$ rpki-client -vvf repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft File: 6490D3D85678E9C1587D21E9545EF730D21346B5.mft (raw, json) Hash identifier: uOHQt31yYpbQH+ASY4YwpRawR56V8Jj+qQk/WzOxZlI= Subject key identifier: 92:FE:C3:ED:79:93:11:99:51:FF:13:0F:37:D8:22:13:68:3D:EF:6F Authority key identifier: 64:90:D3:D8:56:78:E9:C1:58:7D:21:E9:54:5E:F7:30:D2:13:46:B5 Certificate issuer: /CN=6490D3D85678E9C1587D21E9545EF730D21346B5 Certificate serial: 7EB4416573B805BFA61DEAD1F55880B1985DC5C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft Manifest number: 9F Signing time: Sun 20 Jul 2025 08:40:43 +0000 Manifest this update: Sun 20 Jul 2025 08:35:43 +0000 Manifest next update: Wed 23 Jul 2025 17:17:43 +0000 Files and hashes: 1: 3136302e32302e3232302e302f32342d3234203d3e20313532373835.roa (hash: jOlBtBmkXSj+fSYaHlDdKI9RGX/xpsWQdqL9iASpC0w=) 2: 6490D3D85678E9C1587D21E9545EF730D21346B5.crl (hash: Xu237hJafnijYX7Ud2Vq8jWgaBrJynG0sFghc7ADwPE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.crl rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 17:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:b4:41:65:73:b8:05:bf:a6:1d:ea:d1:f5:58:80:b1:98:5d:c5:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6490D3D85678E9C1587D21E9545EF730D21346B5 Validity Not Before: Jul 20 08:35:43 2025 GMT Not After : Jul 23 17:17:43 2025 GMT Subject: CN=92FEC3ED7993119951FF130F37D82213683DEF6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:33:ec:0d:c3:ab:89:19:45:2e:c3:c2:25:f1: 66:4d:c8:f6:5c:d0:11:c6:c5:de:fb:5b:cf:72:ec: c7:16:58:09:a4:82:08:52:94:0e:11:02:ea:e5:97: b1:d7:f2:f1:87:55:99:d6:21:29:15:b7:f0:1c:f4: f8:b2:a0:8e:c2:a8:39:eb:73:72:b7:24:28:66:2c: 61:66:ab:d7:92:6a:f5:95:8c:29:bc:03:0f:08:22: f3:f9:0a:80:6d:1c:5a:b7:a7:f6:ac:84:12:fe:07: fa:d1:95:81:28:cd:98:f8:6f:49:a2:54:db:c3:f7: 67:97:46:68:9c:f8:63:ed:a3:59:c0:70:04:8d:88: 72:93:04:1b:db:b8:f8:1a:82:f5:b8:08:ab:b2:78: 00:4d:a3:b2:43:e3:3f:2a:d3:dc:d0:5e:e6:1c:a7: cd:1b:44:b5:42:e9:a0:30:6a:bf:8d:7b:8b:95:15: b2:42:3b:2f:dc:45:0d:b5:7f:5b:f2:75:08:26:f0: a6:47:83:65:24:88:80:9b:ce:62:12:d8:a2:4e:f3: 43:ed:3f:10:cb:fe:04:2d:a4:59:4d:51:f2:0b:e6: 1d:df:7c:6c:64:a6:11:9d:34:18:33:92:82:2a:14: 41:99:6f:23:12:10:27:f9:58:a9:c7:d7:33:1b:d5: d9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FE:C3:ED:79:93:11:99:51:FF:13:0F:37:D8:22:13:68:3D:EF:6F X509v3 Authority Key Identifier: keyid:64:90:D3:D8:56:78:E9:C1:58:7D:21:E9:54:5E:F7:30:D2:13:46:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:ae:fd:98:d0:c4:5b:9a:e6:c3:c9:f3:d8:b6:61:d2:37:de: e9:19:d2:77:5e:d7:c1:41:de:56:f4:45:d2:ce:d0:82:cd:ff: 65:52:2f:a2:3b:e3:ce:f1:9a:ea:21:db:69:96:0a:32:d0:2a: db:e1:b7:40:f5:ae:b2:ee:9b:8e:3d:52:2d:67:71:d0:11:78: 23:57:ad:99:d7:95:2a:b3:11:a2:41:39:9e:3b:4f:02:dc:cf: 7e:e7:d6:3f:27:82:55:29:ba:23:6b:21:17:54:c6:52:f8:12: 7c:70:0b:43:54:53:15:25:04:22:16:48:2d:6d:ee:4e:c2:45: 36:ca:5d:57:18:9b:3b:72:fc:7b:8a:41:53:2b:51:c5:52:e6: 11:50:2b:8a:9a:b8:5e:a4:d9:1f:90:2b:aa:ac:50:2e:27:98: 89:7b:f5:53:ea:a3:22:28:0b:c9:1b:65:cf:c1:9c:ba:43:2e: d4:8b:a7:3b:68:df:50:ff:c4:fa:88:1d:0f:23:5e:54:a2:08: 82:d0:c1:88:36:d5:69:52:fe:c6:e9:d0:20:72:b7:df:d0:23: 70:55:27:74:45:e3:40:d5:31:21:b8:19:ee:a4:6f:da:ca:45: f3:d8:25:6b:77:72:1a:f1:26:a5:c9:4c:d4:49:66:0e:2b:5c: dd:c4:14:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfrRBZXO4Bb+mHerR9ViAsZhdxcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3MzBE MjEzNDZCNTAeFw0yNTA3MjAwODM1NDNaFw0yNTA3MjMxNzE3NDNaMDMxMTAvBgNV BAMTKDkyRkVDM0VENzk5MzExOTk1MUZGMTMwRjM3RDgyMjEzNjgzREVGNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZM+wNw6uJGUUuw8Il8WZNyPZc 0BHGxd77W89y7McWWAmkgghSlA4RAurll7HX8vGHVZnWISkVt/Ac9PiyoI7CqDnr c3K3JChmLGFmq9eSavWVjCm8Aw8IIvP5CoBtHFq3p/ashBL+B/rRlYEozZj4b0mi VNvD92eXRmic+GPto1nAcASNiHKTBBvbuPgagvW4CKuyeABNo7JD4z8q09zQXuYc p80bRLVC6aAwar+Ne4uVFbJCOy/cRQ21f1vydQgm8KZHg2UkiICbzmIS2KJO80Pt PxDL/gQtpFlNUfIL5h3ffGxkphGdNBgzkoIqFEGZbyMSECf5WKnH1zMb1dlzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkv7D7XmTEZlR/xMPN9giE2g9728wHwYDVR0j BBgwFoAUZJDT2FZ46cFYfSHpVF73MNITRrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODg1NzVjOC01NGZlLTQ4MDEtYTdiMS01MTdkMGU2YjhiNzMvMC82NDkwRDNEODU2 NzhFOUMxNTg3RDIxRTk1NDVFRjczMEQyMTM0NkI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3MzBEMjEz NDZCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg4NTc1YzgtNTRmZS00ODAxLWE3 YjEtNTE3ZDBlNmI4YjczLzAvNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3 MzBEMjEzNDZCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACOu/ZjQxFua5sPJ89i2YdI33ukZ0nde18FB 3lb0RdLO0ILN/2VSL6I7487xmuoh22mWCjLQKtvht0D1rrLum449Ui1ncdAReCNX rZnXlSqzEaJBOZ47TwLcz37n1j8nglUpuiNrIRdUxlL4EnxwC0NUUxUlBCIWSC1t 7k7CRTbKXVcYmzty/HuKQVMrUcVS5hFQK4qauF6k2R+QK6qsUC4nmIl79VPqoyIo C8kbZc/BnLpDLtSLpzto31D/xPqIHQ8jXlSiCILQwYg21WlS/sbp0CByt9/QI3BV J3RF40DVMSG4Ge6kb9rKRfPYJWt3chrxJqXJTNRJZg4rXN3EFI0= -----END CERTIFICATE-----Generated at Mon Jul 21 10:36:52 2025 by rpki-client