$ rpki-client -vvf repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft File: 6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft (raw, json) Hash identifier: VEYG0wipSgl/lbtdEW3CynxGk8d2eN5Az7Sjr/CcKUw= Subject key identifier: AF:38:85:CA:1E:5F:C8:B9:B9:B0:F2:3B:C4:96:9A:56:14:CC:D5:06 Authority key identifier: 6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B Certificate issuer: /CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B Certificate serial: 146125DD51B980D68DDD2363587FFF88535437B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft Manifest number: 017D Signing time: Sat 19 Jul 2025 05:41:44 +0000 Manifest this update: Sat 19 Jul 2025 05:36:44 +0000 Manifest next update: Tue 22 Jul 2025 16:06:44 +0000 Files and hashes: 1: 3130332e3232332e322e302f32332d3233203d3e20313335343435.roa (hash: 1514IP+F3fs/wWPY76J3M+VGkLwDN+TVOPCGmIn0YeI=) 2: 6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl (hash: 34UJVQ1T2DBTil1WfmZLW0OdTDlAbCmJfRjQ5CocwNI=) 3: 3130332e3232332e302e302f32322d3232203d3e20313335343435.roa (hash: Gp+3hoUQHoSs7BqoZ98uo/JPIvevE7xLEnrTa4hmSmU=) 4: 3130332e3232332e312e302f32342d3234203d3e20313335343435.roa (hash: Meqto9gp7Tw3/wVHdB4HIOhRI0iUBfsDLYkbvujxqHk=) 5: 3130332e3232332e332e302f32342d3234203d3e20313335343435.roa (hash: 3ivbK9KpjZVb/XVJskMLhHcZHY/PxWUUM4YeUyN+bNw=) 6: 3130332e3232332e322e302f32342d3234203d3e20313335343435.roa (hash: kiwAboKBcY+KUfdKJ8QPyYYmhUR1O0Z8PHji6TPQSyQ=) 7: 3130332e3232332e302e302f32342d3234203d3e20313335343435.roa (hash: Ysc9Qtc/MJl5dYJb0Qhr9xILFagM64+bvGrjMt7zT9k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 16:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:61:25:dd:51:b9:80:d6:8d:dd:23:63:58:7f:ff:88:53:54:37:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B Validity Not Before: Jul 19 05:36:44 2025 GMT Not After : Jul 22 16:06:44 2025 GMT Subject: CN=AF3885CA1E5FC8B9B9B0F23BC4969A5614CCD506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3d:91:fa:8b:fe:b3:cf:57:89:f9:bb:8f:a5: af:2a:75:b2:db:3d:ca:f2:6d:8c:a8:35:4a:cc:64: af:6b:24:28:c8:42:cf:ba:47:8b:9c:3e:1d:e1:8e: 32:59:95:41:a2:1e:62:c3:e2:9d:8d:ac:0f:4c:67: 20:7b:f7:2f:17:b2:b6:19:84:a1:50:08:6c:79:1a: f4:56:87:1b:6d:1e:a3:ad:e5:85:10:ea:a2:19:b0: c7:18:78:10:66:28:20:2e:a7:90:2d:cd:81:a5:55: b3:9a:50:9a:ba:84:e4:72:00:17:9d:03:b0:86:74: c7:ed:9a:65:36:8f:71:b8:bb:46:26:df:2e:d2:23: a5:1e:66:82:8f:54:69:0b:1e:32:47:7e:6e:15:18: fc:e7:93:a3:96:7c:64:ac:eb:0d:1f:a6:03:6e:15: 5f:11:03:7b:31:9d:84:76:a8:a9:2b:e2:27:7f:26: c5:e4:51:b6:8d:d5:c0:c4:7b:c7:d3:2b:ae:35:2b: 2e:98:b7:9c:35:d2:2d:a5:ea:42:1c:c5:93:fb:f4: e5:a6:3b:ca:e6:16:23:e7:8a:83:2b:22:8c:e1:ac: cc:a0:e1:b0:b6:3f:90:7f:ef:8e:e6:27:3c:d0:7f: a4:80:5c:e4:72:37:f4:bc:0a:15:07:90:40:15:9c: f8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:38:85:CA:1E:5F:C8:B9:B9:B0:F2:3B:C4:96:9A:56:14:CC:D5:06 X509v3 Authority Key Identifier: keyid:6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:26:db:3e:bc:8a:85:d9:f6:33:4a:1e:76:bd:1f:18:76:27: 67:0e:c5:f5:fd:35:aa:b8:80:d1:20:e0:9b:34:c5:8e:cf:b4: b6:8e:14:d4:26:9b:91:d5:f8:04:23:51:ea:2b:a3:9f:53:fe: 01:ee:38:2e:00:18:ce:91:85:b2:75:28:36:23:a1:0a:a2:d6: 24:61:ac:fe:6d:39:1d:75:88:4a:c4:14:f8:38:b5:26:59:cf: 11:89:b5:b7:8a:73:ea:bd:48:9d:c1:90:96:e8:20:0b:1a:1e: 10:a5:a9:b3:91:80:2d:01:6f:f0:20:ca:aa:bc:28:10:77:2b: 5c:2d:c4:6f:ff:b3:b7:25:77:2b:ea:9b:0e:98:52:7f:f8:d1: 2b:c0:6f:d4:a4:4b:f5:4f:b2:71:57:ed:d0:a4:70:7b:b5:5e: fa:26:94:e2:5d:25:42:e4:db:81:f7:88:94:db:b4:51:78:7f: 98:61:6a:f8:3d:3e:18:85:51:e2:a6:dd:59:45:7a:15:09:51: 72:97:ee:86:34:21:a6:8d:ab:f8:d6:14:01:28:98:bb:b3:b7: 05:15:43:de:20:e0:9a:60:74:7c:8e:b0:27:5a:4d:76:f1:f4: 5f:ff:ae:b0:28:c9:a3:d3:bf:4c:ea:5e:67:9d:70:11:c3:49: 55:86:f3:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFGEl3VG5gNaN3SNjWH//iFNUN7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI0RDE0RkM2RDM3NEFGQ0NBQjE5MEM1NERERjNBMUE5 RDREOTMwQjAeFw0yNTA3MTkwNTM2NDRaFw0yNTA3MjIxNjA2NDRaMDMxMTAvBgNV BAMTKEFGMzg4NUNBMUU1RkM4QjlCOUIwRjIzQkM0OTY5QTU2MTRDQ0Q1MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCPZH6i/6zz1eJ+buPpa8qdbLb PcrybYyoNUrMZK9rJCjIQs+6R4ucPh3hjjJZlUGiHmLD4p2NrA9MZyB79y8XsrYZ hKFQCGx5GvRWhxttHqOt5YUQ6qIZsMcYeBBmKCAup5AtzYGlVbOaUJq6hORyABed A7CGdMftmmU2j3G4u0Ym3y7SI6UeZoKPVGkLHjJHfm4VGPznk6OWfGSs6w0fpgNu FV8RA3sxnYR2qKkr4id/JsXkUbaN1cDEe8fTK641Ky6Yt5w10i2l6kIcxZP79OWm O8rmFiPnioMrIozhrMyg4bC2P5B/747mJzzQf6SAXORyN/S8ChUHkEAVnPhzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrziFyh5fyLm5sPI7xJaaVhTM1QYwHwYDVR0j BBgwFoAUa00U/G03SvzKsZDFTd86Gp1NkwswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzU0NWI4NS05Mjc0LTQ3MGEtYWQyNy0yNDY5ZTlkMTU1YmMvMC82QjREMTRGQzZE Mzc0QUZDQ0FCMTkwQzU0RERGM0ExQTlENEQ5MzBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkI0RDE0RkM2RDM3NEFGQ0NBQjE5MEM1NERERjNBMUE5RDRE OTMwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjc1NDViODUtOTI3NC00NzBhLWFk MjctMjQ2OWU5ZDE1NWJjLzAvNkI0RDE0RkM2RDM3NEFGQ0NBQjE5MEM1NERERjNB MUE5RDREOTMwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwm2z68ioXZ9jNKHna9Hxh2J2cOxfX9Naq4 gNEg4Js0xY7PtLaOFNQmm5HV+AQjUeoro59T/gHuOC4AGM6RhbJ1KDYjoQqi1iRh rP5tOR11iErEFPg4tSZZzxGJtbeKc+q9SJ3BkJboIAsaHhClqbORgC0Bb/Agyqq8 KBB3K1wtxG//s7cldyvqmw6YUn/40SvAb9SkS/VPsnFX7dCkcHu1XvomlOJdJULk 24H3iJTbtFF4f5hhavg9PhiFUeKm3VlFehUJUXKX7oY0IaaNq/jWFAEomLuztwUV Q94g4JpgdHyOsCdaTXbx9F//rrAoyaPTv0zqXmedcBHDSVWG84w= -----END CERTIFICATE-----Generated at Mon Jul 21 10:34:09 2025 by rpki-client