$ rpki-client -vvf repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft File: B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft (raw, json) Hash identifier: 4TPi+xcBWbWrTe+3Cb1+8KJgwcQoWEmpkV4PVio6qkU= Subject key identifier: EE:CF:5B:9B:6E:0F:90:C7:D2:64:14:CA:47:BA:25:1E:3C:5A:E8:CE Authority key identifier: B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 Certificate issuer: /CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Certificate serial: 472B2284F153A3EB8BD9E0D279733527DA5AE44F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft Manifest number: 04F1 Signing time: Sun 20 Jul 2025 12:11:21 +0000 Manifest this update: Sun 20 Jul 2025 12:06:21 +0000 Manifest next update: Wed 23 Jul 2025 18:17:21 +0000 Files and hashes: 1: 3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (hash: Zl03XVx57nbxitWYw7MeSszUElsg5oZ5jVn5EskWk+g=) 2: 323030313a6466363a343530303a3a2f34382d3438203d3e20313338303539.roa (hash: IoCq5Fr7ucJSiJXgyl0hLajgLtZdo657+jXfL09lCzQ=) 3: B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl (hash: IRyDEaEe7so7zNIb/JIwJUtkrSyDxB0eCpawhYmsWKg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 18:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:2b:22:84:f1:53:a3:eb:8b:d9:e0:d2:79:73:35:27:da:5a:e4:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Validity Not Before: Jul 20 12:06:21 2025 GMT Not After : Jul 23 18:17:21 2025 GMT Subject: CN=EECF5B9B6E0F90C7D26414CA47BA251E3C5AE8CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7a:cc:0d:cf:fb:31:14:b1:08:9b:72:ce:c1: e3:d4:3c:e1:3f:2d:47:0f:04:ca:00:73:a0:ca:1a: be:02:d7:b0:9c:12:b7:6b:d1:2a:e5:37:20:d0:9b: 59:ac:f3:8e:35:c6:cf:79:93:4c:8e:f2:4b:b7:16: 91:0d:e7:2d:0a:15:a0:8a:30:33:63:6e:71:d5:65: f8:4f:e6:b2:bf:b3:c6:8c:f4:18:6c:55:f6:7a:80: 81:db:b4:b6:9f:53:97:cb:5b:43:f4:9e:20:1b:b1: 27:83:62:a5:b7:23:d4:39:bd:ea:dc:1c:69:2c:cf: 21:21:fc:5f:ba:a6:64:0c:44:44:91:01:86:81:cb: 04:46:19:26:27:2d:45:50:5e:a5:18:f9:65:12:25: ad:4d:35:3f:1d:db:33:54:70:19:46:bc:86:d9:c0: 82:c0:37:f1:f6:87:d9:b3:71:76:ae:e2:3b:c5:0d: bc:e6:b6:83:f9:89:09:c5:97:4c:94:3d:17:65:63: 82:de:44:d4:dd:ed:78:b1:7b:58:c2:a8:83:f3:ae: 77:26:72:59:a2:c2:c3:c5:97:7b:78:c3:a8:e3:4b: 4b:e6:e3:19:70:e2:e0:c3:e5:0f:fe:a9:85:2c:b1: ae:08:32:85:75:1f:73:57:1e:e5:04:5e:b8:7f:fc: 4f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CF:5B:9B:6E:0F:90:C7:D2:64:14:CA:47:BA:25:1E:3C:5A:E8:CE X509v3 Authority Key Identifier: keyid:B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:14:92:ff:39:81:1b:0e:c2:48:bd:b4:40:32:3b:7b:ad:3f: ae:de:9b:fa:2d:f7:69:6d:39:89:65:92:2a:b5:3e:62:f2:c0: 65:4e:bd:ce:81:7b:41:4f:2e:07:aa:50:6a:8c:c0:2c:7e:65: 43:91:35:c9:9b:fa:e8:a0:a2:45:dd:42:4f:f4:bc:37:f5:10: e3:ae:34:47:28:95:19:40:c7:72:f1:ac:a3:e6:8b:01:4a:74: 5f:90:21:4e:59:40:cf:de:2e:7c:03:a6:72:89:57:9e:92:9e: ea:07:69:1a:71:85:6d:30:2f:bb:c5:cd:60:02:66:16:f9:42: 92:3f:b6:72:f0:62:d1:82:01:c6:9d:43:98:bd:b0:f9:3f:87: 53:59:1a:cc:82:25:40:89:cc:cf:3f:13:68:d5:b4:72:ba:e0: 6e:73:e9:75:cd:77:c9:ad:c0:c6:b2:e7:18:dc:17:0f:e2:58: 36:52:21:e0:e2:cb:3b:36:36:25:70:c2:26:09:da:44:a3:1e: 56:d7:78:46:eb:48:69:09:c1:ba:49:d1:66:ec:bb:f5:f6:b2: 03:14:fe:4f:8e:27:46:ef:25:c9:43:4a:ed:7a:32:21:35:49: ee:2a:65:fa:d2:98:6f:26:ee:ba:e1:64:4b:44:f7:67:46:d2: 24:aa:c8:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURysihPFTo+uL2eDSeXM1J9pa5E8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZG NERFQzhBNTAeFw0yNTA3MjAxMjA2MjFaFw0yNTA3MjMxODE3MjFaMDMxMTAvBgNV BAMTKEVFQ0Y1QjlCNkUwRjkwQzdEMjY0MTRDQTQ3QkEyNTFFM0M1QUU4Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3eswNz/sxFLEIm3LOwePUPOE/ LUcPBMoAc6DKGr4C17CcErdr0SrlNyDQm1ms8441xs95k0yO8ku3FpEN5y0KFaCK MDNjbnHVZfhP5rK/s8aM9BhsVfZ6gIHbtLafU5fLW0P0niAbsSeDYqW3I9Q5verc HGkszyEh/F+6pmQMRESRAYaBywRGGSYnLUVQXqUY+WUSJa1NNT8d2zNUcBlGvIbZ wILAN/H2h9mzcXau4jvFDbzmtoP5iQnFl0yUPRdlY4LeRNTd7Xixe1jCqIPzrncm clmiwsPFl3t4w6jjS0vm4xlw4uDD5Q/+qYUssa4IMoV1H3NXHuUEXrh//E81AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7s9bm24PkMfSZBTKR7olHjxa6M4wHwYDVR0j BBgwFoAUtoR7kowwgAKC17qOM3SC3/TeyKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2RlZGVkMS1kMTRlLTQxMjMtYjVjOS1jOTNhNTk5N2ZjMzAvMC9CNjg0N0I5MjhD MzA4MDAyODJEN0JBOEUzMzc0ODJERkY0REVDOEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZGNERF QzhBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdkZWRlZDEtZDE0ZS00MTIzLWI1 YzktYzkzYTU5OTdmYzMwLzAvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgy REZGNERFQzhBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAUkv85gRsOwki9tEAyO3utP67em/ot92lt OYllkiq1PmLywGVOvc6Be0FPLgeqUGqMwCx+ZUORNcmb+uigokXdQk/0vDf1EOOu NEcolRlAx3LxrKPmiwFKdF+QIU5ZQM/eLnwDpnKJV56SnuoHaRpxhW0wL7vFzWAC Zhb5QpI/tnLwYtGCAcadQ5i9sPk/h1NZGsyCJUCJzM8/E2jVtHK64G5z6XXNd8mt wMay5xjcFw/iWDZSIeDiyzs2NiVwwiYJ2kSjHlbXeEbrSGkJwbpJ0Wbsu/X2sgMU /k+OJ0bvJclDSu16MiE1Se4qZfrSmG8m7rrhZEtE92dG0iSqyJQ= -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:23 2025 by rpki-client