$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft File: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft (raw, json) Hash identifier: uhj8jEkJCM0lh9QeMf511UD5Bxh7YUJngPzIBBymczc= Subject key identifier: D2:15:E1:3E:E9:26:91:EA:8E:43:74:EC:24:5D:A0:18:05:BE:B1:3B Authority key identifier: 69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E Certificate issuer: /CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Certificate serial: 31BF1141215651C6C3D5D4F040F073E6EB12E776 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft Manifest number: 01F8 Signing time: Fri 05 Sep 2025 08:00:06 +0000 Manifest this update: Fri 05 Sep 2025 07:55:06 +0000 Manifest next update: Mon 08 Sep 2025 16:52:06 +0000 Files and hashes: 1: 323430303a666230303a3a2f33322d3438203d3e203535363730.roa (hash: FVA48wGL4/cskX5JvDPv5QyssORBEsld3N+rmhCU4Gc=) 2: 3130332e31322e32382e302f32322d3234203d3e203535363730.roa (hash: 56/u0yMrkC94FdPOEf+mn1+2joJi+oVC5l6/K3alTgQ=) 3: 3130312e302e342e302f32322d3234203d3e203535363730.roa (hash: 7ECSmeZAaiWw7xemuyw220yGHio1fDg8eukqs4CuhkU=) 4: 3130332e31322e32382e302f32322d3234203d3e203438343635.roa (hash: hq6fcTyLZ0Befnc7SCHGWV/VgoDOfnIfMb9/pRr7Usc=) 5: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl (hash: qb4rwisOsexyi0FyuYLTnNtGdUbSyxaDKcYd++VrSeY=) 6: 3130312e302e342e302f32322d3234203d3e203438343635.roa (hash: 0Vbzbdds4DlTIQ/frtEsWuiBQ6OCjLTHiqaNJsXbu/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 16:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:bf:11:41:21:56:51:c6:c3:d5:d4:f0:40:f0:73:e6:eb:12:e7:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Validity Not Before: Sep 5 07:55:06 2025 GMT Not After : Sep 8 16:52:06 2025 GMT Subject: CN=D215E13EE92691EA8E4374EC245DA01805BEB13B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a3:4a:b2:7e:06:1e:b8:d9:c6:b7:b7:5b:e7: cf:c0:72:0b:a7:d8:b2:81:e2:db:23:4b:98:f5:d5: 59:8b:1c:33:05:5c:03:0c:b8:0a:5f:df:a7:c2:b4: 03:55:98:ca:c5:c8:67:e9:5c:e4:18:b4:fc:8d:e3: 29:2d:96:87:1e:f3:c2:0c:74:15:1c:c6:9c:09:95: c8:48:8d:dd:93:cd:e1:c7:25:1e:fe:06:7f:c3:a2: 40:a8:51:6c:55:0c:62:8d:bc:87:d7:7f:87:a4:cf: 91:5d:f5:c4:1e:9c:1e:56:0f:46:bd:92:9b:d3:b0: 7d:99:b1:70:4a:94:97:df:d2:27:24:14:cf:11:81: 45:8f:f7:b2:12:85:24:26:6f:aa:c0:4a:38:f7:4d: 21:8c:16:97:8a:70:36:00:86:ae:b2:b9:01:f8:3a: a2:79:44:c7:f9:25:88:5b:8b:88:f3:fa:34:c3:53: 5e:af:ed:ef:9c:c6:20:7f:0d:0f:e2:10:18:24:7a: a3:9c:6e:93:f6:3e:b5:5f:7a:06:cf:fd:e6:89:ef: 77:85:fa:55:24:f4:ee:40:d5:72:7d:82:57:c5:fa: e2:2a:af:0a:96:b4:23:ec:2f:7c:36:98:b1:fd:bf: 7d:99:01:4f:e4:fd:d9:03:32:7c:30:7a:30:dc:7e: d0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:15:E1:3E:E9:26:91:EA:8E:43:74:EC:24:5D:A0:18:05:BE:B1:3B X509v3 Authority Key Identifier: keyid:69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:a1:3e:b2:f2:39:3d:87:6c:69:7b:34:62:93:00:6f:9e:f9: 98:d8:91:84:e7:bf:49:8e:f7:1e:47:28:be:de:41:e0:a7:72: 04:df:0c:cf:77:72:a1:b2:4d:31:dd:e6:82:74:5d:de:39:21: 64:67:9b:e5:1a:b5:d4:1c:46:fb:9d:09:a6:ad:d0:24:e3:cb: fc:59:96:dc:c9:08:e9:c6:fd:2a:30:2d:4d:ba:82:15:f8:d2: a6:18:b1:a7:8b:eb:a4:e4:0e:7b:fc:5a:cb:f0:3b:1e:3b:1a: 85:01:54:86:ed:71:4d:e8:e4:5a:45:b7:85:0e:4f:bd:79:09: 33:39:14:09:06:a7:c4:d5:f0:3c:f8:d7:ef:af:59:f9:ab:73: e8:4f:20:d3:5d:8e:ed:07:4f:af:67:f1:7e:b5:56:3e:ba:b7: 56:01:c8:c6:d0:f8:38:56:78:a6:ac:b5:d2:19:7c:20:ca:6f: c1:39:cd:b6:cb:aa:dc:3e:5c:e3:fe:68:31:ad:d7:1b:a9:99: be:df:46:21:c3:13:fa:73:38:60:62:b2:b0:a7:29:40:f8:1b: a5:b3:b2:63:bb:88:69:10:64:97:8f:c2:9f:ce:6f:44:31:57: 9b:17:5e:28:38:a3:1b:a0:90:75:ce:60:96:a8:5d:5b:72:e9: c9:cc:a0:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMb8RQSFWUcbD1dTwQPBz5usS53YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVG RTNFN0MzRTAeFw0yNTA5MDUwNzU1MDZaFw0yNTA5MDgxNjUyMDZaMDMxMTAvBgNV BAMTKEQyMTVFMTNFRTkyNjkxRUE4RTQzNzRFQzI0NURBMDE4MDVCRUIxM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0o0qyfgYeuNnGt7db58/Acgun 2LKB4tsjS5j11VmLHDMFXAMMuApf36fCtANVmMrFyGfpXOQYtPyN4yktloce88IM dBUcxpwJlchIjd2TzeHHJR7+Bn/DokCoUWxVDGKNvIfXf4ekz5Fd9cQenB5WD0a9 kpvTsH2ZsXBKlJff0ickFM8RgUWP97IShSQmb6rASjj3TSGMFpeKcDYAhq6yuQH4 OqJ5RMf5JYhbi4jz+jTDU16v7e+cxiB/DQ/iEBgkeqOcbpP2PrVfegbP/eaJ73eF +lUk9O5A1XJ9glfF+uIqrwqWtCPsL3w2mLH9v32ZAU/k/dkDMnwwejDcftCzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0hXhPukmkeqOQ3TsJF2gGAW+sTswHwYDVR0j BBgwFoAUaWcBLvykNpjo4bckuR38Xv4+fD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDZlYTdmYS05NGQyLTRkZGMtYThlNi01ZGM2MjZjMjkxZDQvMC82OTY3MDEyRUZD QTQzNjk4RThFMUI3MjRCOTFERkM1RUZFM0U3QzNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVGRTNF N0MzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4 ZTYtNWRjNjI2YzI5MWQ0LzAvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZD NUVGRTNFN0MzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOhPrLyOT2HbGl7NGKTAG+e+ZjYkYTnv0mO 9x5HKL7eQeCncgTfDM93cqGyTTHd5oJ0Xd45IWRnm+UatdQcRvudCaat0CTjy/xZ ltzJCOnG/SowLU26ghX40qYYsaeL66TkDnv8WsvwOx47GoUBVIbtcU3o5FpFt4UO T715CTM5FAkGp8TV8Dz41++vWfmrc+hPINNdju0HT69n8X61Vj66t1YByMbQ+DhW eKastdIZfCDKb8E5zbbLqtw+XOP+aDGt1xupmb7fRiHDE/pzOGBisrCnKUD4G6Wz smO7iGkQZJePwp/Ob0QxV5sXXig4oxugkHXOYJaoXVty6cnMoE0= -----END CERTIFICATE-----Generated at Sun Sep 7 13:57:29 2025 by rpki-client