$ rpki-client -vvf repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft File: 6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft (raw, json) Hash identifier: E7w3L1Yuuh2WBovjITjCMobMbYiAOYQQF3i6jymWJ5g= Subject key identifier: 79:D9:C5:8F:5E:FE:56:09:BE:F6:B2:84:22:2B:25:02:48:DB:71:76 Authority key identifier: 6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 Certificate issuer: /CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Certificate serial: 474C4979AAA22DED998456CC97AFC7B9E503FB9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft Manifest number: 034D Signing time: Tue 05 Aug 2025 08:55:00 +0000 Manifest this update: Tue 05 Aug 2025 08:50:00 +0000 Manifest next update: Fri 08 Aug 2025 10:01:00 +0000 Files and hashes: 1: 3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa (hash: lkrHej4FZPJ4f2E40DosArf8hhkwpkjiPyYFXEzD3uU=) 2: 6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl (hash: rxt7ZEo8t5P+DNjVk5tgYebPz/iF5f6m4+sTNtOokIw=) 3: 3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa (hash: QReThr3L/8y8L/3AEdob8H7epOdOKEjss3T3HzyvfMI=) 4: 3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa (hash: G1U9gODI47ty2yrLIvmBDS+xG1WkgDbqidFt5qR0lew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 10:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:4c:49:79:aa:a2:2d:ed:99:84:56:cc:97:af:c7:b9:e5:03:fb:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Validity Not Before: Aug 5 08:50:00 2025 GMT Not After : Aug 8 10:01:00 2025 GMT Subject: CN=79D9C58F5EFE5609BEF6B284222B250248DB7176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:aa:57:08:8c:90:b8:c6:23:17:95:60:66:c8: fe:c5:44:96:df:aa:b1:d5:4d:ad:63:d9:e1:b8:07: 53:44:c5:07:d8:fa:84:18:c2:f9:11:ba:d8:52:9c: fb:cf:87:2d:47:b5:c1:38:9f:06:74:b9:32:cf:58: 9e:e4:02:e9:23:cf:b5:e4:6d:68:0d:fd:f8:23:a0: bb:cd:d7:7d:8d:bd:83:c4:99:1d:6e:36:35:e0:57: aa:35:b1:f5:28:2e:d2:05:f2:12:dc:9e:b9:0a:7e: ae:4b:7a:ef:0d:35:36:3b:ad:39:4d:48:d8:09:78: b0:b9:88:8f:1e:da:44:dd:03:18:56:3b:cd:62:ab: 3e:3f:a0:fc:36:94:2e:d0:fb:ce:1c:24:4b:0b:05: d0:dc:87:95:42:12:4f:67:6d:a0:97:f2:5a:28:4d: 62:b8:b5:e2:34:49:bc:2f:95:69:35:09:5f:70:3a: f7:09:ca:88:2f:dc:82:88:d1:a5:d2:42:01:c5:ab: 30:e1:b9:fb:8b:25:32:50:ef:aa:ff:ca:bd:5d:30: 4b:11:31:7f:08:c2:86:5d:e0:32:c1:f2:cd:81:d1: f4:ee:9a:87:7c:f9:c5:09:df:e1:80:0b:50:b9:b2: 8e:62:b0:cf:52:e1:65:10:56:29:84:59:64:1e:5b: 44:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D9:C5:8F:5E:FE:56:09:BE:F6:B2:84:22:2B:25:02:48:DB:71:76 X509v3 