$ rpki-client -vvf repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft File: C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft (raw, json) Hash identifier: OmeZFTyzyNrHX1w2Oyzw+2hZphSCXaroob6+W05OV+0= Subject key identifier: 3E:3C:2D:F6:A2:0B:47:B9:50:4E:80:9A:BE:28:9C:AE:5E:40:A8:AC Authority key identifier: C6:07:6E:33:0D:46:79:EF:04:55:EA:40:0D:11:58:D4:F4:9B:0B:F1 Certificate issuer: /CN=C6076E330D4679EF0455EA400D1158D4F49B0BF1 Certificate serial: 4E79A6F1E6BD2C2F05B9DFD2348C0A5CC5B295D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft Manifest number: 0285 Signing time: Thu 04 Sep 2025 02:32:01 +0000 Manifest this update: Thu 04 Sep 2025 02:27:01 +0000 Manifest next update: Sun 07 Sep 2025 12:07:01 +0000 Files and hashes: 1: C6076E330D4679EF0455EA400D1158D4F49B0BF1.crl (hash: zYoDW1txqSXL6dc3BGl84LP0Ego/zpX1d/CgbL1A+ko=) 2: 3130332e3137382e322e302f32332d3234203d3e20313431303737.roa (hash: 0uhRI2twQUwOL4bXfxCRKkhSHjZlw1Z+9ZZ7PGpOhe4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.crl rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 12:07:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:79:a6:f1:e6:bd:2c:2f:05:b9:df:d2:34:8c:0a:5c:c5:b2:95:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6076E330D4679EF0455EA400D1158D4F49B0BF1 Validity Not Before: Sep 4 02:27:01 2025 GMT Not After : Sep 7 12:07:01 2025 GMT Subject: CN=3E3C2DF6A20B47B9504E809ABE289CAE5E40A8AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5e:7a:db:10:3c:ef:e1:10:a8:f0:e7:b9:e5: 6f:83:8f:ec:85:99:0f:5f:e0:ff:f8:3d:2e:7e:e6: 73:b7:ef:cd:66:f4:3e:08:25:45:ec:d0:cc:f1:a4: f9:6a:52:11:96:b1:33:1b:89:86:a1:55:16:de:75: a1:bd:bc:e1:49:c9:11:b3:52:39:fd:83:91:db:2f: f7:b3:e4:be:61:99:71:75:26:d4:fb:fb:cd:da:33: 6e:d2:be:dc:87:16:9a:97:8f:2a:ba:5f:d7:0a:66: 1a:40:6b:18:8e:ff:4f:00:53:62:cf:37:5b:49:3b: bc:51:69:a8:12:b1:a7:e4:22:f8:71:1f:87:ed:23: 4b:96:a5:3e:98:71:ff:f0:17:fd:95:90:37:f4:8a: 58:c2:e7:1e:0a:1f:4c:ca:7c:e8:7a:4c:b1:68:39: 98:0d:ce:fa:8a:f6:2a:91:5f:f9:f4:1a:eb:a8:20: d6:c2:b3:e8:bb:76:e6:70:62:c2:99:31:ce:5d:c4: e5:52:ea:2c:a1:b0:ed:e5:93:54:29:66:f3:de:dd: 62:8b:b1:c5:57:36:86:05:34:fb:4d:02:65:8e:c2: f4:0f:41:0c:6f:d7:8a:c7:b5:79:e1:f9:05:bd:3b: 1b:b6:13:cb:bf:cf:1d:d0:7b:09:54:d1:2d:c1:80: 5d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3C:2D:F6:A2:0B:47:B9:50:4E:80:9A:BE:28:9C:AE:5E:40:A8:AC X509v3 Authority Key Identifier: keyid:C6:07:6E:33:0D:46:79:EF:04:55:EA:40:0D:11:58:D4:F4:9B:0B:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:3a:c9:d9:22:8a:af:6e:be:54:1e:46:98:8c:ae:cc:67:62: c7:a8:65:65:1e:db:7d:d4:00:dd:1d:38:81:93:5c:c0:42:44: 0a:ba:28:5b:76:c7:ec:f9:c8:92:c7:4d:e1:49:f6:07:8e:3e: 6f:e2:30:f7:92:3e:72:67:5e:db:31:77:28:21:3f:85:4b:22: d6:c2:7a:b1:83:77:c0:53:4f:9d:89:c1:9f:3d:d6:23:a2:d7: 86:b2:08:7e:bb:ab:94:8e:1e:11:ad:ad:37:2e:e5:d4:4c:1e: d2:1b:fa:59:d6:a8:e7:1f:3c:cc:9d:54:ab:1c:ab:41:44:f4: 4d:fa:a5:8f:d8:6e:5c:e5:6d:dd:e9:d9:10:ab:4e:bb:2f:cf: b4:3f:9f:9c:96:f7:8b:bd:f1:9a:d1:3c:d5:f9:9f:55:b5:b4: d6:09:56:c1:f6:2c:48:aa:f3:c6:1b:50:0f:b3:f7:b8:d1:3c: 3f:c0:55:6a:7e:47:57:9e:0f:a7:72:9b:21:6a:cf:d0:d8:9a: 8b:f4:ac:f5:92:67:0e:af:ce:88:14:7c:47:e1:20:ed:e6:ee: 9f:0e:75:6f:08:c1:fd:95:84:d9:7a:bd:5e:34:eb:84:60:29: 85:8d:d6:47:32:3e:e1:51:d8:ab:fd:32:aa:45:2e:9d:c3:12: 89:a4:0e:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTnmm8ea9LC8Fud/SNIwKXMWyldMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYwNzZFMzMwRDQ2NzlFRjA0NTVFQTQwMEQxMTU4RDRG NDlCMEJGMTAeFw0yNTA5MDQwMjI3MDFaFw0yNTA5MDcxMjA3MDFaMDMxMTAvBgNV BAMTKDNFM0MyREY2QTIwQjQ3Qjk1MDRFODA5QUJFMjg5Q0FFNUU0MEE4QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNXnrbEDzv4RCo8Oe55W+Dj+yF mQ9f4P/4PS5+5nO3781m9D4IJUXs0MzxpPlqUhGWsTMbiYahVRbedaG9vOFJyRGz Ujn9g5HbL/ez5L5hmXF1JtT7+83aM27SvtyHFpqXjyq6X9cKZhpAaxiO/08AU2LP N1tJO7xRaagSsafkIvhxH4ftI0uWpT6Ycf/wF/2VkDf0iljC5x4KH0zKfOh6TLFo OZgNzvqK9iqRX/n0GuuoINbCs+i7duZwYsKZMc5dxOVS6iyhsO3lk1QpZvPe3WKL scVXNoYFNPtNAmWOwvQPQQxv14rHtXnh+QW9Oxu2E8u/zx3QewlU0S3BgF3LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPjwt9qILR7lQToCaviicrl5AqKwwHwYDVR0j BBgwFoAUxgduMw1Gee8EVepADRFY1PSbC/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmZhZTU2NS00MTE0LTQ0MzQtOTQwZC03YzAxOTI4YzhhYjEvMC9DNjA3NkUzMzBE NDY3OUVGMDQ1NUVBNDAwRDExNThENEY0OUIwQkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYwNzZFMzMwRDQ2NzlFRjA0NTVFQTQwMEQxMTU4RDRGNDlC MEJGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JmYWU1NjUtNDExNC00NDM0LTk0 MGQtN2MwMTkyOGM4YWIxLzAvQzYwNzZFMzMwRDQ2NzlFRjA0NTVFQTQwMEQxMTU4 RDRGNDlCMEJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQ6ydkiiq9uvlQeRpiMrsxnYseoZWUe233U AN0dOIGTXMBCRAq6KFt2x+z5yJLHTeFJ9geOPm/iMPeSPnJnXtsxdyghP4VLItbC erGDd8BTT52JwZ891iOi14ayCH67q5SOHhGtrTcu5dRMHtIb+lnWqOcfPMydVKsc q0FE9E36pY/Yblzlbd3p2RCrTrsvz7Q/n5yW94u98ZrRPNX5n1W1tNYJVsH2LEiq 88YbUA+z97jRPD/AVWp+R1eeD6dymyFqz9DYmov0rPWSZw6vzogUfEfhIO3m7p8O dW8Iwf2VhNl6vV4064RgKYWN1kcyPuFR2Kv9MqpFLp3DEomkDqQ= -----END CERTIFICATE-----Generated at Fri Sep 5 12:41:42 2025 by rpki-client