$ rpki-client -vvf repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft File: 6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft (raw, json) Hash identifier: aTST7S32OMmPHOG5a4oTnRJSagn9yhpBNr/+zEfQO0w= Subject key identifier: 1D:84:2F:8A:A5:9A:03:41:78:B0:DE:AF:EB:FB:3E:C1:A0:A5:6E:82 Authority key identifier: 6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E Certificate issuer: /CN=6B647F696A9BB5C718605E8922BEF1BEE566F94E Certificate serial: 2984C6075AE390CC5E468EF7F225DE0F50D54CDE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft Manifest number: 03BB Signing time: Sat 02 Aug 2025 17:02:00 +0000 Manifest this update: Sat 02 Aug 2025 16:57:00 +0000 Manifest next update: Tue 05 Aug 2025 23:18:00 +0000 Files and hashes: 1: 3130332e3132302e36342e302f32332d3234203d3e20313337333733.roa (hash: iFaAxi0PM/hgZKE/oQtyBH44ESJg2ZCsggHfIjGB4BQ=) 2: 3130332e3132302e36362e302f32342d3234203d3e20313337333733.roa (hash: 8JbwHHtI2+x8Q7Ly9bJcp9ZLV+q/WXTIRy0nL9ot5M8=) 3: 6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl (hash: WUFctKpPuz+eQQV69E3loc9EGnXePl1GsegQhu2qKNs=) 4: 3130332e3132302e36372e302f32342d3234203d3e2036393339.roa (hash: qvK+skO3QT34G8uQRqHtG6VsmJ/hmuNcrRmSO599EIs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 Aug 2025 23:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:84:c6:07:5a:e3:90:cc:5e:46:8e:f7:f2:25:de:0f:50:d5:4c:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B647F696A9BB5C718605E8922BEF1BEE566F94E Validity Not Before: Aug 2 16:57:00 2025 GMT Not After : Aug 5 23:18:00 2025 GMT Subject: CN=1D842F8AA59A034178B0DEAFEBFB3EC1A0A56E82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4f:f1:03:8f:59:5a:e6:7e:1d:be:a4:15:5c: c4:d3:11:df:19:07:75:19:eb:f9:bd:98:11:12:4a: de:6e:d1:b5:20:62:e7:c5:f9:69:d9:d3:bd:79:6d: 18:20:f4:5e:51:82:fa:9d:9f:30:19:5c:fc:3c:1b: 4e:c9:79:d4:75:28:ca:fe:3a:7f:a9:b9:83:43:99: 36:7a:63:25:6d:56:61:38:d9:ea:4c:73:c4:f0:6a: c8:34:b9:7a:5f:4c:87:24:07:44:1d:8f:d3:d4:50: 38:71:0e:c1:cd:c5:0e:e0:ea:ac:5c:ea:d0:10:71: 3d:06:c0:5e:b7:f9:16:31:5e:c8:e8:df:85:b1:e5: 8a:4b:75:ee:dd:2d:70:c0:91:e0:68:d5:9d:0b:3d: 7f:91:c0:9b:b7:b6:4b:c2:25:e4:33:9c:4b:05:68: d4:c4:0a:aa:7e:95:08:67:19:6e:6d:33:11:4d:6e: 82:24:35:7a:b0:60:70:57:90:b8:2e:2b:57:5a:ec: 69:f4:99:1a:b3:38:7a:1c:6c:28:12:5b:be:ca:ff: a4:68:02:67:57:b5:4b:a1:64:50:3d:28:17:35:51: 1b:2a:c8:d7:90:98:75:a4:16:98:0c:25:c9:e5:1d: db:c1:75:c6:56:93:92:08:8c:c5:25:26:ba:dc:c0: e6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:84:2F:8A:A5:9A:03:41:78:B0:DE:AF:EB:FB:3E:C1:A0:A5:6E:82 X509v3 Authority