$ rpki-client -vvf repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft File: 6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft (raw, json) Hash identifier: KFBEl9J2+PP5J1huchNlofyUw8tyQnv5q0C2bf5yRBI= Subject key identifier: 40:7E:13:57:FD:95:BE:DA:27:43:EF:EC:59:5B:63:F3:2D:8B:A1:6B Authority key identifier: 6C:FA:BB:BC:88:D3:9C:7F:78:09:5D:A7:D3:D3:5D:D3:AA:2E:95:67 Certificate issuer: /CN=6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567 Certificate serial: 4BC4FC84AFFE2AF0D08F9ABFD575C3B57F9B00CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft Manifest number: 02E5 Signing time: Sat 06 Sep 2025 21:31:09 +0000 Manifest this update: Sat 06 Sep 2025 21:26:09 +0000 Manifest next update: Wed 10 Sep 2025 09:18:09 +0000 Files and hashes: 1: 6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.crl (hash: PNxA40xPXwtSe+eSk/I9vZAt5US7mxrQf4YvO6juxtI=) 2: 3130332e3137352e3135382e302f32332d3234203d3e20313331313131.roa (hash: KlJ7xe9jxJPv2ghljBXv+XqaG+xdsmEYctXqZgRhERI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.crl rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 09:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:c4:fc:84:af:fe:2a:f0:d0:8f:9a:bf:d5:75:c3:b5:7f:9b:00:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567 Validity Not Before: Sep 6 21:26:09 2025 GMT Not After : Sep 10 09:18:09 2025 GMT Subject: CN=407E1357FD95BEDA2743EFEC595B63F32D8BA16B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:fd:99:f8:dd:cf:b5:d8:e2:8a:dc:fe:4e:03: 0d:1a:f9:e1:59:be:57:f7:d4:9b:6b:d7:02:61:8d: e7:89:3f:be:bb:da:7a:fa:4d:c0:34:ff:40:86:9c: 48:27:8d:c2:c4:fe:4b:e5:99:6f:c0:e7:59:f7:d2: be:ee:0d:d2:eb:57:a6:7a:55:59:6c:b9:78:51:03: 59:74:67:a4:ed:b3:8f:3e:36:c1:9c:70:77:66:a9: 84:6f:5f:8c:61:43:2c:b0:2c:f5:ae:0c:d0:e4:81: 5e:39:73:85:18:4c:6e:02:ba:a1:8b:1b:5b:1f:32: 58:20:87:ba:10:15:86:5b:a7:3b:11:a0:43:29:4d: 35:4c:53:11:d6:e2:a9:c0:a4:16:3e:44:9d:52:72: 27:80:65:d7:98:fe:f0:59:f9:e2:fc:67:7f:55:74: ca:46:3c:29:9d:d7:df:86:23:b7:54:13:91:59:27: d4:0e:38:bf:d7:b2:b4:fb:e6:54:89:5d:22:a1:2e: b2:cb:7a:06:41:36:07:bf:3d:6b:d1:b0:39:00:f1: 4b:d1:ef:cb:2f:fe:35:2d:89:80:13:b6:4e:a5:51: 13:ae:e4:71:58:d1:ef:da:e3:e4:b5:e8:61:b5:7e: f9:0d:83:2b:b2:d1:5b:e8:01:e9:68:43:ad:68:2f: b9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7E:13:57:FD:95:BE:DA:27:43:EF:EC:59:5B:63:F3:2D:8B:A1:6B X509v3 Authority Key Identifier: keyid:6C:FA:BB:BC:88:D3:9C:7F:78:09:5D:A7:D3:D3:5D:D3:AA:2E:95:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:6b:b4:f7:9b:b9:aa:66:6d:d3:02:8c:d8:03:66:bb:8a:c4: 