$ rpki-client -vvf repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft File: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft (raw, json) Hash identifier: XAMgGpLR/Na4Y2H6CFCvw7kn4Gj25cY6V7O6GLUr2bE= Subject key identifier: 49:88:87:61:FF:41:80:03:2B:34:13:80:0F:93:9C:40:C3:7A:4A:47 Authority key identifier: 6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E Certificate issuer: /CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Certificate serial: 6358E87C8668AD1A876B37C3D09787461E3AC6A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft Manifest number: D9 Signing time: Thu 04 Sep 2025 15:42:13 +0000 Manifest this update: Thu 04 Sep 2025 15:37:13 +0000 Manifest next update: Sun 07 Sep 2025 18:30:13 +0000 Files and hashes: 1: 33362e35302e3231362e302f32332d3233203d3e20313437313238.roa (hash: TzFqnwzzY9xia0s3waMLkiGG8A7BVi2jn0Tebn9ZTXg=) 2: 33362e35302e3231362e302f32342d3234203d3e20313437313238.roa (hash: knY/ggPl78wk2nvRxnL0Ik6PzIK0DYSQq15iPy2gM40=) 3: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl (hash: tfZZZcdUn24/X5hjeSpRkNWzet7t4Q+ZCAeWB4AE9gI=) 4: 33362e35302e3231372e302f32342d3234203d3e20313437313238.roa (hash: suvA+Wk962jHlhC9+yItBsXmZi+V1BXvTufHDqbDzJE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 18:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:58:e8:7c:86:68:ad:1a:87:6b:37:c3:d0:97:87:46:1e:3a:c6:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Validity Not Before: Sep 4 15:37:13 2025 GMT Not After : Sep 7 18:30:13 2025 GMT Subject: CN=49888761FF4180032B3413800F939C40C37A4A47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:42:f7:bb:c6:7c:38:88:c6:27:8e:4d:ba:7f: 11:19:17:47:e5:b9:93:cc:67:14:70:c7:f5:96:ea: ab:87:d9:87:0f:1b:63:74:bf:10:58:f2:37:35:f0: 95:54:dc:ea:1e:83:ca:56:10:6d:58:f3:cf:c5:49: 16:5e:91:b0:16:cf:a5:3a:8c:43:7a:27:38:f5:ba: 3d:d3:21:c8:f2:61:61:c7:cf:95:b9:d7:66:46:d1: 6c:a2:21:4e:7c:88:dd:41:64:b5:d4:ca:bb:bc:ff: ba:9f:ed:75:71:b6:6e:2e:89:07:5a:fa:7e:f8:90: 19:07:d4:48:20:9a:4c:91:87:2a:9f:e9:d1:6e:38: 10:af:55:1b:7b:c3:db:f6:c5:7e:56:5f:3e:5f:90: 40:95:38:34:12:98:97:62:26:16:02:db:0c:16:b5: 40:2a:0f:a9:bb:eb:52:72:49:3b:5e:b9:52:57:bb: 34:ac:13:2e:05:93:78:48:02:6c:c3:43:04:ef:1a: 05:7b:81:ab:27:8a:64:0a:6e:c5:f9:7f:92:62:7f: fc:6d:65:30:6e:e9:69:e7:a1:a1:50:cc:11:66:a8: 61:b2:3a:7f:f3:bc:60:45:2d:0b:7f:57:aa:5a:97: d1:46:6d:81:96:8b:92:81:1b:e8:1d:6a:4d:89:0d: c9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:88:87:61:FF:41:80:03:2B:34:13:80:0F:93:9C:40:C3:7A:4A:47 X509v3 