$ rpki-client -vvf repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft File: 6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft (raw, json) Hash identifier: Hf/I8WRmcYx/JAajBu5Y2nvdE3ZMrlEqmK+5VCvghN8= Subject key identifier: 08:4F:BF:05:D0:C5:CD:D8:79:EB:AA:0A:C6:C2:31:F9:40:84:CB:99 Authority key identifier: 6E:3C:89:E6:A3:E3:C6:1A:73:15:8A:3C:FF:82:90:9F:AE:F8:ED:EF Certificate issuer: /CN=6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF Certificate serial: 21A9B7A659AF5F1719E59B506E2FF210E553BF91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft Manifest number: 0369 Signing time: Tue 05 Aug 2025 06:21:49 +0000 Manifest this update: Tue 05 Aug 2025 06:16:49 +0000 Manifest next update: Fri 08 Aug 2025 11:46:49 +0000 Files and hashes: 1: 6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.crl (hash: QS51lCezB19YVGGFVbm5EXH8lJ+Hpz3qK+cYs/g9iL4=) 2: 3130332e3136392e31302e302f32332d3234203d3e20313432333335.roa (hash: /EB5uVPByNIi8kXY9MVULDEpqEYMsLoCXri+MR4evTc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.crl rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 11:46:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a9:b7:a6:59:af:5f:17:19:e5:9b:50:6e:2f:f2:10:e5:53:bf:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF Validity Not Before: Aug 5 06:16:49 2025 GMT Not After : Aug 8 11:46:49 2025 GMT Subject: CN=084FBF05D0C5CDD879EBAA0AC6C231F94084CB99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:eb:42:11:47:30:db:ab:64:aa:e6:93:ff:00: eb:2b:dc:50:13:8e:29:16:f9:95:b6:c3:9b:24:8f: b5:93:a6:ec:02:7c:e0:04:31:71:4f:99:a4:b7:2e: 37:bd:9b:51:4a:1f:35:19:c1:c0:de:80:1b:54:a7: 5d:8f:48:04:20:a6:07:80:d0:3a:6b:71:eb:eb:cf: 07:d1:29:2a:89:a7:d5:a1:f4:dd:8c:42:72:c6:cf: f5:99:21:d3:1e:26:8a:0f:02:7d:ba:8e:c3:2c:e9: b0:35:4c:7b:92:f4:58:c8:5e:87:85:94:bd:2b:30: 20:0f:b4:6c:f7:99:ec:66:5c:e7:f7:13:3d:a9:57: 9f:9a:89:eb:f0:4b:f0:81:97:33:75:45:01:1e:d6: d2:74:19:e7:99:d2:0c:8f:50:20:31:fc:aa:67:d8: c9:02:c1:09:38:1b:1d:26:37:75:3e:80:02:0a:93: 09:34:69:7f:25:61:de:39:16:d5:7f:46:c2:ca:ad: 7d:a4:1c:2c:13:70:00:a1:e5:a5:5f:ee:bf:d0:0b: a9:b5:63:e3:fa:68:2e:67:9a:5a:08:e3:3d:d1:22: 64:3e:04:37:d6:16:bd:6b:cb:3b:ce:3d:8b:9d:37: f1:c3:ed:8f:6f:51:b9:4d:ff:ae:9e:e7:c6:a8:01: 6d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:4F:BF:05:D0:C5:CD:D8:79:EB:AA:0A:C6:C2:31:F9:40:84:CB:99 X509v3 Authority Key Identifier: keyid:6E:3C:89:E6:A3:E3:C6:1A:73:15:8A:3C:FF:82:90:9F:AE:F8:ED:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:38:4f:06:ed:16:9e:1a:21:49:08:f2:25:ac:be:ce:b4:a1: 