$ rpki-client -vvf repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft File: 6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft (raw, json) Hash identifier: d2GVXwvvSAODYK6EdHEVxT04MhRv++YeA7TbZGk9org= Subject key identifier: BD:B8:85:C7:99:CC:68:AF:D2:0D:9E:A9:DA:99:EF:1B:21:23:D3:8F Authority key identifier: 6B:FD:65:6A:9F:A6:3F:B8:98:16:B1:7C:CE:D2:83:2B:43:FE:41:CD Certificate issuer: /CN=6BFD656A9FA63FB89816B17CCED2832B43FE41CD Certificate serial: 679997D629CA5EFB44CC4EA67FF2AECBD7A07ECA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft Manifest number: FF Signing time: Tue 05 Aug 2025 21:11:26 +0000 Manifest this update: Tue 05 Aug 2025 21:06:25 +0000 Manifest next update: Sat 09 Aug 2025 05:39:25 +0000 Files and hashes: 1: 323030313a6466333a356334303a3a2f34382d3438203d3e20313431313236.roa (hash: QBBO/FoYTyAYgTzseCUJPqnk8CnediRAVVQ9iko63Nk=) 2: 6BFD656A9FA63FB89816B17CCED2832B43FE41CD.crl (hash: Dm43KgKrCehG8lHc0icDbEdXv0RKh8RZW9LbaOOl73A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.crl rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 05:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:99:97:d6:29:ca:5e:fb:44:cc:4e:a6:7f:f2:ae:cb:d7:a0:7e:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6BFD656A9FA63FB89816B17CCED2832B43FE41CD Validity Not Before: Aug 5 21:06:25 2025 GMT Not After : Aug 9 05:39:25 2025 GMT Subject: CN=BDB885C799CC68AFD20D9EA9DA99EF1B2123D38F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e2:44:e3:ff:d0:84:9c:f1:9b:d7:35:48:d5: ec:14:60:db:31:e9:cb:fe:3f:75:7f:1a:fd:23:40: 86:0b:6f:55:4a:77:4e:02:e9:70:40:56:fe:6c:a3: 1e:f9:19:a3:a1:0d:b2:1d:32:22:58:d4:23:84:9d: 66:cc:f0:31:10:64:19:4e:ec:ce:fc:9b:fa:1f:58: ca:52:8e:a9:52:6c:89:7c:48:58:a2:eb:0f:92:b5: db:84:ec:dc:3c:2c:3f:90:89:86:57:8d:85:c0:44: 2a:ef:9d:f0:f0:35:e9:4b:4f:17:f9:97:99:22:4b: 55:0e:35:7c:67:e3:6c:f7:ee:9d:fa:88:5e:db:e2: 56:57:54:01:fc:d7:bc:1d:f6:d2:d0:bb:89:b0:34: 29:b9:5e:b7:38:96:e7:fa:c6:a2:a3:5d:b5:be:2a: a0:cb:cc:b2:bc:f8:ba:89:84:b7:04:96:27:7a:2f: 13:e8:bf:cd:a1:63:af:c4:ee:a0:a2:8c:4a:12:21: d6:72:c2:c1:d0:10:22:a9:68:a8:b4:ad:19:6e:c3: 62:7b:ea:f8:74:1a:f3:61:7c:0a:d2:47:5e:75:bc: 27:9a:61:c5:9e:2f:24:93:22:ff:ab:00:8d:db:ee: 05:cb:9f:cb:79:74:50:f0:47:ba:a2:21:1b:13:17: 87:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B8:85:C7:99:CC:68:AF:D2:0D:9E:A9:DA:99:EF:1B:21:23:D3:8F X509v3 Authority Key Identifier: keyid:6B:FD:65:6A:9F:A6:3F:B8:98:16:B1:7C:CE:D2:83:2B:43:FE:41:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:04:7b:67:41:86:e1:db:de:26:bc:3f:8a:72:23:ed:ca:d5: 