$ rpki-client -vvf repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft File: 6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft (raw, json) Hash identifier: GSrLbrEUIeN9D/J25hf2Iq+ZGb6MlukeSez1S3VXwU8= Subject key identifier: 1A:A3:B3:CD:41:0F:1F:E0:7D:EF:FF:74:1D:33:7B:02:6F:53:CB:6C Authority key identifier: 6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87 Certificate issuer: /CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187 Certificate serial: 2E963078768BDC8456B2AB557C3CA834E36BD7BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft Manifest number: 0187 Signing time: Fri 05 Sep 2025 14:11:07 +0000 Manifest this update: Fri 05 Sep 2025 14:06:07 +0000 Manifest next update: Mon 08 Sep 2025 22:15:07 +0000 Files and hashes: 1: 3130332e3234352e3232352e302f32342d3234203d3e20313331373635.roa (hash: /abYrA5yp8Nre7zAYDHYwFsGgEom3ZQxvMGjfmSiyZM=) 2: 6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl (hash: Z4ANYHcO0wnRWjduheaedEY9J+YXj5CTWYDrB8Xr6/s=) 3: 3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa (hash: +wBbu1cMZCAeulSyWUHjp9S6buaiwbJ9EYT932oWUfk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 22:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:96:30:78:76:8b:dc:84:56:b2:ab:55:7c:3c:a8:34:e3:6b:d7:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187 Validity Not Before: Sep 5 14:06:07 2025 GMT Not After : Sep 8 22:15:07 2025 GMT Subject: CN=1AA3B3CD410F1FE07DEFFF741D337B026F53CB6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7c:8f:fd:25:1e:f2:76:e9:d0:b8:67:b3:12: 26:ff:12:13:d0:28:e6:0c:c6:98:32:e7:55:c6:5d: 19:88:a6:c7:7e:9c:76:78:27:79:fc:8e:18:5c:06: 2a:89:b9:3a:0c:3e:3c:0e:2d:3f:f2:5e:82:5b:7c: 61:e4:b6:a4:55:ba:1d:3b:4f:ca:04:49:2f:f4:84: 4a:56:6d:1f:b1:ac:ab:d8:03:2a:e5:9a:d1:f7:64: 68:06:06:1b:d9:03:0d:67:a9:a2:1c:b0:52:73:2d: 57:82:50:d0:3b:77:37:80:bc:77:6f:59:90:df:0e: ae:53:01:28:06:44:c2:9c:a6:b3:10:c4:0f:45:31: 7c:87:03:a6:5e:6c:df:9c:46:c0:ed:f8:32:13:47: 86:25:fa:66:80:63:16:63:28:c5:c3:8a:e9:8d:d5: 07:cd:97:84:fe:4e:8c:ec:fa:2e:10:3e:e4:c5:ac: 9c:3f:68:94:a6:22:f3:7c:e2:60:b8:09:dd:59:33: ab:78:0e:de:0a:09:9e:38:a1:9c:c6:93:06:04:70: 02:e0:b0:dc:46:68:1f:1e:22:23:5b:86:60:a8:1b: e7:68:52:9e:e9:36:9c:17:95:4a:95:86:d5:23:b3: 63:cb:f1:4f:2f:2d:03:5e:90:f1:e6:65:3f:dd:08: 72:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A3:B3:CD:41:0F:1F:E0:7D:EF:FF:74:1D:33:7B:02:6F:53:CB:6C X509v3 Authority Key Identifier: