$ rpki-client -vvf repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft File: 06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft (raw, json) Hash identifier: 1i6s9qA+0ljK2o4hGhdXfauSmakhtTizhKkXJfn8GF4= Subject key identifier: EA:C9:0D:CE:06:1F:CC:F7:74:B1:4A:CE:BB:95:5C:8E:BB:C0:CC:35 Authority key identifier: 06:A0:35:96:D6:FA:10:E3:F5:08:10:F5:86:E3:F6:3A:EE:96:F9:8E Certificate issuer: /CN=06A03596D6FA10E3F50810F586E3F63AEE96F98E Certificate serial: 393B558A92EAC60F4CD6CFFBFCA878077E96D479 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft Manifest number: DB Signing time: Wed 06 Aug 2025 12:51:03 +0000 Manifest this update: Wed 06 Aug 2025 12:46:03 +0000 Manifest next update: Sat 09 Aug 2025 15:12:03 +0000 Files and hashes: 1: 06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl (hash: UBa7Z6q+BCU6thz4zy12Jj+gfH7Ec+uMsB860ywbc6Y=) 2: 3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa (hash: c4zKb4BC8Sb0059Tmuc8jeyTEWO85EjEdef3ktgt6EU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:3b:55:8a:92:ea:c6:0f:4c:d6:cf:fb:fc:a8:78:07:7e:96:d4:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06A03596D6FA10E3F50810F586E3F63AEE96F98E Validity Not Before: Aug 6 12:46:03 2025 GMT Not After : Aug 9 15:12:03 2025 GMT Subject: CN=EAC90DCE061FCCF774B14ACEBB955C8EBBC0CC35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:de:f8:14:1a:22:5a:63:55:bd:66:0a:fd:f6: 9e:a0:e0:08:e0:8a:bb:46:a6:ce:ec:c0:b7:28:6f: f5:60:f1:55:ae:42:be:b9:ef:be:1b:41:bc:43:0e: 65:e8:06:af:ad:45:fb:b8:e1:19:6b:c1:56:0d:55: d2:13:8a:49:79:00:44:2d:59:7f:df:f0:84:85:77: 58:cd:2e:05:0a:e8:3f:d2:62:d1:52:28:55:16:fc: 77:80:6a:1d:e8:84:ad:e2:4c:61:fd:10:dd:69:88: 6c:eb:d2:c4:fb:54:f6:a4:1a:7c:af:a6:a7:df:cd: 69:81:1d:54:da:7a:6f:23:3b:6f:a7:de:9b:bf:62: c5:c9:3c:13:fa:e1:39:ff:99:1a:ae:43:6a:c6:43: 81:74:4f:ef:b2:f2:af:3e:cb:4d:ee:dc:a4:69:39: a7:b2:2a:69:68:4b:2e:e8:97:26:82:0f:62:3e:5c: 12:61:0b:80:4c:01:e6:9a:fa:19:59:01:48:19:16: 3d:3e:24:01:ea:13:52:35:d6:10:65:1c:fb:0c:0e: 1b:83:da:a9:d3:e1:fc:32:95:fb:2f:07:2d:49:44: 6e:8c:8a:7a:33:c2:3d:2f:3e:b7:66:fa:24:ea:37: 0c:c2:44:0e:0f:88:5f:2d:b9:67:93:c5:54:d4:a0: dc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C9:0D:CE:06:1F:CC:F7:74:B1:4A:CE:BB:95:5C:8E:BB:C0:CC:35 X509v3 Authority Key Identifier: keyid:06:A0:35:96:D6:FA:10:E3:F5:08:10:F5:86:E3:F6:3A:EE:96:F9:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c5:7c:35:9c:d3:31:0d:1d:f4:2a:e2:ca:e4:9e:9f:5a:2a: 