$ rpki-client -vvf repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft File: 6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft (raw, json) Hash identifier: bETC/qjAg7iS/vIJM7Bvg82yHyjQiJ/vArfAECiNEfQ= Subject key identifier: 05:06:CF:7F:55:E4:39:5F:64:A5:BA:05:A9:88:B5:74:9F:78:B8:61 Authority key identifier: 6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 Certificate issuer: /CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31 Certificate serial: 5FF03E1E5D91712BAD3FD7E366F87E34F29CDE10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft Manifest number: BC Signing time: Fri 29 Aug 2025 13:20:47 +0000 Manifest this update: Fri 29 Aug 2025 13:15:47 +0000 Manifest next update: Mon 01 Sep 2025 22:04:47 +0000 Files and hashes: 1: 3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa (hash: nPtUGKaHPiIgcmd7zVYYYWB0FNbLMK1i/rlw7h+2X4I=) 2: 6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl (hash: w3UUykmpOF65w2HXdXX1lPQod4GyRFX6eNKrbhrJLFU=) 3: 3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa (hash: hNrDFdJZIJVijEPlIae7oRd0LDEkkVmTrltcwdQNZWQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Sep 2025 22:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f0:3e:1e:5d:91:71:2b:ad:3f:d7:e3:66:f8:7e:34:f2:9c:de:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31 Validity Not Before: Aug 29 13:15:47 2025 GMT Not After : Sep 1 22:04:47 2025 GMT Subject: CN=0506CF7F55E4395F64A5BA05A988B5749F78B861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c9:df:c0:a3:42:68:d1:fa:d3:a2:e7:c5:b8: ba:25:d5:c4:de:6a:f0:2d:0c:03:94:00:9d:ce:09: 08:c5:8e:ff:6c:0a:5b:70:fa:41:48:17:f9:44:d7: 2e:f0:6c:d7:a9:a3:08:9f:52:fa:a7:6b:44:a4:8c: dc:e2:f8:89:33:b8:e6:48:82:23:04:09:59:16:6c: ea:0b:57:89:90:e0:32:57:3e:ff:bc:a3:f2:33:c8: 7c:38:33:29:bb:f9:17:6c:64:e8:94:ec:90:5d:c3: 5c:7c:52:bc:74:1d:b8:d8:19:e6:1c:e8:5b:8a:0f: b5:d7:f3:b4:a5:46:b1:19:dd:e1:61:0d:42:0f:96: ea:d8:e9:dd:69:86:d7:2c:a4:df:c4:09:e5:d9:88: 6d:26:20:02:2c:a1:b7:9c:ab:05:a0:bc:10:35:a3: 43:db:f2:64:51:62:c2:fe:42:3e:3c:49:aa:55:e5: db:f9:1e:51:6c:de:63:b4:8d:eb:e5:81:86:fa:72: 40:81:63:19:32:ee:a6:c7:5e:8c:50:64:9e:5d:fa: d2:ef:fc:36:42:0b:ea:f3:92:37:75:bb:e4:32:15: b8:27:e2:dd:6f:7e:07:7c:9f:12:c7:2b:e4:5b:d9: 06:56:76:69:d8:4e:55:5d:9a:71:00:ab:24:01:d8: e3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:06:CF:7F:55:E4:39:5F:64:A5:BA:05:A9:88:B5:74:9F:78:B8:61 X509v3 Authority Key Identifier: keyid:6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:f2:74:c1:53:05:7e:42:b5:e6:4f:5d:b0:b6:b9:82:ff:6f: d7:2c:fe:51:dc:12:ee:64:9a:20:a7:f8:23:c9:94:26:c5:84: db:04:02:c1:fd:21:77:0e:70:09:05:79:74:5c:92:62:82:51: 81:46:4c:f2:20:9e:b0:c3:a6:b4:34:35:00:6e:2f:00:d2:05: 7a:c6:df:8f:e4:6d:94:3e:33:1a:e1:92:df:c9:b2:41:ae:26: 1b:bd:5c:3f:6d:aa:d2:e5:29:56:5c:6c:d0:b5:de:88:a5:8b: 6c:83:83:98:58:6f:e2:8f:c1:12:19:76:ad:9f:66:3c:95:b6: fd:b8:d3:33:59:3d:01:ed:f2:f3:1d:65:08:bb:e2:39:c9:50: ab:42:d1:82:a8:1a:81:9f:2f:13:c7:dd:52:80:87:38:69:a9: 93:df:9f:60:42:1e:c7:ab:ba:7d:2f:2d:c3:dc:ce:be:4c:d2: 71:a5:9b:83:ab:9a:59:24:71:4a:6d:63:31:83:31:ad:98:8b: d9:ac:3b:ba:32:c9:e2:64:93:2c:d9:8e:3a:4c:c1:52:f8:f3: 43:a9:04:7c:59:10:1b:49:b6:23:f2:aa:ae:76:46:5e:db:a9: 2f:74:09:64:04:3c:5c:b5:18:ac:66:38:33:28:e4:7b:d7:5d: 96:24:bf:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX/A+Hl2RcSutP9fjZvh+NPKc3hAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFBRTlF M0QxOEQzMTAeFw0yNTA4MjkxMzE1NDdaFw0yNTA5MDEyMjA0NDdaMDMxMTAvBgNV BAMTKDA1MDZDRjdGNTVFNDM5NUY2NEE1QkEwNUE5ODhCNTc0OUY3OEI4NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDyd/Ao0Jo0frToufFuLol1cTe avAtDAOUAJ3OCQjFjv9sCltw+kFIF/lE1y7wbNepowifUvqna0SkjNzi+IkzuOZI giMECVkWbOoLV4mQ4DJXPv+8o/IzyHw4Mym7+RdsZOiU7JBdw1x8Urx0HbjYGeYc 6FuKD7XX87SlRrEZ3eFhDUIPlurY6d1phtcspN/ECeXZiG0mIAIsobecqwWgvBA1 o0Pb8mRRYsL+Qj48SapV5dv5HlFs3mO0jevlgYb6ckCBYxky7qbHXoxQZJ5d+tLv /DZCC+rzkjd1u+QyFbgn4t1vfgd8nxLHK+Rb2QZWdmnYTlVdmnEAqyQB2OMZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBQbPf1XkOV9kpboFqYi1dJ94uGEwHwYDVR0j BBgwFoAUaizJ08cxSOJl6ZZhkpwa6ePRjTEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjJhOTE2YS1hZDIyLTQ5NzktYmU0My05NTFjNzZmMmY5MjAvMC82QTJDQzlEM0M3 MzE0OEUyNjVFOTk2NjE5MjlDMUFFOUUzRDE4RDMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFBRTlFM0Qx OEQzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2IyYTkxNmEtYWQyMi00OTc5LWJl NDMtOTUxYzc2ZjJmOTIwLzAvNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFB RTlFM0QxOEQzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEnydMFTBX5CteZPXbC2uYL/b9cs/lHcEu5k miCn+CPJlCbFhNsEAsH9IXcOcAkFeXRckmKCUYFGTPIgnrDDprQ0NQBuLwDSBXrG 34/kbZQ+Mxrhkt/JskGuJhu9XD9tqtLlKVZcbNC13oili2yDg5hYb+KPwRIZdq2f ZjyVtv240zNZPQHt8vMdZQi74jnJUKtC0YKoGoGfLxPH3VKAhzhpqZPfn2BCHser un0vLcPczr5M0nGlm4OrmlkkcUptYzGDMa2Yi9msO7oyyeJkkyzZjjpMwVL480Op BHxZEBtJtiPyqq52Rl7bqS90CWQEPFy1GKxmODMo5HvXXZYkv0Q= -----END CERTIFICATE-----Generated at Sat Aug 30 23:28:45 2025 by rpki-client