Key Identifier: keyid:6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:a7:93:9f:1a:a4:dd:1d:d9:44:c0:5d:b9:ee:bf:08:be:35: 62:00:25:7c:fe:e6:2c:af:a2:5b:46:c7:45:55:fa:bb:4b:60: a3:55:4e:c6:75:68:da:0c:0a:22:83:8b:ed:be:49:fc:46:d7: 68:c6:74:6b:0a:ac:41:4c:7a:0d:cc:78:f5:4d:e7:92:a8:4a: 08:29:2b:9e:6a:db:37:08:c2:a3:f8:7a:88:8d:cb:42:82:46: 61:54:ed:c4:2d:6b:5d:d0:1c:74:3a:82:a5:ae:cf:7c:09:f9: d8:35:49:aa:e1:ea:9a:38:46:b2:6e:a2:72:a0:16:0f:6a:50: 60:26:98:1f:96:36:b8:55:8f:92:43:94:6d:68:19:44:07:1c: 01:8d:d9:77:7e:70:a6:e4:cb:ab:e3:04:92:06:1a:40:77:fd: 5a:61:bc:b2:9c:5e:92:2f:76:05:14:e9:9b:38:37:34:fe:fb: 40:63:8f:7c:de:eb:50:1c:bf:4c:51:62:b5:d4:40:7e:dd:26: 48:51:4a:60:42:74:86:d7:59:d0:6e:ca:b3:36:15:c1:6d:e4: 48:50:e8:13:47:0a:2c:c3:95:a6:aa:bd:71:51:9b:d0:ae:fe: c2:60:a6:d2:bc:69:4d:b8:b8:f6:02:70:e0:b8:e1:9a:15:0a: 84:4c:ec:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKYTGB1rjkMxeRo738iXeD1DVTN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI2NDdGNjk2QTlCQjVDNzE4NjA1RTg5MjJCRUYxQkVF NTY2Rjk0RTAeFw0yNTA4MDIxNjU3MDBaFw0yNTA4MDUyMzE4MDBaMDMxMTAvBgNV BAMTKDFEODQyRjhBQTU5QTAzNDE3OEIwREVBRkVCRkIzRUMxQTBBNTZFODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeT/EDj1la5n4dvqQVXMTTEd8Z B3UZ6/m9mBESSt5u0bUgYufF+WnZ0715bRgg9F5RgvqdnzAZXPw8G07JedR1KMr+ On+puYNDmTZ6YyVtVmE42epMc8Twasg0uXpfTIckB0Qdj9PUUDhxDsHNxQ7g6qxc 6tAQcT0GwF63+RYxXsjo34Wx5YpLde7dLXDAkeBo1Z0LPX+RwJu3tkvCJeQznEsF aNTECqp+lQhnGW5tMxFNboIkNXqwYHBXkLguK1da7Gn0mRqzOHocbCgSW77K/6Ro AmdXtUuhZFA9KBc1URsqyNeQmHWkFpgMJcnlHdvBdcZWk5IIjMUlJrrcwOY5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHYQviqWaA0F4sN6v6/s+waClboIwHwYDVR0j BBgwFoAUa2R/aWqbtccYYF6JIr7xvuVm+U4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODZlNDZlYy1kZjVjLTRiNGQtYTMwZS0xMGIyYzY4OGMyZmMvMC82QjY0N0Y2OTZB OUJCNUM3MTg2MDVFODkyMkJFRjFCRUU1NjZGOTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkI2NDdGNjk2QTlCQjVDNzE4NjA1RTg5MjJCRUYxQkVFNTY2 Rjk0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTg2ZTQ2ZWMtZGY1Yy00YjRkLWEz MGUtMTBiMmM2ODhjMmZjLzAvNkI2NDdGNjk2QTlCQjVDNzE4NjA1RTg5MjJCRUYx QkVFNTY2Rjk0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISnk58apN0d2UTAXbnuvwi+NWIAJXz+5iyv oltGx0VV+rtLYKNVTsZ1aNoMCiKDi+2+SfxG12jGdGsKrEFMeg3MePVN55KoSggp K55q2zcIwqP4eoiNy0KCRmFU7cQta13QHHQ6gqWuz3wJ+dg1Sarh6po4RrJuonKg Fg9qUGAmmB+WNrhVj5JDlG1oGUQHHAGN2Xd+cKbky6vjBJIGGkB3/VphvLKcXpIv dgUU6Zs4NzT++0Bjj3ze61Acv0xRYrXUQH7dJkhRSmBCdIbXWdBuyrM2FcFt5EhQ 6BNHCizDlaaqvXFRm9Cu/sJgptK8aU24uPYCcOC44ZoVCoRM7A4= -----END CERTIFICATE-----Generated at Mon Aug 4 18:37:01 2025 by rpki-client