$ rpki-client -vvf repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft File: B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft (raw, json) Hash identifier: 8iHf/5vtgDBDA5RFLlNgWCnrMpH1XpJqEbQBWW/4ecY= Subject key identifier: 23:4C:24:3C:DC:A6:F2:3A:62:76:C0:2B:28:DC:4C:BF:4E:FE:54:50 Authority key identifier: B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 Certificate issuer: /CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Certificate serial: 0D3060739204037D217EE8954AE38869FBB2D595 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft Manifest number: 051B Signing time: Fri 24 Oct 2025 00:21:24 +0000 Manifest this update: Fri 24 Oct 2025 00:16:24 +0000 Manifest next update: Mon 27 Oct 2025 01:04:24 +0000 Files and hashes: 1: B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl (hash: 3qPlJxlmO0oGyISUFB6T3fBbQentajXmgpnFAiXPoh0=) 2: 3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (hash: Zl03XVx57nbxitWYw7MeSszUElsg5oZ5jVn5EskWk+g=) 3: 323030313a6466363a343530303a3a2f34382d3438203d3e20313338303539.roa (hash: IoCq5Fr7ucJSiJXgyl0hLajgLtZdo657+jXfL09lCzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 01:04:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:30:60:73:92:04:03:7d:21:7e:e8:95:4a:e3:88:69:fb:b2:d5:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Validity Not Before: Oct 24 00:16:24 2025 GMT Not After : Oct 27 01:04:24 2025 GMT Subject: CN=234C243CDCA6F23A6276C02B28DC4CBF4EFE5450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:10:ed:83:65:a9:ed:05:3f:9c:73:53:ae:ff: 5e:25:74:d4:bc:81:b2:37:a8:ca:b8:0d:5d:fa:5e: 89:a7:73:54:fa:10:7c:a8:0d:61:eb:f1:20:e1:af: 70:70:74:fc:34:c3:99:ad:34:58:c0:73:f1:97:35: 0c:ad:3c:aa:c1:39:30:da:56:aa:5d:e8:76:73:a7: 99:f1:f9:15:cd:25:e3:0c:2a:7c:62:ac:0f:95:32: 2a:37:4e:f7:f8:32:22:ac:a8:0f:36:a1:61:b7:73: eb:0f:f5:39:95:85:67:8e:18:de:1d:38:57:cb:3b: 14:04:68:00:8f:de:d0:50:99:5f:1b:bd:2c:fb:cd: cb:e0:e0:b1:c8:18:c2:51:b4:19:2a:47:57:8b:b4: 0a:33:f0:f7:07:17:c9:0e:8d:87:3f:d9:ba:49:ee: 4b:3c:a3:e4:1f:4e:45:c3:56:a6:b4:72:58:3a:fe: e1:bc:23:7e:6a:ec:0d:f3:c7:49:81:4f:c6:df:2f: 2d:94:8a:79:d4:31:00:29:c5:60:84:4f:28:7a:2c: 94:d7:5c:ba:fe:f7:08:65:10:24:86:85:37:f6:22: 21:3f:9b:e9:3b:27:b5:90:9d:83:cb:67:cb:99:ee: d8:9d:08:15:4a:8e:8f:82:f7:d2:1e:25:ee:b3:2c: 2c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:4C:24:3C:DC:A6:F2:3A:62:76:C0:2B:28:DC:4C:BF:4E:FE:54:50 X509v3 Authority Key Identifier: