$ rpki-client -vvf repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft File: 6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft (raw, json) Hash identifier: go0tc4XZqjQWUwln4GvCiYd7cTefepDeqp4HmcblCi8= Subject key identifier: 35:16:97:A9:D2:6A:E8:82:78:A1:CD:94:D0:D7:76:2F:77:E2:D2:01 Authority key identifier: 6A:9D:C5:66:C8:CB:F1:D7:CE:B1:7F:C9:91:7A:CD:58:2E:5C:0A:95 Certificate issuer: /CN=6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95 Certificate serial: 6AB6449E5ACA3EAAEB7A336494A03B5E8B6D6F86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft Manifest number: 04F9 Signing time: Thu 07 Aug 2025 07:32:06 +0000 Manifest this update: Thu 07 Aug 2025 07:27:06 +0000 Manifest next update: Sun 10 Aug 2025 17:15:06 +0000 Files and hashes: 1: 6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl (hash: anD2Ik0l5VcGtrhe5c1r9UAc6bvJtzmZC2ISZ7EIjcU=) 2: 3130332e3130352e3235322e302f32322d3234203d3e20313336383835.roa (hash: 78aRtA03tdL6oV14dW3aN00qRLjvVDFQ6jhLRcjVdxc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 17:15:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:b6:44:9e:5a:ca:3e:aa:eb:7a:33:64:94:a0:3b:5e:8b:6d:6f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95 Validity Not Before: Aug 7 07:27:06 2025 GMT Not After : Aug 10 17:15:06 2025 GMT Subject: CN=351697A9D26AE88278A1CD94D0D7762F77E2D201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:22:d0:1b:3f:1e:a8:a2:e5:52:a6:7a:ec:86: d3:d6:e4:1f:69:8b:c8:08:18:f2:e8:3c:0e:52:1d: 49:2c:fc:8d:73:24:72:1f:91:ec:d5:2d:f4:5c:83: 30:80:3f:ed:2c:1f:95:33:f7:ad:22:8d:62:65:92: 6a:db:d3:26:36:8c:63:c9:cd:8b:54:63:57:0d:09: e5:08:95:5f:c1:c2:50:03:35:88:89:10:95:92:be: b9:a4:cf:d3:5c:94:30:9f:40:b4:d0:87:d1:c5:95: 84:30:98:92:7a:9e:25:2b:66:72:93:56:cc:80:13: fa:32:33:e6:8b:27:b3:e8:f0:e2:98:17:e5:e4:e3: a2:e9:68:9c:66:30:23:58:96:5c:fa:0e:5f:25:09: a4:76:b3:73:61:a7:dd:64:85:e4:40:b9:73:7b:9c: f8:1c:9c:95:1d:ea:fe:99:c8:98:e4:c9:b3:b5:f3: 17:a3:b0:25:90:3e:5d:9c:87:28:24:e1:cb:f4:54: 99:6b:c1:f7:f9:56:f0:4e:55:a6:df:82:c0:3c:d1: a0:45:60:86:dd:d7:88:cd:11:f5:86:45:02:e1:65: 15:f4:9a:30:16:a9:95:3e:8a:33:aa:d4:27:96:ea: 6b:1c:d2:e2:b2:5b:d1:d5:e3:37:89:95:91:91:76: e6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:16:97:A9:D2:6A:E8:82:78:A1:CD:94:D0:D7:76:2F:77:E2:D2:01 X509v3 Authority Key Identifier: keyid:6A:9D:C5:66:C8:CB:F1:D7:CE:B1:7F:C9:91:7A:CD:58:2E:5C:0A:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:48:86:9a:5f:25:ae:22:21:09:2b:0d:2f:f3:ea:8f:27:50: 