$ rpki-client -vvf repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft File: C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft (raw, json) Hash identifier: AGtDHT8WinR8TVVm9LZ59w5KJNie0TWAp6TUwF/JDkI= Subject key identifier: C4:23:4E:68:B5:0F:1D:B9:7A:63:07:9E:7F:07:92:9B:0C:CA:63:C5 Authority key identifier: C6:95:0F:BC:93:F3:09:E8:39:CF:C5:E1:A2:EF:0F:6C:91:BF:09:C7 Certificate issuer: /CN=C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7 Certificate serial: 5302B5093D38FA9F75CAC63120AEEEC591A12EB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft Manifest number: 0109 Signing time: Sat 06 Sep 2025 10:51:03 +0000 Manifest this update: Sat 06 Sep 2025 10:46:03 +0000 Manifest next update: Tue 09 Sep 2025 17:08:03 +0000 Files and hashes: 1: C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl (hash: LjSNVxJXKlx2W22n0O4YImNJkQis5zn8dm4X0ZTCDBc=) 2: 3130332e37382e35312e302f32342d3234203d3e20313530323536.roa (hash: IGaUhhhYSDgHiHBNKXPmkyIkbMtz8KycOxh90/k+Fes=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 17:08:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:02:b5:09:3d:38:fa:9f:75:ca:c6:31:20:ae:ee:c5:91:a1:2e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7 Validity Not Before: Sep 6 10:46:03 2025 GMT Not After : Sep 9 17:08:03 2025 GMT Subject: CN=C4234E68B50F1DB97A63079E7F07929B0CCA63C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:16:39:a8:5a:a4:73:3c:9f:78:b3:7e:3c:0d: 5d:96:ef:a9:ae:ab:8e:d7:9d:4a:53:2d:a4:83:3c: da:a4:3d:28:5b:24:52:69:c2:5f:0b:e6:60:df:ff: eb:d0:ce:9c:94:8d:d7:7b:98:2c:f3:61:26:f8:70: 84:fa:07:95:55:0a:e8:f9:41:b3:f0:4c:3b:20:80: bb:9c:5a:0a:0c:41:00:27:7e:71:95:88:a3:61:fe: 07:85:74:ed:76:ba:39:21:b4:12:d1:65:2d:22:ea: 6d:7b:fb:ce:61:73:db:3e:dc:ae:bb:1a:a0:1b:2d: cd:b0:bf:61:2a:3f:d7:ff:55:10:07:65:94:93:76: a3:16:a4:00:2f:77:0e:a4:fc:54:6e:e2:1b:2f:ed: b0:6e:c7:ec:b3:fe:44:ee:d6:a2:ac:56:20:07:5a: ff:78:57:3b:53:0d:f2:be:96:ea:c3:ec:d1:e0:9d: 66:8a:0e:28:56:8f:6e:2e:9f:05:05:c0:c2:0d:01: 1b:87:75:17:c2:28:d0:1d:65:f4:c9:a1:b9:d2:c6: ad:af:33:84:c6:c6:30:1a:48:c2:c2:33:76:e6:74: bb:70:fa:1a:b5:73:40:3d:ed:0d:1b:0c:f9:62:07: 60:c4:a7:73:da:b5:76:05:5c:0a:a1:9c:28:85:83: d1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:23:4E:68:B5:0F:1D:B9:7A:63:07:9E:7F:07:92:9B:0C:CA:63:C5 X509v3 Authority Key Identifier: keyid:C6:95:0F:BC:93:F3:09:E8:39:CF:C5:E1:A2:EF:0F:6C:91:BF:09:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d0:78:69:38:fd:2a:56:fc:50:61:b5:53:0f:58:90:7b:0c: 