$ rpki-client -vvf repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft File: 6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft (raw, json) Hash identifier: vPCUrFPc1NvUEQexsR4cg8wD2B6mF1a0D0OMMWkDyqY= Subject key identifier: D9:6E:1B:9C:D5:78:6A:7C:EA:63:C6:7A:26:41:8D:EE:DF:16:08:61 Authority key identifier: 6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19 Certificate issuer: /CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19 Certificate serial: 4E5FE93B4F9ACBB693C54D8391BA53AD104B1EBB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft Manifest number: 0501 Signing time: Sun 07 Sep 2025 06:40:38 +0000 Manifest this update: Sun 07 Sep 2025 06:35:38 +0000 Manifest next update: Wed 10 Sep 2025 15:53:38 +0000 Files and hashes: 1: 3130332e35322e3137312e302f32342d3234203d3e203633383732.roa (hash: 8GeHpy3P984a7HFNxAJwy8wpU0ns8pabD1WKnP4tvuw=) 2: 3130332e3132372e3134342e302f32332d3233203d3e203633383732.roa (hash: ej36uL5q6V5lzJlk2/mVmLfbDb6eLchafID3r1d/Uc0=) 3: 6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl (hash: HndrobGuJlq1gGyV+5ORAuBEek/2vzF1jauR9qupocE=) 4: 3130332e35322e3137302e302f32332d3233203d3e203633383732.roa (hash: brSZ0m97l9z7YCV2zCWTUJDAsUOi5NNl8YP1n7Hn+04=) 5: 3130332e35322e3137302e302f32342d3234203d3e203633383732.roa (hash: Z+FoVz2t/bU9Oh29fvVmEj58qbcaPFxm8OsmszzE23M=) 6: 3130332e3132372e3134352e302f32342d3234203d3e203633383732.roa (hash: MXaL0QCe5+IS+MABtk7XIsAr+HW38yfYtKBH23S5G78=) 7: 3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa (hash: dT1Ez91RELEcb3/us3FXp8X3LrIGPlHAyCw3ou4h/Pw=) 8: 323030313a6466333a6330303a3a2f34382d3438203d3e203633383732.roa (hash: DbPoZnzVJDn8t1MnQ7X+537hTvhkD/yKBSWUNPseJA0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:5f:e9:3b:4f:9a:cb:b6:93:c5:4d:83:91:ba:53:ad:10:4b:1e:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19 Validity Not Before: Sep 7 06:35:38 2025 GMT Not After : Sep 10 15:53:38 2025 GMT Subject: CN=D96E1B9CD5786A7CEA63C67A26418DEEDF160861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2d:78:a2:3c:0c:21:c4:60:37:53:7a:20:af: 68:d1:03:15:2c:86:b3:52:07:43:4c:df:28:49:b7: e5:32:12:6f:02:f8:72:ad:f8:00:ff:3d:7e:52:93: a6:00:cf:77:cf:ce:73:37:b6:f2:68:0d:2e:1e:0c: a2:aa:7c:c1:1e:db:b2:e0:27:8a:fd:0d:e4:14:09: 46:d1:14:8b:62:23:45:ea:15:93:ea:fe:a9:37:74: d2:50:fe:0e:e9:9b:fb:07:c6:14:56:27:19:3a:c9: 56:7f:cf:81:ad:4f:cb:8e:9d:30:22:30:31:2a:bf: 04:ad:07:8f:63:29:88:89:f8:5a:9d:9a:9b:cf:ed: 98:75:06:9b:a6:ef:c0:78:f4:3d:3f:40:0c:44:d5: 69:d0:b4:ca:d6:c0:df:06:a1:09:0f:b9:57:e5:e0: b2:47:2a:02:78:73:4b:36:09:af:96:a8:3e:d6:b3: 63:f5:d0:e9:48:17:81:56:66:13:79:3f:75:fd:fe: a5:e9:85:76:c2:29:e2:47:61:0b:65:b1:a6:b6:dc: e7:ac:d0:3d:b9:77:cc:65:68:c3:4b:f7:54:96:aa: f2:b8:48:b2:6c:2c:bd:1a:b5:69:9f:02:01:a6:19: e4:79:65:dd:22:85:4e:d9:c0:e4:f7:53:4b:e1:e3: 89:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6E:1B:9C:D5:78:6A:7C:EA:63:C6:7A:26:41:8D:EE:DF:16:08:61 X509v3 Authority Key Identifier: keyid:6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:a2:47:f6:c0:82:2d:04:a0:5d:c0:bc:ea:3a:80:c3:1c:03: fa:61:05:c7:37:f4:6d:d9:07:58:08:6d:d4:ac:91:8b:98:a0: 32:91:60:89:02:16:ce:0c:cb:09:f7:a0:86:f7:c2:b6:d6:85: e2:d6:01:27:c6:4c:0c:91:ca:a8:07:bf:55:98:93:6a:42:2e: e5:e0:64:90:e3:fc:35:7b:8e:42:cb:60:bd:50:f3:01:73:4c: f9:02:e7:f1:19:78:22:c3:a1:bf:c0:6f:ca:09:49:c0:7c:10: 5f:f7:92:a6:2f:14:9e:35:b8:90:97:57:16:6a:7e:80:fe:e9: 57:a8:9b:54:10:8f:a0:86:09:de:17:c3:77:60:53:d8:a0:7e: 6d:9c:ce:77:11:4d:e8:79:4a:06:29:33:92:84:83:23:e0:7c: c0:1e:bb:d1:ec:bb:02:9c:50:17:a0:90:1d:2e:e4:14:ab:f1: 32:a0:41:86:3a:43:42:f4:c8:01:34:d1:e6:48:8f:ec:5e:6c: a1:91:9d:72:49:9c:8f:74:f4:d4:d6:f6:3a:4e:5d:33:de:fd: c0:fe:63:39:7f:34:3a:74:7b:7f:51:fb:4a:ce:e5:6a:b6:19: d5:63:7e:83:c1:5f:3a:de:44:c0:48:44:30:90:bb:5f:e7:6e: 43:ae:bb:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTl/pO0+ay7aTxU2DkbpTrRBLHrswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3MTYy N0JFN0IxOTAeFw0yNTA5MDcwNjM1MzhaFw0yNTA5MTAxNTUzMzhaMDMxMTAvBgNV BAMTKEQ5NkUxQjlDRDU3ODZBN0NFQTYzQzY3QTI2NDE4REVFREYxNjA4NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHLXiiPAwhxGA3U3ogr2jRAxUs hrNSB0NM3yhJt+UyEm8C+HKt+AD/PX5Sk6YAz3fPznM3tvJoDS4eDKKqfMEe27Lg J4r9DeQUCUbRFItiI0XqFZPq/qk3dNJQ/g7pm/sHxhRWJxk6yVZ/z4GtT8uOnTAi MDEqvwStB49jKYiJ+FqdmpvP7Zh1Bpum78B49D0/QAxE1WnQtMrWwN8GoQkPuVfl 4LJHKgJ4c0s2Ca+WqD7Ws2P10OlIF4FWZhN5P3X9/qXphXbCKeJHYQtlsaa23Oes 0D25d8xlaMNL91SWqvK4SLJsLL0atWmfAgGmGeR5Zd0ihU7ZwOT3U0vh44mlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2W4bnNV4anzqY8Z6JkGN7t8WCGEwHwYDVR0j BBgwFoAUbWuu2/27qka/PaIYVXB3Fie+exkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NmJiMzMzYy05ODJiLTRmY2UtYWM4MS1iYzA2OTIyOWUyNDMvMC82RDZCQUVEQkZE QkJBQTQ2QkYzREEyMTg1NTcwNzcxNjI3QkU3QjE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3MTYyN0JF N0IxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTZiYjMzM2MtOTgyYi00ZmNlLWFj ODEtYmMwNjkyMjllMjQzLzAvNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3 MTYyN0JFN0IxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESiR/bAgi0EoF3AvOo6gMMcA/phBcc39G3Z B1gIbdSskYuYoDKRYIkCFs4Mywn3oIb3wrbWheLWASfGTAyRyqgHv1WYk2pCLuXg ZJDj/DV7jkLLYL1Q8wFzTPkC5/EZeCLDob/Ab8oJScB8EF/3kqYvFJ41uJCXVxZq foD+6Veom1QQj6CGCd4Xw3dgU9igfm2czncRTeh5SgYpM5KEgyPgfMAeu9HsuwKc UBegkB0u5BSr8TKgQYY6Q0L0yAE00eZIj+xebKGRnXJJnI909NTW9jpOXTPe/cD+ Yzl/NDp0e39R+0rO5Wq2GdVjfoPBXzreRMBIRDCQu1/nbkOuu14= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:06 2025 by rpki-client