23:78:6b:71:78:c1:2f:a4:ed:fc:ab:91:a3:bf:64:b8:67:a6: 0d:88:48:d5:87:12:f3:1b:f7:59:34:7c:26:db:5f:e8:44:9a: 1a:ff:1e:af:a0:75:26:24:ee:2d:93:ad:a4:1e:57:9a:c7:50: 16:cf:d6:be:f8:94:9d:7c:f9:11:6d:c6:8a:1e:74:2e:ce:95: ce:cf:76:45:4a:0f:b6:f7:d3:37:37:0f:f0:6a:11:27:39:32: 00:18:c8:1f:e9:00:23:bc:17:9c:8b:91:5d:4c:e5:f7:ef:74: cf:fa:f0:16:e5:c0:40:eb:da:c9:0f:62:15:69:17:c2:e9:91: 16:9e:65:7c:ee:e2:06:70:5b:ac:11:db:90:1d:43:fd:49:ce: 6b:bb:31:ec:d8:3d:1a:ea:89:53:b5:ef:3e:bf:21:d7:36:0d: 03:c3:08:6c:f0:2e:d2:e1:d2:42:79:e2:75:30:7a:50:f1:3f: 8e:6b:c5:02:98:3e:09:90:51:bb:8c:84:7d:bc:a9:7f:51:66: f1:58:57:4f:9e:86:0c:7d:d9:36:22:aa:1b:eb:b9:24:98:f9: 69:ca:2b:78:38:f4:07:b8:80:31:4c:61:ec:70:b2:10:cc:51: 2b:5d:0a:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ5mX1inKXvtEzE6mf/Kuy9egfsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkJGRDY1NkE5RkE2M0ZCODk4MTZCMTdDQ0VEMjgzMkI0 M0ZFNDFDRDAeFw0yNTA4MDUyMTA2MjVaFw0yNTA4MDkwNTM5MjVaMDMxMTAvBgNV BAMTKEJEQjg4NUM3OTlDQzY4QUZEMjBEOUVBOURBOTlFRjFCMjEyM0QzOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb4kTj/9CEnPGb1zVI1ewUYNsx 6cv+P3V/Gv0jQIYLb1VKd04C6XBAVv5sox75GaOhDbIdMiJY1COEnWbM8DEQZBlO 7M78m/ofWMpSjqlSbIl8SFii6w+StduE7Nw8LD+QiYZXjYXARCrvnfDwNelLTxf5 l5kiS1UONXxn42z37p36iF7b4lZXVAH817wd9tLQu4mwNCm5Xrc4luf6xqKjXbW+ KqDLzLK8+LqJhLcElid6LxPov82hY6/E7qCijEoSIdZywsHQECKpaKi0rRluw2J7 6vh0GvNhfArSR151vCeaYcWeLySTIv+rAI3b7gXLn8t5dFDwR7qiIRsTF4dvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvbiFx5nMaK/SDZ6p2pnvGyEj048wHwYDVR0j BBgwFoAUa/1lap+mP7iYFrF8ztKDK0P+Qc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTBjYjYzMC02MzZhLTRiNmEtOTNkZi1iNWQ5MDhmZTZlZTcvMC82QkZENjU2QTlG QTYzRkI4OTgxNkIxN0NDRUQyODMyQjQzRkU0MUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkJGRDY1NkE5RkE2M0ZCODk4MTZCMTdDQ0VEMjgzMkI0M0ZF NDFDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmUwY2I2MzAtNjM2YS00YjZhLTkz ZGYtYjVkOTA4ZmU2ZWU3LzAvNkJGRDY1NkE5RkE2M0ZCODk4MTZCMTdDQ0VEMjgz MkI0M0ZFNDFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkEe2dBhuHb3ia8P4pyI+3K1SN4a3F4wS+k 7fyrkaO/ZLhnpg2ISNWHEvMb91k0fCbbX+hEmhr/Hq+gdSYk7i2TraQeV5rHUBbP 1r74lJ18+RFtxooedC7Olc7PdkVKD7b30zc3D/BqESc5MgAYyB/pACO8F5yLkV1M 5ffvdM/68BblwEDr2skPYhVpF8LpkRaeZXzu4gZwW6wR25AdQ/1Jzmu7MezYPRrq iVO17z6/Idc2DQPDCGzwLtLh0kJ54nUwelDxP45rxQKYPgmQUbuMhH28qX9RZvFY V0+ehgx92TYiqhvruSSY+WnKK3g49Ae4gDFMYexwshDMUStdCvA= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:06 2025 by rpki-client