$ rpki-client -vvf repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft File: B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft (raw, json) Hash identifier: 3nCWp01uQI8Z9HVVSjRMpaZGzxBdTdxNhpqatMGndXQ= Subject key identifier: 07:AF:A4:73:2E:2B:D6:E8:22:26:08:8E:6E:D3:71:55:39:26:75:B8 Authority key identifier: B6:82:9F:5E:7E:F7:B5:DF:33:97:CD:32:22:16:0B:E9:44:49:AC:6E Certificate issuer: /CN=B6829F5E7EF7B5DF3397CD3222160BE94449AC6E Certificate serial: 7FD1FDB68E07C385454E0F8DB805F1846004480D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft Manifest number: 02ED Signing time: Sun 20 Jul 2025 01:41:51 +0000 Manifest this update: Sun 20 Jul 2025 01:36:51 +0000 Manifest next update: Wed 23 Jul 2025 11:30:51 +0000 Files and hashes: 1: B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.crl (hash: vJaSRxQBtOLct3hdl/ClQLFXwuGsyMMVtWELg1uU6w8=) 2: 3130332e3137342e3131362e302f32342d3234203d3e20313437313030.roa (hash: g0qXlise9HaMFGbsno6S9nxOreCjvNtFTp/h65NgFw8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.crl rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 11:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:d1:fd:b6:8e:07:c3:85:45:4e:0f:8d:b8:05:f1:84:60:04:48:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6829F5E7EF7B5DF3397CD3222160BE94449AC6E Validity Not Before: Jul 20 01:36:51 2025 GMT Not After : Jul 23 11:30:51 2025 GMT Subject: CN=07AFA4732E2BD6E82226088E6ED37155392675B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:33:b2:c6:06:97:ca:e4:e2:fc:d8:49:62:67: c5:47:0f:54:22:c9:75:0e:76:17:dc:52:f9:e9:2d: 5f:09:79:00:c7:0b:d5:0a:09:54:0e:6f:2d:65:ec: 15:1a:81:46:63:37:45:36:b7:a4:19:7b:fb:b8:31: 82:32:12:13:38:49:56:d9:9f:ea:5e:99:b3:00:2d: 66:a1:13:e3:73:01:01:0f:d4:3c:25:f6:c4:d3:6b: e5:c4:91:7e:78:c7:de:6c:c9:7f:4e:75:37:f5:25: 23:a9:24:ac:23:98:fd:82:6e:eb:49:93:d3:54:7e: 34:4b:4c:e0:a4:68:29:4c:78:1d:d1:e5:0b:9b:55: 99:b1:9d:3a:cf:c9:fc:ea:f1:d1:7f:95:e6:17:c5: 3e:5e:d2:11:66:b5:e1:46:fe:02:41:79:a9:22:11: 06:4d:77:8c:88:e9:5d:80:7c:5c:b4:74:d6:28:71: 80:73:45:5b:9f:60:71:61:18:ab:35:53:d4:88:18: a2:44:1c:c1:2f:7d:6a:a3:5a:ee:23:a3:3a:5d:3c: 59:3b:26:03:01:14:64:f5:10:28:82:c8:00:e6:05: d9:53:d3:b8:1d:a2:3e:5a:e9:9c:03:fe:60:2e:07: ba:c5:7d:6b:8c:68:e2:f7:7d:1f:bc:bc:65:d1:4c: 4e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AF:A4:73:2E:2B:D6:E8:22:26:08:8E:6E:D3:71:55:39:26:75:B8 X509v3 Authority Key Identifier: keyid:B6:82:9F:5E:7E:F7:B5:DF:33:97:CD:32:22:16:0B:E9:44:49:AC:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:9b:4a:4d:52:3c:c6:3c:c1:7d:da:bc:a8:29:90:88:76:33: 