$ rpki-client -vvf repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft File: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft (raw, json) Hash identifier: Mr9EW3oMFstzRbuctFtppN/WNHS8URHU9NBmk2oCtBU= Subject key identifier: 16:5D:D0:A7:B4:89:CF:E7:8E:07:B0:FA:70:27:E8:EE:9F:BD:06:5A Authority key identifier: 6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 Certificate issuer: /CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Certificate serial: 4531DA8F3A12F75C631B8B9240483B8F8970A297 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft Manifest number: 01D0 Signing time: Sat 06 Sep 2025 20:00:41 +0000 Manifest this update: Sat 06 Sep 2025 19:55:41 +0000 Manifest next update: Wed 10 Sep 2025 06:56:41 +0000 Files and hashes: 1: 3130332e3132362e3131362e302f32332d3234203d3e20313333383030.roa (hash: xdEDtfm0tP7FMpWiWg9KdIp8IvvJjKZMSw6HMfYr844=) 2: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl (hash: QjUqymN8kn7tpQ0zHj0AP96QQ2yHCDXdtNUAYCAiK0Q=) 3: 3130332e3132362e3131392e302f32342d3234203d3e20313339393732.roa (hash: nPlUaL9yF2n402rwq54ga4y4IA8tmh1JYztdhgr/yzQ=) 4: 3130332e3132362e3131382e302f32342d3234203d3e20313338313136.roa (hash: IZ8KmdFwK5i2F35Ti/yV73rwyTaK/R/VAzY82jFEZs8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 06:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:31:da:8f:3a:12:f7:5c:63:1b:8b:92:40:48:3b:8f:89:70:a2:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Validity Not Before: Sep 6 19:55:41 2025 GMT Not After : Sep 10 06:56:41 2025 GMT Subject: CN=165DD0A7B489CFE78E07B0FA7027E8EE9FBD065A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ed:17:94:11:9f:c6:03:07:67:e5:0a:4e:d8: a4:cf:55:13:e5:1d:66:b7:ab:51:fa:6a:8a:e1:51: c9:79:6f:19:f3:64:25:c7:b6:cd:15:fe:11:7b:3f: 1b:89:f7:41:a3:3e:91:9c:75:49:a7:67:6d:79:d1: 45:69:a1:05:7a:65:fa:d3:20:5d:87:7f:0c:0e:c8: 9c:5b:00:04:68:e3:56:d2:75:c3:e2:d4:ab:40:c6: ad:0b:a5:4b:58:85:60:ed:08:66:ee:a9:98:a1:99: 42:49:a6:da:49:c3:8b:36:f0:9b:32:58:5e:3a:2b: d0:2a:42:10:2e:5e:10:f4:38:b5:d3:4b:2f:9d:75: 39:c9:a2:12:11:d0:87:d0:be:11:3d:73:0c:b7:90: b8:b5:5d:62:25:c9:03:da:d9:9f:b0:0a:de:e7:bd: 6c:96:21:09:b4:2b:b4:00:ba:97:76:9d:f6:31:44: 86:44:c4:4c:1e:49:76:bb:3b:10:34:af:30:48:ac: 3d:27:52:d9:22:e5:6b:53:0f:62:92:c3:63:0c:b8: 14:fa:4b:7e:14:ea:99:58:6c:6e:87:4d:39:f3:12: 69:d0:8b:3f:2c:cd:cc:0c:70:7b:5e:3c:51:62:78: 6b:b3:03:7a:ef:29:fe:83:67:de:84:7d:96:4c:e7: 4b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:5D:D0:A7:B4:89:CF:E7:8E:07:B0:FA:70:27:E8:EE:9F:BD:06:5A