$ rpki-client -vvf repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft File: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft (raw, json) Hash identifier: tjF15cjpaJ788MP/fxIe+3XbQFSZzKtYgyWB1LfuoGg= Subject key identifier: 05:BA:8C:A3:A8:E5:31:58:2B:FC:EC:DE:DB:12:DC:F8:63:26:DA:C7 Authority key identifier: 6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 Certificate issuer: /CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Certificate serial: 38D694931FD91BA883288575D8543AD1C0C1DC6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft Manifest number: 0213 Signing time: Thu 07 Aug 2025 16:50:51 +0000 Manifest this update: Thu 07 Aug 2025 16:45:51 +0000 Manifest next update: Mon 11 Aug 2025 01:22:51 +0000 Files and hashes: 1: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl (hash: jYDKkfyhA+8HK30agQ7wGGR6PDMLkLLTkSVbCNPNc+o=) 2: 3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa (hash: 8i2rkzBjlPEti5Kr8Zm8/78pVX8xhxtJgE0QaB9hDOo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 01:22:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:d6:94:93:1f:d9:1b:a8:83:28:85:75:d8:54:3a:d1:c0:c1:dc:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Validity Not Before: Aug 7 16:45:51 2025 GMT Not After : Aug 11 01:22:51 2025 GMT Subject: CN=05BA8CA3A8E531582BFCECDEDB12DCF86326DAC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:48:f4:15:19:31:9f:0f:71:2f:32:9b:94:d9: c6:37:6a:d0:ea:01:e7:23:e3:4e:c1:0d:5d:65:75: ef:51:9d:a5:f0:36:82:c7:cd:11:34:01:fb:2e:b1: d4:0a:34:e6:41:78:06:5a:92:7c:95:d5:6c:c9:41: 67:e7:bc:1e:62:77:f6:81:cf:14:8c:c2:b8:0e:89: 10:5b:fe:a1:be:66:7c:45:c7:22:87:93:41:13:31: 7a:d3:07:c5:ef:fd:46:eb:33:da:dc:b9:e0:75:d2: b5:4a:c4:70:0b:db:4f:73:74:7b:3f:d3:d3:1a:8c: 50:cc:48:51:31:bc:70:83:73:c0:c9:9d:06:0b:ec: 2c:ae:5c:a1:e5:0a:17:25:36:f0:34:bc:7b:eb:b2: eb:7c:40:0f:4a:8b:45:e7:32:78:da:2a:b7:6a:5f: a1:27:fa:24:11:b0:6e:16:bc:21:1a:3a:14:0d:11: 80:98:af:77:73:ac:4a:72:e7:e8:fd:f6:a8:a4:62: 1c:7b:fa:f9:21:7a:04:32:17:68:71:7d:9d:ae:e8: 56:38:a7:35:af:c0:68:16:5e:db:ab:19:ec:90:a4: 4b:95:f6:41:fe:79:f9:2e:86:5a:8b:5b:ee:3f:02: b6:ed:e6:f8:75:36:1e:59:4e:8e:10:0a:62:9b:77: 6a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:BA:8C:A3:A8:E5:31:58:2B:FC:EC:DE:DB:12:DC:F8:63:26:DA:C7 X509v3 Authority Key Identifier: keyid:6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:31:ce:c4:98:09:95:2b:dd:1a:0b:e5:32:1b:46:2c:8d:4e: 41:87:0e:ce:29:7a:92:b1:d9:14:a9:4f:3d:34:3a:00:ea:87: 70:de:57:48:c2:78:d6:53:98:82:5f:81:4d:35:9a:0a:3e:bd: f0:36:f6:5a:e6:a5:05:7c:66:08:9a:0d:3a:b5:dc:a3:b1:81: fd:b0:08:96:0b:bf:33:0a:b1:ed:2e:25:3d:ae:a4:67:8f:06: 0c:47:61:c5:64:67:bc:33:45:ba:7f:75:03:1d:a7:a8:68:b4: a5:b0:d1:cb:c6:a5:a0:53:0b:1b:40:c1:79:20:4f:d9:f3:5f: e8:ad:b3:3d:86:20:ec:bd:45:ac:db:4b:05:b7:d3:64:a0:58: bb:49:c6:cd:18:58:1d:06:0c:96:68:ef:5f:a9:42:2e:ff:8d: 59:28:9a:2c:50:83:f9:6a:6d:8e:ec:8c:4a:d0:20:f4:c0:09: dd:66:bc:3d:7d:e5:2f:0d:df:3d:b3:17:5b:14:a3:38:11:a6: 6b:a1:31:d3:17:b6:2d:23:68:c9:11:09:e8:7b:f1:c8:f7:fc: 12:e0:8a:11:51:80:68:58:10:50:08:51:c1:8e:1a:8c:ab:54: 1b:ee:cb:49:d4:4c:1d:6b:7d:e2:8d:f8:c9:ec:17:b0:15:c1: 9d:9a:bb:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUONaUkx/ZG6iDKIV12FQ60cDB3G4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1 RkUwQkUxMTAeFw0yNTA4MDcxNjQ1NTFaFw0yNTA4MTEwMTIyNTFaMDMxMTAvBgNV BAMTKDA1QkE4Q0EzQThFNTMxNTgyQkZDRUNERURCMTJEQ0Y4NjMyNkRBQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCySPQVGTGfD3EvMpuU2cY3atDq Aecj407BDV1lde9RnaXwNoLHzRE0AfsusdQKNOZBeAZaknyV1WzJQWfnvB5id/aB zxSMwrgOiRBb/qG+ZnxFxyKHk0ETMXrTB8Xv/UbrM9rcueB10rVKxHAL209zdHs/ 09MajFDMSFExvHCDc8DJnQYL7CyuXKHlChclNvA0vHvrsut8QA9Ki0XnMnjaKrdq X6En+iQRsG4WvCEaOhQNEYCYr3dzrEpy5+j99qikYhx7+vkhegQyF2hxfZ2u6FY4 pzWvwGgWXturGeyQpEuV9kH+efkuhlqLW+4/Arbt5vh1Nh5ZTo4QCmKbd2pTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBbqMo6jlMVgr/Oze2xLc+GMm2scwHwYDVR0j BBgwFoAUb8hX33/lNQpsBaHxE/PcLl/gvhEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTIzOGE2Mi02YTk2LTQzYmMtODdhZi0wMmRiNjQxZjcxMDkvMC82RkM4NTdERjdG RTUzNTBBNkMwNUExRjExM0YzREMyRTVGRTBCRTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1RkUw QkUxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGEyMzhhNjItNmE5Ni00M2JjLTg3 YWYtMDJkYjY0MWY3MTA5LzAvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RD MkU1RkUwQkUxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACgxzsSYCZUr3RoL5TIbRiyNTkGHDs4pepKx 2RSpTz00OgDqh3DeV0jCeNZTmIJfgU01mgo+vfA29lrmpQV8ZgiaDTq13KOxgf2w CJYLvzMKse0uJT2upGePBgxHYcVkZ7wzRbp/dQMdp6hotKWw0cvGpaBTCxtAwXkg T9nzX+itsz2GIOy9RazbSwW302SgWLtJxs0YWB0GDJZo71+pQi7/jVkomixQg/lq bY7sjErQIPTACd1mvD195S8N3z2zF1sUozgRpmuhMdMXti0jaMkRCeh78cj3/BLg ihFRgGhYEFAIUcGOGoyrVBvuy0nUTB1rfeKN+MnsF7AVwZ2au00= -----END CERTIFICATE-----Generated at Sat Aug 9 14:22:51 2025 by rpki-client