04:3d:ab:47:20:04:71:33:e7:e2:f8:6e:db:af:2c:cc:16:c9: 04:8f:a8:5e:6a:6e:a0:df:33:dc:62:d3:ff:46:dd:f3:8c:ee: 29:ff:72:98:e5:ef:fe:47:68:d2:fc:46:e8:90:a4:63:0b:c9: 34:16:28:7c:6a:f9:50:3c:e2:67:90:ab:8a:d6:03:b1:37:3b: 57:4e:82:4b:f0:eb:f0:3e:0b:9d:81:49:e5:b4:48:c2:d1:6b: 56:e7:3c:b4:2f:ad:ba:b6:b7:2c:6c:d4:9e:10:b4:52:bb:18: 51:56:20:6d:22:8e:b5:9e:01:f9:b1:61:82:51:d9:8a:a3:09: 44:02:21:6f:78:4b:03:20:80:f2:e1:3f:2a:1f:40:21:66:88: f5:84:5a:6f:bf:43:93:99:dc:2f:ce:8a:86:7c:00:69:f8:3a: 52:e8:54:45:2d:00:b0:01:70:5a:25:56:46:9c:95:d0:ac:19: 45:21:f1:e6:95:84:6a:9f:e9:d7:83:8e:0d:75:f9:eb:e9:8f: 3a:8f:52:e9:1c:94:f5:ac:08:ef:46:05:08:d1:a7:5e:09:18: aa:2f:bc:0c:6a:f8:16:5d:13:31:2d:6a:4f:38:a4:a9:65:42: 12:a8:a9:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf9H9to4Hw4VFTg+NuAXxhGAESA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4MjlGNUU3RUY3QjVERjMzOTdDRDMyMjIxNjBCRTk0 NDQ5QUM2RTAeFw0yNTA3MjAwMTM2NTFaFw0yNTA3MjMxMTMwNTFaMDMxMTAvBgNV BAMTKDA3QUZBNDczMkUyQkQ2RTgyMjI2MDg4RTZFRDM3MTU1MzkyNjc1QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6M7LGBpfK5OL82EliZ8VHD1Qi yXUOdhfcUvnpLV8JeQDHC9UKCVQOby1l7BUagUZjN0U2t6QZe/u4MYIyEhM4SVbZ n+pembMALWahE+NzAQEP1Dwl9sTTa+XEkX54x95syX9OdTf1JSOpJKwjmP2CbutJ k9NUfjRLTOCkaClMeB3R5QubVZmxnTrPyfzq8dF/leYXxT5e0hFmteFG/gJBeaki EQZNd4yI6V2AfFy0dNYocYBzRVufYHFhGKs1U9SIGKJEHMEvfWqjWu4jozpdPFk7 JgMBFGT1ECiCyADmBdlT07gdoj5a6ZwD/mAuB7rFfWuMaOL3fR+8vGXRTE53AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB6+kcy4r1ugiJgiObtNxVTkmdbgwHwYDVR0j BBgwFoAUtoKfXn73td8zl80yIhYL6URJrG4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MTA5MDU3My02YWQzLTRlNjMtOGFmNC04YTJkNTgyYWEwY2QvMC9CNjgyOUY1RTdF RjdCNURGMzM5N0NEMzIyMjE2MEJFOTQ0NDlBQzZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY4MjlGNUU3RUY3QjVERjMzOTdDRDMyMjIxNjBCRTk0NDQ5 QUM2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzEwOTA1NzMtNmFkMy00ZTYzLThh ZjQtOGEyZDU4MmFhMGNkLzAvQjY4MjlGNUU3RUY3QjVERjMzOTdDRDMyMjIxNjBC RTk0NDQ5QUM2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL+bSk1SPMY8wX3avKgpkIh2MwQ9q0cgBHEz 5+L4btuvLMwWyQSPqF5qbqDfM9xi0/9G3fOM7in/cpjl7/5HaNL8RuiQpGMLyTQW KHxq+VA84meQq4rWA7E3O1dOgkvw6/A+C52BSeW0SMLRa1bnPLQvrbq2tyxs1J4Q tFK7GFFWIG0ijrWeAfmxYYJR2YqjCUQCIW94SwMggPLhPyofQCFmiPWEWm+/Q5OZ 3C/OioZ8AGn4OlLoVEUtALABcFolVkacldCsGUUh8eaVhGqf6deDjg11+evpjzqP UukclPWsCO9GBQjRp14JGKovvAxq+BZdEzEtak84pKllQhKoqXw= -----END CERTIFICATE-----Generated at Mon Jul 21 09:01:57 2025 by rpki-client