$ rpki-client -vvf repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft File: 6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft (raw, json) Hash identifier: vs8ClLwAvdKrnkNN7HgT5CVWHfLXt1Lm7MRor1/gYmI= Subject key identifier: BE:B9:CA:47:B6:93:68:E4:AA:6A:B2:3B:13:B7:7A:40:91:A0:26:96 Authority key identifier: 6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92 Certificate issuer: /CN=6A200D6FC5434DAD6106CEE5439CA1270DDCBC92 Certificate serial: 0BCAE2E66B7B5ABD442FD20079CFD21DB4C9BEDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft Manifest number: 99 Signing time: Tue 05 Aug 2025 19:11:15 +0000 Manifest this update: Tue 05 Aug 2025 19:06:15 +0000 Manifest next update: Sat 09 Aug 2025 02:14:15 +0000 Files and hashes: 1: 3130332e3130332e3138302e302f32332d3234203d3e20313336383437.roa (hash: Ub40BPe4KMOTxitaoAUpxbpNc0bfpI5fDNOKKNlDeX8=) 2: 6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl (hash: afgT7lvqRHI4KR/FrGBOGR+WrFSJHxHlXm6PDOdxXEM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 02:14:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:ca:e2:e6:6b:7b:5a:bd:44:2f:d2:00:79:cf:d2:1d:b4:c9:be:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A200D6FC5434DAD6106CEE5439CA1270DDCBC92 Validity Not Before: Aug 5 19:06:15 2025 GMT Not After : Aug 9 02:14:15 2025 GMT Subject: CN=BEB9CA47B69368E4AA6AB23B13B77A4091A02696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:56:d7:3f:64:fa:52:18:06:1b:e0:5c:bd:53: a2:60:c5:d9:8f:0f:db:d3:11:9e:43:6e:ea:05:f0: d0:f7:33:fb:8b:93:44:16:d0:39:5a:96:4b:c9:bd: a5:1d:29:b5:34:3b:3a:38:f7:78:c6:bc:43:1f:5c: 8c:31:1e:1c:a6:7c:b7:0b:ea:35:08:b7:83:b5:ba: ea:04:9a:93:8c:4c:a3:81:59:fd:a4:98:dd:6a:51: d3:b4:9b:7f:5d:e0:d4:c2:99:46:ef:ef:f0:fe:59: ff:26:8e:20:d2:a9:8f:23:42:56:46:7c:59:21:28: cf:75:30:2f:b7:a2:fa:f3:4e:74:ee:9a:2f:66:df: dd:80:ae:4c:ed:78:03:6c:fb:2b:c7:17:1b:cd:cd: 1e:36:50:bf:e5:ae:a0:ec:09:73:75:f3:f5:98:a7: 0a:75:82:bd:60:2f:9c:3d:77:83:3c:f9:b7:0e:c8: 40:17:ec:1a:77:33:7b:56:1d:c3:c5:09:57:36:f4: 06:88:5c:e6:c2:4e:3a:86:66:eb:1b:9e:fe:71:2b: 9c:4a:82:79:47:3c:00:1a:df:8d:4d:9b:a0:fd:e9: 68:6e:21:4d:3f:8d:53:fa:84:31:19:9d:8c:d7:ea: 01:1d:14:27:69:8d:d9:b3:2f:23:98:49:95:62:79: 9b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B9:CA:47:B6:93:68:E4:AA:6A:B2:3B:13:B7:7A:40:91:A0:26:96 X509v3 Authority Key Identifier: keyid:6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:12:13:b3:7b:05:b8:20:9a:f2:df:22:9e:52:c9:ab:70:e1: 