$ rpki-client -vvf repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft File: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft (raw, json) Hash identifier: 7+ml098wYEXWtbU3KBwJwj7fveBSWCFNDxeIYzzVBkk= Subject key identifier: 30:75:33:E0:E7:35:EF:22:35:4B:FF:1B:69:91:E7:B1:41:94:1C:C8 Authority key identifier: 6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21 Certificate issuer: /CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121 Certificate serial: 4F98FBBDF35E8AD4E922F696B14C1005DC1F2446 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft Manifest number: 04F7 Signing time: Mon 04 Aug 2025 12:20:52 +0000 Manifest this update: Mon 04 Aug 2025 12:15:52 +0000 Manifest next update: Thu 07 Aug 2025 23:20:52 +0000 Files and hashes: 1: 3130332e35302e32362e302f32342d3234203d3e203633383639.roa (hash: XC5DYejk2ouXNggePM7faKlSdJX+qPYu8hQvOlxyDok=) 2: 3130332e35302e32342e302f32342d3234203d3e203633383639.roa (hash: pjDRNdkxVNQAonOH/ajeQNBbErsBzCB65TjYTm/AV04=) 3: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl (hash: nlprLf3U0YtMSeXh+O6fGmA2UCBfvxRsSbVvrJGVTss=) 4: 3130332e35302e32352e302f32342d3234203d3e203633383639.roa (hash: JbxABL76MkkqswIqSBjIy3QFwClw0Z/ylcfelmeq75g=) 5: 3130332e35302e32372e302f32342d3234203d3e203633383639.roa (hash: CMxLGqk+5iIxSLstgSUEPMheQZBFi/aQaQ40AR/6xck=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 23:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:98:fb:bd:f3:5e:8a:d4:e9:22:f6:96:b1:4c:10:05:dc:1f:24:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121 Validity Not Before: Aug 4 12:15:52 2025 GMT Not After : Aug 7 23:20:52 2025 GMT Subject: CN=307533E0E735EF22354BFF1B6991E7B141941CC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ef:88:4e:49:0e:51:fa:c7:9c:c1:98:95:d3: 34:10:9b:3a:8c:06:c8:bc:99:43:c1:61:dd:1f:72: ce:52:60:d0:bd:9b:4e:e6:dd:6b:7a:43:f6:5d:0d: ad:7d:db:d9:cd:64:cb:46:64:ef:f8:2f:a9:d8:1a: ae:bb:33:b0:67:2e:83:d0:ca:f5:38:46:bb:3b:56: 4d:43:c7:45:a7:ae:56:25:41:c8:5d:2d:e0:74:0e: 0c:d1:22:7e:16:d8:9c:0f:19:59:9f:9d:5a:ec:78: 14:e8:81:13:f2:39:9e:9a:b3:2c:c8:a9:c3:6a:18: 6d:07:a8:5d:a2:f6:c6:60:4c:a2:37:33:7b:51:26: 8e:8e:e3:15:d9:6b:e4:e2:b5:e8:3c:ec:28:b1:5b: 2f:31:c6:5c:7a:4a:6a:ae:66:ea:c5:22:8c:df:61: f7:66:77:02:7d:3d:f2:9b:4e:14:fa:70:99:37:24: 74:20:99:ee:0b:69:70:07:43:9f:e0:00:c7:1d:b9: d6:19:8f:cf:8d:a2:30:7b:61:a3:74:e0:a2:28:73: 70:49:34:e9:b4:48:2c:e2:38:09:e9:5b:e2:07:62: 02:d3:88:64:d1:6a:f6:15:3a:cb:62:8d:30:9a:44: ca:7a:86:ce:ef:b4:34:fc:19:8d:f5:01:26:85:c8: c9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:75:33:E0:E7:35:EF:22:35:4B:FF:1B:69:91:E7:B1:41:94:1C:C8 