keyid:6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:c4:ee:c1:08:8e:86:9e:5e:6c:98:50:ba:3c:0e:51:32:af: 68:87:33:27:60:21:48:17:55:e5:83:c8:d7:89:1d:17:13:5e: ec:67:92:e3:63:f6:08:41:a6:0c:db:d7:e5:17:54:ea:6d:92: 15:2e:e8:d4:b1:40:af:7d:2a:ab:7a:d0:5b:f6:63:f8:0a:88: 86:6f:fd:a2:ca:2a:b8:c0:02:93:6a:77:b7:83:c2:fa:4b:08: a3:e6:4d:4b:73:cb:72:d0:8b:a2:5b:19:5a:1e:2d:4b:b0:ef: 18:ca:9d:0f:ab:7b:51:19:ee:93:d3:53:ea:d7:b7:3e:53:be: 10:44:5f:22:da:4e:78:83:33:e2:9c:03:1b:a0:57:13:8c:40: f5:be:b5:3f:4a:b9:ef:b4:fb:c8:ad:9e:3b:91:0b:42:c5:fa: ab:aa:32:4f:c4:e8:56:85:0e:25:11:34:8d:75:c3:69:46:7d: 16:36:39:1e:51:89:fc:51:00:47:13:e7:ab:fe:6c:28:62:92: 5f:e4:db:12:35:d7:6b:a7:51:01:22:f3:da:a3:53:1f:22:5b: 73:99:67:9d:a3:d1:cd:e1:8b:26:18:bd:1a:86:ee:3b:33:5f: b6:9a:1b:d5:19:23:5f:ab:72:8f:fc:1e:e2:d3:54:1e:b3:14: 16:e3:d9:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULpYweHaL3IRWsqtVfDyoNONr17swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkzMzIz MkVDMjE4NzAeFw0yNTA5MDUxNDA2MDdaFw0yNTA5MDgyMjE1MDdaMDMxMTAvBgNV BAMTKDFBQTNCM0NENDEwRjFGRTA3REVGRkY3NDFEMzM3QjAyNkY1M0NCNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8fI/9JR7ydunQuGezEib/EhPQ KOYMxpgy51XGXRmIpsd+nHZ4J3n8jhhcBiqJuToMPjwOLT/yXoJbfGHktqRVuh07 T8oESS/0hEpWbR+xrKvYAyrlmtH3ZGgGBhvZAw1nqaIcsFJzLVeCUNA7dzeAvHdv WZDfDq5TASgGRMKcprMQxA9FMXyHA6ZebN+cRsDt+DITR4Yl+maAYxZjKMXDiumN 1QfNl4T+Tozs+i4QPuTFrJw/aJSmIvN84mC4Cd1ZM6t4Dt4KCZ44oZzGkwYEcALg sNxGaB8eIiNbhmCoG+doUp7pNpwXlUqVhtUjs2PL8U8vLQNekPHmZT/dCHKjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGqOzzUEPH+B97/90HTN7Am9Ty2wwHwYDVR0j BBgwFoAUb7Ta52sSygDgc0Sk3S+TMjLsIYcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmQ3MDM0Ni01YmRmLTQ5NjEtYTc0Zi01NWFlODU1NjcyYTEvMC82RkI0REFFNzZC MTJDQTAwRTA3MzQ0QTRERDJGOTMzMjMyRUMyMTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkzMzIzMkVD MjE4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkNzAzNDYtNWJkZi00OTYxLWE3 NGYtNTVhZTg1NTY3MmExLzAvNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkz MzIzMkVDMjE4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPE7sEIjoaeXmyYULo8DlEyr2iHMydgIUgX VeWDyNeJHRcTXuxnkuNj9ghBpgzb1+UXVOptkhUu6NSxQK99Kqt60Fv2Y/gKiIZv /aLKKrjAApNqd7eDwvpLCKPmTUtzy3LQi6JbGVoeLUuw7xjKnQ+re1EZ7pPTU+rX tz5TvhBEXyLaTniDM+KcAxugVxOMQPW+tT9Kue+0+8itnjuRC0LF+quqMk/E6FaF DiURNI11w2lGfRY2OR5RifxRAEcT56v+bChikl/k2xI112unUQEi89qjUx8iW3OZ Z52j0c3hiyYYvRqG7jszX7aaG9UZI1+rco/8HuLTVB6zFBbj2WE= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:47 2025 by rpki-client