$ rpki-client -vvf repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft File: 6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft (raw, json) Hash identifier: omV9SMobyvHcB/CmBCyvVVhpbKfiB3hTz2oxIs9dKMs= Subject key identifier: 72:CD:AD:D9:D3:75:DC:6E:0C:C5:5B:DA:51:65:B8:CF:DF:03:9F:D8 Authority key identifier: 6B:FD:65:6A:9F:A6:3F:B8:98:16:B1:7C:CE:D2:83:2B:43:FE:41:CD Certificate issuer: /CN=6BFD656A9FA63FB89816B17CCED2832B43FE41CD Certificate serial: 4DB87DF771DEA500546B8829A92AC75072DD7318 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft Manifest number: F8 Signing time: Sun 20 Jul 2025 16:51:24 +0000 Manifest this update: Sun 20 Jul 2025 16:46:24 +0000 Manifest next update: Thu 24 Jul 2025 02:47:24 +0000 Files and hashes: 1: 6BFD656A9FA63FB89816B17CCED2832B43FE41CD.crl (hash: f729PC1+T+/lrgZsseBIXiC2+yCXV5IyeECv+xcTBaA=) 2: 323030313a6466333a356334303a3a2f34382d3438203d3e20313431313236.roa (hash: QBBO/FoYTyAYgTzseCUJPqnk8CnediRAVVQ9iko63Nk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.crl rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 02:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:b8:7d:f7:71:de:a5:00:54:6b:88:29:a9:2a:c7:50:72:dd:73:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6BFD656A9FA63FB89816B17CCED2832B43FE41CD Validity Not Before: Jul 20 16:46:24 2025 GMT Not After : Jul 24 02:47:24 2025 GMT Subject: CN=72CDADD9D375DC6E0CC55BDA5165B8CFDF039FD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0c:af:bf:e6:4d:92:73:5c:00:42:c8:9b:4f: e2:47:2e:92:e0:16:9d:9f:df:2f:a7:67:be:e1:c8: 6c:a9:fa:45:1e:32:bc:f6:a7:9b:ae:3b:21:a9:c2: b7:14:5b:1b:08:82:e1:b6:7e:53:b3:a9:a7:0b:be: 46:bf:fb:9c:f3:12:06:a7:bc:d6:b6:c5:d4:99:33: 85:2a:19:fe:d2:2e:cc:cc:bf:c7:f6:31:4e:16:64: 00:c4:c8:ce:9f:7e:d3:00:10:1a:c6:57:af:d4:67: 9d:55:00:1a:a8:8a:08:3c:aa:fc:f1:05:5d:e7:5c: 39:20:fb:14:c8:a9:0e:7b:41:66:df:26:c7:43:73: 66:47:74:71:bb:50:66:17:ef:d5:0d:ff:7d:88:2a: a1:5c:79:58:79:e1:7a:11:a8:0c:73:06:76:61:dc: a4:ee:f0:e1:7c:34:4d:68:cf:a9:31:7c:50:87:b8: d8:58:75:5b:a8:59:47:35:8d:82:5e:50:ed:7f:dc: e6:0a:9f:c9:4e:27:ff:a5:42:7a:2f:10:f3:39:5f: d0:ae:d3:47:f7:32:0f:ea:79:1d:0b:85:a4:4d:81: c5:ed:2d:81:bc:1f:0c:53:9c:e5:d2:67:e1:b4:eb: 0e:6e:83:cc:d8:6e:9b:68:ca:be:8f:47:b2:44:89: 2a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:CD:AD:D9:D3:75:DC:6E:0C:C5:5B:DA:51:65:B8:CF:DF:03:9F:D8 X509v3 Authority Key Identifier: keyid:6B:FD:65:6A:9F:A6:3F:B8:98:16:B1:7C:CE:D2:83:2B:43:FE:41:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:3e:c4:72:54:b7:7c:33:ea:64:74:57:5b:10:24:fe:53:2e: 