84:3f:13:41:27:b7:66:60:ad:3a:d7:00:df:04:7f:1b:c1:67: 98:76:cd:e5:a9:15:86:99:77:03:ed:54:1f:39:5d:5f:80:e1: 35:ae:bc:2c:b3:70:17:ec:ea:c6:46:92:7f:7e:49:08:2c:ea: dd:d4:67:4b:2c:e0:b8:a4:ef:0d:8b:88:b8:03:40:ce:a5:42: 3e:95:fa:aa:3e:d9:31:f2:04:05:05:b1:db:41:0b:ec:39:90: e8:63:d4:da:01:f8:3c:f1:99:b1:f6:2a:a7:92:57:1f:fb:68: 9a:8b:4e:c1:f8:25:8f:33:22:bc:6e:ae:b7:f8:16:5d:e9:c7: 53:9c:68:6c:f9:66:73:33:f7:65:55:4a:26:ff:b6:30:97:27: 1c:63:36:f3:72:13:63:4d:25:33:5c:ff:c8:06:64:f4:60:9a: 43:40:f4:37:71:fc:d8:ed:77:cb:33:85:74:fa:2d:7a:28:bb: e8:c2:65:45:8e:c0:41:6c:bf:3b:40:ee:e2:66:e4:18:29:34: 14:3c:e3:1b:ab:12:9f:2e:29:9f:e9:64:0a:4b:8a:b6:fa:7e: 51:69:a3:e3:c7:b6:18:04:8a:c8:d5:a1:e2:8c:9a:67:46:67: e7:6c:6f:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOTtVipLqxg9M1s/7/Kh4B36W1HkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2M0FF RTk2Rjk4RTAeFw0yNTA4MDYxMjQ2MDNaFw0yNTA4MDkxNTEyMDNaMDMxMTAvBgNV BAMTKEVBQzkwRENFMDYxRkNDRjc3NEIxNEFDRUJCOTU1QzhFQkJDMENDMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF3vgUGiJaY1W9Zgr99p6g4Ajg irtGps7swLcob/Vg8VWuQr65774bQbxDDmXoBq+tRfu44RlrwVYNVdITikl5AEQt WX/f8ISFd1jNLgUK6D/SYtFSKFUW/HeAah3ohK3iTGH9EN1piGzr0sT7VPakGnyv pqffzWmBHVTaem8jO2+n3pu/YsXJPBP64Tn/mRquQ2rGQ4F0T++y8q8+y03u3KRp OaeyKmloSy7olyaCD2I+XBJhC4BMAeaa+hlZAUgZFj0+JAHqE1I11hBlHPsMDhuD 2qnT4fwylfsvBy1JRG6Minozwj0vPrdm+iTqNwzCRA4PiF8tuWeTxVTUoNxpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6skNzgYfzPd0sUrOu5VcjrvAzDUwHwYDVR0j BBgwFoAUBqA1ltb6EOP1CBD1huP2Ou6W+Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGY3Yzc5MC03NmI1LTQ5NjctYjZmZi0xMmRjNzU2YmJmN2QvMC8wNkEwMzU5NkQ2 RkExMEUzRjUwODEwRjU4NkUzRjYzQUVFOTZGOThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2M0FFRTk2 Rjk4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmN2M3OTAtNzZiNS00OTY3LWI2 ZmYtMTJkYzc1NmJiZjdkLzAvMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2 M0FFRTk2Rjk4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvFfDWc0zENHfQq4srknp9aKoQ/E0Ent2Zg rTrXAN8EfxvBZ5h2zeWpFYaZdwPtVB85XV+A4TWuvCyzcBfs6sZGkn9+SQgs6t3U Z0ss4Lik7w2LiLgDQM6lQj6V+qo+2THyBAUFsdtBC+w5kOhj1NoB+DzxmbH2KqeS Vx/7aJqLTsH4JY8zIrxurrf4Fl3px1OcaGz5ZnMz92VVSib/tjCXJxxjNvNyE2NN JTNc/8gGZPRgmkNA9Ddx/Njtd8szhXT6LXoou+jCZUWOwEFsvztA7uJm5BgpNBQ8 4xurEp8uKZ/pZApLirb6flFpo+PHthgEisjVoeKMmmdGZ+dsb24= -----END CERTIFICATE-----Generated at Wed Aug 6 18:24:36 2025 by rpki-client