$ rpki-client -vvf repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft File: 6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft (raw, json) Hash identifier: 4WY7AiHS5wo9vhzXRhH2RPaIahtyClnMN0PEg+4idGE= Subject key identifier: F2:6E:53:C5:B8:C4:7C:3F:06:F9:F0:45:D5:D2:68:CB:44:90:FD:93 Authority key identifier: 6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8 Certificate issuer: /CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8 Certificate serial: 7DB89AFF3A1FA87C396CC6DE3AEFC2F2C21D55FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft Manifest number: 0441 Signing time: Tue 05 Aug 2025 21:41:22 +0000 Manifest this update: Tue 05 Aug 2025 21:36:21 +0000 Manifest next update: Sat 09 Aug 2025 02:08:21 +0000 Files and hashes: 1: 3130332e34322e3131392e302f32342d3234203d3e203234353139.roa (hash: tlMLEqQhJ1FXYwOLCCvAFRe52QGRRF02EIII3xVkWN0=) 2: 3130332e34322e3131362e302f32332d3233203d3e20313431393638.roa (hash: deSk7dhV94Q/bI20PuBTuLDi+FeXmglvV/8pK3EJY0A=) 3: 3130332e34322e3131372e302f32342d3234203d3e20313431393638.roa (hash: crt2F/X+RQnPJrrglVZI7zbLddWcN6j7uVz/Xw4zeS8=) 4: 6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl (hash: OzZ/CEYCP8tjWdmFlE36J6KOqGX1NNKxUGGeOvGrh90=) 5: 3130332e34322e3131382e302f32342d3234203d3e203234353139.roa (hash: vCgDnA33NAkXtanYsGnqZiMWsel/bsPJTrf5ZDKywHU=) 6: 3130332e34322e3131382e302f32332d3233203d3e203234353139.roa (hash: HHqxnvo/jJQgCNZXpj544snDh99Z+fGyg/N/7YitJ5U=) 7: 3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa (hash: FZlGjWO2QHYzsNelbvnW9T+cFLiq8WyISsSRf/rM5oc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 02:08:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:b8:9a:ff:3a:1f:a8:7c:39:6c:c6:de:3a:ef:c2:f2:c2:1d:55:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8 Validity Not Before: Aug 5 21:36:21 2025 GMT Not After : Aug 9 02:08:21 2025 GMT Subject: CN=F26E53C5B8C47C3F06F9F045D5D268CB4490FD93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3f:39:9f:4f:79:95:2e:6c:7a:34:6b:e2:10: 4a:37:11:ed:43:bb:e9:10:70:f1:08:2c:86:13:2e: 0c:29:df:e1:13:8c:28:3e:e2:1d:ff:87:9e:15:7f: 5a:24:9b:0c:4c:62:e7:e3:00:fb:32:6f:be:f2:0b: 24:38:f6:18:31:be:29:44:6e:b4:6f:fa:20:1e:03: 22:af:09:be:d3:67:08:df:08:f5:73:94:9b:14:79: b0:cb:d8:c6:44:6c:da:9f:5b:52:52:2f:9e:76:8e: 59:d2:e1:82:5e:27:6f:c1:a6:ea:3f:d8:dc:0d:7a: f5:08:8f:91:a7:2d:93:69:57:12:eb:68:4e:84:a3: cf:c4:48:2a:55:cd:c1:60:87:f1:6c:ad:f8:da:f1: f8:70:b0:94:7b:cb:5b:21:54:df:f7:28:eb:57:f3: cd:ed:0a:d4:32:5a:1e:6e:aa:da:72:ec:6a:18:23: e1:d7:87:4f:58:ca:cb:bf:6f:50:42:fe:9b:75:68: 06:e4:6d:d5:b1:2c:0a:9b:f0:13:dd:f8:01:40:12: 9a:2c:e9:4e:0a:69:ed:ba:a0:08:7b:7c:e5:60:ec: 4f:7b:d2:f1:54:34:73:4e:1f:fa:83:1e:fe:0e:e0: d1:22:d3:6d:ee:8e:59:55:42:72:8e:59:be:f7:fb: 81:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:6E:53:C5:B8:C4:7C:3F:06:F9:F0:45:D5:D2:68:CB:44:90:FD:93 X509v3 Authority Key Identifier: keyid:6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:9f:05:48:5a:66:c0:24:a0:90:43:77:6b:b0:34:4a:24:59: 5a:5e:12:5c:a7:51:4e:b8:a7:0f:9e:52:4a:a4:77:78:a8:44: e7:f7:28:1a:3e:68:f3:d8:4a:be:25:e6:57:e6:f4:c7:37:6e: a2:15:53:a9:26:b1:d0:9f:9d:5c:8b:39:47:af:da:90:ce:22: 4e:4f:6f:12:e7:df:e2:ce:e5:5b:3f:65:ad:8d:1f:6a:ee:7b: b5:c6:9d:8c:ec:d4:3d:4b:c4:c5:8b:16:83:72:68:8f:d3:fa: 44:66:75:87:1a:92:51:c9:6d:5f:80:86:bb:f2:24:f0:f4:f2: 20:b2:18:c6:7a:64:44:91:b2:ed:6d:d6:95:1b:88:85:f7:05: 0e:06:67:24:97:ba:7c:dd:df:e1:b8:1d:a2:76:90:c5:d5:ec: 30:e0:cc:ca:a7:ff:d0:bc:33:ff:de:09:ee:07:ea:de:11:49: ed:31:89:92:b6:6d:80:b9:d8:b3:8a:06:4a:23:87:43:ab:ce: 20:6c:c9:94:f3:82:3d:3f:5f:01:34:ef:b9:25:6e:9e:c9:5a: 2e:bc:09:b8:06:43:9b:5e:7f:d3:ea:5b:36:46:3e:80:62:e7: 4a:ee:2a:b0:1b:8e:86:b2:ae:47:0c:eb:25:ce:45:51:03:63: 4f:24:e8:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfbia/zofqHw5bMbeOu/C8sIdVf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY0ODVBREFEMjA2ODMzN0ZERjhCMjhGRjAwN0JDREM1 QjQ5OTlEODAeFw0yNTA4MDUyMTM2MjFaFw0yNTA4MDkwMjA4MjFaMDMxMTAvBgNV BAMTKEYyNkU1M0M1QjhDNDdDM0YwNkY5RjA0NUQ1RDI2OENCNDQ5MEZEOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSPzmfT3mVLmx6NGviEEo3Ee1D u+kQcPEILIYTLgwp3+ETjCg+4h3/h54Vf1okmwxMYufjAPsyb77yCyQ49hgxvilE brRv+iAeAyKvCb7TZwjfCPVzlJsUebDL2MZEbNqfW1JSL552jlnS4YJeJ2/Bpuo/ 2NwNevUIj5GnLZNpVxLraE6Eo8/ESCpVzcFgh/Fsrfja8fhwsJR7y1shVN/3KOtX 883tCtQyWh5uqtpy7GoYI+HXh09Yysu/b1BC/pt1aAbkbdWxLAqb8BPd+AFAEpos 6U4Kae26oAh7fOVg7E970vFUNHNOH/qDHv4O4NEi023ujllVQnKOWb73+4HpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8m5TxbjEfD8G+fBF1dJoy0SQ/ZMwHwYDVR0j BBgwFoAUb0ha2tIGgzf9+LKP8Ae83FtJmdgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjU4OTM0ZC0xYjAwLTQ0ODktOTJlZC0xY2E2ZGM0YjI5MGYvMC82RjQ4NUFEQUQy MDY4MzM3RkRGOEIyOEZGMDA3QkNEQzVCNDk5OUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkY0ODVBREFEMjA2ODMzN0ZERjhCMjhGRjAwN0JDREM1QjQ5 OTlEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY1ODkzNGQtMWIwMC00NDg5LTky ZWQtMWNhNmRjNGIyOTBmLzAvNkY0ODVBREFEMjA2ODMzN0ZERjhCMjhGRjAwN0JD REM1QjQ5OTlEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADifBUhaZsAkoJBDd2uwNEokWVpeElynUU64 pw+eUkqkd3ioROf3KBo+aPPYSr4l5lfm9Mc3bqIVU6kmsdCfnVyLOUev2pDOIk5P bxLn3+LO5Vs/Za2NH2rue7XGnYzs1D1LxMWLFoNyaI/T+kRmdYcaklHJbV+Ahrvy JPD08iCyGMZ6ZESRsu1t1pUbiIX3BQ4GZySXunzd3+G4HaJ2kMXV7DDgzMqn/9C8 M//eCe4H6t4RSe0xiZK2bYC52LOKBkojh0OrziBsyZTzgj0/XwE077klbp7JWi68 CbgGQ5tef9PqWzZGPoBi50ruKrAbjoayrkcM6yXORVEDY08k6LE= -----END CERTIFICATE-----Generated at Fri Aug 8 00:01:12 2025 by rpki-client