$ rpki-client -vvf repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.mft File: 6319B77FD8EB7EC968DD59FE94AE146A879A74E5.mft (raw, json) Hash identifier: e0rjTtgrNVloVacT2hExygA8RfyzLjrVf4G0fIRnhbE= Subject key identifier: 4E:A2:58:96:AE:00:33:34:0A:BB:D2:B8:9D:FA:6B:C3:52:AC:59:BD Authority key identifier: 63:19:B7:7F:D8:EB:7E:C9:68:DD:59:FE:94:AE:14:6A:87:9A:74:E5 Certificate issuer: /CN=6319B77FD8EB7EC968DD59FE94AE146A879A74E5 Certificate serial: 56955F0B30B10706636468152ADD87BE6437B667 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.mft Manifest number: 0506 Signing time: Sat 06 Sep 2025 19:22:03 +0000 Manifest this update: Sat 06 Sep 2025 19:17:03 +0000 Manifest next update: Wed 10 Sep 2025 06:09:03 +0000 Files and hashes: 1: 323430303a623138303a3a2f33322d3438203d3e203539323736.roa (hash: o6odkvAl/hKTp4KI63oh9m6EF8ypSkoU3xcKf1Jgr6o=) 2: 6319B77FD8EB7EC968DD59FE94AE146A879A74E5.crl (hash: w5ArFaT4/t1rF0sS2vsWPWdIMst93ur48UuOJUrpBzE=) 3: 3130332e3232362e3233332e302f32342d3234203d3e203539323736.roa (hash: VyjiO45+sx8rVhpe+p1nyWOxHRDbuxx2WR1qZ8IEuUM=) 4: 3130332e3232362e3233322e302f32322d3234203d3e203539323736.roa (hash: wXEz476nIlWr9YPVy2btympb5pWVJFYVSK12JD1WOHw=) 5: 3130332e3232362e3233342e302f32342d3234203d3e203539323736.roa (hash: YASd+4IY2ByHOpeWGSgT5aSz1TSDcJWrWxZ8mmmAyH4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.crl rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 06:09:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:95:5f:0b:30:b1:07:06:63:64:68:15:2a:dd:87:be:64:37:b6:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6319B77FD8EB7EC968DD59FE94AE146A879A74E5 Validity Not Before: Sep 6 19:17:03 2025 GMT Not After : Sep 10 06:09:03 2025 GMT Subject: CN=4EA25896AE0033340ABBD2B89DFA6BC352AC59BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2a:d9:2a:b1:8c:1e:f2:58:6a:ac:be:47:74: 29:77:d3:14:43:d6:0b:6f:1f:5d:60:9d:b5:6d:d4: 96:4f:fb:e0:0f:3f:5e:16:a1:bc:92:de:81:12:a7: 19:7f:4b:50:72:eb:ee:eb:9c:8e:8d:1d:59:6c:e0: 03:8c:2c:74:9c:c7:87:7a:61:5b:f3:57:96:ae:49: 76:8c:46:4c:70:6b:14:ef:3c:b1:0e:5a:7c:9e:57: 1d:d6:65:c3:c9:f3:a2:95:b1:64:57:1d:30:b4:84: c3:93:48:ca:63:18:04:2f:8b:c6:44:89:a3:34:2a: f7:12:7a:53:77:15:58:a8:6c:7b:37:b9:e3:95:b8: a0:6b:78:02:30:a5:8a:01:55:ed:c8:5e:50:cb:94: 9e:53:d3:89:d5:ed:ae:e1:68:a9:49:6d:fb:c6:68: 33:dc:d0:0e:91:50:dc:a0:96:3f:31:4c:26:f4:77: df:a1:73:6e:09:3b:eb:5d:ee:4e:31:4f:d8:47:df: d7:ae:f8:a4:13:12:7f:71:96:6e:98:69:de:d7:90: 25:47:9f:45:27:f0:d7:a0:db:69:84:f4:7f:21:0f: cb:26:47:83:b0:be:87:a8:75:66:f4:d1:4e:28:d4: f1:52:d6:73:fe:cc:71:8c:da:89:67:aa:9f:5f:5b: 77:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A2:58:96:AE:00:33:34:0A:BB:D2:B8:9D:FA:6B:C3:52:AC:59:BD