$ rpki-client -vvf repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/6C9FD300DFD761AFDA950CE979599BBE316BB13C.mft File: 6C9FD300DFD761AFDA950CE979599BBE316BB13C.mft (raw, json) Hash identifier: c5LBpzlssZvzExkO8wOzGmXwymailAIdXVNkYJRwxFc= Subject key identifier: 8E:C1:57:89:83:0E:A5:9A:5A:40:59:1E:E2:71:15:AC:A7:3D:73:EB Authority key identifier: 6C:9F:D3:00:DF:D7:61:AF:DA:95:0C:E9:79:59:9B:BE:31:6B:B1:3C Certificate issuer: /CN=6C9FD300DFD761AFDA950CE979599BBE316BB13C Certificate serial: 792B6C0DC796E9EB01920F6EFBF6BA8FC744B62E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C9FD300DFD761AFDA950CE979599BBE316BB13C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/6C9FD300DFD761AFDA950CE979599BBE316BB13C.mft Manifest number: C7 Signing time: Sat 06 Sep 2025 08:02:15 +0000 Manifest this update: Sat 06 Sep 2025 07:57:15 +0000 Manifest next update: Tue 09 Sep 2025 16:09:15 +0000 Files and hashes: 1: 6C9FD300DFD761AFDA950CE979599BBE316BB13C.crl (hash: S61e0Pd4Pvm22YpaejXH+TVkSzql9V7XxYSpGtUe/Bo=) 2: 3130332e3232382e31382e302f32342d3234203d3e20313530393835.roa (hash: 0/OqllA56TlHB+/g3q6s+l8VMpQYYTb8qnYADWBkbik=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/6C9FD300DFD761AFDA950CE979599BBE316BB13C.crl rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/6C9FD300DFD761AFDA950CE979599BBE316BB13C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C9FD300DFD761AFDA950CE979599BBE316BB13C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 16:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:2b:6c:0d:c7:96:e9:eb:01:92:0f:6e:fb:f6:ba:8f:c7:44:b6:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C9FD300DFD761AFDA950CE979599BBE316BB13C Validity Not Before: Sep 6 07:57:15 2025 GMT Not After : Sep 9 16:09:15 2025 GMT Subject: CN=8EC15789830EA59A5A40591EE27115ACA73D73EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:44:a6:f1:f3:a3:2c:19:6a:b6:fc:ab:f0:79: c6:6a:f9:25:bc:04:e7:5b:ef:83:d2:6a:48:4f:d2: c2:d3:76:5a:ad:9c:2e:a8:44:5d:c3:61:a9:16:54: 8e:7c:dd:be:82:3d:3b:1b:97:3e:23:f3:73:88:01: 10:e5:9b:ef:6d:15:db:64:e0:60:38:4c:2a:5e:9f: a3:e6:97:17:1b:2a:16:1f:e1:5c:55:90:47:c9:22: 85:17:b0:ee:da:5c:b3:44:0e:75:26:28:82:8b:ab: da:c9:07:a9:50:54:c2:67:e7:e9:d8:9c:12:5d:b6: 74:3b:76:af:27:20:3d:ca:f3:1b:18:cd:8e:0c:8b: f0:eb:70:fe:ff:18:de:e9:cb:c3:9a:36:6b:eb:f5: 5c:5d:e5:d6:fd:77:c0:c4:0a:66:00:4c:cf:cf:83: c0:23:76:cc:fb:ea:47:83:05:3f:c2:0a:b3:c6:79: 76:47:31:0d:8f:77:42:f9:71:23:3b:ac:d4:c3:42: 0e:f0:da:f2:c3:97:28:b7:bc:f4:a2:69:26:3a:2a: e6:42:d3:cc:d2:9a:e4:d9:30:1e:e0:f9:30:20:bd: 36:f5:a0:fb:8f:db:43:c5:1b:d9:73:3d:23:d9:1c: e8:7d:2a:33:bf:59:23:3d:34:b2:e6:ae:fc:ce:1f: 49:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C1:57:89:83:0E:A5:9A:5A:40:59:1E:E2:71:15:AC:A7:3D:73:EB X509v3 Authority Key Identifier: keyid:6C:9F:D3:00:DF:D7:61:AF:DA:95:0C:E9:79:59:9B:BE:31:6B:B1:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/6C9FD300DFD761AFDA950CE979599BBE316BB13C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C9FD300DFD761AFDA950CE979599BBE316BB13C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/1/6C9FD300DFD761AFDA950CE979599BBE316BB13C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:04:55:f3:53:7b:48:8f:be:9f:38:6d:3c:57:99:81:d3:47: 3f:26:df:b7:d5:59:9c:d1:1a:26:d0:31:68:08:75:4b:78:27: ef:28:72:09:dc:c5:8a:8c:bb:80:4e:ee:3e:ee:18:e9:d9:b6: 83:19:6c:3e:00:0b:f0:61:71:fc:a7:81:3b:d5:f6:81:9a:04: d0:f0:cf:07:ed:03:b7:f7:e9:a5:38:47:b3:51:62:e5:29:e0: 3a:a8:6f:bc:58:81:8f:c0:ec:8c:b4:c9:ab:c9:f4:12:af:e0: 9a:53:79:dc:69:87:dc:53:f3:22:9a:7a:15:89:ac:15:17:b2: 41:bb:a8:ba:10:38:0c:f5:e3:cc:93:a6:59:fd:e4:2d:2d:4c: 02:40:6f:7d:62:46:a3:07:80:a2:94:4b:1c:4d:16:32:7b:f4: bd:d3:9e:cf:2c:30:78:c3:a9:86:bf:6e:77:c5:3e:ae:a7:02: f7:73:5c:35:ba:75:9f:e0:1d:4a:b5:05:07:1f:08:e3:f3:fb: 51:76:89:50:cd:94:91:cb:a7:02:51:cc:8b:8a:f7:e3:53:09: bd:6c:db:bc:f1:40:32:75:33:ba:59:a0:91:50:8b:7b:95:06: 8f:31:6e:d5:42:da:e8:8e:9d:04:e4:28:a6:d1:aa:d3:e3:7f: 83:b4:e1:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeStsDceW6esBkg9u+/a6j8dEti4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkM5RkQzMDBERkQ3NjFBRkRBOTUwQ0U5Nzk1OTlCQkUz MTZCQjEzQzAeFw0yNTA5MDYwNzU3MTVaFw0yNTA5MDkxNjA5MTVaMDMxMTAvBgNV BAMTKDhFQzE1Nzg5ODMwRUE1OUE1QTQwNTkxRUUyNzExNUFDQTczRDczRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrRKbx86MsGWq2/KvwecZq+SW8 BOdb74PSakhP0sLTdlqtnC6oRF3DYakWVI583b6CPTsblz4j83OIARDlm+9tFdtk 4GA4TCpen6PmlxcbKhYf4VxVkEfJIoUXsO7aXLNEDnUmKIKLq9rJB6lQVMJn5+nY nBJdtnQ7dq8nID3K8xsYzY4Mi/DrcP7/GN7py8OaNmvr9Vxd5db9d8DECmYATM/P g8Ajdsz76keDBT/CCrPGeXZHMQ2Pd0L5cSM7rNTDQg7w2vLDlyi3vPSiaSY6KuZC 08zSmuTZMB7g+TAgvTb1oPuP20PFG9lzPSPZHOh9KjO/WSM9NLLmrvzOH0kPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjsFXiYMOpZpaQFke4nEVrKc9c+swHwYDVR0j BBgwFoAUbJ/TAN/XYa/alQzpeVmbvjFrsTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzI5NzkzZS04ZjE4LTQxMTYtOTI2OC1hMTMzZGFmMTFjZWYvMS82QzlGRDMwMERG RDc2MUFGREE5NTBDRTk3OTU5OUJCRTMxNkJCMTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkM5RkQzMDBERkQ3NjFBRkRBOTUwQ0U5Nzk1OTlCQkUzMTZC QjEzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTMyOTc5M2UtOGYxOC00MTE2LTky NjgtYTEzM2RhZjExY2VmLzEvNkM5RkQzMDBERkQ3NjFBRkRBOTUwQ0U5Nzk1OTlC QkUzMTZCQjEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwEVfNTe0iPvp84bTxXmYHTRz8m37fVWZzR GibQMWgIdUt4J+8ocgncxYqMu4BO7j7uGOnZtoMZbD4AC/BhcfyngTvV9oGaBNDw zwftA7f36aU4R7NRYuUp4Dqob7xYgY/A7Iy0yavJ9BKv4JpTedxph9xT8yKaehWJ rBUXskG7qLoQOAz148yTpln95C0tTAJAb31iRqMHgKKUSxxNFjJ79L3Tns8sMHjD qYa/bnfFPq6nAvdzXDW6dZ/gHUq1BQcfCOPz+1F2iVDNlJHLpwJRzIuK9+NTCb1s 27zxQDJ1M7pZoJFQi3uVBo8xbtVC2uiOnQTkKKbRqtPjf4O04WA= -----END CERTIFICATE-----Generated at Sun Sep 7 15:28:31 2025 by rpki-client