$ rpki-client -vvf repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft File: 6D958AAEBD8946E47C968284B2652E02A2017E9E.mft (raw, json) Hash identifier: IKwxtiJmew83PWJi3w5LU4acYcFYbSPobTLX32pKG78= Subject key identifier: D2:CE:21:42:F1:4F:70:AF:87:8B:1D:0F:D4:0D:FB:79:53:6D:AF:EA Authority key identifier: 6D:95:8A:AE:BD:89:46:E4:7C:96:82:84:B2:65:2E:02:A2:01:7E:9E Certificate issuer: /CN=6D958AAEBD8946E47C968284B2652E02A2017E9E Certificate serial: 569E2032A30CAE69DE72A38DF80E83B5D6CFB24D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft Manifest number: 018F Signing time: Fri 08 Aug 2025 11:00:04 +0000 Manifest this update: Fri 08 Aug 2025 10:55:04 +0000 Manifest next update: Mon 11 Aug 2025 14:27:04 +0000 Files and hashes: 1: 6D958AAEBD8946E47C968284B2652E02A2017E9E.crl (hash: 7dnQ7FWs0VsNX/Tgx5+EmZgoMx/YvEk22+I82OiCPJY=) 2: 3130332e3136372e3135362e302f32342d3234203d3e20313530353534.roa (hash: 80t5eYSm2/YNhAieXcls0z7n1huVJvGeox5Fv2BAMW4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.crl rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:9e:20:32:a3:0c:ae:69:de:72:a3:8d:f8:0e:83:b5:d6:cf:b2:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D958AAEBD8946E47C968284B2652E02A2017E9E Validity Not Before: Aug 8 10:55:04 2025 GMT Not After : Aug 11 14:27:04 2025 GMT Subject: CN=D2CE2142F14F70AF878B1D0FD40DFB79536DAFEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:64:98:35:8d:5d:ab:e5:42:54:17:a9:c8:5c: fe:74:db:a9:ea:c7:c8:ac:05:5f:2f:ff:d2:91:a6: d4:c1:21:ef:96:cf:c1:e5:0c:2f:0e:6f:ae:fb:7e: 98:e2:37:5e:f1:e5:40:4b:73:77:93:8f:f9:aa:f7: 83:9c:6a:66:e0:3d:c7:96:50:fa:f3:7d:20:e9:a4: e5:32:d2:24:a6:0e:84:e9:b7:89:6a:2a:a4:5e:d0: cc:77:36:90:e0:de:78:93:81:20:5f:42:c4:2b:53: ff:cc:5e:44:41:cc:3c:9a:b8:80:62:c5:a5:1f:31: d8:36:07:4e:53:f1:30:a4:3f:6e:71:e8:f4:a4:03: d7:ef:46:e1:97:e2:c3:e8:ca:8a:41:f4:f5:03:f5: ec:89:8b:f3:bb:99:cb:d5:8b:89:5c:15:d7:b1:83: 72:92:ed:99:10:5e:77:86:d6:bb:73:05:98:63:16: 58:13:03:1f:82:4e:21:dc:d6:7f:1f:c4:5b:35:85: 5e:33:98:ad:23:8e:a6:50:ef:d7:67:a7:d5:82:fb: ac:e3:37:f0:56:50:eb:2c:d9:f4:93:76:a4:58:8c: 4d:db:f6:77:0f:a5:3b:02:be:9c:a9:ec:e2:96:1a: 04:13:6f:e8:4e:4b:dc:34:7f:f3:7b:b2:e7:79:bb: 13:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CE:21:42:F1:4F:70:AF:87:8B:1D:0F:D4:0D:FB:79:53:6D:AF:EA X509v3 Authority Key Identifier: keyid:6D:95:8A:AE:BD:89:46:E4:7C:96:82:84:B2:65:2E:02:A2:01:7E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:90:00:96:fa:ac:24:f8:a6:92:29:5a:4e:5d:9c:c9:dc:2c: ac:46:4d:2f:02:bf:56:1e:c1:32:9c:f1:79:1a:19:31:ff:20: 59:1e:fd:e3:d5:66:e6:03:0f:3e:fc:21:62:9a:3e:6e:ab:a6: 9d:1f:2c:18:fe:9d:ad:08:d8:4d:1b:fd:2a:db:9c:02:df:4b: 94:08:fc:29:55:79:a7:dd:2a:5a:cf:00:8c:a5:d4:09:a9:ec: 0c:26:10:cf:ef:be:c2:f5:00:a9:c1:02:47:45:e8:8b:a4:0f: f1:9d:4b:46:53:fd:f9:e1:58:af:af:22:e1:e2:ee:f4:f1:3a: ca:0a:8a:01:e1:d8:c5:c4:8a:e7:bf:df:02:7a:37:4d:56:e3: 54:8b:4f:23:7f:58:7d:98:c5:64:ad:66:a4:50:62:e2:98:b6: 22:2f:38:fe:0d:96:06:8b:c5:8b:47:7f:7c:3b:56:97:8f:f1: 03:9a:0f:ce:11:2e:a5:39:17:9d:7e:78:c1:2f:c5:29:35:fd: e5:82:cf:6c:79:61:d7:ac:a5:cd:e2:09:da:92:c2:0c:aa:b9: 00:2a:85:01:d8:68:48:79:e3:c2:fd:45:11:db:51:84:e3:9c: 18:97:2c:4a:70:36:51:22:2f:1b:31:0e:9d:cb:e7:26:de:9a: b4:34:26:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVp4gMqMMrmnecqON+A6DtdbPsk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJFMDJB MjAxN0U5RTAeFw0yNTA4MDgxMDU1MDRaFw0yNTA4MTExNDI3MDRaMDMxMTAvBgNV BAMTKEQyQ0UyMTQyRjE0RjcwQUY4NzhCMUQwRkQ0MERGQjc5NTM2REFGRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDZJg1jV2r5UJUF6nIXP5026nq x8isBV8v/9KRptTBIe+Wz8HlDC8Ob677fpjiN17x5UBLc3eTj/mq94OcambgPceW UPrzfSDppOUy0iSmDoTpt4lqKqRe0Mx3NpDg3niTgSBfQsQrU//MXkRBzDyauIBi xaUfMdg2B05T8TCkP25x6PSkA9fvRuGX4sPoyopB9PUD9eyJi/O7mcvVi4lcFdex g3KS7ZkQXneG1rtzBZhjFlgTAx+CTiHc1n8fxFs1hV4zmK0jjqZQ79dnp9WC+6zj N/BWUOss2fSTdqRYjE3b9ncPpTsCvpyp7OKWGgQTb+hOS9w0f/N7sud5uxPvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0s4hQvFPcK+Hix0P1A37eVNtr+owHwYDVR0j BBgwFoAUbZWKrr2JRuR8loKEsmUuAqIBfp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTgwMzEyNS1kNzc3LTQwNTYtODQ0ZC04ZDFiZWZkMDE2M2QvMC82RDk1OEFBRUJE ODk0NkU0N0M5NjgyODRCMjY1MkUwMkEyMDE3RTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJFMDJBMjAx N0U5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE4MDMxMjUtZDc3Ny00MDU2LTg0 NGQtOGQxYmVmZDAxNjNkLzAvNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJF MDJBMjAxN0U5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+QAJb6rCT4ppIpWk5dnMncLKxGTS8Cv1Ye wTKc8XkaGTH/IFke/ePVZuYDDz78IWKaPm6rpp0fLBj+na0I2E0b/SrbnALfS5QI /ClVeafdKlrPAIyl1Amp7AwmEM/vvsL1AKnBAkdF6IukD/GdS0ZT/fnhWK+vIuHi 7vTxOsoKigHh2MXEiue/3wJ6N01W41SLTyN/WH2YxWStZqRQYuKYtiIvOP4NlgaL xYtHf3w7VpeP8QOaD84RLqU5F51+eMEvxSk1/eWCz2x5Ydespc3iCdqSwgyquQAq hQHYaEh548L9RRHbUYTjnBiXLEpwNlEiLxsxDp3L5ybemrQ0Jr8= -----END CERTIFICATE-----Generated at Fri Aug 8 12:54:08 2025 by rpki-client