$ rpki-client -vvf repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft File: 6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft (raw, json) Hash identifier: FJNst77nAeyyLWil0/Vbjdf0JCCAXz8vSkvVmHycuOI= Subject key identifier: 40:3E:29:65:AD:4A:AB:C5:28:07:E3:9F:D6:F9:5A:52:F2:72:F3:86 Authority key identifier: 6D:39:05:08:CE:26:22:C5:BA:AA:3B:EE:95:AA:61:27:FE:5B:E5:F4 Certificate issuer: /CN=6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4 Certificate serial: 72AB97271C2C027B7D1E141B9F64CC4C69315E20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft Manifest number: 029C Signing time: Fri 08 Aug 2025 02:31:23 +0000 Manifest this update: Fri 08 Aug 2025 02:26:23 +0000 Manifest next update: Mon 11 Aug 2025 08:22:23 +0000 Files and hashes: 1: 3130332e3137342e31362e302f32342d3234203d3e20313437303933.roa (hash: KF7nH5pW5/ZblyJqWbcvRko2OuzeK910SdQ0o3we0k8=) 2: 3130332e3137342e31372e302f32342d3234203d3e20313437303933.roa (hash: 1qisgGmZ4ZLz1lme/uSxLcvbwX2pXl2QEYezWVi61a0=) 3: 6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.crl (hash: PUEqyX3Yw0jc+zI9sMs0ZG7xnJ5gmRFnz4ifVe3iyn0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.crl rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 08:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:ab:97:27:1c:2c:02:7b:7d:1e:14:1b:9f:64:cc:4c:69:31:5e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4 Validity Not Before: Aug 8 02:26:23 2025 GMT Not After : Aug 11 08:22:23 2025 GMT Subject: CN=403E2965AD4AABC52807E39FD6F95A52F272F386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7f:e4:f9:93:ce:60:64:39:e4:85:fc:49:6c: 01:2a:52:fb:69:65:04:b7:9a:ef:1e:a6:a2:f2:20: 8c:79:f6:85:20:f9:fd:91:d2:ae:1f:e6:43:b5:96: e1:df:ab:a7:a3:b1:a5:cf:2e:96:43:60:cb:1a:73: 53:16:92:16:95:8d:de:33:df:28:99:21:fb:3d:85: 78:78:d2:c9:1d:03:5b:7e:56:b1:d9:cd:66:41:1d: 2b:7c:45:2a:cb:51:13:03:32:af:27:7f:6a:a9:48: b4:85:2e:3d:9e:97:6b:a7:d3:23:1b:27:a6:e7:13: 86:aa:71:66:4a:f5:b1:ca:9b:0c:b8:aa:10:c3:f0: 77:e7:d4:0d:17:bf:53:d7:95:b9:17:19:cf:98:c6: ac:7e:3c:07:69:cb:00:af:74:60:f3:b2:ae:0d:62: e4:93:b2:30:2c:d7:bf:2c:45:ed:71:72:cf:e8:29: 21:54:03:ac:78:ba:9c:51:02:2b:4a:08:62:bf:90: 42:58:f9:35:24:09:db:68:ba:69:f3:61:e1:81:80: 5c:51:4e:fe:41:f9:e9:95:3e:d5:41:14:e2:90:b7: f5:da:d3:26:29:b9:97:8c:be:8b:1f:36:14:36:48: b9:87:41:10:17:a5:3b:8e:51:f4:e8:c5:68:47:38: 01:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3E:29:65:AD:4A:AB:C5:28:07:E3:9F:D6:F9:5A:52:F2:72:F3:86 X509v3 Authority Key Identifier: keyid:6D:39:05:08:CE:26:22:C5:BA:AA:3B:EE:95:AA:61:27:FE:5B:E5:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:d3:49:3b:ea:09:0b:0b:12:74:7b:06:71:85:bc:ed:9e:b0: 1d:b3:a8:b0:3f:30:74:36:60:25:28:c1:ab:d5:55:5d:8a:e6: 32:ef:8f:f8:c9:6c:3e:82:54:88:38:1c:e8:0a:a4:47:1e:c4: f3:e3:cb:cd:58:f0:bd:f1:6c:e6:e5:87:06:5e:11:19:50:c3: ec:11:aa:27:81:02:03:c2:4e:26:9e:16:64:1d:25:9f:9e:3b: 30:96:db:d0:ab:dd:5b:3b:17:cd:91:f3:c5:96:09:42:fb:aa: 23:94:55:fc:bf:18:3c:44:31:e3:0d:7f:90:d6:86:24:96:57: aa:fc:d5:b6:25:c0:2e:1c:94:95:bc:1c:5b:ff:48:0e:f4:e4: e3:f0:b5:f9:c2:f1:94:8e:eb:40:3d:96:f8:de:4e:cb:ee:40: 9c:ff:6e:3b:2a:a0:f0:a9:07:52:ad:1c:d0:77:04:cf:65:cd: 35:e2:5a:69:e6:4b:4b:e4:5a:ce:77:ba:34:79:f9:de:af:2e: d2:bc:d0:7e:d8:fa:80:4c:68:07:5f:fe:8f:d9:fb:40:9f:1b: 1a:96:dc:ee:73:f4:f0:4b:a4:56:1e:67:56:6c:fa:6b:7b:ef: 35:07:c7:8a:08:45:e7:a3:cf:a7:24:76:d3:12:f2:14:fc:74: f8:25:54:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcquXJxwsAnt9HhQbn2TMTGkxXiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQzOTA1MDhDRTI2MjJDNUJBQUEzQkVFOTVBQTYxMjdG RTVCRTVGNDAeFw0yNTA4MDgwMjI2MjNaFw0yNTA4MTEwODIyMjNaMDMxMTAvBgNV BAMTKDQwM0UyOTY1QUQ0QUFCQzUyODA3RTM5RkQ2Rjk1QTUyRjI3MkYzODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDf+T5k85gZDnkhfxJbAEqUvtp ZQS3mu8epqLyIIx59oUg+f2R0q4f5kO1luHfq6ejsaXPLpZDYMsac1MWkhaVjd4z 3yiZIfs9hXh40skdA1t+VrHZzWZBHSt8RSrLURMDMq8nf2qpSLSFLj2el2un0yMb J6bnE4aqcWZK9bHKmwy4qhDD8Hfn1A0Xv1PXlbkXGc+Yxqx+PAdpywCvdGDzsq4N YuSTsjAs178sRe1xcs/oKSFUA6x4upxRAitKCGK/kEJY+TUkCdtoumnzYeGBgFxR Tv5B+emVPtVBFOKQt/Xa0yYpuZeMvosfNhQ2SLmHQRAXpTuOUfToxWhHOAGpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQD4pZa1Kq8UoB+Of1vlaUvJy84YwHwYDVR0j BBgwFoAUbTkFCM4mIsW6qjvulaphJ/5b5fQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTQ4MmFkYS1kMGM4LTQ2NGItYTAwNy04NTE5NDg5Y2IxYzQvMC82RDM5MDUwOENF MjYyMkM1QkFBQTNCRUU5NUFBNjEyN0ZFNUJFNUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQzOTA1MDhDRTI2MjJDNUJBQUEzQkVFOTVBQTYxMjdGRTVC RTVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U0ODJhZGEtZDBjOC00NjRiLWEw MDctODUxOTQ4OWNiMWM0LzAvNkQzOTA1MDhDRTI2MjJDNUJBQUEzQkVFOTVBQTYx MjdGRTVCRTVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzTSTvqCQsLEnR7BnGFvO2esB2zqLA/MHQ2 YCUowavVVV2K5jLvj/jJbD6CVIg4HOgKpEcexPPjy81Y8L3xbOblhwZeERlQw+wR qieBAgPCTiaeFmQdJZ+eOzCW29Cr3Vs7F82R88WWCUL7qiOUVfy/GDxEMeMNf5DW hiSWV6r81bYlwC4clJW8HFv/SA705OPwtfnC8ZSO60A9lvjeTsvuQJz/bjsqoPCp B1KtHNB3BM9lzTXiWmnmS0vkWs53ujR5+d6vLtK80H7Y+oBMaAdf/o/Z+0CfGxqW 3O5z9PBLpFYeZ1Zs+mt77zUHx4oIReejz6ckdtMS8hT8dPglVAI= -----END CERTIFICATE-----Generated at Sat Aug 9 22:38:38 2025 by rpki-client