$ rpki-client -vvf repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.mft File: 6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.mft (raw, json) Hash identifier: 9pJbbQ6xuz0tr/+5e9yXHQ7C5x/+7a016KMlJd6ek2c= Subject key identifier: 8D:E6:6A:0D:97:EA:A3:62:24:7E:B6:0D:FE:29:B0:47:05:F4:84:E8 Authority key identifier: 6E:55:34:AB:A6:EF:3C:98:C8:D0:CF:43:77:95:D2:5A:3A:9C:25:C6 Certificate issuer: /CN=6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6 Certificate serial: 40F9172AF7EFEF26171823E0D5AB943388068194 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.mft Manifest number: 0509 Signing time: Fri 05 Sep 2025 19:02:19 +0000 Manifest this update: Fri 05 Sep 2025 18:57:19 +0000 Manifest next update: Tue 09 Sep 2025 01:31:19 +0000 Files and hashes: 1: 3130332e3234372e3231362e302f32322d3234203d3e203538343935.roa (hash: TYgLScTFuKC8omm7siiJ6BBmUOeK3WKjy8wvBn7N+2A=) 2: 34332e3232352e36342e302f32322d3234203d3e203538343935.roa (hash: nG5OqSEJiUSM53PY/eu6ZUUZVwxMF+jfL/QWVNc9tAM=) 3: 323430343a326638303a666630313a3a2f34382d3438203d3e203538343935.roa (hash: K2H9rDoVFcyYLS03yu8cFLk5pCTYwfZt8bp66BciG5s=) 4: 323430343a326638303a666630323a3a2f34382d3438203d3e203538343935.roa (hash: nKaCRmcuOGqaeXk75qEMuwxMKb7h4grVRYg1V6SgnA4=) 5: 6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.crl (hash: eV/95solx/7sPMYNvDMBSb8xHHlwR3652USpXz4jYlE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.crl rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 01:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:f9:17:2a:f7:ef:ef:26:17:18:23:e0:d5:ab:94:33:88:06:81:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6 Validity Not Before: Sep 5 18:57:19 2025 GMT Not After : Sep 9 01:31:19 2025 GMT Subject: CN=8DE66A0D97EAA362247EB60DFE29B04705F484E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:20:0c:69:92:9c:c1:47:bd:9d:27:4d:64:8b: a1:36:57:3b:00:99:b6:25:ad:13:87:15:8b:d4:e6: bd:ed:17:0f:f6:b1:64:70:07:5f:18:7a:4b:96:7e: 85:7b:22:f0:15:50:e8:e9:73:b9:db:b8:fa:38:e7: 11:5f:bc:65:0d:f6:64:7e:42:e6:a9:68:7d:e9:ed: cb:c7:94:d1:24:eb:e9:54:46:af:de:bb:6c:30:46: 6c:ef:49:e2:03:33:f2:95:5a:32:de:32:51:33:9e: ff:50:a5:12:ae:16:3e:ee:49:ab:94:1d:56:a8:c2: 96:dc:b5:77:df:17:6b:85:3f:06:d4:16:f8:60:3d: 1a:13:66:ac:32:0a:8d:6b:37:bb:59:d6:bf:fe:70: 53:21:3c:29:b4:2d:3f:cc:e4:76:f6:aa:4d:76:e7: f9:47:ae:2d:9e:87:12:04:8a:60:b8:cf:72:4d:da: 8d:a1:43:a7:16:c2:36:23:70:1b:6e:98:d4:83:c7: ea:61:aa:b1:da:ec:57:0e:5c:b2:74:70:b9:2d:e4: 63:4b:42:87:1c:03:39:b8:bd:51:ee:c7:1b:c6:f4: bf:55:8b:ae:a8:f8:cc:fd:8e:21:43:08:c4:c6:8b: 30:63:72:0a:05:5b:66:f7:58:b3:b6:86:2f:06:79: 0d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E6:6A:0D:97:EA:A3:62:24:7E:B6:0D:FE:29:B0:47:05:F4:84:E8 