$ rpki-client -vvf repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft File: D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft (raw, json) Hash identifier: pjQgAuKHvntZIKivRzwJLc9yVOxadz8NLNlghgrisxQ= Subject key identifier: B1:65:20:6A:02:86:F8:9B:E6:EE:B4:0A:8A:13:AE:F8:B4:CE:66:23 Authority key identifier: D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 Certificate issuer: /CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Certificate serial: 66BEB03CBCF756C426EA3EBF8E5AF968F4B22B05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft Manifest number: 02CD Signing time: Wed 03 Sep 2025 10:50:00 +0000 Manifest this update: Wed 03 Sep 2025 10:45:00 +0000 Manifest next update: Sat 06 Sep 2025 11:12:00 +0000 Files and hashes: 1: D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl (hash: lmZvHE0FafLyDKSBAN2gMAai9AXJN5lUpQ3Nv5b0LDo=) 2: 3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa (hash: EWRSldncuijDwUH5kmTIxzgLmknYFLpjI5NK+K1R4Fw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 11:12:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:be:b0:3c:bc:f7:56:c4:26:ea:3e:bf:8e:5a:f9:68:f4:b2:2b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Validity Not Before: Sep 3 10:45:00 2025 GMT Not After : Sep 6 11:12:00 2025 GMT Subject: CN=B165206A0286F89BE6EEB40A8A13AEF8B4CE6623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:17:25:83:f1:04:f1:0b:3a:9d:c6:9b:35:31: 4e:2f:dd:1f:0b:0e:2a:8d:de:bf:ff:09:e0:7e:e7: d0:17:82:49:5e:2e:a6:62:cb:87:d0:0a:7a:dd:b8: a5:cc:dd:8e:01:c2:58:7c:cd:aa:af:8c:57:cb:6b: 32:fc:ea:19:05:7c:f9:7f:d9:f2:8c:f9:20:fe:01: 1b:c9:83:81:b1:b1:7b:14:b4:ab:33:e3:c9:b1:ed: 06:3e:0c:ad:da:91:68:2a:86:dd:81:ae:1f:e8:40: 5d:2a:08:09:91:a5:76:a7:d2:e6:bd:0e:db:0f:ad: 13:e2:6f:6c:97:71:77:a3:f0:4e:d5:3f:bf:59:44: e1:03:f2:9a:9f:9b:73:29:b5:cb:00:88:1a:f8:8c: 5b:f5:68:3f:73:be:d3:22:26:1a:c7:b8:2d:0c:e8: bb:bb:9a:ba:35:c2:fa:c0:06:7f:41:95:6a:2b:59: 0c:55:40:a5:61:6c:c7:c7:43:67:f9:4c:75:84:8f: b1:de:e1:03:ae:e5:72:35:af:be:49:ab:c4:41:ab: 43:26:10:1a:07:14:12:f4:e9:c5:21:7f:10:8b:0c: e4:8a:12:a5:d8:d2:af:06:88:26:29:98:ec:15:72: 5c:ef:bd:2b:3c:c5:63:e8:fd:8b:13:85:21:01:b3: 93:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:65:20:6A:02:86:F8:9B:E6:EE:B4:0A:8A:13:AE:F8:B4:CE:66:23 X509v3 Authority Key Identifier: keyid:D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:bf:d1:35:fa:ad:ff:9c:e9:d8:f8:bf:0d:5e:e7:a8:4a:18: 3a:e2:51:4b:e1:42:4f:fa:1f:44:dd:d4:ee:a0:f5:a4:09:d8: 7d:3d:be:14:75:d6:2c:1a:c6:a4:87:7d:d6:6c:61:ff:60:ee: eb:c3:39:84:ee:0e:be:67:d9:ee:14:4c:51:10:3f:6c:45:8b: ce:68:05:68:fc:79:a7:0b:19:d6:c7:9b:d6:52:61:22:dc:31: 1a:e3:2f:5a:7f:4d:0e:6c:50:58:85:24:8a:60:6b:ad:57:68: d9:4a:1b:1a:07:39:82:15:29:9f:3c:47:b4:b5:ed:59:46:40: 65:09:3d:4b:ee:bf:c7:7c:fb:a5:86:2d:94:1b:96:57:09:30: de:59:0f:53:32:f8:df:75:18:fd:70:6c:1f:95:c5:9e:4e:92: e2:cc:19:9c:c3:34:14:d9:71:0c:b7:01:a5:c6:f5:ce:d3:98: 62:5d:bf:8e:72:1e:4f:85:d7:fc:94:22:3f:bc:04:77:48:21: ef:9c:e3:5a:4b:a0:b3:d8:a2:fa:35:48:e5:84:49:c7:1a:31: 85:f0:6d:5a:7e:78:e7:bd:c3:d9:66:ef:ba:5e:5d:3f:1a:36: 96:87:b6:fc:23:60:a6:bf:7d:eb:43:18:bd:51:e3:3f:0c:32: cd:3e:e0:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZr6wPLz3VsQm6j6/jlr5aPSyKwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVB M0ZDRUI2NjAeFw0yNTA5MDMxMDQ1MDBaFw0yNTA5MDYxMTEyMDBaMDMxMTAvBgNV BAMTKEIxNjUyMDZBMDI4NkY4OUJFNkVFQjQwQThBMTNBRUY4QjRDRTY2MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3FyWD8QTxCzqdxps1MU4v3R8L DiqN3r//CeB+59AXgkleLqZiy4fQCnrduKXM3Y4Bwlh8zaqvjFfLazL86hkFfPl/ 2fKM+SD+ARvJg4GxsXsUtKsz48mx7QY+DK3akWgqht2Brh/oQF0qCAmRpXan0ua9 DtsPrRPib2yXcXej8E7VP79ZROED8pqfm3MptcsAiBr4jFv1aD9zvtMiJhrHuC0M 6Lu7mro1wvrABn9BlWorWQxVQKVhbMfHQ2f5THWEj7He4QOu5XI1r75Jq8RBq0Mm EBoHFBL06cUhfxCLDOSKEqXY0q8GiCYpmOwVclzvvSs8xWPo/YsThSEBs5MhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsWUgagKG+Jvm7rQKihOu+LTOZiMwHwYDVR0j BBgwFoAU1sHxPGfNAlRd66qEbrKPbqP862YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2EyZTBkYi1lMjkzLTQxYzUtODU4My0zODAxNTc1ODQyMWMvMC9ENkMxRjEzQzY3 Q0QwMjU0NURFQkFBODQ2RUIyOEY2RUEzRkNFQjY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVBM0ZD RUI2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NhMmUwZGItZTI5My00MWM1LTg1 ODMtMzgwMTU3NTg0MjFjLzAvRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhG NkVBM0ZDRUI2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALi/0TX6rf+c6dj4vw1e56hKGDriUUvhQk/6 H0Td1O6g9aQJ2H09vhR11iwaxqSHfdZsYf9g7uvDOYTuDr5n2e4UTFEQP2xFi85o BWj8eacLGdbHm9ZSYSLcMRrjL1p/TQ5sUFiFJIpga61XaNlKGxoHOYIVKZ88R7S1 7VlGQGUJPUvuv8d8+6WGLZQbllcJMN5ZD1My+N91GP1wbB+VxZ5OkuLMGZzDNBTZ cQy3AaXG9c7TmGJdv45yHk+F1/yUIj+8BHdIIe+c41pLoLPYovo1SOWESccaMYXw bVp+eOe9w9lm77peXT8aNpaHtvwjYKa/fetDGL1R4z8MMs0+4PM= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:14 2025 by rpki-client