14:d2:14:10:7d:67:7d:d2:51:1a:67:65:ce:6a:58:4a:b6:bb: c3:20:11:b8:64:5c:b1:7c:81:02:62:71:1c:5a:d9:71:3f:3b: 7c:b6:42:e0:01:77:95:93:c0:5b:ca:84:3d:c2:b1:1a:da:3e: c9:e3:19:43:dc:73:79:be:13:14:a8:25:fb:d4:d1:ca:ca:4c: 3d:2c:f7:f8:06:01:9b:34:6c:46:31:ac:4c:c1:ae:63:d5:f4: 83:ab:88:15:7d:2e:58:b2:3f:ff:1b:bf:56:9e:2e:5b:80:9e: 23:c5:30:19:05:c8:19:84:2a:0f:07:07:e4:eb:8a:27:38:bd: 83:3c:c4:9e:e6:9c:96:8e:98:82:3a:62:c1:78:6f:b7:79:e3: 43:2d:da:49:1f:ce:71:13:5b:b1:50:f2:33:bb:50:83:ce:be: 75:0c:6c:a9:09:4f:fb:6d:32:ec:d2:87:d4:63:53:8b:96:80: 18:24:8d:68:8d:56:1f:c8:d7:72:35:38:b3:15:01:2b:fa:1f: e8:bc:3a:5d:ed:88:97:a6:6b:8a:e8:fe:54:70:01:d9:e1:1d: 3c:78:3d:fb:1f:25:6c:ea:3f:f6:f2:f4:c2:5c:9b:1f:da:94: 3b:2a:53:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC8ri5mt7Wr1EL9IAec/SHbTJvtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0ExMjcw RERDQkM5MjAeFw0yNTA4MDUxOTA2MTVaFw0yNTA4MDkwMjE0MTVaMDMxMTAvBgNV BAMTKEJFQjlDQTQ3QjY5MzY4RTRBQTZBQjIzQjEzQjc3QTQwOTFBMDI2OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEVtc/ZPpSGAYb4Fy9U6JgxdmP D9vTEZ5DbuoF8ND3M/uLk0QW0DlalkvJvaUdKbU0Ozo493jGvEMfXIwxHhymfLcL 6jUIt4O1uuoEmpOMTKOBWf2kmN1qUdO0m39d4NTCmUbv7/D+Wf8mjiDSqY8jQlZG fFkhKM91MC+3ovrzTnTumi9m392ArkzteANs+yvHFxvNzR42UL/lrqDsCXN18/WY pwp1gr1gL5w9d4M8+bcOyEAX7Bp3M3tWHcPFCVc29AaIXObCTjqGZusbnv5xK5xK gnlHPAAa341Nm6D96WhuIU0/jVP6hDEZnYzX6gEdFCdpjdmzLyOYSZVieZt3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvrnKR7aTaOSqarI7E7d6QJGgJpYwHwYDVR0j BBgwFoAUaiANb8VDTa1hBs7lQ5yhJw3cvJIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGQwZmNhOC01YzJkLTRlMzUtYmQ3ZC1iNDQ4YWE3NWYyYmUvMC82QTIwMEQ2RkM1 NDM0REFENjEwNkNFRTU0MzlDQTEyNzBERENCQzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0ExMjcwRERD QkM5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhkMGZjYTgtNWMyZC00ZTM1LWJk N2QtYjQ0OGFhNzVmMmJlLzAvNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0Ex MjcwRERDQkM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKASE7N7BbggmvLfIp5Syatw4RTSFBB9Z33S URpnZc5qWEq2u8MgEbhkXLF8gQJicRxa2XE/O3y2QuABd5WTwFvKhD3CsRraPsnj GUPcc3m+ExSoJfvU0crKTD0s9/gGAZs0bEYxrEzBrmPV9IOriBV9LliyP/8bv1ae LluAniPFMBkFyBmEKg8HB+Triic4vYM8xJ7mnJaOmII6YsF4b7d540Mt2kkfznET W7FQ8jO7UIPOvnUMbKkJT/ttMuzSh9RjU4uWgBgkjWiNVh/I13I1OLMVASv6H+i8 Ol3tiJema4ro/lRwAdnhHTx4PfsfJWzqP/by9MJcmx/alDsqU9g= -----END CERTIFICATE-----Generated at Thu Aug 7 04:25:05 2025 by rpki-client