X509v3 Authority Key Identifier: keyid:6E:55:34:AB:A6:EF:3C:98:C8:D0:CF:43:77:95:D2:5A:3A:9C:25:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:33:00:6d:74:e1:79:ba:4c:29:fb:c4:07:48:c1:2f:0c:2d: 6b:5a:62:0e:69:3d:32:66:36:68:fd:91:9b:6c:e7:22:90:f3: 4c:d6:de:7a:d1:16:a7:01:82:9b:ce:aa:0f:56:04:f7:13:eb: 41:3d:2b:e6:23:79:cf:f8:96:15:65:56:19:f8:c9:39:f7:20: 58:81:6b:38:aa:2d:c0:c8:2d:11:be:55:a7:b1:3a:0f:ed:32: 6c:ef:f6:a7:43:a4:f6:e1:57:a0:ab:49:15:c0:6c:4a:c2:66: cd:34:44:3e:a9:ee:52:59:0b:08:de:5a:2c:77:a5:53:77:b5: 8f:b8:68:75:87:82:84:e7:fb:d1:cd:0c:6e:10:35:a5:a0:2a: 15:da:a1:12:32:82:4d:af:7a:b3:f8:da:5c:c8:ed:51:8b:9c: 45:db:3b:ba:07:81:05:f6:92:0e:07:a8:4a:1c:38:fb:6b:5b: f6:33:c0:77:82:b3:78:d1:25:cb:83:01:5c:db:87:f9:a1:1f: 87:21:44:ff:7d:e4:8e:70:85:1e:d4:18:42:16:a9:bf:2d:bd: c2:5a:05:b7:db:83:02:5a:f2:a0:24:12:44:ba:f0:50:5b:13: a7:e0:b4:80:bf:a2:3f:55:76:78:27:e8:04:a2:52:2d:85:a2: 22:34:14:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQPkXKvfv7yYXGCPg1auUM4gGgZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU1NTM0QUJBNkVGM0M5OEM4RDBDRjQzNzc5NUQyNUEz QTlDMjVDNjAeFw0yNTA5MDUxODU3MTlaFw0yNTA5MDkwMTMxMTlaMDMxMTAvBgNV BAMTKDhERTY2QTBEOTdFQUEzNjIyNDdFQjYwREZFMjlCMDQ3MDVGNDg0RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfIAxpkpzBR72dJ01ki6E2VzsA mbYlrROHFYvU5r3tFw/2sWRwB18YekuWfoV7IvAVUOjpc7nbuPo45xFfvGUN9mR+ QuapaH3p7cvHlNEk6+lURq/eu2wwRmzvSeIDM/KVWjLeMlEznv9QpRKuFj7uSauU HVaowpbctXffF2uFPwbUFvhgPRoTZqwyCo1rN7tZ1r/+cFMhPCm0LT/M5Hb2qk12 5/lHri2ehxIEimC4z3JN2o2hQ6cWwjYjcBtumNSDx+phqrHa7FcOXLJ0cLkt5GNL QoccAzm4vVHuxxvG9L9Vi66o+Mz9jiFDCMTGizBjcgoFW2b3WLO2hi8GeQ3BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjeZqDZfqo2IkfrYN/imwRwX0hOgwHwYDVR0j BBgwFoAUblU0q6bvPJjI0M9Dd5XSWjqcJcYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjkxNzc3ZS1jZGI0LTQ4OTctYjI4Ny1lNThlNDI0YzE5OWQvMC82RTU1MzRBQkE2 RUYzQzk4QzhEMENGNDM3Nzk1RDI1QTNBOUMyNUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkU1NTM0QUJBNkVGM0M5OEM4RDBDRjQzNzc5NUQyNUEzQTlD MjVDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDY5MTc3N2UtY2RiNC00ODk3LWIy ODctZTU4ZTQyNGMxOTlkLzAvNkU1NTM0QUJBNkVGM0M5OEM4RDBDRjQzNzc5NUQy NUEzQTlDMjVDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMzAG104Xm6TCn7xAdIwS8MLWtaYg5pPTJm Nmj9kZts5yKQ80zW3nrRFqcBgpvOqg9WBPcT60E9K+Yjec/4lhVlVhn4yTn3IFiB aziqLcDILRG+VaexOg/tMmzv9qdDpPbhV6CrSRXAbErCZs00RD6p7lJZCwjeWix3 pVN3tY+4aHWHgoTn+9HNDG4QNaWgKhXaoRIygk2verP42lzI7VGLnEXbO7oHgQX2 kg4HqEocOPtrW/YzwHeCs3jRJcuDAVzbh/mhH4chRP995I5whR7UGEIWqb8tvcJa BbfbgwJa8qAkEkS68FBbE6fgtIC/oj9Vdngn6ASiUi2FoiI0FEk= -----END CERTIFICATE-----Generated at Sun Sep 7 15:36:41 2025 by rpki-client