$ rpki-client -vvf repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft File: 6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft (raw, json) Hash identifier: bhE2Gr9maInxBWR2WqXYxgXVHrtl3co2r0oe2XRb0iQ= Subject key identifier: DF:63:1B:DA:EC:A9:65:5A:60:C8:4D:77:BC:03:B9:AB:E6:A2:CF:ED Authority key identifier: 6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87 Certificate issuer: /CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187 Certificate serial: 5FFF9BF12E41B3434AF7FB03C9A318E2F6689FF2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft Manifest number: 0172 Signing time: Sun 20 Jul 2025 07:41:08 +0000 Manifest this update: Sun 20 Jul 2025 07:36:08 +0000 Manifest next update: Wed 23 Jul 2025 12:52:08 +0000 Files and hashes: 1: 3130332e3234352e3232352e302f32342d3234203d3e20313331373635.roa (hash: /abYrA5yp8Nre7zAYDHYwFsGgEom3ZQxvMGjfmSiyZM=) 2: 6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl (hash: tOvQIjDGDDsSP8yOfwhZAYqZaVbwQoQIQcOCZULXs/w=) 3: 3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa (hash: +wBbu1cMZCAeulSyWUHjp9S6buaiwbJ9EYT932oWUfk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 12:52:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:ff:9b:f1:2e:41:b3:43:4a:f7:fb:03:c9:a3:18:e2:f6:68:9f:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187 Validity Not Before: Jul 20 07:36:08 2025 GMT Not After : Jul 23 12:52:08 2025 GMT Subject: CN=DF631BDAECA9655A60C84D77BC03B9ABE6A2CFED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f3:70:44:60:19:91:7e:81:f1:88:db:48:73: aa:69:6e:b4:6a:6e:95:61:b8:7a:f2:87:1a:f7:d0: 5b:b3:93:c9:83:12:7e:8b:fe:ee:4f:4a:bf:c5:e4: 4f:22:a4:3a:64:ac:74:f7:1a:27:ae:19:8d:7e:4f: 25:82:dd:22:9f:51:bb:27:27:d3:25:f5:6d:49:bf: 3c:ef:17:a9:3d:c2:f7:d5:24:54:82:77:57:ae:66: f0:82:fd:92:46:bf:3b:8a:f9:83:9d:57:f7:c4:73: 46:44:d3:b7:6b:18:37:90:02:03:82:d4:77:27:28: 01:5f:d5:69:69:6f:a8:3d:da:1b:2e:12:09:84:ef: a6:7c:9f:1b:8d:14:24:42:ad:dd:9e:70:e1:5d:95: c1:7e:7c:17:16:71:87:79:bd:ba:25:5a:0b:b8:99: 69:37:a4:eb:bb:87:17:bf:63:f3:0c:6e:66:a1:56: e3:5c:50:82:4d:86:c8:fe:ba:b9:a8:08:bc:19:96: 89:96:61:53:66:6c:33:69:90:4c:33:28:52:4c:9d: 7b:fe:9b:58:59:3b:9a:59:c0:1e:ea:80:0d:2b:da: 2d:9e:ff:a1:28:31:f4:7a:a3:eb:9a:9d:b1:37:91: 43:cf:5e:7e:96:a6:60:76:75:65:fd:74:65:35:7d: eb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:63:1B:DA:EC:A9:65:5A:60:C8:4D:77:BC:03:B9:AB:E6:A2:CF:ED X509v3 Authority Key Identifier: keyid:6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:02:41:3e:f6:a3:a1:9d:3f:83:20:7b:6a:a1:a6:b7:7c:01: d8:8f:e7:9f:9b:dc:66:1f:1d:8c:fc:dc:ac:ab:d6:2f:0a:34: 3f:d3:18:5b:fc:3a:fc:b2:fc:06:84:62:e5:1d:6c:f2:03:8f: c6:48:84:83:91:2e:4c:3a:5e:f7:e2:94:d2:19:3a:38:2f:dd: 24:18:76:50:b0:9a:d5:0b:c2:6e:f2:9f:de:7b:5c:f7:38:39: 70:d9:ff:ac:74:26:06:87:7d:4b:69:be:b4:72:de:f7:ea:2c: 45:4b:81:46:1a:2d:2d:d3:1f:bc:02:5b:5e:4c:0a:2a:b5:9d: 72:82:1e:a1:e8:36:ec:d1:c0:0d:bb:de:c3:7c:55:a8:fe:cf: 37:ee:8c:e1:47:57:7f:9d:9a:d4:e2:2b:ef:75:7e:e6:3c:a9: 62:3a:78:73:4c:9b:b1:ce:66:cd:45:d4:c8:31:b8:9e:17:7b: 3c:ab:d7:3a:e3:c9:ea:98:ad:93:63:e0:64:b6:0d:d2:f6:9f: 60:d3:72:86:ec:da:89:1c:42:0f:f9:b7:d6:0f:e4:d8:f5:42: de:94:6c:1f:64:22:34:04:b0:58:bc:75:a5:53:bf:57:12:0e: a0:36:e0:be:36:07:ac:e9:a3:5f:dd:1b:01:77:2e:32:3d:79: b5:4f:83:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX/+b8S5Bs0NK9/sDyaMY4vZon/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkzMzIz MkVDMjE4NzAeFw0yNTA3MjAwNzM2MDhaFw0yNTA3MjMxMjUyMDhaMDMxMTAvBgNV BAMTKERGNjMxQkRBRUNBOTY1NUE2MEM4NEQ3N0JDMDNCOUFCRTZBMkNGRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC383BEYBmRfoHxiNtIc6ppbrRq bpVhuHryhxr30Fuzk8mDEn6L/u5PSr/F5E8ipDpkrHT3GieuGY1+TyWC3SKfUbsn J9Ml9W1JvzzvF6k9wvfVJFSCd1euZvCC/ZJGvzuK+YOdV/fEc0ZE07drGDeQAgOC 1HcnKAFf1Wlpb6g92hsuEgmE76Z8nxuNFCRCrd2ecOFdlcF+fBcWcYd5vbolWgu4 mWk3pOu7hxe/Y/MMbmahVuNcUIJNhsj+urmoCLwZlomWYVNmbDNpkEwzKFJMnXv+ m1hZO5pZwB7qgA0r2i2e/6EoMfR6o+uanbE3kUPPXn6WpmB2dWX9dGU1fev3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU32Mb2uypZVpgyE13vAO5q+aiz+0wHwYDVR0j BBgwFoAUb7Ta52sSygDgc0Sk3S+TMjLsIYcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmQ3MDM0Ni01YmRmLTQ5NjEtYTc0Zi01NWFlODU1NjcyYTEvMC82RkI0REFFNzZC MTJDQTAwRTA3MzQ0QTRERDJGOTMzMjMyRUMyMTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkzMzIzMkVD MjE4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkNzAzNDYtNWJkZi00OTYxLWE3 NGYtNTVhZTg1NTY3MmExLzAvNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkz MzIzMkVDMjE4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUCQT72o6GdP4Mge2qhprd8AdiP55+b3GYf HYz83Kyr1i8KND/TGFv8Ovyy/AaEYuUdbPIDj8ZIhIORLkw6XvfilNIZOjgv3SQY dlCwmtULwm7yn957XPc4OXDZ/6x0JgaHfUtpvrRy3vfqLEVLgUYaLS3TH7wCW15M Ciq1nXKCHqHoNuzRwA273sN8Vaj+zzfujOFHV3+dmtTiK+91fuY8qWI6eHNMm7HO Zs1F1MgxuJ4Xezyr1zrjyeqYrZNj4GS2DdL2n2DTcobs2okcQg/5t9YP5Nj1Qt6U bB9kIjQEsFi8daVTv1cSDqA24L42B6zpo1/dGwF3LjI9ebVPg/M= -----END CERTIFICATE-----Generated at Sun Jul 20 22:36:20 2025 by rpki-client