$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft File: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft (raw, json) Hash identifier: a4TpdeDCAxRXiow1Kbmo0590oI8C3SYdEbRHEn/amoQ= Subject key identifier: 78:DF:6A:98:55:EE:2B:7A:46:E9:3D:A8:AC:74:A1:22:5D:4F:39:08 Authority key identifier: 69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E Certificate issuer: /CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Certificate serial: 25151B8A5531A0CBC59EC59024C7D716754EC225 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft Manifest number: 01EA Signing time: Mon 04 Aug 2025 18:40:06 +0000 Manifest this update: Mon 04 Aug 2025 18:35:06 +0000 Manifest next update: Fri 08 Aug 2025 06:35:06 +0000 Files and hashes: 1: 3130332e31322e32382e302f32322d3234203d3e203535363730.roa (hash: 56/u0yMrkC94FdPOEf+mn1+2joJi+oVC5l6/K3alTgQ=) 2: 3130312e302e342e302f32322d3234203d3e203438343635.roa (hash: 0Vbzbdds4DlTIQ/frtEsWuiBQ6OCjLTHiqaNJsXbu/0=) 3: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl (hash: fGH7lVMWzoECYKV4BM/2oaJH9R1MdtG53pR5IZCT0cE=) 4: 3130332e31322e32382e302f32322d3234203d3e203438343635.roa (hash: hq6fcTyLZ0Befnc7SCHGWV/VgoDOfnIfMb9/pRr7Usc=) 5: 323430303a666230303a3a2f33322d3438203d3e203535363730.roa (hash: FVA48wGL4/cskX5JvDPv5QyssORBEsld3N+rmhCU4Gc=) 6: 3130312e302e342e302f32322d3234203d3e203535363730.roa (hash: 7ECSmeZAaiWw7xemuyw220yGHio1fDg8eukqs4CuhkU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 06:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:15:1b:8a:55:31:a0:cb:c5:9e:c5:90:24:c7:d7:16:75:4e:c2:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Validity Not Before: Aug 4 18:35:06 2025 GMT Not After : Aug 8 06:35:06 2025 GMT Subject: CN=78DF6A9855EE2B7A46E93DA8AC74A1225D4F3908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1d:6f:ae:c0:b6:4e:d4:2e:f2:9e:0e:7e:cf: 23:9a:e3:78:b9:f1:46:e1:0a:f8:23:39:b3:2f:67: 14:aa:82:4a:1c:b4:f6:ce:5e:b4:e3:cf:b8:00:d1: 63:5f:66:bb:25:87:7d:70:ce:b9:1d:17:a6:49:d2: da:09:7e:91:46:6b:9c:79:1f:0b:29:f2:e3:fe:fe: 0f:28:9b:90:5d:d4:56:ed:af:e6:92:33:f9:a9:d9: 94:24:97:b6:96:58:a0:88:54:93:4b:86:6b:48:4d: 7b:cd:f8:63:bd:9b:26:d9:6a:91:c1:0b:20:09:3d: e6:fb:b1:f3:32:8d:cb:08:62:7b:31:b9:3e:12:81: 07:9e:b0:46:15:b1:09:e5:38:bc:72:ef:b2:a3:f1: 90:42:4e:57:05:02:c9:c6:8f:95:b2:02:d5:75:97: 73:99:85:2f:dc:18:44:1b:07:f1:2e:17:bd:7d:af: d5:e0:e1:78:92:9b:fb:1f:75:e7:57:c9:4a:e9:08: b6:e6:5f:3f:d7:20:30:b6:a9:5d:99:37:7b:5c:f4: 74:d0:1f:0f:7c:0e:22:aa:f7:e3:60:fd:9e:03:f4: 00:1a:af:9f:a6:aa:2a:26:03:a3:f2:a8:d7:d6:dc: 1d:49:95:c5:6e:14:0b:08:12:bf:bf:ed:78:c6:46: dd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DF:6A:98:55:EE:2B:7A:46:E9:3D:A8:AC:74:A1:22:5D:4F:39:08 X509v3 Authority Key Identifier: keyid:69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5f:b6:50:de:be:8c:94:c7:23:b8:27:27:36:7b:5c:51:b6: 3e:f8:ea:39:39:33:ce:f6:b8:ce:29:62:70:e0:f9:7d:23:2b: 8b:11:4d:42:b1:86:b5:b2:3a:11:a9:a6:09:12:0d:54:7b:90: 19:3d:78:f2:29:71:94:ac:49:45:ed:ef:d2:75:aa:a2:3b:06: 4b:a1:dc:68:8e:44:5a:cb:a0:d2:73:27:50:db:ba:c0:81:90: 63:6f:71:72:ec:6a:b8:2b:3a:e1:d5:1f:8e:fd:b1:01:43:ea: 89:d2:6c:1c:f3:de:f8:8b:f9:14:8a:d2:2d:f7:da:9f:07:47: 23:ae:7c:c3:94:1e:15:f7:c2:dc:31:79:6f:70:b6:ff:0d:cc: a5:81:51:f9:e5:8a:d3:cc:4e:c7:b7:25:b7:ed:33:de:ea:01: 1b:49:54:1c:76:52:cb:d9:a2:f4:ff:6c:64:27:ab:b3:a5:a2: b1:6c:1b:b8:9b:99:80:59:4b:86:6b:e0:06:7b:14:bb:83:05: 61:bf:82:4a:e0:bb:ea:59:7c:6f:58:b6:2b:2b:db:4c:f1:d6: f0:57:58:56:03:55:e0:cd:c4:f5:ab:4c:42:13:5c:7e:f0:a7: 50:c2:b4:9d:e5:77:c4:57:2e:63:0f:3f:f5:98:dc:93:9f:ca: aa:aa:aa:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJRUbilUxoMvFnsWQJMfXFnVOwiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVG RTNFN0MzRTAeFw0yNTA4MDQxODM1MDZaFw0yNTA4MDgwNjM1MDZaMDMxMTAvBgNV BAMTKDc4REY2QTk4NTVFRTJCN0E0NkU5M0RBOEFDNzRBMTIyNUQ0RjM5MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBHW+uwLZO1C7yng5+zyOa43i5 8UbhCvgjObMvZxSqgkoctPbOXrTjz7gA0WNfZrslh31wzrkdF6ZJ0toJfpFGa5x5 Hwsp8uP+/g8om5Bd1Fbtr+aSM/mp2ZQkl7aWWKCIVJNLhmtITXvN+GO9mybZapHB CyAJPeb7sfMyjcsIYnsxuT4SgQeesEYVsQnlOLxy77Kj8ZBCTlcFAsnGj5WyAtV1 l3OZhS/cGEQbB/EuF719r9Xg4XiSm/sfdedXyUrpCLbmXz/XIDC2qV2ZN3tc9HTQ Hw98DiKq9+Ng/Z4D9AAar5+mqiomA6PyqNfW3B1JlcVuFAsIEr+/7XjGRt1TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeN9qmFXuK3pG6T2orHShIl1POQgwHwYDVR0j BBgwFoAUaWcBLvykNpjo4bckuR38Xv4+fD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDZlYTdmYS05NGQyLTRkZGMtYThlNi01ZGM2MjZjMjkxZDQvMC82OTY3MDEyRUZD QTQzNjk4RThFMUI3MjRCOTFERkM1RUZFM0U3QzNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVGRTNF N0MzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4 ZTYtNWRjNjI2YzI5MWQ0LzAvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZD NUVGRTNFN0MzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1ftlDevoyUxyO4Jyc2e1xRtj746jk5M872 uM4pYnDg+X0jK4sRTUKxhrWyOhGppgkSDVR7kBk9ePIpcZSsSUXt79J1qqI7Bkuh 3GiORFrLoNJzJ1DbusCBkGNvcXLsargrOuHVH479sQFD6onSbBzz3viL+RSK0i33 2p8HRyOufMOUHhX3wtwxeW9wtv8NzKWBUfnlitPMTse3JbftM97qARtJVBx2UsvZ ovT/bGQnq7OlorFsG7ibmYBZS4Zr4AZ7FLuDBWG/gkrgu+pZfG9Ytisr20zx1vBX WFYDVeDNxPWrTEITXH7wp1DCtJ3ld8RXLmMPP/WY3JOfyqqqqpc= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:40 2025 by rpki-client