Authority Key Identifier: keyid:6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:2a:2e:82:f1:be:fb:c6:ec:a1:fd:ec:25:b2:cf:d3:b8:d9: 06:a7:d2:cb:fc:25:d9:52:98:95:61:e3:8f:61:c9:38:3b:2b: fa:c3:ac:96:55:76:54:af:c0:21:14:be:51:c0:07:59:3b:49: 77:9b:c1:e9:83:66:2a:d1:5c:2e:02:82:04:ed:58:90:06:ec: 87:8e:f9:e8:cb:1f:3d:4c:5f:a2:b2:b8:9d:c5:9c:61:71:2b: 40:80:19:c4:9f:59:20:4e:20:b8:8f:78:5b:76:66:05:6f:dd: fd:85:ba:0e:67:4e:3f:1d:b1:05:3d:bb:76:2d:e8:1c:1b:a2: c7:38:64:84:21:66:47:4d:29:55:4a:72:3b:da:8d:85:77:da: a5:ff:70:ac:64:27:e0:3b:a3:e7:a4:85:09:48:f1:df:e8:a9: 15:e7:ed:89:72:8a:38:11:ac:f9:24:ac:09:d4:62:ad:46:38: 43:63:cd:cd:83:56:68:d7:7f:e3:9e:04:80:bf:94:53:c9:e6: b7:07:5c:1c:d5:ea:2b:19:b2:ee:96:7c:40:54:07:98:1c:5a: ed:38:95:06:2c:9c:8e:31:47:c9:72:9d:d4:7a:93:cc:44:65: 21:9f:45:12:21:54:de:ea:ff:97:fe:66:fe:82:b1:76:eb:5d: 50:27:e5:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR0xJeaqiLe2ZhFbMl6/HueUD+5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlD MEYyRTNGNzAeFw0yNTA4MDUwODUwMDBaFw0yNTA4MDgxMDAxMDBaMDMxMTAvBgNV BAMTKDc5RDlDNThGNUVGRTU2MDlCRUY2QjI4NDIyMkIyNTAyNDhEQjcxNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXqlcIjJC4xiMXlWBmyP7FRJbf qrHVTa1j2eG4B1NExQfY+oQYwvkRuthSnPvPhy1HtcE4nwZ0uTLPWJ7kAukjz7Xk bWgN/fgjoLvN132NvYPEmR1uNjXgV6o1sfUoLtIF8hLcnrkKfq5Leu8NNTY7rTlN SNgJeLC5iI8e2kTdAxhWO81iqz4/oPw2lC7Q+84cJEsLBdDch5VCEk9nbaCX8loo TWK4teI0SbwvlWk1CV9wOvcJyogv3IKI0aXSQgHFqzDhufuLJTJQ76r/yr1dMEsR MX8IwoZd4DLB8s2B0fTumod8+cUJ3+GAC1C5so5isM9S4WUQVimEWWQeW0RnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUednFj17+Vgm+9rKEIislAkjbcXYwHwYDVR0j BBgwFoAUagLcEPQfzg60l5jdvPMfycDy4/cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTQ2YmRhZC1mMTMwLTQ4YTktODUzNC01NGJhM2U4ZWQ2MWYvMC82QTAyREMxMEY0 MUZDRTBFQjQ5Nzk4RERCQ0YzMUZDOUMwRjJFM0Y3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlDMEYy RTNGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE0NmJkYWQtZjEzMC00OGE5LTg1 MzQtNTRiYTNlOGVkNjFmLzAvNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFG QzlDMEYyRTNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkqLoLxvvvG7KH97CWyz9O42Qan0sv8JdlS mJVh449hyTg7K/rDrJZVdlSvwCEUvlHAB1k7SXebwemDZirRXC4CggTtWJAG7IeO +ejLHz1MX6KyuJ3FnGFxK0CAGcSfWSBOILiPeFt2ZgVv3f2Fug5nTj8dsQU9u3Yt 6Bwbosc4ZIQhZkdNKVVKcjvajYV32qX/cKxkJ+A7o+ekhQlI8d/oqRXn7YlyijgR rPkkrAnUYq1GOENjzc2DVmjXf+OeBIC/lFPJ5rcHXBzV6isZsu6WfEBUB5gcWu04 lQYsnI4xR8lyndR6k8xEZSGfRRIhVN7q/5f+Zv6CsXbrXVAn5Yw= -----END CERTIFICATE-----Generated at Thu Aug 7 07:34:38 2025 by rpki-client