$ rpki-client -vvf repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft File: 6490D3D85678E9C1587D21E9545EF730D21346B5.mft (raw, json) Hash identifier: iX2/RVaQWjAtrzJIcpEVREfreYRSKQnQ2YnKIfEJteY= Subject key identifier: C0:2B:53:BA:8D:19:21:99:5F:BB:21:36:74:5C:61:B0:A2:12:13:87 Authority key identifier: 64:90:D3:D8:56:78:E9:C1:58:7D:21:E9:54:5E:F7:30:D2:13:46:B5 Certificate issuer: /CN=6490D3D85678E9C1587D21E9545EF730D21346B5 Certificate serial: 3F8373E87F685B15C99813F88CE53AE15CC119AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft Manifest number: B5 Signing time: Sat 06 Sep 2025 05:40:45 +0000 Manifest this update: Sat 06 Sep 2025 05:35:45 +0000 Manifest next update: Tue 09 Sep 2025 06:41:45 +0000 Files and hashes: 1: 3136302e32302e3232302e302f32342d3234203d3e20313532373835.roa (hash: jOlBtBmkXSj+fSYaHlDdKI9RGX/xpsWQdqL9iASpC0w=) 2: 6490D3D85678E9C1587D21E9545EF730D21346B5.crl (hash: bHJAtyYZFM/vRNyH8Q7T3I6F9hlWFHYkfHVO8WeUB4E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.crl rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 06:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:83:73:e8:7f:68:5b:15:c9:98:13:f8:8c:e5:3a:e1:5c:c1:19:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6490D3D85678E9C1587D21E9545EF730D21346B5 Validity Not Before: Sep 6 05:35:45 2025 GMT Not After : Sep 9 06:41:45 2025 GMT Subject: CN=C02B53BA8D1921995FBB2136745C61B0A2121387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ba:ba:57:b8:f0:c9:35:c1:76:f8:53:ab:48: e7:2a:9c:55:92:28:e2:24:c0:6c:69:77:2b:a9:9c: e3:de:a7:3d:a8:28:1a:44:84:52:f1:d8:4f:bb:e4: 12:3c:50:3d:53:78:a2:dc:64:92:42:72:32:35:0a: 68:36:98:c2:5c:66:96:45:48:96:70:2e:66:e1:51: 10:e9:de:19:20:c4:51:c4:47:46:b2:7c:1b:b0:ee: 14:bf:3d:6b:f5:df:e7:16:81:b9:08:b7:01:3e:0f: 49:b9:73:7c:3b:a8:5a:9c:90:51:26:4c:50:72:67: 2c:ff:2d:d3:3b:6c:69:18:a3:4a:dd:ab:3a:10:3b: b3:84:74:2f:02:56:bb:89:ed:a2:51:ab:08:7e:93: 34:0a:7e:ea:d3:3d:2d:23:47:fe:0b:f3:62:d4:37: 32:fb:2b:ed:ed:f4:3e:ed:0c:51:ae:03:66:f8:d9: 3f:1c:de:f8:7a:df:57:c1:45:41:ce:38:ea:0e:c4: f1:ed:85:e4:d3:03:80:82:ee:f7:19:e6:f8:e9:8e: bd:22:2c:cb:36:83:cd:f1:4b:90:ac:23:4a:83:88: cc:d1:6f:37:df:3b:8a:a8:c2:dd:db:0f:19:9b:75: e1:46:d9:6f:3f:59:c3:58:e5:69:c6:d2:87:7d:d1: fd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:2B:53:BA:8D:19:21:99:5F:BB:21:36:74:5C:61:B0:A2:12:13:87 X509v3 Authority Key Identifier: keyid:64:90:D3:D8:56:78:E9:C1:58:7D:21:E9:54:5E:F7:30:D2:13:46:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:2f:cb:b4:94:64:c6:f1:1d:e0:ce:27:ce:05:cf:f8:19:86: 86:dd:00:be:4b:05:78:d0:77:49:98:9d:b5:35:b6:7e:ba:51: 07:92:5b:fd:60:f2:e8:eb:49:c3:d8:18:4e:f9:3b:29:63:88: e9:d7:dc:3c:dc:b6:15:af:43:f4:1b:6d:53:86:d8:77:e9:08: 69:e0:97:c2:8e:ab:50:cb:93:16:91:54:ed:aa:71:c5:7d:71: e4:93:eb:32:ca:b0:49:45:a7:18:7b:1b:95:5e:dc:53:19:f9: 2d:f2:ea:6a:eb:ae:d3:88:59:ef:e5:aa:ea:78:36:03:41:d1: c7:e9:f5:3a:75:3a:21:8c:f0:23:f8:04:6d:ff:6c:e0:cd:a4: 8e:1a:b8:8b:ec:1f:62:32:ff:3c:11:06:f8:4e:70:4f:c4:4a: ec:bb:1d:47:8a:f3:d4:48:bb:03:42:3e:b2:5d:2e:83:e2:33: 61:00:5c:e8:86:e7:69:5c:f8:93:6c:7e:e2:f7:09:9c:e4:82: 51:f4:82:17:58:91:3e:d2:f4:06:df:b5:6d:27:e4:37:d3:b7: a1:28:b0:9f:f1:cf:28:6d:a1:62:8f:de:e8:9f:39:fb:46:24: 07:f6:ff:b1:10:54:9c:11:7d:0a:4d:04:c2:e5:95:75:de:16: 92:98:13:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP4Nz6H9oWxXJmBP4jOU64VzBGaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3MzBE MjEzNDZCNTAeFw0yNTA5MDYwNTM1NDVaFw0yNTA5MDkwNjQxNDVaMDMxMTAvBgNV BAMTKEMwMkI1M0JBOEQxOTIxOTk1RkJCMjEzNjc0NUM2MUIwQTIxMjEzODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChurpXuPDJNcF2+FOrSOcqnFWS KOIkwGxpdyupnOPepz2oKBpEhFLx2E+75BI8UD1TeKLcZJJCcjI1Cmg2mMJcZpZF SJZwLmbhURDp3hkgxFHER0ayfBuw7hS/PWv13+cWgbkItwE+D0m5c3w7qFqckFEm TFByZyz/LdM7bGkYo0rdqzoQO7OEdC8CVruJ7aJRqwh+kzQKfurTPS0jR/4L82LU NzL7K+3t9D7tDFGuA2b42T8c3vh631fBRUHOOOoOxPHtheTTA4CC7vcZ5vjpjr0i LMs2g83xS5CsI0qDiMzRbzffO4qowt3bDxmbdeFG2W8/WcNY5WnG0od90f0/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwCtTuo0ZIZlfuyE2dFxhsKISE4cwHwYDVR0j BBgwFoAUZJDT2FZ46cFYfSHpVF73MNITRrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODg1NzVjOC01NGZlLTQ4MDEtYTdiMS01MTdkMGU2YjhiNzMvMC82NDkwRDNEODU2 NzhFOUMxNTg3RDIxRTk1NDVFRjczMEQyMTM0NkI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3MzBEMjEz NDZCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg4NTc1YzgtNTRmZS00ODAxLWE3 YjEtNTE3ZDBlNmI4YjczLzAvNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3 MzBEMjEzNDZCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAvy7SUZMbxHeDOJ84Fz/gZhobdAL5LBXjQ d0mYnbU1tn66UQeSW/1g8ujrScPYGE75OyljiOnX3DzcthWvQ/QbbVOG2HfpCGng l8KOq1DLkxaRVO2qccV9ceST6zLKsElFpxh7G5Ve3FMZ+S3y6mrrrtOIWe/lqup4 NgNB0cfp9Tp1OiGM8CP4BG3/bODNpI4auIvsH2Iy/zwRBvhOcE/ESuy7HUeK89RI uwNCPrJdLoPiM2EAXOiG52lc+JNsfuL3CZzkglH0ghdYkT7S9AbftW0n5DfTt6Eo sJ/xzyhtoWKP3uifOftGJAf2/7EQVJwRfQpNBMLllXXeFpKYE7k= -----END CERTIFICATE-----Generated at Mon Sep 8 05:06:29 2025 by rpki-client