$ rpki-client -vvf repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft File: 6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft (raw, json) Hash identifier: LubgcEBbhZTU1tBHkPCeRSk19nAh4qqvBKNFJOAiGzs= Subject key identifier: 45:A6:41:F8:8D:08:8E:D4:1E:B5:44:78:F1:DF:7A:61:4B:72:1D:41 Authority key identifier: 6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7 Certificate issuer: /CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7 Certificate serial: 1942F1BACB7397B9E65CE3235EFC53C193A80C14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft Manifest number: 0257 Signing time: Tue 22 Jul 2025 13:51:29 +0000 Manifest this update: Tue 22 Jul 2025 13:46:29 +0000 Manifest next update: Fri 25 Jul 2025 21:43:29 +0000 Files and hashes: 1: 3130332e3135362e3232372e302f32342d3234203d3e203435373031.roa (hash: /uuHBhafeaoCH+HOZHl14rc39vsEcoNz0FatbJ58vz8=) 2: 3130332e3135362e3232362e302f32342d3234203d3e203435373031.roa (hash: Pto1t/zWo/BTAn7DwBNKU7vR/ZyYh0xSxibr/QoeoHg=) 3: 6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl (hash: hxHg6Z/Gwn41aGV3WVl3ysZ4gv49Yzg2XtF7pe3HQz4=) 4: 323430363a386563303a3a2f33322d3332203d3e203435373031.roa (hash: HCJTfWuRFERa9sFGXrmRjthEJz1rc9WgcSUiJ3w41QM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:42:f1:ba:cb:73:97:b9:e6:5c:e3:23:5e:fc:53:c1:93:a8:0c:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7 Validity Not Before: Jul 22 13:46:29 2025 GMT Not After : Jul 25 21:43:29 2025 GMT Subject: CN=45A641F88D088ED41EB54478F1DF7A614B721D41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e8:fe:aa:8e:c5:05:56:38:21:9e:37:3d:3e: 51:77:24:fe:8f:1c:a2:b9:be:ba:d7:5f:3f:fd:b3: e7:3c:41:be:32:b1:7a:bf:0f:2c:31:83:80:02:94: a1:88:ee:87:ca:90:c4:93:dc:5c:7a:1b:3c:1c:33: 4a:7e:ba:71:cb:ab:18:ef:e3:36:52:15:e5:b8:17: 45:60:1b:c4:a8:b4:a6:26:fd:60:0e:c5:dc:df:1a: 4d:be:45:0f:cd:70:ab:ae:41:55:58:95:fa:0a:4b: 77:0c:c1:d7:13:82:da:0d:c3:17:96:3a:96:79:3e: 85:b1:ff:01:6b:28:dc:5b:69:c9:36:b8:26:ce:b3: 87:fa:74:68:9d:01:c1:44:3f:c6:39:a6:c3:bd:6d: c7:bf:62:66:8d:a1:a8:10:4c:5d:0c:49:e2:42:c4: c3:3c:71:8c:f2:8e:79:ec:b2:f3:ff:3e:c7:0d:18: 66:0c:6d:c6:2c:3f:18:62:3e:67:f5:8c:63:6f:68: 87:b8:ec:ca:3e:8e:60:d9:8c:fa:9f:eb:ac:36:a0: e0:96:9e:5b:dc:e7:28:e1:4d:05:9a:90:f4:b0:5f: 49:84:35:57:29:24:ac:d4:09:22:df:61:8b:4c:c1: 4f:be:86:f6:68:54:6b:25:01:a1:66:85:f0:2d:da: 46:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A6:41:F8:8D:08:8E:D4:1E:B5:44:78:F1:DF:7A:61:4B:72:1D:41 X509v3 Authority Key Identifier: keyid:6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:af:73:d9:c9:06:6f:c7:73:8e:ca:6f:d9:1c:24:0a:17:2a: 0d:48:0a:d2:5f:ab:83:dc:ff:a7:4f:f0:ba:18:11:75:9e:96: c3:20:ae:ff:65:e1:82:ac:79:a7:32:0a:79:d0:7f:56:f5:53: 8b:f9:94:4f:e0:69:4a:6c:09:ac:cf:de:16:18:44:a5:94:18: 29:43:33:4d:49:d8:44:d4:31:53:8d:3b:7d:b4:0e:b0:17:ca: 33:ba:71:d2:1a:72:50:89:66:1a:6e:22:9f:43:66:da:a5:be: e4:92:b0:18:ff:ad:c9:da:68:ba:39:fa:2f:e9:d9:44:0d:6b: eb:98:24:44:94:8b:15:7e:ee:9e:58:35:1e:c5:f9:21:58:ea: 9b:95:e8:44:dd:2c:6c:d9:36:cc:cc:fb:11:05:fe:70:af:22: ee:78:91:78:11:96:7b:b5:d0:40:60:f0:8e:0f:06:45:c3:cd: 05:58:7f:c6:4a:57:0b:3f:44:d4:ea:e1:6e:9c:87:ac:d4:64: 59:2c:e1:e3:4b:1e:5e:c2:e2:4d:6f:61:e0:4a:eb:f5:b5:c0: 44:eb:6d:9e:f7:ec:94:c7:6c:55:07:3f:55:e4:30:e1:d6:f0: 8b:ff:78:33:6d:6c:8c:23:fe:ad:98:0b:e8:68:87:ca:4f:03: 0e:ed:eb:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGULxustzl7nmXOMjXvxTwZOoDBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkUxMjM1QzhGQzNGMkVGNkQ5RDI0NUQwNjA3QUE2RDc2 M0M1RDRFNzAeFw0yNTA3MjIxMzQ2MjlaFw0yNTA3MjUyMTQzMjlaMDMxMTAvBgNV BAMTKDQ1QTY0MUY4OEQwODhFRDQxRUI1NDQ3OEYxREY3QTYxNEI3MjFENDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+6P6qjsUFVjghnjc9PlF3JP6P HKK5vrrXXz/9s+c8Qb4ysXq/Dywxg4AClKGI7ofKkMST3Fx6GzwcM0p+unHLqxjv 4zZSFeW4F0VgG8SotKYm/WAOxdzfGk2+RQ/NcKuuQVVYlfoKS3cMwdcTgtoNwxeW OpZ5PoWx/wFrKNxback2uCbOs4f6dGidAcFEP8Y5psO9bce/YmaNoagQTF0MSeJC xMM8cYzyjnnssvP/PscNGGYMbcYsPxhiPmf1jGNvaIe47Mo+jmDZjPqf66w2oOCW nlvc5yjhTQWakPSwX0mENVcpJKzUCSLfYYtMwU++hvZoVGslAaFmhfAt2kYXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURaZB+I0IjtQetUR48d96YUtyHUEwHwYDVR0j BBgwFoAUbhI1yPw/LvbZ0kXQYHqm12PF1OcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTM1NWM1YS1lZmM4LTQ4ZjctOTAyZi02ZTMxZmM0Mjk5NWEvMC82RTEyMzVDOEZD M0YyRUY2RDlEMjQ1RDA2MDdBQTZENzYzQzVENEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkUxMjM1QzhGQzNGMkVGNkQ5RDI0NUQwNjA3QUE2RDc2M0M1 RDRFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjUzNTVjNWEtZWZjOC00OGY3LTkw MmYtNmUzMWZjNDI5OTVhLzAvNkUxMjM1QzhGQzNGMkVGNkQ5RDI0NUQwNjA3QUE2 RDc2M0M1RDRFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANmvc9nJBm/Hc47Kb9kcJAoXKg1ICtJfq4Pc /6dP8LoYEXWelsMgrv9l4YKseacyCnnQf1b1U4v5lE/gaUpsCazP3hYYRKWUGClD M01J2ETUMVONO320DrAXyjO6cdIaclCJZhpuIp9DZtqlvuSSsBj/rcnaaLo5+i/p 2UQNa+uYJESUixV+7p5YNR7F+SFY6puV6ETdLGzZNszM+xEF/nCvIu54kXgRlnu1 0EBg8I4PBkXDzQVYf8ZKVws/RNTq4W6ch6zUZFks4eNLHl7C4k1vYeBK6/W1wETr bZ737JTHbFUHP1XkMOHW8Iv/eDNtbIwj/q2YC+hoh8pPAw7t61U= -----END CERTIFICATE-----Generated at Thu Jul 24 03:50:15 2025 by rpki-client