36:ce:1f:4c:38:e4:7f:0e:34:f9:25:b2:7a:87:c4:0a:43:12: 44:63:fb:ba:76:c5:0a:72:db:76:6e:7f:3a:13:9b:a9:db:b2: 45:ae:33:35:78:26:38:f8:c4:bb:fc:8f:2e:84:ac:bf:03:5e: 04:47:d8:84:ad:91:2d:bf:9e:a1:a7:89:00:a3:db:74:65:06: ec:cb:93:86:c8:af:f9:dc:b4:f2:4b:75:2a:2a:3b:20:f9:87: 6e:42:89:62:b3:22:00:83:63:45:9e:45:c4:e6:1f:96:68:9b: 39:64:15:a7:c4:de:d4:98:30:e9:3a:51:7a:c0:cc:a7:f1:71: db:97:bb:a5:87:41:8c:63:44:a8:be:ac:10:5b:8f:85:34:7c: 7f:0b:27:f1:0f:56:1c:5b:b8:ec:4c:78:c1:49:f2:24:99:65: 08:48:d7:c0:5d:03:d3:cd:e7:2b:1f:8c:4c:a8:3d:5d:79:4e: ee:f0:46:4c:0b:1c:e3:9b:6d:fe:1d:5f:71:f3:fb:f0:aa:44: ed:85:f3:24:47:ff:fa:d4:a8:6b:f1:68:38:2d:2a:93:8d:20: 1e:ce:ef:fd:1e:69:78:8c:64:01:3b:2b:cc:d8:82:22:c6:68: 99:b4:13:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTbh993HepQBUa4gpqSrHUHLdcxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkJGRDY1NkE5RkE2M0ZCODk4MTZCMTdDQ0VEMjgzMkI0 M0ZFNDFDRDAeFw0yNTA3MjAxNjQ2MjRaFw0yNTA3MjQwMjQ3MjRaMDMxMTAvBgNV BAMTKDcyQ0RBREQ5RDM3NURDNkUwQ0M1NUJEQTUxNjVCOENGREYwMzlGRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/DK+/5k2Sc1wAQsibT+JHLpLg Fp2f3y+nZ77hyGyp+kUeMrz2p5uuOyGpwrcUWxsIguG2flOzqacLvka/+5zzEgan vNa2xdSZM4UqGf7SLszMv8f2MU4WZADEyM6fftMAEBrGV6/UZ51VABqoigg8qvzx BV3nXDkg+xTIqQ57QWbfJsdDc2ZHdHG7UGYX79UN/32IKqFceVh54XoRqAxzBnZh 3KTu8OF8NE1oz6kxfFCHuNhYdVuoWUc1jYJeUO1/3OYKn8lOJ/+lQnovEPM5X9Cu 00f3Mg/qeR0LhaRNgcXtLYG8HwxTnOXSZ+G06w5ug8zYbptoyr6PR7JEiSolAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcs2t2dN13G4MxVvaUWW4z98Dn9gwHwYDVR0j BBgwFoAUa/1lap+mP7iYFrF8ztKDK0P+Qc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTBjYjYzMC02MzZhLTRiNmEtOTNkZi1iNWQ5MDhmZTZlZTcvMC82QkZENjU2QTlG QTYzRkI4OTgxNkIxN0NDRUQyODMyQjQzRkU0MUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkJGRDY1NkE5RkE2M0ZCODk4MTZCMTdDQ0VEMjgzMkI0M0ZF NDFDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmUwY2I2MzAtNjM2YS00YjZhLTkz ZGYtYjVkOTA4ZmU2ZWU3LzAvNkJGRDY1NkE5RkE2M0ZCODk4MTZCMTdDQ0VEMjgz MkI0M0ZFNDFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQ+xHJUt3wz6mR0V1sQJP5TLjbOH0w45H8O NPklsnqHxApDEkRj+7p2xQpy23ZufzoTm6nbskWuMzV4Jjj4xLv8jy6ErL8DXgRH 2IStkS2/nqGniQCj23RlBuzLk4bIr/nctPJLdSoqOyD5h25CiWKzIgCDY0WeRcTm H5ZomzlkFafE3tSYMOk6UXrAzKfxcduXu6WHQYxjRKi+rBBbj4U0fH8LJ/EPVhxb uOxMeMFJ8iSZZQhI18BdA9PN5ysfjEyoPV15Tu7wRkwLHOObbf4dX3Hz+/CqRO2F 8yRH//rUqGvxaDgtKpONIB7O7/0eaXiMZAE7K8zYgiLGaJm0E+0= -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:50 2025 by rpki-client