$ rpki-client -vvf repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft File: 6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft (raw, json) Hash identifier: wAoYbX34sKtlX2gA7tjEZgCvNn7dw5o2+5LO3cqO4GA= Subject key identifier: D3:54:CC:7E:64:9A:2A:E6:A5:5D:A5:5A:F8:A8:37:A3:5E:8F:F4:99 Authority key identifier: 6B:A0:87:A8:C1:BF:46:BB:D4:74:8D:23:F9:E3:4B:92:77:4F:CC:66 Certificate issuer: /CN=6BA087A8C1BF46BBD4748D23F9E34B92774FCC66 Certificate serial: 1E8B1BE0637660B441523C462A22F079437A109C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft Manifest number: A2 Signing time: Sun 20 Jul 2025 11:00:52 +0000 Manifest this update: Sun 20 Jul 2025 10:55:52 +0000 Manifest next update: Wed 23 Jul 2025 22:32:52 +0000 Files and hashes: 1: 3230332e3131342e3232342e302f32332d3234203d3e203435363937.roa (hash: teH2zqo+KFTz5fsLV5Az67IPM5Fevb+2T7eyV5BSfR4=) 2: 323030313a6466303a39613a3a2f34382d3438203d3e203435363937.roa (hash: ZceMWlNxLHIqsif36KN1ms0kpQpQ1f71pr5K0XWa9aY=) 3: 6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl (hash: XWNLQKph6n+/r51XBV26HBMMV2kCviQpS9TyAT94ElQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 22:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:8b:1b:e0:63:76:60:b4:41:52:3c:46:2a:22:f0:79:43:7a:10:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6BA087A8C1BF46BBD4748D23F9E34B92774FCC66 Validity Not Before: Jul 20 10:55:52 2025 GMT Not After : Jul 23 22:32:52 2025 GMT Subject: CN=D354CC7E649A2AE6A55DA55AF8A837A35E8FF499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:66:21:9a:3b:01:ad:79:ee:cd:bf:3a:79:7b: a3:b5:8d:57:a6:b6:fd:23:e2:43:46:a1:54:a2:09: 36:40:67:d2:d5:ee:3d:9a:e9:31:dc:d4:f9:c7:65: 9d:b6:90:84:1b:9a:5f:fa:76:27:1a:5e:03:df:1f: 99:5c:8e:36:29:ef:a0:ff:6d:29:68:4e:c2:a4:b9: 3b:d6:41:a3:99:dd:e7:c0:b5:08:d7:3e:1a:d0:f1: 77:87:25:e5:d4:bf:9e:f6:52:13:ab:20:75:8c:52: d4:47:37:9a:b1:8e:1a:56:f5:1f:75:09:93:9f:7a: e4:cf:64:16:0b:79:9d:15:ed:04:87:31:9b:4b:a5: 84:22:cd:fb:c9:32:ac:9b:78:b6:6d:9a:8e:ef:e8: fd:b8:92:bc:72:3e:da:6c:67:7e:63:d0:f9:57:e6: ac:e3:9f:7e:50:0b:1b:32:d3:a6:69:95:d5:bd:c2: 03:1c:aa:9e:da:93:65:a1:64:58:d3:d4:b4:0c:2c: 49:5d:d9:90:d8:d0:dc:b2:76:38:11:e8:1a:b5:50: c1:07:b4:ec:e9:eb:4f:55:ba:76:94:a9:df:54:c1: 1e:c4:74:f2:c2:37:84:22:0a:f6:f3:67:40:33:ab: ed:30:c4:1c:17:68:76:0d:2a:b2:66:9a:e6:b7:65: e5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:54:CC:7E:64:9A:2A:E6:A5:5D:A5:5A:F8:A8:37:A3:5E:8F:F4:99 X509v3 Authority Key Identifier: keyid:6B:A0:87:A8:C1:BF:46:BB:D4:74:8D:23:F9:E3:4B:92:77:4F:CC:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:80:b5:3b:7d:78:e1:41:9f:d7:df:d1:14:86:5f:34:2c:18: 09:43:f5:8b:b6:27:6f:1d:41:7c:98:6a:df:d0:bb:2d:88:1e: e8:b9:41:0e:dc:99:0f:34:81:a5:03:d6:e7:f1:bf:92:98:55: 5b:32:47:ec:31:72:ba:38:3f:ae:ed:a6:10:90:c5:7e:fc:50: e3:2b:ea:bf:0e:ee:99:08:ad:16:9c:08:19:6b:02:29:fe:0d: 9a:51:b3:4a:e6:32:17:b4:69:2a:37:0f:79:4a:61:84:bf:82: 22:fd:d0:e9:33:05:8c:fe:d4:89:cb:29:c7:33:0b:e1:25:fd: 37:cd:a0:ce:82:53:4f:fd:ce:57:ef:48:2b:f3:7d:ec:d8:95: bc:35:aa:96:5a:33:c5:01:84:4f:8f:b7:0c:58:87:5a:5a:68: 0a:25:25:b2:47:a2:08:08:36:2f:35:5f:51:b4:58:77:be:73: fc:b3:e5:0b:94:c0:1f:64:26:89:c4:b8:af:62:ad:38:9b:61: 3c:90:a1:28:88:15:68:52:fa:a9:e4:14:df:00:34:12:6c:c5: b6:c2:86:8b:5f:1e:14:6b:fa:ab:b7:49:4d:23:74:7c:35:4b: 9a:ea:ce:d0:41:67:46:e9:1a:62:a2:3e:bb:1a:8f:a5:b5:7e: f3:d2:34:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHosb4GN2YLRBUjxGKiLweUN6EJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkJBMDg3QThDMUJGNDZCQkQ0NzQ4RDIzRjlFMzRCOTI3 NzRGQ0M2NjAeFw0yNTA3MjAxMDU1NTJaFw0yNTA3MjMyMjMyNTJaMDMxMTAvBgNV BAMTKEQzNTRDQzdFNjQ5QTJBRTZBNTVEQTU1QUY4QTgzN0EzNUU4RkY0OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUZiGaOwGtee7Nvzp5e6O1jVem tv0j4kNGoVSiCTZAZ9LV7j2a6THc1PnHZZ22kIQbml/6dicaXgPfH5lcjjYp76D/ bSloTsKkuTvWQaOZ3efAtQjXPhrQ8XeHJeXUv572UhOrIHWMUtRHN5qxjhpW9R91 CZOfeuTPZBYLeZ0V7QSHMZtLpYQizfvJMqybeLZtmo7v6P24krxyPtpsZ35j0PlX 5qzjn35QCxsy06ZpldW9wgMcqp7ak2WhZFjT1LQMLEld2ZDY0NyydjgR6Bq1UMEH tOzp609VunaUqd9UwR7EdPLCN4QiCvbzZ0Azq+0wxBwXaHYNKrJmmua3ZeXbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU01TMfmSaKualXaVa+Kg3o16P9JkwHwYDVR0j BBgwFoAUa6CHqMG/RrvUdI0j+eNLkndPzGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzUwMDc2Ny05MjI3LTQzZWMtYTUyNS0yZTk3ZDVhMDNmMDkvMC82QkEwODdBOEMx QkY0NkJCRDQ3NDhEMjNGOUUzNEI5Mjc3NEZDQzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkJBMDg3QThDMUJGNDZCQkQ0NzQ4RDIzRjlFMzRCOTI3NzRG Q0M2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDM1MDA3NjctOTIyNy00M2VjLWE1 MjUtMmU5N2Q1YTAzZjA5LzAvNkJBMDg3QThDMUJGNDZCQkQ0NzQ4RDIzRjlFMzRC OTI3NzRGQ0M2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALiAtTt9eOFBn9ff0RSGXzQsGAlD9Yu2J28d QXyYat/Quy2IHui5QQ7cmQ80gaUD1ufxv5KYVVsyR+wxcro4P67tphCQxX78UOMr 6r8O7pkIrRacCBlrAin+DZpRs0rmMhe0aSo3D3lKYYS/giL90OkzBYz+1InLKccz C+El/TfNoM6CU0/9zlfvSCvzfezYlbw1qpZaM8UBhE+PtwxYh1paaAolJbJHoggI Ni81X1G0WHe+c/yz5QuUwB9kJonEuK9irTibYTyQoSiIFWhS+qnkFN8ANBJsxbbC hotfHhRr+qu3SU0jdHw1S5rqztBBZ0bpGmKiPrsaj6W1fvPSNG4= -----END CERTIFICATE-----Generated at Mon Jul 21 18:08:28 2025 by rpki-client