$ rpki-client -vvf repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft File: B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft (raw, json) Hash identifier: OEHGaKoVrulrlBdZSA/FHeEjRYxLnRiywo1jnRlRduk= Subject key identifier: 63:F3:31:E7:48:09:51:07:18:26:57:DE:33:1A:AB:F7:1D:3B:52:56 Authority key identifier: B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 Certificate issuer: /CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Certificate serial: 794F6C1238FC6713BFFDE119C55C4F8F9593231D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft Manifest number: 04F9 Signing time: Thu 07 Aug 2025 22:31:22 +0000 Manifest this update: Thu 07 Aug 2025 22:26:22 +0000 Manifest next update: Mon 11 Aug 2025 05:22:22 +0000 Files and hashes: 1: 323030313a6466363a343530303a3a2f34382d3438203d3e20313338303539.roa (hash: IoCq5Fr7ucJSiJXgyl0hLajgLtZdo657+jXfL09lCzQ=) 2: B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl (hash: BOHkEMUdFWDoWUDcuLXR64qlEebVqmztVPlVincCCo4=) 3: 3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (hash: Zl03XVx57nbxitWYw7MeSszUElsg5oZ5jVn5EskWk+g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 05:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:4f:6c:12:38:fc:67:13:bf:fd:e1:19:c5:5c:4f:8f:95:93:23:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Validity Not Before: Aug 7 22:26:22 2025 GMT Not After : Aug 11 05:22:22 2025 GMT Subject: CN=63F331E748095107182657DE331AABF71D3B5256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8e:bd:a2:ae:91:7d:f0:e6:19:6b:35:31:cd: bf:0d:ab:74:11:e9:9a:fc:d6:f4:46:04:f1:c3:4a: 73:92:c9:34:1a:41:89:91:79:12:b9:3c:bf:7c:ef: f4:9c:fe:7e:ec:56:21:64:79:23:1b:3e:49:2c:d7: dd:42:aa:4a:ac:32:1d:a8:95:09:be:05:ec:a2:47: 1a:31:a5:38:9f:bf:b8:e2:c8:b2:bd:1f:4a:c6:6a: 59:ac:d3:c5:24:b9:ec:9a:42:b6:c5:13:64:93:93: c8:1c:b9:eb:62:dc:ff:bf:b0:4d:23:e6:ea:68:8e: 96:84:c9:a9:c9:f6:33:18:ef:f8:83:00:ea:68:62: c0:fd:90:39:8a:5a:e3:53:43:6f:ff:b7:93:3b:3d: dc:21:33:02:d0:5d:3e:63:9d:ba:79:e6:13:b6:8f: 64:94:4e:7f:db:a4:81:cb:98:85:5c:44:29:cc:0c: d1:0c:ee:60:7a:10:17:fd:d8:53:d0:d6:91:59:c7: af:d5:fc:f4:10:bd:fe:5b:93:51:35:5d:78:f7:6a: ac:f7:54:83:48:74:63:d6:a0:19:16:94:c3:a3:fe: ee:fc:c7:d9:32:80:d1:bd:7a:52:38:4b:92:91:12: 60:0a:44:e2:9b:e9:37:09:81:ee:a4:ee:6c:c8:12: 6e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F3:31:E7:48:09:51:07:18:26:57:DE:33:1A:AB:F7:1D:3B:52:56 X509v3 Authority Key Identifier: