$ rpki-client -vvf repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft File: D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft (raw, json) Hash identifier: 7nVjK+Gb4I6OcVhGXvNNEU8gP1CNp3wCKmkydvcI2AQ= Subject key identifier: E7:FB:38:36:75:0A:91:05:8B:99:D4:74:55:3D:BD:27:D3:31:A0:EB Authority key identifier: D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 Certificate issuer: /CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Certificate serial: 06D2AF5F334CDB7BEECABEA549A53D9D84B965A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft Manifest number: 02C0 Signing time: Tue 05 Aug 2025 10:20:00 +0000 Manifest this update: Tue 05 Aug 2025 10:15:00 +0000 Manifest next update: Fri 08 Aug 2025 12:00:00 +0000 Files and hashes: 1: 3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa (hash: EWRSldncuijDwUH5kmTIxzgLmknYFLpjI5NK+K1R4Fw=) 2: D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl (hash: bfTGmYFuVxFWfXyUZoFK1MeTqqMO544dArJBM4L32mY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:d2:af:5f:33:4c:db:7b:ee:ca:be:a5:49:a5:3d:9d:84:b9:65:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Validity Not Before: Aug 5 10:15:00 2025 GMT Not After : Aug 8 12:00:00 2025 GMT Subject: CN=E7FB3836750A91058B99D474553DBD27D331A0EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f4:f8:c5:87:e9:96:10:9b:e5:7a:20:5b:4e: 71:94:40:7b:4f:a5:27:c1:63:0f:45:13:4f:8f:43: 48:f7:d4:04:aa:69:46:9e:c9:27:74:7d:3d:b7:9a: 54:8d:f3:f5:51:51:8f:3f:b8:89:4b:c4:39:0a:3a: 18:5b:e8:a9:59:08:60:aa:aa:48:02:27:8a:4e:9f: 8b:a4:b8:ca:3b:93:54:98:3d:7e:30:f8:40:fe:a0: 72:69:43:2a:bd:d2:47:92:d8:5f:a2:79:36:d3:ef: ff:0b:07:eb:73:e6:29:ee:7d:48:82:be:8d:18:dc: 08:c8:a2:d8:a6:14:cc:a6:62:b2:36:4a:56:2a:a3: f4:73:95:5b:a6:63:b1:2c:b0:01:ac:80:cc:83:50: 63:17:de:13:d6:23:97:d1:7f:05:a0:4e:9a:76:2d: 90:1a:e6:08:5a:3c:44:ea:88:c7:78:24:58:3e:59: 84:f7:a0:82:c4:a0:8f:48:cd:d4:7f:93:8d:03:f0: 75:cb:20:90:7c:f6:00:a4:4b:96:da:1d:5d:82:91: 4e:97:5e:10:92:c1:ad:31:59:ad:a0:29:56:f6:4d: fa:76:5d:d0:b6:7d:8c:fd:d1:df:2e:ef:54:6b:f5: 6f:9b:ef:c5:20:a3:97:0b:44:ce:7c:97:ca:79:fa: c3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FB:38:36:75:0A:91:05:8B:99:D4:74:55:3D:BD:27:D3:31:A0:EB X509v3 Authority Key Identifier: keyid:D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ec:a3:c8:27:a8:ab:ac:3c:78:88:fa:22:18:a0:f4:d4:59: 66:1f:1c:98:b6:3c:51:69:0b:5c:e3:2a:6f:58:e1:04:a4:4a: cc:f4:18:4a:17:c2:82:63:e6:4c:e9:77:57:0f:cc:fa:85:4a: 29:93:84:e8:c9:19:be:8b:6d:63:be:11:52:95:41:cd:a9:21: b6:65:8c:47:db:80:93:fd:0b:56:29:80:ec:b9:6d:8f:04:4d: a6:90:92:ac:2d:41:e9:2a:f8:03:b8:8d:9c:32:f3:22:dc:15: 5c:c2:5d:2e:57:fd:34:18:6c:11:91:b3:87:47:d4:88:84:de: c5:0a:bc:48:08:c0:34:92:db:50:6e:ea:41:bb:50:e2:cc:00: 87:b4:90:21:50:2d:de:92:a7:cf:7c:03:20:f6:9f:88:40:f2: d4:f6:75:07:55:17:6c:b6:15:6f:49:38:36:55:4c:a8:6b:d6: b2:cb:5e:3a:51:65:22:d9:dd:e0:10:16:90:60:b2:0e:55:69: ad:87:a8:ef:97:4e:c4:59:1f:e8:3e:86:e6:e9:25:29:a7:b2: 11:15:97:e2:93:85:23:06:59:47:bb:97:29:e6:fb:67:eb:82: 69:2e:04:86:05:a8:b3:23:d0:e9:72:27:d2:f7:db:40:89:8a: 5f:7d:04:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBtKvXzNM23vuyr6lSaU9nYS5ZaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVB M0ZDRUI2NjAeFw0yNTA4MDUxMDE1MDBaFw0yNTA4MDgxMjAwMDBaMDMxMTAvBgNV BAMTKEU3RkIzODM2NzUwQTkxMDU4Qjk5RDQ3NDU1M0RCRDI3RDMzMUEwRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ9PjFh+mWEJvleiBbTnGUQHtP pSfBYw9FE0+PQ0j31ASqaUaeySd0fT23mlSN8/VRUY8/uIlLxDkKOhhb6KlZCGCq qkgCJ4pOn4ukuMo7k1SYPX4w+ED+oHJpQyq90keS2F+ieTbT7/8LB+tz5inufUiC vo0Y3AjIotimFMymYrI2SlYqo/RzlVumY7EssAGsgMyDUGMX3hPWI5fRfwWgTpp2 LZAa5ghaPETqiMd4JFg+WYT3oILEoI9IzdR/k40D8HXLIJB89gCkS5baHV2CkU6X XhCSwa0xWa2gKVb2Tfp2XdC2fYz90d8u71Rr9W+b78Ugo5cLRM58l8p5+sObAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5/s4NnUKkQWLmdR0VT29J9MxoOswHwYDVR0j BBgwFoAU1sHxPGfNAlRd66qEbrKPbqP862YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2EyZTBkYi1lMjkzLTQxYzUtODU4My0zODAxNTc1ODQyMWMvMC9ENkMxRjEzQzY3 Q0QwMjU0NURFQkFBODQ2RUIyOEY2RUEzRkNFQjY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVBM0ZD RUI2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NhMmUwZGItZTI5My00MWM1LTg1 ODMtMzgwMTU3NTg0MjFjLzAvRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhG NkVBM0ZDRUI2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFzso8gnqKusPHiI+iIYoPTUWWYfHJi2PFFp C1zjKm9Y4QSkSsz0GEoXwoJj5kzpd1cPzPqFSimThOjJGb6LbWO+EVKVQc2pIbZl jEfbgJP9C1YpgOy5bY8ETaaQkqwtQekq+AO4jZwy8yLcFVzCXS5X/TQYbBGRs4dH 1IiE3sUKvEgIwDSS21Bu6kG7UOLMAIe0kCFQLd6Sp898AyD2n4hA8tT2dQdVF2y2 FW9JODZVTKhr1rLLXjpRZSLZ3eAQFpBgsg5Vaa2HqO+XTsRZH+g+hubpJSmnshEV l+KThSMGWUe7lynm+2frgmkuBIYFqLMj0OlyJ9L320CJil99BOk= -----END CERTIFICATE-----Generated at Thu Aug 7 05:02:17 2025 by rpki-client