keyid:B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:a1:4c:ca:5b:1f:89:d6:51:ec:38:04:b2:6c:86:64:6c:69: c2:8c:9a:13:6c:32:e5:d8:e5:86:01:ff:8d:77:f1:98:9d:91: 17:19:57:24:89:c8:f1:e4:ad:39:6f:be:be:6a:88:3d:76:c8: 69:d3:c7:94:98:f6:ed:25:48:51:ba:32:7b:0f:7e:7c:32:94: 40:75:46:2f:2e:74:ce:69:ae:da:74:29:db:ee:22:fb:d1:c9: f3:fa:b3:86:a9:96:ca:9d:7d:36:13:5b:f2:3b:d7:f8:c4:f2: 3c:9b:51:bf:9f:4f:e6:cf:ca:0e:53:b6:68:e0:bb:82:c5:18: b9:dc:30:11:be:ec:b3:04:1a:53:3b:29:b6:36:71:e4:b8:4f: e8:bf:a2:b4:83:43:c1:2a:42:08:60:8e:c4:02:92:fb:b8:51: d4:5a:d5:a2:1b:a0:59:18:30:2c:01:9c:a6:17:34:dd:c2:62: d6:31:ab:8b:d6:dc:49:17:b2:80:26:a0:92:46:af:83:e4:1a: d2:fb:59:95:dc:42:97:69:3c:34:58:42:f6:73:cd:9d:c0:c6: 10:e1:e4:8f:30:0c:b2:36:d8:6c:2e:36:f1:6a:eb:fb:47:a3: b3:d5:ab:00:31:a5:87:a0:e1:6e:92:36:88:db:0a:ba:db:e0: 50:3e:09:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDTBgc5IEA30hfuiVSuOIafuy1ZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZG NERFQzhBNTAeFw0yNTEwMjQwMDE2MjRaFw0yNTEwMjcwMTA0MjRaMDMxMTAvBgNV BAMTKDIzNEMyNDNDRENBNkYyM0E2Mjc2QzAyQjI4REM0Q0JGNEVGRTU0NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfEO2DZantBT+cc1Ou/14ldNS8 gbI3qMq4DV36Xomnc1T6EHyoDWHr8SDhr3BwdPw0w5mtNFjAc/GXNQytPKrBOTDa Vqpd6HZzp5nx+RXNJeMMKnxirA+VMio3Tvf4MiKsqA82oWG3c+sP9TmVhWeOGN4d OFfLOxQEaACP3tBQmV8bvSz7zcvg4LHIGMJRtBkqR1eLtAoz8PcHF8kOjYc/2bpJ 7ks8o+QfTkXDVqa0clg6/uG8I35q7A3zx0mBT8bfLy2UinnUMQApxWCETyh6LJTX XLr+9whlECSGhTf2IiE/m+k7J7WQnYPLZ8uZ7tidCBVKjo+C99IeJe6zLCwnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI0wkPNym8jpidsArKNxMv07+VFAwHwYDVR0j BBgwFoAUtoR7kowwgAKC17qOM3SC3/TeyKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2RlZGVkMS1kMTRlLTQxMjMtYjVjOS1jOTNhNTk5N2ZjMzAvMC9CNjg0N0I5MjhD MzA4MDAyODJEN0JBOEUzMzc0ODJERkY0REVDOEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZGNERF QzhBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdkZWRlZDEtZDE0ZS00MTIzLWI1 YzktYzkzYTU5OTdmYzMwLzAvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgy REZGNERFQzhBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADShTMpbH4nWUew4BLJshmRsacKMmhNsMuXY 5YYB/4138ZidkRcZVySJyPHkrTlvvr5qiD12yGnTx5SY9u0lSFG6MnsPfnwylEB1 Ri8udM5prtp0KdvuIvvRyfP6s4aplsqdfTYTW/I71/jE8jybUb+fT+bPyg5Ttmjg u4LFGLncMBG+7LMEGlM7KbY2ceS4T+i/orSDQ8EqQghgjsQCkvu4UdRa1aIboFkY MCwBnKYXNN3CYtYxq4vW3EkXsoAmoJJGr4PkGtL7WZXcQpdpPDRYQvZzzZ3AxhDh 5I8wDLI22GwuNvFq6/tHo7PVqwAxpYeg4W6SNojbCrrb4FA+CXU= -----END CERTIFICATE-----Generated at Sat Oct 25 06:44:21 2025 by rpki-client