+V42LDUpQoZIZD6Ig La2cjFsRajVn8++c1j0jvjG+Z/vxU0X+0lj0ZMduZt5TZh7E6pUUMM8qqdgCGio8 StXjeM/FFS2g/kLkSisXlHCxYcQkSP4IZizPXov+oz2JUHAUBEihtPYudK30R0Ob 9PCO1yAmc6nN5hhCFTdPF1q+m0+DPWp4zh5ibUTN5OhUshl6mFI73naDebaJXi3A OerR8vorwvozFFGaxtRQKdDHYKLLRfU9PHIkukjPJnOO74pwpms2kmNn8DLSCpCh V9jeV7t5kSjYgSWCxG01lCBpT6OPOuL/zY2GRMzyCAFAJ6os4OY= -----END CERTIFICATE-----Generated at Tue Sep 9 10:52:14 2025 by rpki-client