$ rpki-client -vvf repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft File: 6437999FD06F2C7F0F16F8160CD6145F775884A4.mft (raw, json) Hash identifier: OJwt3hiK97nzGnHjnESGIwnehF9JFrfrRj4HN/C9mVw= Subject key identifier: 3B:02:4C:2D:BC:C8:9C:25:88:3F:26:67:43:6E:5A:6A:FB:11:CB:E9 Authority key identifier: 64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 Certificate issuer: /CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Certificate serial: 6424F8E1A113F446A34269C7CF6C5E2A5D24FFAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft Manifest number: 022F Signing time: Thu 07 Aug 2025 14:30:03 +0000 Manifest this update: Thu 07 Aug 2025 14:25:03 +0000 Manifest next update: Sun 10 Aug 2025 17:14:03 +0000 Files and hashes: 1: 3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa (hash: 6kBcLlz4I+EwiYd/zHv8YINF31MEROhjhbQ+A0qjPjE=) 2: 6437999FD06F2C7F0F16F8160CD6145F775884A4.crl (hash: 4wOtskhUL1ltfJv/HG+/A+cpuTe3fkQJMVH/k1QSzig=) 3: 3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa (hash: FtQ7YyJ/nXZZN06U1YB5sNs24X+l1RzMYb5gI1y1G9M=) 4: 3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa (hash: b3wEoQmduATe2XsB1+5lzcIjLJ7k0E7+xb68g1ewVFQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 17:14:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:24:f8:e1:a1:13:f4:46:a3:42:69:c7:cf:6c:5e:2a:5d:24:ff:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Validity Not Before: Aug 7 14:25:03 2025 GMT Not After : Aug 10 17:14:03 2025 GMT Subject: CN=3B024C2DBCC89C25883F2667436E5A6AFB11CBE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:37:ba:a8:4f:8a:b6:b5:9a:da:a2:3a:1a:a9: 38:2b:b3:19:8b:8b:4f:45:54:40:d4:0f:f9:1a:a9: 58:86:fc:95:2b:12:7e:fc:f4:be:95:c0:50:11:7e: d8:fd:98:df:2e:1e:a4:ef:c9:64:89:87:72:a2:1e: b7:fd:c9:f6:b6:df:ab:85:35:1d:ab:d2:19:3a:9d: a5:17:dc:19:40:2f:76:74:1b:e3:6d:92:5e:64:c9: d1:b3:b6:1d:9a:a9:11:c1:5e:29:d0:eb:8c:5d:55: 59:e9:eb:b4:2f:77:ce:4f:0f:9f:e3:93:10:3d:62: 9c:25:1a:fb:48:28:45:03:92:e0:18:08:e8:f9:c8: ea:89:fc:ed:95:e1:0e:f1:ae:23:41:20:5e:87:cd: 04:a9:63:b1:d1:a9:69:8e:3b:50:ad:be:40:a5:ff: 29:46:3e:31:ce:50:9b:f3:b9:04:04:1d:d9:ac:01: 28:07:fe:38:da:fa:09:21:b6:e7:fa:de:4b:52:64: eb:5c:0c:07:1b:a5:ab:cb:66:70:a8:05:4f:7b:3e: b0:f8:d6:85:aa:70:59:ef:24:2f:85:43:f0:46:a0: f9:73:d3:6e:cc:1f:11:e3:6b:0b:ea:27:c6:d0:28: 40:fb:9d:9d:81:4f:e7:e5:92:5c:1f:9b:ca:e9:f0: 84:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:02:4C:2D:BC:C8:9C:25:88:3F:26:67:43:6E:5A:6A:FB:11:CB:E9 X509v3 Authority