$ rpki-client -vvf repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft File: 6A755F0ECD114936B4C154BE153030E6BFE42025.mft (raw, json) Hash identifier: DF84QCq4uU336WYTea6sHibzKrVFeeAJ3IKnKoiv0pc= Subject key identifier: A3:CF:35:F2:52:4F:96:18:27:2C:37:A6:ED:20:DC:72:3F:CA:54:1D Authority key identifier: 6A:75:5F:0E:CD:11:49:36:B4:C1:54:BE:15:30:30:E6:BF:E4:20:25 Certificate issuer: /CN=6A755F0ECD114936B4C154BE153030E6BFE42025 Certificate serial: 2817AC0091D9148C6E59607A86C6B9D41E6F5A0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft Manifest number: 8A Signing time: Fri 29 Aug 2025 18:42:22 +0000 Manifest this update: Fri 29 Aug 2025 18:37:22 +0000 Manifest next update: Mon 01 Sep 2025 22:18:22 +0000 Files and hashes: 1: 3136302e32352e3234352e302f32342d3234203d3e20313533313131.roa (hash: UFu8HMSGf8XDsGbPsoU1Eu+n+uIdk0W8r+YUHRms9EI=) 2: 3136302e32352e3234342e302f32342d3234203d3e20313533313131.roa (hash: 4PEyPB4qmPb2e/bBEQkgXwV9i5IzOHIeX5E1aebL4mE=) 3: 6A755F0ECD114936B4C154BE153030E6BFE42025.crl (hash: /N8wpozu79S8szgES8RBQVGUDP/zZdS+RoAkUfv/4Po=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.crl rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Sep 2025 22:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:17:ac:00:91:d9:14:8c:6e:59:60:7a:86:c6:b9:d4:1e:6f:5a:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A755F0ECD114936B4C154BE153030E6BFE42025 Validity Not Before: Aug 29 18:37:22 2025 GMT Not After : Sep 1 22:18:22 2025 GMT Subject: CN=A3CF35F2524F9618272C37A6ED20DC723FCA541D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:2e:58:56:9d:c6:e0:ab:33:c8:5a:6f:1e:dc: 7a:02:af:87:56:f1:2a:b3:8c:bc:1e:80:3b:65:a4: 57:49:c9:de:46:16:cf:37:8e:80:57:ce:66:24:68: 24:32:55:24:3f:9f:7f:65:e1:a6:0b:87:dc:04:d4: 0d:42:c5:26:20:68:48:07:7b:b8:aa:a9:95:77:41: a7:7e:6f:54:7b:3c:ad:cb:90:48:0f:84:fe:23:74: 58:22:73:99:d6:56:7d:b4:9f:27:e6:c0:45:db:22: 20:d0:5e:b3:01:d4:c3:17:fc:2e:3a:b9:42:f0:f9: 27:c4:11:7d:a0:43:07:fa:53:53:d6:6f:19:8f:87: a0:54:88:be:69:ef:fa:35:a3:77:43:ef:95:f9:30: 31:24:f7:86:2b:cd:2a:f0:32:94:b2:79:f7:ac:cc: 02:f7:10:6c:ad:b6:d0:4c:45:04:78:72:b3:20:e3: be:3b:92:0b:d6:a9:a3:21:7c:7e:26:50:84:33:a5: ac:24:3c:b3:b8:fb:e3:06:8e:99:0a:b2:c3:a8:0c: 4d:63:23:40:8e:a2:b8:e4:58:b6:57:04:08:a5:43: 94:05:6d:7f:75:63:d5:9a:b3:3f:49:6d:51:fc:41: d7:b8:99:f6:c8:0f:45:a1:14:bd:2e:64:06:36:59: 89:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CF:35:F2:52:4F:96:18:27:2C:37:A6:ED:20:DC:72:3F:CA:54:1D X509v3 Authority Key Identifier: keyid:6A:75:5F:0E:CD:11:49:36:B4:C1:54:BE:15:30:30:E6:BF:E4:20:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:52:18:b7:4d:d2:8e:cc:b7:c8:e0:b3:ca:8a:96:a3:3d:e1: 3e:7a:37:1e:60:f9:65:d4:6b:4d:37:05:1c:93:d7:2d:7c:ec: ab:08:42:03:e7:be:21:f0:f1:3d:75:48:f6:32:62:93:be:31: 05:f8:b1:34:48:57:13:2d:f0:e9:75:bc:8f:f2:6a:b4:92:60: 57:34:20:3d:74:f7:bd:34:0d:c6:9a:eb:6e:d9:ed:c6:5f:19: 60:05:c5:aa:00:ec:37:8d:3f:e9:df:b0:f6:ad:f9:41:24:3c: 17:79:af:34:ec:b1:76:e7:db:7e:d4:53:f0:65:1f:91:d3:30: 78:06:24:2a:32:2f:21:8b:ed:8a:ac:b3:34:c0:a9:5e:f5:b5: a6:f4:14:52:8b:47:49:ec:da:32:3a:9e:fb:ce:c1:22:8f:60: 9b:7d:30:6e:07:b6:61:95:5d:74:27:63:95:8b:d6:cb:d6:3b: 72:b1:ed:40:c9:c4:3b:15:2e:04:3e:8d:94:32:b2:41:1b:94: 01:50:41:88:50:ee:f8:d4:e8:cd:60:39:3f:2f:15:c2:83:61: 25:a8:b1:47:4f:16:cb:c2:6e:62:63:ee:18:80:c0:d9:6e:8a: e7:9d:1f:29:0e:de:ea:02:c8:6d:34:83:26:02:29:f4:a1:4a: 55:25:a5:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKBesAJHZFIxuWWB6hsa51B5vWg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE3NTVGMEVDRDExNDkzNkI0QzE1NEJFMTUzMDMwRTZC RkU0MjAyNTAeFw0yNTA4MjkxODM3MjJaFw0yNTA5MDEyMjE4MjJaMDMxMTAvBgNV BAMTKEEzQ0YzNUYyNTI0Rjk2MTgyNzJDMzdBNkVEMjBEQzcyM0ZDQTU0MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyLlhWncbgqzPIWm8e3HoCr4dW 8SqzjLwegDtlpFdJyd5GFs83joBXzmYkaCQyVSQ/n39l4aYLh9wE1A1CxSYgaEgH e7iqqZV3Qad+b1R7PK3LkEgPhP4jdFgic5nWVn20nyfmwEXbIiDQXrMB1MMX/C46 uULw+SfEEX2gQwf6U1PWbxmPh6BUiL5p7/o1o3dD75X5MDEk94YrzSrwMpSyefes zAL3EGytttBMRQR4crMg4747kgvWqaMhfH4mUIQzpawkPLO4++MGjpkKssOoDE1j I0COorjkWLZXBAilQ5QFbX91Y9Wasz9JbVH8Qde4mfbID0WhFL0uZAY2WYkfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo8818lJPlhgnLDem7SDccj/KVB0wHwYDVR0j BBgwFoAUanVfDs0RSTa0wVS+FTAw5r/kICUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGNjMWM3ZS1kYTc0LTRiMTEtYjY3YS1kNWYyN2Q5ODE3NTcvMC82QTc1NUYwRUNE MTE0OTM2QjRDMTU0QkUxNTMwMzBFNkJGRTQyMDI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkE3NTVGMEVDRDExNDkzNkI0QzE1NEJFMTUzMDMwRTZCRkU0 MjAyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhjYzFjN2UtZGE3NC00YjExLWI2 N2EtZDVmMjdkOTgxNzU3LzAvNkE3NTVGMEVDRDExNDkzNkI0QzE1NEJFMTUzMDMw RTZCRkU0MjAyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9SGLdN0o7Mt8jgs8qKlqM94T56Nx5g+WXU a003BRyT1y187KsIQgPnviHw8T11SPYyYpO+MQX4sTRIVxMt8Ol1vI/yarSSYFc0 ID109700Dcaa627Z7cZfGWAFxaoA7DeNP+nfsPat+UEkPBd5rzTssXbn237UU/Bl H5HTMHgGJCoyLyGL7YqsszTAqV71tab0FFKLR0ns2jI6nvvOwSKPYJt9MG4HtmGV XXQnY5WL1svWO3Kx7UDJxDsVLgQ+jZQyskEblAFQQYhQ7vjU6M1gOT8vFcKDYSWo sUdPFsvCbmJj7hiAwNluiuedHykO3uoCyG00gyYCKfShSlUlpVo= -----END CERTIFICATE-----Generated at Sun Aug 31 00:31:44 2025 by rpki-client