$ rpki-client -vvf repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft File: 6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft (raw, json) Hash identifier: 1fCvpPu4E/h+utZu1bbMFPMEZI77EuzDAoDo466a7MU= Subject key identifier: 70:F7:59:18:68:DE:3C:CB:A0:2D:E3:A3:7C:F6:B1:7A:AB:B3:00:B6 Authority key identifier: 6B:FD:65:6A:9F:A6:3F:B8:98:16:B1:7C:CE:D2:83:2B:43:FE:41:CD Certificate issuer: /CN=6BFD656A9FA63FB89816B17CCED2832B43FE41CD Certificate serial: 2A992AE4C49DCBC275EA49ACE312E0DE46BAE4B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft Manifest number: 010D Signing time: Sat 06 Sep 2025 05:21:26 +0000 Manifest this update: Sat 06 Sep 2025 05:16:26 +0000 Manifest next update: Tue 09 Sep 2025 16:26:26 +0000 Files and hashes: 1: 323030313a6466333a356334303a3a2f34382d3438203d3e20313431313236.roa (hash: QBBO/FoYTyAYgTzseCUJPqnk8CnediRAVVQ9iko63Nk=) 2: 6BFD656A9FA63FB89816B17CCED2832B43FE41CD.crl (hash: iuFg6pK3H5vECXoIRHrYq1TBk1ZCgEO2V0ftT/bEywc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.crl rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 16:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:99:2a:e4:c4:9d:cb:c2:75:ea:49:ac:e3:12:e0:de:46:ba:e4:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6BFD656A9FA63FB89816B17CCED2832B43FE41CD Validity Not Before: Sep 6 05:16:26 2025 GMT Not After : Sep 9 16:26:26 2025 GMT Subject: CN=70F7591868DE3CCBA02DE3A37CF6B17AABB300B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c3:c1:3b:77:30:85:dd:64:87:5f:dd:07:87: 35:1d:2a:f8:3a:99:3d:92:f7:5f:f4:7c:8a:31:4c: 9a:25:dd:0b:5f:ef:29:35:19:6a:82:2f:90:98:74: db:fe:30:79:90:bf:13:06:b4:2a:52:8d:2d:69:61: 95:ee:7d:75:78:fd:10:6c:90:05:04:39:5a:b4:06: af:41:3b:cc:02:0a:59:db:7e:17:1b:f6:3c:09:59: fc:7d:cc:ae:da:52:65:9e:0c:5f:b5:d6:a1:bf:d8: 59:9c:a5:19:48:78:3c:f3:91:e4:07:79:47:17:a3: b3:a3:de:22:66:3c:fc:6d:3c:68:46:08:b1:f6:d3: 27:8b:9d:71:3a:fa:53:47:02:48:ef:bc:bf:0d:64: af:ff:b0:26:ae:61:14:75:5b:9c:8f:4e:6a:09:6a: 96:93:7d:05:1f:33:76:4f:ba:dd:63:e0:24:90:f3: 05:49:a5:43:3a:f5:bc:8f:b8:08:03:02:4c:5d:b4: 18:d8:77:a8:5c:94:5a:f4:22:32:d0:41:f2:90:e3: 07:db:95:f4:98:1e:22:b1:72:62:d4:3c:62:f3:4e: 7a:73:60:0c:14:ab:27:12:0a:03:6b:1b:de:59:ef: ae:79:9f:c6:21:66:7d:97:82:2d:4e:02:1f:eb:b3: 9a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F7:59:18:68:DE:3C:CB:A0:2D:E3:A3:7C:F6:B1:7A:AB:B3:00:B6 X509v3 Authority Key Identifier: keyid:6B:FD:65:6A:9F:A6:3F:B8:98:16:B1:7C:CE:D2:83:2B:43:FE:41:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:64:b7:f6:3d:e3:dc:87:00:4b:6e:6e:d8:aa:50:f2:ba:04: 