$ rpki-client -vvf repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft File: 6B35526165718CDFDDCB202D241332F565BEE7B0.mft (raw, json) Hash identifier: S1364Vs6YU1VDcRZa5V7J+IIom4ayquHmSu421Ltp1w= Subject key identifier: 14:0F:10:05:63:D1:A6:0B:8E:FC:B6:12:51:75:26:B5:9D:0F:9B:C4 Authority key identifier: 6B:35:52:61:65:71:8C:DF:DD:CB:20:2D:24:13:32:F5:65:BE:E7:B0 Certificate issuer: /CN=6B35526165718CDFDDCB202D241332F565BEE7B0 Certificate serial: 45B2AC0CD94F8DB54DEA25B5F0C64E7A4CA35E1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B35526165718CDFDDCB202D241332F565BEE7B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft Manifest number: CA Signing time: Sat 06 Sep 2025 11:51:20 +0000 Manifest this update: Sat 06 Sep 2025 11:46:20 +0000 Manifest next update: Tue 09 Sep 2025 15:00:20 +0000 Files and hashes: 1: 323030313a6466333a623034303a3a2f34382d3438203d3e20313532343432.roa (hash: mKIqmd/EOitm2VkjJ4/rdItHB7wxpB5sjP3tcWKMCX8=) 2: 6B35526165718CDFDDCB202D241332F565BEE7B0.crl (hash: mMPb/V3xriNPsCB+ZjG2FXEk7t2ewlWoGoT9ytXODs0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.crl rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B35526165718CDFDDCB202D241332F565BEE7B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 15:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:b2:ac:0c:d9:4f:8d:b5:4d:ea:25:b5:f0:c6:4e:7a:4c:a3:5e:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B35526165718CDFDDCB202D241332F565BEE7B0 Validity Not Before: Sep 6 11:46:20 2025 GMT Not After : Sep 9 15:00:20 2025 GMT Subject: CN=140F100563D1A60B8EFCB612517526B59D0F9BC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7d:42:8f:f0:e4:74:d1:47:8e:be:4b:4a:26: bc:20:e6:7b:51:41:aa:6f:ec:68:78:8c:2a:e5:95: ff:a9:3a:10:a8:10:0b:3c:98:49:ac:f2:ab:f4:49: b9:c2:ef:72:79:d3:59:81:8e:72:8e:b2:4a:f4:02: 76:a0:53:e0:40:0c:74:ac:1e:fa:eb:6c:82:bc:f9: 6b:8b:0c:f2:20:c2:fb:c9:26:19:8d:8c:80:be:c9: 7c:7e:bf:f3:67:9d:8d:2a:75:e0:e7:0a:16:27:8e: f2:46:59:3e:bb:31:a5:51:8e:73:dd:b3:be:ec:c1: 20:a8:76:3d:5f:e2:3f:18:d1:5d:de:23:29:7f:a4: c0:c4:f5:0a:ef:79:ad:04:e2:ae:aa:16:c7:79:cd: a1:d5:f7:c6:0b:e5:bc:d6:a7:ab:24:bc:e7:75:f8: 1b:55:ab:9b:00:e2:b1:7b:c1:85:14:ed:1d:0f:d8: e9:de:9e:d0:25:c1:96:95:92:68:64:a0:9f:c9:4d: 72:49:ab:ef:8e:b2:94:f1:f3:f2:2b:da:0f:40:53: c1:62:f2:61:c6:62:30:57:9d:10:06:85:7e:b4:38: 96:5d:c0:74:65:ea:5e:91:6d:9a:6c:98:26:82:3b: ea:f5:4f:87:6b:14:39:8b:81:60:98:14:55:dc:71: 49:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0F:10:05:63:D1:A6:0B:8E:FC:B6:12:51:75:26:B5:9D:0F:9B:C4 X509v3 Authority Key Identifier: keyid:6B:35:52:61:65:71:8C:DF:DD:CB:20:2D:24:13:32:F5:65:BE:E7:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B35526165718CDFDDCB202D241332F565BEE7B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/6B35526165718CDFDDCB202D241332F565BEE7B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:81:aa:af:24:8c:4d:6c:c1:84:b1:8e:8b:25:77:56:49:b8: 8b:70:c7:7d:15:4b:7f:64:fa:57:6b:a9:5e:34:eb:6a:60:ff: 72:d9:36:69:09:b3:71:6e:6c:5e:9d:1a:e4:b2:3e:7b:14:e6: da:5c:62:ec:39:08:db:45:42:99:8b:73:7b:04:b9:0c:c3:0a: dc:fa:83:69:2b:08:5f:b4:8c:35:c0:33:f1:f6:2c:e0:5f:dd: 43:cd:9e:37:ba:5d:55:10:40:4f:3f:1f:69:cb:b1:33:cf:8a: 89:28:c1:b3:c1:ef:3a:86:eb:68:84:ac:c9:3e:a2:e7:96:8e: 1d:ec:3d:b4:f8:d4:d8:82:a2:90:ef:4c:1a:dc:bc:3e:46:07: bb:a1:19:e9:ca:8a:af:a1:77:f9:5e:a5:bf:ce:16:7e:1e:6c: 71:b6:e2:62:61:4f:1e:b7:c8:4c:dd:d0:88:e1:cb:09:6e:8f: c4:2f:55:d6:5b:68:88:c3:8d:f4:c2:97:57:e9:38:04:6d:5a: 1e:65:46:3c:88:81:01:00:6d:4a:5e:93:68:08:b7:0e:e8:be: 5c:6b:ed:77:bb:64:49:4d:3a:b5:fa:3a:c7:cf:65:ff:17:74: d3:36:10:b0:2c:48:f2:cc:42:47:98:6f:65:24:a9:c0:69:39: 56:8b:22:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURbKsDNlPjbVN6iW18MZOekyjXh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzNTUyNjE2NTcxOENERkREQ0IyMDJEMjQxMzMyRjU2 NUJFRTdCMDAeFw0yNTA5MDYxMTQ2MjBaFw0yNTA5MDkxNTAwMjBaMDMxMTAvBgNV BAMTKDE0MEYxMDA1NjNEMUE2MEI4RUZDQjYxMjUxNzUyNkI1OUQwRjlCQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcfUKP8OR00UeOvktKJrwg5ntR Qapv7Gh4jCrllf+pOhCoEAs8mEms8qv0SbnC73J501mBjnKOskr0AnagU+BADHSs HvrrbIK8+WuLDPIgwvvJJhmNjIC+yXx+v/NnnY0qdeDnChYnjvJGWT67MaVRjnPd s77swSCodj1f4j8Y0V3eIyl/pMDE9Qrvea0E4q6qFsd5zaHV98YL5bzWp6skvOd1 +BtVq5sA4rF7wYUU7R0P2OnentAlwZaVkmhkoJ/JTXJJq++OspTx8/Ir2g9AU8Fi 8mHGYjBXnRAGhX60OJZdwHRl6l6RbZpsmCaCO+r1T4drFDmLgWCYFFXccUkFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFA8QBWPRpguO/LYSUXUmtZ0Pm8QwHwYDVR0j BBgwFoAUazVSYWVxjN/dyyAtJBMy9WW+57AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ODdkZDU5Ny00MGNkLTQwOWItYjNjNS0yODUyY2UwMTQ4ODkvMS82QjM1NTI2MTY1 NzE4Q0RGRERDQjIwMkQyNDEzMzJGNTY1QkVFN0IwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkIzNTUyNjE2NTcxOENERkREQ0IyMDJEMjQxMzMyRjU2NUJF RTdCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg3ZGQ1OTctNDBjZC00MDliLWIz YzUtMjg1MmNlMDE0ODg5LzEvNkIzNTUyNjE2NTcxOENERkREQ0IyMDJEMjQxMzMy RjU2NUJFRTdCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2Bqq8kjE1swYSxjosld1ZJuItwx30VS39k +ldrqV4062pg/3LZNmkJs3FubF6dGuSyPnsU5tpcYuw5CNtFQpmLc3sEuQzDCtz6 g2krCF+0jDXAM/H2LOBf3UPNnje6XVUQQE8/H2nLsTPPiokowbPB7zqG62iErMk+ oueWjh3sPbT41NiCopDvTBrcvD5GB7uhGenKiq+hd/lepb/OFn4ebHG24mJhTx63 yEzd0Ijhywluj8QvVdZbaIjDjfTCl1fpOARtWh5lRjyIgQEAbUpek2gItw7ovlxr 7Xe7ZElNOrX6OsfPZf8XdNM2ELAsSPLMQkeYb2UkqcBpOVaLIvE= -----END CERTIFICATE-----Generated at Sun Sep 7 13:56:41 2025 by rpki-client