X509v3 Authority Key Identifier: keyid:63:19:B7:7F:D8:EB:7E:C9:68:DD:59:FE:94:AE:14:6A:87:9A:74:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:6d:e8:54:15:f8:9b:44:d0:d8:b5:39:14:3e:34:04:eb:50: ec:db:b0:40:d2:2c:9d:ca:ad:be:22:06:b4:21:cf:70:f1:3f: 03:ec:a5:c3:ac:f4:67:69:f2:e8:10:bb:ee:78:92:bd:fa:92: 6c:ec:03:a6:3b:45:a8:18:b9:f5:2c:e4:8f:a2:fd:9c:23:56: c9:97:fb:de:27:c2:4a:47:7a:32:95:f4:ec:cb:45:f0:4a:aa: db:f3:4e:97:b9:78:d3:90:5a:61:b4:cb:f1:57:53:d2:97:3d: 4e:e1:c7:5f:8b:9a:82:d1:69:d0:a5:6c:f0:e9:e5:72:a0:69: 23:eb:45:7e:a8:7f:23:1a:13:b6:89:0e:a0:d7:c9:c1:2f:87: b8:2b:8e:ad:85:09:7f:16:d3:30:19:6a:04:6c:25:c9:e1:c2: 2e:9f:65:91:2d:7a:6e:e2:f0:54:6d:17:47:e1:b6:9f:c1:5d: d6:c8:2c:cb:0e:95:f2:8d:e8:8f:dc:ca:10:ea:59:24:66:66: b0:d1:99:1d:b6:5a:3b:8d:6d:b0:72:9d:c0:3d:a0:1c:e7:13: 14:fc:35:17:dc:c5:f2:ad:63:de:c4:c8:fd:a2:c6:65:dd:e5: 19:2d:56:b9:dd:6f:47:75:42:92:82:05:e0:27:5a:80:e3:d4: 42:75:35:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVpVfCzCxBwZjZGgVKt2HvmQ3tmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMxOUI3N0ZEOEVCN0VDOTY4REQ1OUZFOTRBRTE0NkE4 NzlBNzRFNTAeFw0yNTA5MDYxOTE3MDNaFw0yNTA5MTAwNjA5MDNaMDMxMTAvBgNV BAMTKDRFQTI1ODk2QUUwMDMzMzQwQUJCRDJCODlERkE2QkMzNTJBQzU5QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeKtkqsYwe8lhqrL5HdCl30xRD 1gtvH11gnbVt1JZP++APP14WobyS3oESpxl/S1By6+7rnI6NHVls4AOMLHScx4d6 YVvzV5auSXaMRkxwaxTvPLEOWnyeVx3WZcPJ86KVsWRXHTC0hMOTSMpjGAQvi8ZE iaM0KvcSelN3FViobHs3ueOVuKBreAIwpYoBVe3IXlDLlJ5T04nV7a7haKlJbfvG aDPc0A6RUNyglj8xTCb0d9+hc24JO+td7k4xT9hH39eu+KQTEn9xlm6Yad7XkCVH n0Un8Neg22mE9H8hD8smR4OwvoeodWb00U4o1PFS1nP+zHGM2olnqp9fW3erAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTqJYlq4AMzQKu9K4nfprw1KsWb0wHwYDVR0j BBgwFoAUYxm3f9jrfslo3Vn+lK4UaoeadOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjU0MmJjNC03NGRjLTQ1ZGQtYjY1OS03NDVjYTJhY2EzMzMvMC82MzE5Qjc3RkQ4 RUI3RUM5NjhERDU5RkU5NEFFMTQ2QTg3OUE3NEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjMxOUI3N0ZEOEVCN0VDOTY4REQ1OUZFOTRBRTE0NkE4NzlB NzRFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmY1NDJiYzQtNzRkYy00NWRkLWI2 NTktNzQ1Y2EyYWNhMzMzLzAvNjMxOUI3N0ZEOEVCN0VDOTY4REQ1OUZFOTRBRTE0 NkE4NzlBNzRFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBt6FQV+JtE0Ni1ORQ+NATrUOzbsEDSLJ3K rb4iBrQhz3DxPwPspcOs9Gdp8ugQu+54kr36kmzsA6Y7RagYufUs5I+i/ZwjVsmX +94nwkpHejKV9OzLRfBKqtvzTpe5eNOQWmG0y/FXU9KXPU7hx1+LmoLRadClbPDp 5XKgaSPrRX6ofyMaE7aJDqDXycEvh7grjq2FCX8W0zAZagRsJcnhwi6fZZEtem7i 8FRtF0fhtp/BXdbILMsOlfKN6I/cyhDqWSRmZrDRmR22WjuNbbByncA9oBznExT8 NRfcxfKtY97EyP2ixmXd5RktVrndb0d1QpKCBeAnWoDj1EJ1NZI= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:07 2025 by rpki-client