32:a4:d4:15:ca:2f:38:30:4d:d9:3d:04:d0:58:07:e0:ba:4d: 9b:e8:36:b8:01:c4:96:39:e4:63:56:6a:45:2b:35:8f:a8:6c: 92:5f:cb:da:98:f6:85:00:aa:7e:1e:79:b8:5a:23:ea:ab:74: a0:9f:de:55:16:06:40:e6:77:eb:0b:29:5b:1b:e1:63:b2:a5: 0f:e9:02:8b:d7:f8:20:67:26:9a:e2:55:29:2f:ff:fb:8e:c3: de:df:98:81:08:5f:38:f9:1b:df:31:c0:9b:54:6f:d9:6e:5a: 3b:96:a1:2c:c3:4b:12:e6:26:0b:a6:6a:82:c1:db:b8:b6:af: cb:6c:94:b9:93:0e:ee:4d:42:f0:8a:ef:ea:ff:a3:28:71:92: 75:e6:a3:ff:3d:de:e2:25:fb:0b:37:08:6b:80:ff:cb:42:9f: 28:48:85:6e:fc:b7:6a:cf:9e:02:f9:91:f6:fa:ff:05:bf:86: a2:1f:54:43:72:c9:ec:01:87:27:99:44:b5:2f:af:1a:7c:46: b2:40:89:c9:9b:d0:f8:62:27:b9:92:0f:2a:8d:66:7c:63:e4: 90:57:1c:62:31:32:29:5e:33:76:a5:fd:81:5c:4e:da:a0:83: ea:fa:ac:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUarZEnlrKPqrrejNklKA7Xottb4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE5REM1NjZDOENCRjFEN0NFQjE3RkM5OTE3QUNENTgy RTVDMEE5NTAeFw0yNTA4MDcwNzI3MDZaFw0yNTA4MTAxNzE1MDZaMDMxMTAvBgNV BAMTKDM1MTY5N0E5RDI2QUU4ODI3OEExQ0Q5NEQwRDc3NjJGNzdFMkQyMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjItAbPx6oouVSpnrshtPW5B9p i8gIGPLoPA5SHUks/I1zJHIfkezVLfRcgzCAP+0sH5Uz960ijWJlkmrb0yY2jGPJ zYtUY1cNCeUIlV/BwlADNYiJEJWSvrmkz9NclDCfQLTQh9HFlYQwmJJ6niUrZnKT VsyAE/oyM+aLJ7Po8OKYF+Xk46LpaJxmMCNYllz6Dl8lCaR2s3Nhp91kheRAuXN7 nPgcnJUd6v6ZyJjkybO18xejsCWQPl2chygk4cv0VJlrwff5VvBOVabfgsA80aBF YIbd14jNEfWGRQLhZRX0mjAWqZU+ijOq1CeW6msc0uKyW9HV4zeJlZGRduavAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNRaXqdJq6IJ4oc2U0Nd2L3fi0gEwHwYDVR0j BBgwFoAUap3FZsjL8dfOsX/JkXrNWC5cCpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTZhYTU0Zi03MTU4LTQzYWYtYjMzNi1iZTQ3MTQ4MTZmYWQvMC82QTlEQzU2NkM4 Q0JGMUQ3Q0VCMTdGQzk5MTdBQ0Q1ODJFNUMwQTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE5REM1NjZDOENCRjFEN0NFQjE3RkM5OTE3QUNENTgyRTVD MEE5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE2YWE1NGYtNzE1OC00M2FmLWIz MzYtYmU0NzE0ODE2ZmFkLzAvNkE5REM1NjZDOENCRjFEN0NFQjE3RkM5OTE3QUNE NTgyRTVDMEE5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNIhppfJa4iIQkrDS/z6o8nUDKk1BXKLzgw Tdk9BNBYB+C6TZvoNrgBxJY55GNWakUrNY+obJJfy9qY9oUAqn4eebhaI+qrdKCf 3lUWBkDmd+sLKVsb4WOypQ/pAovX+CBnJpriVSkv//uOw97fmIEIXzj5G98xwJtU b9luWjuWoSzDSxLmJgumaoLB27i2r8tslLmTDu5NQvCK7+r/oyhxknXmo/893uIl +ws3CGuA/8tCnyhIhW78t2rPngL5kfb6/wW/hqIfVENyyewBhyeZRLUvrxp8RrJA icmb0PhiJ7mSDyqNZnxj5JBXHGIxMileM3al/YFcTtqgg+r6rN0= -----END CERTIFICATE-----Generated at Sat Aug 9 15:15:43 2025 by rpki-client