83:b3:42:0c:6b:15:57:08:9b:17:c8:a0:e1:93:e0:55:f9:40: 81:cd:24:ff:57:39:b6:31:21:f5:3a:42:fb:8c:38:c7:c8:f4: 16:4b:ae:e9:36:02:32:70:37:2e:ae:30:de:69:ba:a5:da:76: 97:58:5b:a5:26:e2:eb:37:53:58:20:d1:37:2a:e2:d2:27:4e: fc:b4:8b:c5:25:2b:c5:5c:94:a4:f2:f9:8e:19:38:57:24:e1: 3f:ab:ae:1b:b4:8e:d4:26:df:2a:e1:0b:d0:fd:4e:d8:01:9b: 0a:db:5d:17:3e:47:f2:a6:e5:c2:72:90:3c:ff:ca:28:c1:9d: ae:10:ec:a3:b9:23:d0:54:91:09:a1:fd:5d:7e:99:68:ce:7e: ae:24:90:0b:a5:8b:3a:50:64:b0:53:7b:39:f8:5a:77:92:82: 8c:ae:ff:2e:5e:d3:4d:4e:6e:0f:2a:2e:c7:f2:0b:67:75:bf: 71:f4:f3:c1:15:d8:bf:c4:4b:f5:c9:68:1f:88:a5:31:fb:f6: 4e:ef:ca:2a:fd:90:f8:47:f8:db:6e:89:fb:aa:54:82:18:b6: a9:f2:a5:12:76:90:b4:1f:ea:58:48:60:b4:4b:c4:89:0f:c3: 06:01:e9:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIam3plmvXxcZ5ZtQbi/yEOVTv5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkUzQzg5RTZBM0UzQzYxQTczMTU4QTNDRkY4MjkwOUZB RUY4RURFRjAeFw0yNTA4MDUwNjE2NDlaFw0yNTA4MDgxMTQ2NDlaMDMxMTAvBgNV BAMTKDA4NEZCRjA1RDBDNUNERDg3OUVCQUEwQUM2QzIzMUY5NDA4NENCOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB60IRRzDbq2Sq5pP/AOsr3FAT jikW+ZW2w5skj7WTpuwCfOAEMXFPmaS3Lje9m1FKHzUZwcDegBtUp12PSAQgpgeA 0DprcevrzwfRKSqJp9Wh9N2MQnLGz/WZIdMeJooPAn26jsMs6bA1THuS9FjIXoeF lL0rMCAPtGz3mexmXOf3Ez2pV5+aievwS/CBlzN1RQEe1tJ0GeeZ0gyPUCAx/Kpn 2MkCwQk4Gx0mN3U+gAIKkwk0aX8lYd45FtV/RsLKrX2kHCwTcACh5aVf7r/QC6m1 Y+P6aC5nmloI4z3RImQ+BDfWFr1ryzvOPYudN/HD7Y9vUblN/66e58aoAW2TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCE+/BdDFzdh566oKxsIx+UCEy5kwHwYDVR0j BBgwFoAUbjyJ5qPjxhpzFYo8/4KQn6747e8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWFhOGNiZS03MThiLTQ5NTMtYjc4OS02MGZhODU3YWVjOGQvMC82RTNDODlFNkEz RTNDNjFBNzMxNThBM0NGRjgyOTA5RkFFRjhFREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkUzQzg5RTZBM0UzQzYxQTczMTU4QTNDRkY4MjkwOUZBRUY4 RURFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVhYThjYmUtNzE4Yi00OTUzLWI3 ODktNjBmYTg1N2FlYzhkLzAvNkUzQzg5RTZBM0UzQzYxQTczMTU4QTNDRkY4Mjkw OUZBRUY4RURFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABs4TwbtFp4aIUkI8iWsvs60oYOzQgxrFVcI mxfIoOGT4FX5QIHNJP9XObYxIfU6QvuMOMfI9BZLruk2AjJwNy6uMN5puqXadpdY W6Um4us3U1gg0Tcq4tInTvy0i8UlK8VclKTy+Y4ZOFck4T+rrhu0jtQm3yrhC9D9 TtgBmwrbXRc+R/Km5cJykDz/yijBna4Q7KO5I9BUkQmh/V1+mWjOfq4kkAulizpQ ZLBTezn4WneSgoyu/y5e001Obg8qLsfyC2d1v3H088EV2L/ES/XJaB+IpTH79k7v yir9kPhH+NtuifuqVIIYtqnypRJ2kLQf6lhIYLRLxIkPwwYB6So= -----END CERTIFICATE-----Generated at Thu Aug 7 05:01:21 2025 by rpki-client