8c:bb:52:7c:bb:29:ca:61:f0:fb:fb:dd:b0:d9:1b:0c:21:66: c5:9a:e3:c7:c7:d6:de:66:08:f6:e8:db:16:12:3e:69:c9:6f: 23:18:4e:d6:7f:6a:e4:41:b4:19:8b:a9:87:3d:f0:38:6e:20: f6:4a:7f:08:48:8c:09:9d:d8:be:b9:65:94:91:14:75:7d:c1: 65:84:4b:24:54:f9:6c:39:5e:e8:6f:74:ba:de:a0:96:c4:4b: 5f:fe:da:7f:aa:62:61:c4:9b:2e:8c:d8:13:b8:fa:27:89:76: aa:7b:f4:cd:11:50:9a:80:98:ab:39:46:7d:63:ec:9e:c8:24: 7e:7f:da:61:65:de:4e:f9:ff:28:db:3c:ca:e5:ea:4b:2d:4c: 83:8a:1d:99:52:a4:0f:96:22:88:6f:63:db:44:fd:5d:41:50: 9a:33:f1:d4:65:d4:6d:b0:be:8d:8c:c1:ca:3f:c2:11:bb:dc: 76:d9:29:f7:4e:61:25:a4:a9:ae:3f:02:57:d9:d4:44:9e:b3: d4:85:bf:5e:d4:01:ab:84:81:2f:41:cf:cc:8d:7b:83:51:a2: b0:42:65:2f:d5:1b:a8:b7:73:be:b6:09:5f:03:78:9f:4a:99: 65:b7:c9:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUwK1CT04+p91ysYxIK7uxZGhLrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5NTBGQkM5M0YzMDlFODM5Q0ZDNUUxQTJFRjBGNkM5 MUJGMDlDNzAeFw0yNTA5MDYxMDQ2MDNaFw0yNTA5MDkxNzA4MDNaMDMxMTAvBgNV BAMTKEM0MjM0RTY4QjUwRjFEQjk3QTYzMDc5RTdGMDc5MjlCMENDQTYzQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBFjmoWqRzPJ94s348DV2W76mu q47XnUpTLaSDPNqkPShbJFJpwl8L5mDf/+vQzpyUjdd7mCzzYSb4cIT6B5VVCuj5 QbPwTDsggLucWgoMQQAnfnGViKNh/geFdO12ujkhtBLRZS0i6m17+85hc9s+3K67 GqAbLc2wv2EqP9f/VRAHZZSTdqMWpAAvdw6k/FRu4hsv7bBux+yz/kTu1qKsViAH Wv94VztTDfK+lurD7NHgnWaKDihWj24unwUFwMINARuHdRfCKNAdZfTJobnSxq2v M4TGxjAaSMLCM3bmdLtw+hq1c0A97Q0bDPliB2DEp3PatXYFXAqhnCiFg9GLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxCNOaLUPHbl6YweefweSmwzKY8UwHwYDVR0j BBgwFoAUxpUPvJPzCeg5z8Xhou8PbJG/CccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjUyMWJkMS0xZGEyLTRiODAtODQxNi1mMDVkZTI5MjIxNmUvMC9DNjk1MEZCQzkz RjMwOUU4MzlDRkM1RTFBMkVGMEY2QzkxQkYwOUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzY5NTBGQkM5M0YzMDlFODM5Q0ZDNUUxQTJFRjBGNkM5MUJG MDlDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI1MjFiZDEtMWRhMi00YjgwLTg0 MTYtZjA1ZGUyOTIyMTZlLzAvQzY5NTBGQkM5M0YzMDlFODM5Q0ZDNUUxQTJFRjBG NkM5MUJGMDlDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7QeGk4/SpW/FBhtVMPWJB7DIy7Uny7Kcph 8Pv73bDZGwwhZsWa48fH1t5mCPbo2xYSPmnJbyMYTtZ/auRBtBmLqYc98DhuIPZK fwhIjAmd2L65ZZSRFHV9wWWESyRU+Ww5XuhvdLreoJbES1/+2n+qYmHEmy6M2BO4 +ieJdqp79M0RUJqAmKs5Rn1j7J7IJH5/2mFl3k75/yjbPMrl6kstTIOKHZlSpA+W IohvY9tE/V1BUJoz8dRl1G2wvo2Mwco/whG73HbZKfdOYSWkqa4/AlfZ1ESes9SF v17UAauEgS9Bz8yNe4NRorBCZS/VG6i3c762CV8DeJ9KmWW3yUY= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:13 2025 by rpki-client