$ rpki-client -vvf repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft File: B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft (raw, json) Hash identifier: 2ENvBUOUDywRXRHGgHvYdXk0soFnJxF4Arvq+YZ8tQk= Subject key identifier: AC:07:D7:56:7B:CA:3E:8D:8C:98:95:62:FC:C8:7C:7E:1C:D5:F4:38 Authority key identifier: B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 Certificate issuer: /CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Certificate serial: 7B1711AEA96DF4DCE78FA31DB2286C052956BC35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft Manifest number: 04E2 Signing time: Tue 17 Jun 2025 06:01:22 +0000 Manifest this update: Tue 17 Jun 2025 05:56:22 +0000 Manifest next update: Fri 20 Jun 2025 11:05:22 +0000 Files and hashes: 1: 3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (hash: Zl03XVx57nbxitWYw7MeSszUElsg5oZ5jVn5EskWk+g=) 2: B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl (hash: bV8gT7K9hDl9MG7xkCFv5Enk87k7uT5x/Jd3e9JUHPE=) 3: 323030313a6466363a343530303a3a2f34382d3438203d3e20313338303539.roa (hash: IoCq5Fr7ucJSiJXgyl0hLajgLtZdo657+jXfL09lCzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 11:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:17:11:ae:a9:6d:f4:dc:e7:8f:a3:1d:b2:28:6c:05:29:56:bc:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Validity Not Before: Jun 17 05:56:22 2025 GMT Not After : Jun 20 11:05:22 2025 GMT Subject: CN=AC07D7567BCA3E8D8C989562FCC87C7E1CD5F438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:af:9e:31:77:9b:b7:64:c8:e2:a0:93:e0:32: 91:6d:75:d0:c2:c9:89:9c:99:df:b1:6b:c8:4d:93: fd:e0:42:2b:94:21:ae:7b:d9:e1:98:96:58:a4:38: 64:f5:3c:15:9a:8c:0b:b6:82:16:71:76:4b:73:7a: f0:00:11:75:d8:c8:48:e6:27:2e:15:bd:e4:38:45: 9c:d6:78:9a:22:52:7b:ea:04:e7:d2:87:5d:80:59: 61:95:bc:ed:3f:23:93:e0:54:02:e8:0e:fc:24:07: be:48:8b:d8:92:75:ca:bb:5d:72:da:44:e5:31:5a: 14:7f:b6:f0:88:3f:d7:03:f9:68:83:7a:91:96:77: 79:44:27:e5:76:17:dc:5b:c0:4c:34:b5:18:af:99: 4f:4f:be:82:5f:18:1c:c5:97:a5:4d:2a:55:2e:d4: 4a:28:5c:14:a4:80:83:1b:67:bf:b7:71:32:9c:41: 51:a1:db:bc:3a:19:8b:84:8d:c6:2c:c9:fe:4e:0b: 45:43:cb:7f:9d:04:ff:8c:c9:37:7e:0e:f1:7e:37: 35:e5:6d:ea:64:56:46:d7:9e:f3:87:04:1e:3c:72: 27:fe:e3:45:ec:4b:9f:a6:5b:8b:9d:f8:c2:cb:a4: 69:7c:27:86:f7:34:3d:8d:c2:03:b3:b0:47:ae:9a: ec:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:07:D7:56:7B:CA:3E:8D:8C:98:95:62:FC:C8:7C:7E:1C:D5:F4:38 X509v3 Authority Key Identifier: keyid:B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:3f:1d:2c:3c:42:c4:3f:03:09:de:0b:f9:a8:91:8d:fa:8b: c7:8f:1f:29:96:42:2c:65:95:0a:91:d3:b7:31:2f:74:1b:ba: 79:70:03:31:8f:79:03:0e:45:24:a9:fa:61:fb:34:b9:76:33: ae:bd:9e:e4:61:55:f7:d5:ce:4f:ba:59:e6:a3:19:32:fb:38: 66:1c:f3:b2:a0:a9:a0:bb:50:fe:fe:08:17:4c:71:a2:4a:b9: 0a:d7:0a:f7:b7:0e:ab:a3:ef:9b:9f:27:ce:cb:79:06:95:55: 57:ce:df:4e:20:2d:88:8e:ae:0c:f4:fc:cc:6f:6f:4d:8d:80: 9e:cb:0d:de:3a:16:67:b4:ad:8d:82:1b:37:e4:0b:73:02:14: 56:c4:d6:b9:02:5a:7e:ce:1f:f3:7c:84:fe:84:69:3c:b3:37: 73:77:2a:65:f3:f4:3d:f2:7e:13:03:1c:bd:ea:98:55:ac:b1: 0f:c5:aa:b5:d8:13:c7:7c:a9:ca:c2:f2:e8:5b:f1:92:4e:71: 08:d5:9d:1a:e6:3b:90:fe:1a:24:92:04:59:2b:f3:27:1b:26: 92:95:a9:4a:4c:01:a6:74:f0:24:7e:75:69:40:a2:36:a0:18: b0:52:a0:f3:f4:db:02:f4:6d:e1:23:a0:bf:58:f1:9a:cd:63: d0:3a:54:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUexcRrqlt9Nznj6MdsihsBSlWvDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZG NERFQzhBNTAeFw0yNTA2MTcwNTU2MjJaFw0yNTA2MjAxMTA1MjJaMDMxMTAvBgNV BAMTKEFDMDdENzU2N0JDQTNFOEQ4Qzk4OTU2MkZDQzg3QzdFMUNENUY0MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKr54xd5u3ZMjioJPgMpFtddDC yYmcmd+xa8hNk/3gQiuUIa572eGYllikOGT1PBWajAu2ghZxdktzevAAEXXYyEjm Jy4VveQ4RZzWeJoiUnvqBOfSh12AWWGVvO0/I5PgVALoDvwkB75Ii9iSdcq7XXLa ROUxWhR/tvCIP9cD+WiDepGWd3lEJ+V2F9xbwEw0tRivmU9PvoJfGBzFl6VNKlUu 1EooXBSkgIMbZ7+3cTKcQVGh27w6GYuEjcYsyf5OC0VDy3+dBP+MyTd+DvF+NzXl bepkVkbXnvOHBB48cif+40XsS5+mW4ud+MLLpGl8J4b3ND2NwgOzsEeumuyfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrAfXVnvKPo2MmJVi/Mh8fhzV9DgwHwYDVR0j BBgwFoAUtoR7kowwgAKC17qOM3SC3/TeyKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2RlZGVkMS1kMTRlLTQxMjMtYjVjOS1jOTNhNTk5N2ZjMzAvMC9CNjg0N0I5MjhD MzA4MDAyODJEN0JBOEUzMzc0ODJERkY0REVDOEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZGNERF QzhBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdkZWRlZDEtZDE0ZS00MTIzLWI1 YzktYzkzYTU5OTdmYzMwLzAvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgy REZGNERFQzhBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQ/HSw8QsQ/AwneC/mokY36i8ePHymWQixl lQqR07cxL3QbunlwAzGPeQMORSSp+mH7NLl2M669nuRhVffVzk+6WeajGTL7OGYc 87KgqaC7UP7+CBdMcaJKuQrXCve3Dquj75ufJ87LeQaVVVfO304gLYiOrgz0/Mxv b02NgJ7LDd46Fme0rY2CGzfkC3MCFFbE1rkCWn7OH/N8hP6EaTyzN3N3KmXz9D3y fhMDHL3qmFWssQ/FqrXYE8d8qcrC8uhb8ZJOcQjVnRrmO5D+GiSSBFkr8ycbJpKV qUpMAaZ08CR+dWlAojagGLBSoPP02wL0beEjoL9Y8ZrNY9A6VK0= -----END CERTIFICATE-----Generated at Tue Jun 17 22:19:47 2025 by rpki-client