X509v3 Authority Key Identifier: keyid:6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:0d:16:28:df:4a:10:f8:fb:3d:b0:28:54:2a:43:48:30:fa: fa:13:2f:7b:e4:fa:35:85:4c:04:b1:98:00:56:de:d0:c9:12: 0e:79:1f:34:5e:d2:2f:46:56:55:59:40:bb:3a:89:74:0f:9c: a4:74:84:a9:2a:11:94:62:05:62:44:42:a9:88:ba:ac:64:ac: 5f:c5:eb:0f:27:de:d6:b3:00:40:be:2e:1a:f3:32:f7:f8:d0: c3:2d:9d:29:61:0b:51:97:b4:1f:2e:aa:42:e5:c9:85:36:1e: 8e:47:f5:8f:7f:63:ed:81:15:f5:fd:14:b4:90:17:54:d3:bb: 6a:7e:1b:3d:c3:b5:cc:6f:77:5b:25:2e:74:49:27:90:21:66: 5d:a2:0c:b5:9e:91:5f:ad:32:82:f3:ed:0e:15:b8:01:6e:ed: 6c:47:7a:d3:ed:e3:39:4d:75:b9:d6:99:57:95:42:67:08:ba: ab:61:23:bc:a0:0c:cc:06:0b:31:a8:8c:30:77:fe:55:7d:19: 67:d2:7b:66:ba:bc:6f:c6:a4:71:13:e0:4b:7b:f6:2c:03:1a: 61:a8:fb:c8:b6:d0:5c:54:a8:6d:e6:e7:f1:88:ae:c5:e9:c7: 59:39:f0:c6:f9:2b:99:c4:e9:1d:ab:ca:e5:4d:0f:e6:75:f5: bc:bf:42:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT5j7vfNeitTpIvaWsUwQBdwfJEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3 MUQyRDEyMTAeFw0yNTA4MDQxMjE1NTJaFw0yNTA4MDcyMzIwNTJaMDMxMTAvBgNV BAMTKDMwNzUzM0UwRTczNUVGMjIzNTRCRkYxQjY5OTFFN0IxNDE5NDFDQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW74hOSQ5R+secwZiV0zQQmzqM Bsi8mUPBYd0fcs5SYNC9m07m3Wt6Q/ZdDa1929nNZMtGZO/4L6nYGq67M7BnLoPQ yvU4Rrs7Vk1Dx0WnrlYlQchdLeB0DgzRIn4W2JwPGVmfnVrseBTogRPyOZ6asyzI qcNqGG0HqF2i9sZgTKI3M3tRJo6O4xXZa+Titeg87CixWy8xxlx6SmquZurFIozf YfdmdwJ9PfKbThT6cJk3JHQgme4LaXAHQ5/gAMcdudYZj8+NojB7YaN04KIoc3BJ NOm0SCziOAnpW+IHYgLTiGTRavYVOstijTCaRMp6hs7vtDT8GY31ASaFyMlPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMHUz4Oc17yI1S/8baZHnsUGUHMgwHwYDVR0j BBgwFoAUbBWXYHoMPqw+MM9I/zG6/XHS0SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzY2ODU0MS1kNmM2LTQwOWUtOGFkMS01ZTg5YTRiMjg1MGUvMC82QzE1OTc2MDdB MEMzRUFDM0UzMENGNDhGRjMxQkFGRDcxRDJEMTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3MUQy RDEyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc2Njg1NDEtZDZjNi00MDllLThh ZDEtNWU4OWE0YjI4NTBlLzAvNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJB RkQ3MUQyRDEyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcNFijfShD4+z2wKFQqQ0gw+voTL3vk+jWF TASxmABW3tDJEg55HzRe0i9GVlVZQLs6iXQPnKR0hKkqEZRiBWJEQqmIuqxkrF/F 6w8n3tazAEC+LhrzMvf40MMtnSlhC1GXtB8uqkLlyYU2Ho5H9Y9/Y+2BFfX9FLSQ F1TTu2p+Gz3Dtcxvd1slLnRJJ5AhZl2iDLWekV+tMoLz7Q4VuAFu7WxHetPt4zlN dbnWmVeVQmcIuqthI7ygDMwGCzGojDB3/lV9GWfSe2a6vG/GpHET4Et79iwDGmGo +8i20FxUqG3m5/GIrsXpx1k58Mb5K5nE6R2ryuVND+Z19by/Qps= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:07 2025 by rpki-client