keyid:B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:11:00:8c:a5:d3:01:b1:6c:87:56:a0:bc:6e:d6:ba:ea:62: da:38:fe:b0:a9:08:80:38:55:fd:e5:f7:49:21:98:9f:9e:bd: 0a:24:d8:6f:31:aa:a1:76:47:58:2a:64:9c:19:f6:9a:d0:f4: de:52:31:33:87:11:7f:b5:e6:f0:96:fb:ed:af:be:ab:eb:88: f8:0d:dc:79:00:69:0b:18:d0:57:32:13:ca:45:d3:52:98:84: 7f:b9:14:5c:2b:fd:56:00:d4:d1:8b:6b:a5:35:bd:9e:2a:15: 3c:30:39:6f:81:29:aa:a9:3f:f7:f3:28:53:dd:ba:15:83:a5: 7c:5b:4d:6b:bc:68:61:bb:58:c9:b2:4c:57:78:23:79:89:60: af:c0:9d:7d:b2:03:0d:af:d9:97:e0:a6:96:0d:84:a3:45:bf: 58:4c:a6:73:b5:bb:9e:4c:29:38:6f:24:80:d9:c0:e9:8f:8d: ef:c6:3a:b0:d1:0c:e0:0b:26:92:de:c5:c9:3f:6f:13:ff:88: 98:41:e4:5d:f6:89:2f:f7:06:e5:83:ff:16:b8:0e:be:5e:61: 33:62:05:d5:19:85:fd:6a:04:ce:6e:d0:c9:fd:4e:db:46:ac: 50:5e:aa:8e:3f:ed:13:b8:0a:d3:90:95:c0:51:3b:d6:03:11: 8f:67:bd:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeU9sEjj8ZxO//eEZxVxPj5WTIx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZG NERFQzhBNTAeFw0yNTA4MDcyMjI2MjJaFw0yNTA4MTEwNTIyMjJaMDMxMTAvBgNV BAMTKDYzRjMzMUU3NDgwOTUxMDcxODI2NTdERTMzMUFBQkY3MUQzQjUyNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/jr2irpF98OYZazUxzb8Nq3QR 6Zr81vRGBPHDSnOSyTQaQYmReRK5PL987/Sc/n7sViFkeSMbPkks191CqkqsMh2o lQm+BeyiRxoxpTifv7jiyLK9H0rGalms08UkueyaQrbFE2STk8gcueti3P+/sE0j 5upojpaEyanJ9jMY7/iDAOpoYsD9kDmKWuNTQ2//t5M7PdwhMwLQXT5jnbp55hO2 j2SUTn/bpIHLmIVcRCnMDNEM7mB6EBf92FPQ1pFZx6/V/PQQvf5bk1E1XXj3aqz3 VINIdGPWoBkWlMOj/u78x9kygNG9elI4S5KREmAKROKb6TcJge6k7mzIEm7ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY/Mx50gJUQcYJlfeMxqr9x07UlYwHwYDVR0j BBgwFoAUtoR7kowwgAKC17qOM3SC3/TeyKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2RlZGVkMS1kMTRlLTQxMjMtYjVjOS1jOTNhNTk5N2ZjMzAvMC9CNjg0N0I5MjhD MzA4MDAyODJEN0JBOEUzMzc0ODJERkY0REVDOEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZGNERF QzhBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdkZWRlZDEtZDE0ZS00MTIzLWI1 YzktYzkzYTU5OTdmYzMwLzAvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgy REZGNERFQzhBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0RAIyl0wGxbIdWoLxu1rrqYto4/rCpCIA4 Vf3l90khmJ+evQok2G8xqqF2R1gqZJwZ9prQ9N5SMTOHEX+15vCW++2vvqvriPgN 3HkAaQsY0FcyE8pF01KYhH+5FFwr/VYA1NGLa6U1vZ4qFTwwOW+BKaqpP/fzKFPd uhWDpXxbTWu8aGG7WMmyTFd4I3mJYK/AnX2yAw2v2ZfgppYNhKNFv1hMpnO1u55M KThvJIDZwOmPje/GOrDRDOALJpLexck/bxP/iJhB5F32iS/3BuWD/xa4Dr5eYTNi BdUZhf1qBM5u0Mn9TttGrFBeqo4/7RO4CtOQlcBRO9YDEY9nvWQ= -----END CERTIFICATE-----Generated at Sat Aug 9 05:34:51 2025 by rpki-client