33:6a:d3:78:25:47:85:c0:22:12:f0:fc:4b:ec:fe:d2:a8:0c: 23:75:a4:1c:4b:85:b9:cb:e3:f3:2d:b1:6d:28:a8:6b:1c:5f: 4e:d7:c8:70:36:1d:4c:22:e4:c6:05:9d:b4:0a:19:d3:c9:e7: 15:84:71:0c:ef:7a:ed:be:c0:e4:b6:b6:f9:8f:3a:5a:6b:2e: 27:c0:63:8e:4b:ba:f9:63:0f:13:1e:b7:e3:58:24:00:cb:c9: c0:e5:0a:7b:38:d6:54:5d:d4:e6:c1:90:13:0d:47:ec:99:b9: dc:82:48:7c:33:5e:2a:86:1b:f3:6a:04:38:99:68:11:1c:ab: bc:a8:a1:9c:e1:dd:84:71:fe:12:4a:47:71:53:70:d1:75:ff: 36:d2:79:36:7b:0d:41:4f:f7:6f:c7:61:d2:2f:f7:e5:aa:99: 47:15:81:4c:e2:26:22:f3:4a:b3:7c:9a:d0:b6:03:05:00:01: 4f:6e:8c:36:5b:8a:ce:27:cc:60:af:72:52:4f:a9:c4:05:ef: 06:7e:42:0a:14:88:db:08:04:a9:52:33:12:ee:50:c0:b0:b3: ee:bc:ea:a0:7a:93:d7:71:7d:f4:be:d4:4f:3c:aa:be:b5:38: b0:9e:ad:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKpkq5MSdy8J16kms4xLg3ka65LMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkJGRDY1NkE5RkE2M0ZCODk4MTZCMTdDQ0VEMjgzMkI0 M0ZFNDFDRDAeFw0yNTA5MDYwNTE2MjZaFw0yNTA5MDkxNjI2MjZaMDMxMTAvBgNV BAMTKDcwRjc1OTE4NjhERTNDQ0JBMDJERTNBMzdDRjZCMTdBQUJCMzAwQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcw8E7dzCF3WSHX90HhzUdKvg6 mT2S91/0fIoxTJol3Qtf7yk1GWqCL5CYdNv+MHmQvxMGtCpSjS1pYZXufXV4/RBs kAUEOVq0Bq9BO8wCClnbfhcb9jwJWfx9zK7aUmWeDF+11qG/2FmcpRlIeDzzkeQH eUcXo7Oj3iJmPPxtPGhGCLH20yeLnXE6+lNHAkjvvL8NZK//sCauYRR1W5yPTmoJ apaTfQUfM3ZPut1j4CSQ8wVJpUM69byPuAgDAkxdtBjYd6hclFr0IjLQQfKQ4wfb lfSYHiKxcmLUPGLzTnpzYAwUqycSCgNrG95Z7655n8YhZn2Xgi1OAh/rs5rNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcPdZGGjePMugLeOjfPaxequzALYwHwYDVR0j BBgwFoAUa/1lap+mP7iYFrF8ztKDK0P+Qc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTBjYjYzMC02MzZhLTRiNmEtOTNkZi1iNWQ5MDhmZTZlZTcvMC82QkZENjU2QTlG QTYzRkI4OTgxNkIxN0NDRUQyODMyQjQzRkU0MUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkJGRDY1NkE5RkE2M0ZCODk4MTZCMTdDQ0VEMjgzMkI0M0ZF NDFDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmUwY2I2MzAtNjM2YS00YjZhLTkz ZGYtYjVkOTA4ZmU2ZWU3LzAvNkJGRDY1NkE5RkE2M0ZCODk4MTZCMTdDQ0VEMjgz MkI0M0ZFNDFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGpkt/Y949yHAEtubtiqUPK6BDNq03glR4XA IhLw/Evs/tKoDCN1pBxLhbnL4/MtsW0oqGscX07XyHA2HUwi5MYFnbQKGdPJ5xWE cQzveu2+wOS2tvmPOlprLifAY45LuvljDxMet+NYJADLycDlCns41lRd1ObBkBMN R+yZudyCSHwzXiqGG/NqBDiZaBEcq7yooZzh3YRx/hJKR3FTcNF1/zbSeTZ7DUFP 92/HYdIv9+WqmUcVgUziJiLzSrN8mtC2AwUAAU9ujDZbis4nzGCvclJPqcQF7wZ+ QgoUiNsIBKlSMxLuUMCws+686qB6k9dxffS+1E88qr61OLCerck= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:39 2025 by rpki-client