X509v3 Authority Key Identifier: keyid:6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:da:8e:be:22:f4:b7:e9:ac:19:51:10:b5:a5:0b:e9:35:42: 50:4e:1d:09:da:18:da:1f:ed:43:e6:e5:8d:fd:36:9e:c3:a5: c1:b7:a7:df:08:d7:b6:f9:d0:13:2a:80:9f:25:66:3d:dc:33: a9:2e:ce:26:6c:38:6d:f5:17:e1:c0:79:91:fc:6e:29:cd:56: 75:ce:92:6c:87:e1:95:f9:8e:aa:02:69:7a:07:0c:b9:b8:cf: b8:6d:10:e4:48:df:fd:fc:bb:60:0a:f6:d1:37:19:cc:82:ff: db:97:d9:95:e0:00:6a:42:35:1a:39:78:f7:e3:8e:22:5a:49: b3:d7:b3:94:d4:79:c6:87:11:a1:10:e0:20:06:47:9c:0c:dc: d9:da:1a:01:a8:a1:c9:d3:57:b2:6d:34:03:29:f0:8f:f1:cc: d9:9a:d7:2f:2e:58:62:57:0e:5d:7b:a6:1a:0c:33:25:83:c1: 9f:d2:c6:b9:82:d9:51:4e:04:ff:9c:b7:bc:b9:29:c0:78:73: 12:01:ff:8b:d9:d5:dc:5c:fb:be:ff:a3:1e:d2:33:c1:0e:31: 59:b5:bb:78:3a:1d:62:6c:b9:2f:c4:b3:ec:dc:04:66:87:de: dd:47:74:05:d7:85:75:79:56:6e:d0:08:96:85:27:56:a5:c7: 9b:62:52:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURTHajzoS91xjG4uSQEg7j4lwopcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdE MDJGNDdFODAeFw0yNTA5MDYxOTU1NDFaFw0yNTA5MTAwNjU2NDFaMDMxMTAvBgNV BAMTKDE2NUREMEE3QjQ4OUNGRTc4RTA3QjBGQTcwMjdFOEVFOUZCRDA2NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC17ReUEZ/GAwdn5QpO2KTPVRPl HWa3q1H6aorhUcl5bxnzZCXHts0V/hF7PxuJ90GjPpGcdUmnZ2150UVpoQV6ZfrT IF2HfwwOyJxbAARo41bSdcPi1KtAxq0LpUtYhWDtCGbuqZihmUJJptpJw4s28Jsy WF46K9AqQhAuXhD0OLXTSy+ddTnJohIR0IfQvhE9cwy3kLi1XWIlyQPa2Z+wCt7n vWyWIQm0K7QAupd2nfYxRIZExEweSXa7OxA0rzBIrD0nUtki5WtTD2KSw2MMuBT6 S34U6plYbG6HTTnzEmnQiz8szcwMcHtePFFieGuzA3rvKf6DZ96EfZZM50vVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFl3Qp7SJz+eOB7D6cCfo7p+9BlowHwYDVR0j BBgwFoAUbfioc7cLqMytoxqt2CFf99AvR+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 N2QyNmRlMC02OGNmLTQyOWMtOGIwZS04ZDY0Yjc2MmY4MjQvMC82REY4QTg3M0I3 MEJBOENDQURBMzFBQUREODIxNUZGN0QwMkY0N0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdEMDJG NDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTdkMjZkZTAtNjhjZi00MjljLThi MGUtOGQ2NGI3NjJmODI0LzAvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVG RjdEMDJGNDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjajr4i9LfprBlRELWlC+k1QlBOHQnaGNof 7UPm5Y39Np7DpcG3p98I17b50BMqgJ8lZj3cM6kuziZsOG31F+HAeZH8binNVnXO kmyH4ZX5jqoCaXoHDLm4z7htEORI3/38u2AK9tE3GcyC/9uX2ZXgAGpCNRo5ePfj jiJaSbPXs5TUecaHEaEQ4CAGR5wM3NnaGgGoocnTV7JtNAMp8I/xzNma1y8uWGJX Dl17phoMMyWDwZ/SxrmC2VFOBP+ct7y5KcB4cxIB/4vZ1dxc+77/ox7SM8EOMVm1 u3g6HWJsuS/Es+zcBGaH3t1HdAXXhXV5Vm7QCJaFJ1alx5tiUuY= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:44 2025 by rpki-client