$ rpki-client -vvf repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft File: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft (raw, json) Hash identifier: MNGd+ZLSdQnjbMYJUKQAM61CxNw5uowRh0FgUTP0mw4= Subject key identifier: FF:B0:22:ED:F9:C0:D9:68:05:C2:AF:F4:B7:9A:80:F6:4D:EA:13:F1 Authority key identifier: 6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA Certificate issuer: /CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Certificate serial: 23F8AA71FF96E5A425CD730116CC50E018AA2860 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft Manifest number: 01F9 Signing time: Tue 05 Aug 2025 02:20:02 +0000 Manifest this update: Tue 05 Aug 2025 02:15:02 +0000 Manifest next update: Fri 08 Aug 2025 03:53:02 +0000 Files and hashes: 1: 3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa (hash: XLXbrSM75a4OOhdIFSVSWGya3QA7TZER3P7tGhI+wW0=) 2: 3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa (hash: jcYNuwq5tBbtUM+5LFf+gih2lHYu/silWmdWErgVy5M=) 3: 3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa (hash: R1C6O4ul1Ppozfaiesg+Uhn8MwDAOfzdAmq+sSEet2w=) 4: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl (hash: r4vVggANaUddbwpLQBYOCGhE1Gt5pR/Kq4Yw4jU8UoQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 03:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:f8:aa:71:ff:96:e5:a4:25:cd:73:01:16:cc:50:e0:18:aa:28:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Validity Not Before: Aug 5 02:15:02 2025 GMT Not After : Aug 8 03:53:02 2025 GMT Subject: CN=FFB022EDF9C0D96805C2AFF4B79A80F64DEA13F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:28:75:46:65:53:d1:94:77:31:ba:0e:8d:a8: 4e:cd:89:07:39:07:78:bb:75:00:bb:c2:b6:bd:21: 65:59:c6:37:5b:8d:7e:ab:f5:ee:1c:f1:28:fe:48: 76:d9:ec:ac:62:e3:ab:03:0d:9b:ff:07:a9:2b:c9: 6e:a4:df:a9:fa:de:bc:99:18:30:06:44:87:7d:ea: 3b:ea:e0:ff:2e:70:23:1f:04:33:d8:fd:c0:c8:c1: 99:de:da:3d:c3:ce:9d:2d:8b:20:ae:17:35:a1:25: ce:ec:f7:1e:3d:78:f7:80:1a:25:1e:4d:f7:ff:e4: 6a:d5:e3:75:5d:9c:99:4e:fe:00:91:f2:31:cd:03: ea:8a:87:16:e1:4d:89:2f:91:a6:33:99:7b:15:70: fb:16:33:dc:a3:6f:9a:e0:86:96:d5:ea:97:6a:b4: 6e:8c:43:0d:f9:aa:bf:9c:9b:26:24:3c:85:f4:a7: 46:66:17:f8:08:e2:05:bc:2c:74:df:e6:65:9c:90: 13:25:93:33:cd:be:51:ba:cd:09:01:ab:26:d5:86: 39:4c:70:59:e5:76:4a:ed:5b:6d:5e:98:da:73:6f: a8:18:77:d3:70:05:21:72:77:e3:e0:6d:10:17:61: 67:82:2c:68:34:3e:a2:0a:e6:be:d6:27:70:89:a5: f9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B0:22:ED:F9:C0:D9:68:05:C2:AF:F4:B7:9A:80:F6:4D:EA:13:F1 X509v3 