8b:85:83:e0:13:f0:8a:7f:2e:6b:86:77:b4:02:1b:20:2a:71: 1e:0e:a3:a3:35:0c:ba:66:c4:f4:1f:38:ad:9e:fb:cc:40:2a: ef:e9:b4:3e:41:87:7a:e4:66:de:bf:f5:54:e9:a4:aa:f3:b4: 31:2d:14:1d:92:50:d3:ff:75:20:4f:6e:f5:13:c9:e6:a4:0e: 12:22:8e:60:86:b6:41:ad:06:53:7a:4e:fb:cc:5b:a6:20:a0: 11:76:57:c0:a0:c2:a8:7a:d7:51:2c:2a:36:71:32:2a:36:e0: 75:1c:ce:c1:c7:bd:f7:06:f6:37:4f:ec:6e:39:00:c4:9d:61: aa:79:14:76:b2:99:a8:36:07:60:82:6b:f9:97:8e:54:19:75: e2:15:29:48:d5:27:a7:6a:de:c4:0b:84:9e:3d:34:62:01:93: 2e:40:db:2f:3b:39:dd:b4:fc:95:26:fa:cb:a7:c8:16:3a:22: 56:23:d6:96:97:a2:a0:3d:1b:13:a6:12:d5:20:87:f8:f5:96: e7:5c:25:18:a4:73:3d:c9:e2:27:3f:65:c5:92:f9:d6:e7:45: 0a:89:c8:a3:88:3c:7c:01:64:55:60:e5:db:67:6e:be:25:98: 2c:20:aa:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS8T8hK/+KvDQj5q/1XXDtX+bAM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNGQUJCQkM4OEQzOUM3Rjc4MDk1REE3RDNEMzVERDNB QTJFOTU2NzAeFw0yNTA5MDYyMTI2MDlaFw0yNTA5MTAwOTE4MDlaMDMxMTAvBgNV BAMTKDQwN0UxMzU3RkQ5NUJFREEyNzQzRUZFQzU5NUI2M0YzMkQ4QkExNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt/Zn43c+12OKK3P5OAw0a+eFZ vlf31Jtr1wJhjeeJP7672nr6TcA0/0CGnEgnjcLE/kvlmW/A51n30r7uDdLrV6Z6 VVlsuXhRA1l0Z6Tts48+NsGccHdmqYRvX4xhQyywLPWuDNDkgV45c4UYTG4CuqGL G1sfMlggh7oQFYZbpzsRoEMpTTVMUxHW4qnApBY+RJ1ScieAZdeY/vBZ+eL8Z39V dMpGPCmd19+GI7dUE5FZJ9QOOL/XsrT75lSJXSKhLrLLegZBNge/PWvRsDkA8UvR 78sv/jUtiYATtk6lUROu5HFY0e/a4+S16GG1fvkNgyuy0VvoAeloQ61oL7k1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQH4TV/2VvtonQ+/sWVtj8y2LoWswHwYDVR0j BBgwFoAUbPq7vIjTnH94CV2n09Nd06oulWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Mzg3NGNmMy1hZGIxLTQ5NDctYTdlNC1hMmQzMmM1NGVkMWYvMC82Q0ZBQkJCQzg4 RDM5QzdGNzgwOTVEQTdEM0QzNUREM0FBMkU5NTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNGQUJCQkM4OEQzOUM3Rjc4MDk1REE3RDNEMzVERDNBQTJF OTU2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzM4NzRjZjMtYWRiMS00OTQ3LWE3 ZTQtYTJkMzJjNTRlZDFmLzAvNkNGQUJCQkM4OEQzOUM3Rjc4MDk1REE3RDNEMzVE RDNBQTJFOTU2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlrtPebuapmbdMCjNgDZruKxIuFg+AT8Ip/ LmuGd7QCGyAqcR4Oo6M1DLpmxPQfOK2e+8xAKu/ptD5Bh3rkZt6/9VTppKrztDEt FB2SUNP/dSBPbvUTyeakDhIijmCGtkGtBlN6TvvMW6YgoBF2V8Cgwqh611EsKjZx Mio24HUczsHHvfcG9jdP7G45AMSdYap5FHaymag2B2CCa/mXjlQZdeIVKUjVJ6dq 3sQLhJ49NGIBky5A2y87Od20/JUm+sunyBY6IlYj1paXoqA9GxOmEtUgh/j1ludc JRikcz3J4ic/ZcWS+dbnRQqJyKOIPHwBZFVg5dtnbr4lmCwgqgE= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:29 2025 by rpki-client