$ rpki-client -vvf repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft File: 6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft (raw, json) Hash identifier: RG8w/BWCJ0tEnoOnNyCxbRuIySJoVt49t4Nd11bXjqw= Subject key identifier: B6:7C:89:65:1B:F5:CA:38:2C:84:E0:94:4F:BE:8D:FB:DB:2C:93:24 Authority key identifier: 6B:A0:87:A8:C1:BF:46:BB:D4:74:8D:23:F9:E3:4B:92:77:4F:CC:66 Certificate issuer: /CN=6BA087A8C1BF46BBD4748D23F9E34B92774FCC66 Certificate serial: 306891593AC0F78AB1B2D080FC13E1C245BCC71E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft Manifest number: B7 Signing time: Thu 04 Sep 2025 17:50:52 +0000 Manifest this update: Thu 04 Sep 2025 17:45:52 +0000 Manifest next update: Mon 08 Sep 2025 03:44:52 +0000 Files and hashes: 1: 3230332e3131342e3232342e302f32332d3234203d3e203435363937.roa (hash: teH2zqo+KFTz5fsLV5Az67IPM5Fevb+2T7eyV5BSfR4=) 2: 323030313a6466303a39613a3a2f34382d3438203d3e203435363937.roa (hash: ZceMWlNxLHIqsif36KN1ms0kpQpQ1f71pr5K0XWa9aY=) 3: 6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl (hash: zczboVpE8+C0PMW6pImriTwcw48KfDEyZQwhZx0jsjw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 03:44:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:68:91:59:3a:c0:f7:8a:b1:b2:d0:80:fc:13:e1:c2:45:bc:c7:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6BA087A8C1BF46BBD4748D23F9E34B92774FCC66 Validity Not Before: Sep 4 17:45:52 2025 GMT Not After : Sep 8 03:44:52 2025 GMT Subject: CN=B67C89651BF5CA382C84E0944FBE8DFBDB2C9324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cf:f3:ed:4a:13:94:51:02:80:40:f5:75:46: f4:36:f2:15:49:93:33:11:da:02:01:67:d0:a2:0e: 50:19:09:71:92:d8:09:99:aa:78:1e:33:5f:8d:45: 7c:ba:0d:9e:ad:00:31:9a:11:69:14:52:0c:1a:67: ee:ac:f6:85:39:cf:7b:b9:68:ba:a2:91:a8:d9:0a: b4:fc:f8:e3:7e:2b:74:13:0c:8a:58:70:8c:4f:d8: be:ea:1d:49:c0:bb:9a:65:c4:7d:05:e9:c0:43:f4: 37:2c:2a:2b:96:8b:1d:03:cc:e9:cc:56:6d:e9:7e: 32:ae:0a:64:76:91:10:7b:68:9f:09:44:49:06:3e: 5f:57:ae:6b:98:64:9b:64:9c:a1:08:db:67:3f:05: 03:32:52:da:b2:0a:c5:0d:44:f5:f8:d0:17:a8:58: 53:ba:71:c5:17:9d:77:ed:c7:a8:50:97:e1:6b:ed: c8:a1:75:71:e9:58:6e:fe:df:a4:2e:59:f9:bf:c7: 8b:3f:85:8a:2e:00:58:7f:15:6e:eb:ce:70:fb:db: 0f:bf:5a:98:14:e5:e3:03:33:48:b6:69:1f:b0:7b: b9:e2:ed:9d:c6:8f:5b:a0:53:11:fb:58:85:04:0f: 98:1e:8c:44:f5:65:07:28:1c:26:0f:f3:49:03:b9: 23:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:7C:89:65:1B:F5:CA:38:2C:84:E0:94:4F:BE:8D:FB:DB:2C:93:24 X509v3 Authority Key Identifier: keyid:6B:A0:87:A8:C1:BF:46:BB:D4:74:8D:23:F9:E3:4B:92:77:4F:CC:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:7d:ae:03:2f:77:cc:f7:50:86:8e:ab:0c:6d:1d:d5:70:3c: 07:9d:6c:40:53:67:1b:c4:5c:9d:e9:d7:89:d0:23:22:6b:ed: 22:2c:56:a5:b1:46:d7:b8:fb:89:6c:36:38:95:31:02:35:7b: c3:ff:7d:5b:39:33:fb:b5:8b:24:0c:74:dd:e5:48:9c:84:27: 5e:9d:61:0a:14:96:42:1c:26:0c:0f:68:5b:14:4b:3b:55:5f: cd:e1:3c:03:f4:e6:c0:a2:fa:ca:e0:a7:4e:fe:ca:dd:33:c8: 27:4a:4b:fa:4b:fa:52:1b:07:09:a5:5e:0d:0c:f1:88:67:71: 01:c6:22:17:25:8d:49:53:1b:a4:f7:99:75:92:38:1e:d5:8f: c4:99:03:b1:69:94:93:fb:e2:b1:bb:98:00:dc:ac:19:2b:e1: 4e:56:5a:24:fe:7c:22:57:98:87:2f:64:43:07:2a:91:53:69: cd:e2:7c:16:a6:77:b5:1b:32:22:d6:4b:5e:5c:6d:77:8a:f0: d7:a9:0a:23:85:dc:a7:a2:73:48:75:45:fc:0c:93:2f:3a:1e: 38:b5:26:ba:d3:e4:cb:16:41:ba:87:28:59:a6:a5:0e:2e:e1: 8b:c4:d7:55:48:9c:ca:ea:ec:2d:c1:92:6c:c7:9b:2e:0b:3a: 85:63:19:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMGiRWTrA94qxstCA/BPhwkW8xx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkJBMDg3QThDMUJGNDZCQkQ0NzQ4RDIzRjlFMzRCOTI3 NzRGQ0M2NjAeFw0yNTA5MDQxNzQ1NTJaFw0yNTA5MDgwMzQ0NTJaMDMxMTAvBgNV BAMTKEI2N0M4OTY1MUJGNUNBMzgyQzg0RTA5NDRGQkU4REZCREIyQzkzMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCz/PtShOUUQKAQPV1RvQ28hVJ kzMR2gIBZ9CiDlAZCXGS2AmZqngeM1+NRXy6DZ6tADGaEWkUUgwaZ+6s9oU5z3u5 aLqikajZCrT8+ON+K3QTDIpYcIxP2L7qHUnAu5plxH0F6cBD9DcsKiuWix0DzOnM Vm3pfjKuCmR2kRB7aJ8JREkGPl9XrmuYZJtknKEI22c/BQMyUtqyCsUNRPX40Beo WFO6ccUXnXftx6hQl+Fr7cihdXHpWG7+36QuWfm/x4s/hYouAFh/FW7rznD72w+/ WpgU5eMDM0i2aR+we7ni7Z3Gj1ugUxH7WIUED5gejET1ZQcoHCYP80kDuSM9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtnyJZRv1yjgshOCUT76N+9sskyQwHwYDVR0j BBgwFoAUa6CHqMG/RrvUdI0j+eNLkndPzGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzUwMDc2Ny05MjI3LTQzZWMtYTUyNS0yZTk3ZDVhMDNmMDkvMC82QkEwODdBOEMx QkY0NkJCRDQ3NDhEMjNGOUUzNEI5Mjc3NEZDQzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkJBMDg3QThDMUJGNDZCQkQ0NzQ4RDIzRjlFMzRCOTI3NzRG Q0M2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDM1MDA3NjctOTIyNy00M2VjLWE1 MjUtMmU5N2Q1YTAzZjA5LzAvNkJBMDg3QThDMUJGNDZCQkQ0NzQ4RDIzRjlFMzRC OTI3NzRGQ0M2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ19rgMvd8z3UIaOqwxtHdVwPAedbEBTZxvE XJ3p14nQIyJr7SIsVqWxRte4+4lsNjiVMQI1e8P/fVs5M/u1iyQMdN3lSJyEJ16d YQoUlkIcJgwPaFsUSztVX83hPAP05sCi+srgp07+yt0zyCdKS/pL+lIbBwmlXg0M 8YhncQHGIhcljUlTG6T3mXWSOB7Vj8SZA7FplJP74rG7mADcrBkr4U5WWiT+fCJX mIcvZEMHKpFTac3ifBamd7UbMiLWS15cbXeK8NepCiOF3Keic0h1RfwMky86Hji1 JrrT5MsWQbqHKFmmpQ4u4YvE11VInMrq7C3BkmzHmy4LOoVjGX8= -----END CERTIFICATE-----Generated at Fri Sep 5 12:47:02 2025 by rpki-client