Authority Key Identifier: keyid:6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:23:2d:9d:8b:e8:c7:16:9f:a4:86:32:07:1e:35:d4:00:aa: e8:e5:98:f3:75:71:ca:88:04:07:e2:2b:7c:8a:57:15:b7:a7: 94:fc:46:b0:b4:d7:d1:ff:18:ea:f0:b4:d2:1e:57:89:f3:f8: bc:6a:56:93:98:16:93:ed:7e:87:bc:33:df:48:cd:b1:01:39: 44:b4:1c:d3:46:eb:29:3c:3d:30:e3:dd:69:0b:ef:dd:91:08: b7:6e:e8:e3:bf:3d:01:19:5f:b5:96:f2:c3:60:42:0e:41:0a: 0c:af:ad:9c:c3:a0:0e:bf:88:f5:18:f0:bb:85:c0:c4:f7:c2: d1:29:11:d5:c1:1c:78:3b:e5:ef:64:dc:40:c4:13:12:7b:6f: 80:ab:58:6e:0c:4a:d8:03:ed:bd:53:1d:99:6d:5a:e9:26:d1: 96:2e:2f:a1:f8:50:dd:34:39:d6:e9:ad:68:36:9d:ab:4f:43: 2a:11:6b:6c:1c:10:0e:07:8e:68:9b:ad:02:f5:cb:43:36:3f: bd:45:cb:ff:ac:e2:70:ec:a8:39:1b:22:40:18:85:87:2d:76: 72:a9:00:38:6c:c8:95:ef:31:65:43:ab:d9:b4:75:1a:76:18: c8:e1:07:f4:e6:87:9f:b1:c1:c0:b8:2f:19:7a:fe:4b:66:84: 5c:f1:a9:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY1jofIZorRqHazfD0JeHRh46xqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3 QTk4MDk5RTAeFw0yNTA5MDQxNTM3MTNaFw0yNTA5MDcxODMwMTNaMDMxMTAvBgNV BAMTKDQ5ODg4NzYxRkY0MTgwMDMyQjM0MTM4MDBGOTM5QzQwQzM3QTRBNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwQve7xnw4iMYnjk26fxEZF0fl uZPMZxRwx/WW6quH2YcPG2N0vxBY8jc18JVU3Ooeg8pWEG1Y88/FSRZekbAWz6U6 jEN6Jzj1uj3TIcjyYWHHz5W512ZG0WyiIU58iN1BZLXUyru8/7qf7XVxtm4uiQda +n74kBkH1EggmkyRhyqf6dFuOBCvVRt7w9v2xX5WXz5fkECVODQSmJdiJhYC2wwW tUAqD6m761JySTteuVJXuzSsEy4Fk3hIAmzDQwTvGgV7gasnimQKbsX5f5Jif/xt ZTBu6WnnoaFQzBFmqGGyOn/zvGBFLQt/V6pal9FGbYGWi5KBG+gdak2JDcmXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSYiHYf9BgAMrNBOAD5OcQMN6SkcwHwYDVR0j BBgwFoAUbbsQDY1GaauKXH7gVyKO1nqYCZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTk4OWZhZi00OGZiLTRmNDAtOWU3Ny0yNDNkNzhhNWI1YzQvMC82REJCMTAwRDhE NDY2OUFCOEE1QzdFRTA1NzIyOEVENjdBOTgwOTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3QTk4 MDk5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU5ODlmYWYtNDhmYi00ZjQwLTll NzctMjQzZDc4YTViNWM0LzAvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhF RDY3QTk4MDk5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYjLZ2L6McWn6SGMgceNdQAqujlmPN1ccqI BAfiK3yKVxW3p5T8RrC019H/GOrwtNIeV4nz+LxqVpOYFpPtfoe8M99IzbEBOUS0 HNNG6yk8PTDj3WkL792RCLdu6OO/PQEZX7WW8sNgQg5BCgyvrZzDoA6/iPUY8LuF wMT3wtEpEdXBHHg75e9k3EDEExJ7b4CrWG4MStgD7b1THZltWukm0ZYuL6H4UN00 OdbprWg2natPQyoRa2wcEA4HjmibrQL1y0M2P71Fy/+s4nDsqDkbIkAYhYctdnKp ADhsyJXvMWVDq9m0dRp2GMjhB/Tmh5+xwcC4Lxl6/ktmhFzxqb0= -----END CERTIFICATE-----Generated at Fri Sep 5 12:41:10 2025 by rpki-client