$ rpki-client -vvf repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft File: 6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft (raw, json) Hash identifier: 1ITZmQATQYY+kSFN1qvMFiw5GVX8VeH1jDe7oSmAkCk= Subject key identifier: 31:BD:D4:9C:BB:00:27:D0:C6:70:F8:16:97:B8:97:FF:BB:5A:05:37 Authority key identifier: 6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 Certificate issuer: /CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31 Certificate serial: 6BE75937D7A7AA997276C590E02965996B6A8ED8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft Manifest number: B2 Signing time: Thu 07 Aug 2025 20:00:48 +0000 Manifest this update: Thu 07 Aug 2025 19:55:48 +0000 Manifest next update: Sun 10 Aug 2025 23:03:48 +0000 Files and hashes: 1: 3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa (hash: nPtUGKaHPiIgcmd7zVYYYWB0FNbLMK1i/rlw7h+2X4I=) 2: 3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa (hash: hNrDFdJZIJVijEPlIae7oRd0LDEkkVmTrltcwdQNZWQ=) 3: 6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl (hash: fnjTw3AljcfqzCvl0shXwHECejVroDZ153FCQqDpQyY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 23:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:e7:59:37:d7:a7:aa:99:72:76:c5:90:e0:29:65:99:6b:6a:8e:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31 Validity Not Before: Aug 7 19:55:48 2025 GMT Not After : Aug 10 23:03:48 2025 GMT Subject: CN=31BDD49CBB0027D0C670F81697B897FFBB5A0537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:24:87:8f:5b:17:61:0e:6d:fe:f7:c5:a2:88: 70:47:85:74:95:e4:9e:3b:c0:ea:72:2c:57:af:86: cc:21:7e:f6:ec:af:4b:98:23:e4:84:0a:b1:f8:c4: 42:b6:4a:c5:01:2d:be:b7:eb:25:56:bf:31:b1:a3: cb:c9:cc:f8:49:b6:8f:41:b0:4e:16:35:33:de:ff: a5:af:aa:1b:98:39:7d:eb:57:72:2c:be:46:80:9d: e9:fe:63:c0:a9:79:02:2a:39:6c:15:c4:f9:52:94: 12:0e:6d:51:fb:0c:6e:f4:63:30:7e:a5:e2:af:e4: 64:25:47:00:e2:3f:3a:5b:33:21:79:d0:fd:92:7f: df:0a:fe:87:81:f8:bd:4b:d8:37:66:dc:b5:db:47: 58:c0:ea:1a:01:c6:0d:be:4f:2a:08:da:70:54:e2: 82:c8:c1:ea:6a:50:32:36:6f:0f:8e:61:7d:a3:23: 0f:11:81:ea:6d:f7:74:1e:27:44:bd:21:66:2e:8d: f4:66:d7:e3:e0:90:38:1b:2d:2e:56:7c:f6:fd:4b: 9b:f4:48:94:0e:53:af:0b:50:37:db:ff:c5:85:9a: aa:f4:5f:b7:e9:af:d3:eb:aa:f0:1c:f5:d7:e9:ce: 7c:5a:e0:3f:9b:cc:78:07:c4:ae:8a:1c:c8:b6:97: e0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:BD:D4:9C:BB:00:27:D0:C6:70:F8:16:97:B8:97:FF:BB:5A:05:37 X509v3 Authority Key Identifier: keyid:6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:7b:01:fe:90:65:d6:e9:98:e9:bc:54:e9:e9:cc:01:a2:b7: 4e:d2:5f:89:f2:3e:36:f0:9f:ff:f1:af:10:47:4e:b7:ae:f9: 01:f7:ae:25:15:ee:ac:b1:88:3f:f4:4b:67:b0:f0:50:01:97: a1:5e:68:83:a2:74:1d:a5:e1:f1:3a:d5:dd:68:c7:7a:5a:45: cb:60:41:9b:d0:cd:02:09:4e:c6:07:83:27:60:fc:0b:e8:e5: 2f:af:ef:fd:09:be:c9:f0:88:30:c0:fd:9d:de:49:23:25:1d: 6c:e4:5c:7f:76:a5:5a:43:dd:72:59:e1:b4:f2:6e:75:77:dd: 07:de:be:52:a0:8a:25:bb:9a:bf:e4:38:fe:99:45:ac:3f:b1: 8d:e3:5e:83:bb:1c:90:57:a4:ce:c2:d5:93:f9:a6:ef:50:50: 8f:51:69:62:21:d8:ca:1f:ac:a0:2f:fa:4b:4d:1b:a4:15:6c: 7f:74:6a:ab:0b:75:18:d8:45:68:b0:2d:22:68:bc:59:c8:31: ff:50:c3:ad:ec:a9:fe:4f:fc:6a:8a:9d:25:c6:b7:00:17:0c: 93:11:7b:f1:7f:8c:b3:89:78:eb:54:ae:c6:ca:71:00:76:97: 25:3d:db:24:ef:65:09:0c:5d:14:81:88:a3:e8:68:cc:d6:9f: 94:0b:6a:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa+dZN9enqplydsWQ4CllmWtqjtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFBRTlF M0QxOEQzMTAeFw0yNTA4MDcxOTU1NDhaFw0yNTA4MTAyMzAzNDhaMDMxMTAvBgNV BAMTKDMxQkRENDlDQkIwMDI3RDBDNjcwRjgxNjk3Qjg5N0ZGQkI1QTA1MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGJIePWxdhDm3+98WiiHBHhXSV 5J47wOpyLFevhswhfvbsr0uYI+SECrH4xEK2SsUBLb636yVWvzGxo8vJzPhJto9B sE4WNTPe/6WvqhuYOX3rV3IsvkaAnen+Y8CpeQIqOWwVxPlSlBIObVH7DG70YzB+ peKv5GQlRwDiPzpbMyF50P2Sf98K/oeB+L1L2Ddm3LXbR1jA6hoBxg2+TyoI2nBU 4oLIwepqUDI2bw+OYX2jIw8Rgept93QeJ0S9IWYujfRm1+PgkDgbLS5WfPb9S5v0 SJQOU68LUDfb/8WFmqr0X7fpr9PrqvAc9dfpznxa4D+bzHgHxK6KHMi2l+DDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMb3UnLsAJ9DGcPgWl7iX/7taBTcwHwYDVR0j BBgwFoAUaizJ08cxSOJl6ZZhkpwa6ePRjTEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjJhOTE2YS1hZDIyLTQ5NzktYmU0My05NTFjNzZmMmY5MjAvMC82QTJDQzlEM0M3 MzE0OEUyNjVFOTk2NjE5MjlDMUFFOUUzRDE4RDMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFBRTlFM0Qx OEQzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2IyYTkxNmEtYWQyMi00OTc5LWJl NDMtOTUxYzc2ZjJmOTIwLzAvNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFB RTlFM0QxOEQzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKt7Af6QZdbpmOm8VOnpzAGit07SX4nyPjbw n//xrxBHTreu+QH3riUV7qyxiD/0S2ew8FABl6FeaIOidB2l4fE61d1ox3paRctg QZvQzQIJTsYHgydg/Avo5S+v7/0JvsnwiDDA/Z3eSSMlHWzkXH92pVpD3XJZ4bTy bnV33QfevlKgiiW7mr/kOP6ZRaw/sY3jXoO7HJBXpM7C1ZP5pu9QUI9RaWIh2Mof rKAv+ktNG6QVbH90aqsLdRjYRWiwLSJovFnIMf9Qw63sqf5P/GqKnSXGtwAXDJMR e/F/jLOJeOtUrsbKcQB2lyU92yTvZQkMXRSBiKPoaMzWn5QLaq8= -----END CERTIFICATE-----Generated at Sat Aug 9 10:35:35 2025 by rpki-client