Key Identifier: keyid:64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ff:76:ba:a7:c2:fd:f8:1b:70:bd:13:49:82:1f:73:7d:d3: 47:42:41:5a:dd:c4:46:bb:2d:4a:b8:5f:b4:1a:b5:12:1a:78: e0:98:2f:e6:10:c4:fe:94:d1:39:c8:8e:dc:b1:d4:ff:3b:c1: 4b:b4:c8:92:ab:8a:b9:bd:ef:7d:90:45:bf:e2:3e:98:ca:2a: ac:97:ad:c3:94:55:01:4f:0b:d0:21:43:52:02:f7:b4:54:0a: 36:bd:8e:55:0e:2e:c6:ac:ba:fc:3f:ae:04:3e:9e:7f:50:5d: 20:79:ff:12:ce:03:88:44:bd:f4:8c:fb:47:d2:e6:54:ab:a3: e2:f8:b3:0f:ac:64:67:e2:51:8f:38:13:d9:f1:ea:19:b0:11: 4d:e3:d8:66:d4:ba:86:23:b7:f8:76:d6:eb:15:74:2c:77:96: 7d:51:54:e0:36:97:ee:a3:72:dc:79:5d:2f:55:28:1b:60:f6: 61:d9:03:55:25:52:df:94:48:17:20:0f:c9:b9:ef:24:8b:1e: 3f:de:02:b7:7b:72:87:3a:28:4d:d2:15:ad:38:00:71:77:59: 1e:b3:4d:3b:1b:18:b1:37:77:bd:ec:40:b7:12:75:21:e0:03: ae:df:66:7b:f9:f2:ea:c2:5d:d5:2e:56:12:ff:e1:a4:6e:9f: f7:f1:a0:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZCT44aET9EajQmnHz2xeKl0k/6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3 NzU4ODRBNDAeFw0yNTA4MDcxNDI1MDNaFw0yNTA4MTAxNzE0MDNaMDMxMTAvBgNV BAMTKDNCMDI0QzJEQkNDODlDMjU4ODNGMjY2NzQzNkU1QTZBRkIxMUNCRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRN7qoT4q2tZraojoaqTgrsxmL i09FVEDUD/kaqViG/JUrEn789L6VwFARftj9mN8uHqTvyWSJh3KiHrf9yfa236uF NR2r0hk6naUX3BlAL3Z0G+Ntkl5kydGzth2aqRHBXinQ64xdVVnp67Qvd85PD5/j kxA9YpwlGvtIKEUDkuAYCOj5yOqJ/O2V4Q7xriNBIF6HzQSpY7HRqWmOO1CtvkCl /ylGPjHOUJvzuQQEHdmsASgH/jja+gkhtuf63ktSZOtcDAcbpavLZnCoBU97PrD4 1oWqcFnvJC+FQ/BGoPlz027MHxHjawvqJ8bQKED7nZ2BT+flklwfm8rp8IRvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOwJMLbzInCWIPyZnQ25aavsRy+kwHwYDVR0j BBgwFoAUZDeZn9BvLH8PFvgWDNYUX3dYhKQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzZmZGM2MC04MDIzLTQwY2QtYWFhNC1jZDZlZDIyYzRkNDUvMC82NDM3OTk5RkQw NkYyQzdGMEYxNkY4MTYwQ0Q2MTQ1Rjc3NTg4NEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3NzU4 ODRBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc2ZmRjNjAtODAyMy00MGNkLWFh YTQtY2Q2ZWQyMmM0ZDQ1LzAvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0 NUY3NzU4ODRBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7/drqnwv34G3C9E0mCH3N900dCQVrdxEa7 LUq4X7QatRIaeOCYL+YQxP6U0TnIjtyx1P87wUu0yJKrirm9732QRb/iPpjKKqyX rcOUVQFPC9AhQ1IC97RUCja9jlUOLsasuvw/rgQ+nn9QXSB5/xLOA4hEvfSM+0fS 5lSro+L4sw+sZGfiUY84E9nx6hmwEU3j2GbUuoYjt/h21usVdCx3ln1RVOA2l+6j ctx5XS9VKBtg9mHZA1UlUt+USBcgD8m57ySLHj/eArd7coc6KE3SFa04AHF3WR6z TTsbGLE3d73sQLcSdSHgA67fZnv58urCXdUuVhL/4aRun/fxoDo= -----END CERTIFICATE-----Generated at Thu Aug 7 23:57:11 2025 by rpki-client