Authority Key Identifier: keyid:6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:67:b4:6b:cb:6c:db:ce:92:eb:a6:72:25:79:e0:97:c4:0b: 68:b2:cb:4a:74:85:d4:54:b6:f2:3b:c1:c3:8b:d9:45:7c:d9: 20:31:c7:f9:4c:4b:4f:a2:21:49:60:a4:bc:a7:34:3e:a5:95: 7d:07:75:5b:d5:82:3c:70:95:e7:b9:c4:cb:c2:ba:a2:5b:39: 4b:31:3d:2f:f4:40:e7:9a:d1:04:8c:40:db:08:f5:f4:03:72: 7b:73:a2:92:db:34:85:6b:1d:46:3b:9a:95:88:71:25:45:9e: 93:b3:1f:45:d6:43:48:b7:f1:98:22:fc:e6:54:3b:61:5d:a4: 4f:24:ed:9d:ce:4c:9b:48:b7:1c:1b:4a:de:03:dc:0e:40:09: f1:93:d4:12:a4:60:57:37:a2:0a:1a:5a:94:04:96:e2:8f:7a: d5:eb:86:9f:6d:a1:09:7d:a5:9c:df:4e:7d:4f:cf:4c:10:97: c1:92:1c:08:71:28:dd:89:aa:89:83:f0:49:6b:79:70:a1:23: fe:ed:91:b1:73:76:e9:d2:54:66:a1:4c:71:f7:1c:f9:cb:c6: 33:96:96:e6:4d:51:9c:b5:80:a3:bd:ed:da:44:84:c9:e0:5f: d4:7c:60:f0:0e:6d:9e:1c:88:ea:15:e3:2e:2c:7c:a4:ca:51: 66:c2:58:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI/iqcf+W5aQlzXMBFsxQ4BiqKGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMx REIwOEZEQTAeFw0yNTA4MDUwMjE1MDJaFw0yNTA4MDgwMzUzMDJaMDMxMTAvBgNV BAMTKEZGQjAyMkVERjlDMEQ5NjgwNUMyQUZGNEI3OUE4MEY2NERFQTEzRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoKHVGZVPRlHcxug6NqE7NiQc5 B3i7dQC7wra9IWVZxjdbjX6r9e4c8Sj+SHbZ7Kxi46sDDZv/B6kryW6k36n63ryZ GDAGRId96jvq4P8ucCMfBDPY/cDIwZne2j3Dzp0tiyCuFzWhJc7s9x49ePeAGiUe Tff/5GrV43VdnJlO/gCR8jHNA+qKhxbhTYkvkaYzmXsVcPsWM9yjb5rghpbV6pdq tG6MQw35qr+cmyYkPIX0p0ZmF/gI4gW8LHTf5mWckBMlkzPNvlG6zQkBqybVhjlM cFnldkrtW21emNpzb6gYd9NwBSFyd+PgbRAXYWeCLGg0PqIK5r7WJ3CJpfkxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/7Ai7fnA2WgFwq/0t5qA9k3qE/EwHwYDVR0j BBgwFoAUb8DJM0D/c1k0NMjv/O2Osx2wj9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjY1OTkwNC0zNzAyLTQ3OTctYmQxYi00NDdhYjhjOTRlMGMvMC82RkMwQzkzMzQw RkY3MzU5MzQzNEM4RUZGQ0VEOEVCMzFEQjA4RkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMxREIw OEZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY2NTk5MDQtMzcwMi00Nzk3LWJk MWItNDQ3YWI4Yzk0ZTBjLzAvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhF QjMxREIwOEZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1ntGvLbNvOkuumciV54JfEC2iyy0p0hdRU tvI7wcOL2UV82SAxx/lMS0+iIUlgpLynND6llX0HdVvVgjxwlee5xMvCuqJbOUsx PS/0QOea0QSMQNsI9fQDcntzopLbNIVrHUY7mpWIcSVFnpOzH0XWQ0i38Zgi/OZU O2FdpE8k7Z3OTJtItxwbSt4D3A5ACfGT1BKkYFc3ogoaWpQEluKPetXrhp9toQl9 pZzfTn1Pz0wQl8GSHAhxKN2JqomD8ElreXChI/7tkbFzdunSVGahTHH3HPnLxjOW luZNUZy1gKO97dpEhMngX9R8YPAObZ4ciOoV4y4sfKTKUWbCWI8= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:50 2025 by rpki-client