$ rpki-client -vvf repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft File: B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft (raw, json) Hash identifier: IbD6tMXNXaZU6jvF0SLTC5h5vGHUROmXvF0BIxzy68A= Subject key identifier: 19:32:15:2F:20:56:77:0B:10:BD:9C:B5:F5:3A:1D:74:C4:D3:2C:F8 Authority key identifier: B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 Certificate issuer: /CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Certificate serial: 5AEC5E76FB30D519FB500F714C0EA40D288A0FD0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft Manifest number: 0505 Signing time: Thu 04 Sep 2025 04:31:23 +0000 Manifest this update: Thu 04 Sep 2025 04:26:23 +0000 Manifest next update: Sun 07 Sep 2025 12:54:23 +0000 Files and hashes: 1: 3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (hash: Zl03XVx57nbxitWYw7MeSszUElsg5oZ5jVn5EskWk+g=) 2: 323030313a6466363a343530303a3a2f34382d3438203d3e20313338303539.roa (hash: IoCq5Fr7ucJSiJXgyl0hLajgLtZdo657+jXfL09lCzQ=) 3: B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl (hash: mDXnNoNwzfmSTZSjZQFGRsTAmAJjUtoI/C0wYXKBQnE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 12:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ec:5e:76:fb:30:d5:19:fb:50:0f:71:4c:0e:a4:0d:28:8a:0f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Validity Not Before: Sep 4 04:26:23 2025 GMT Not After : Sep 7 12:54:23 2025 GMT Subject: CN=1932152F2056770B10BD9CB5F53A1D74C4D32CF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:72:3d:85:62:ef:0f:0b:f5:22:e6:7d:b4: 9e:05:83:e5:6b:ec:4d:1f:4e:06:03:38:d8:49:2b: c7:47:44:7c:f4:d4:fa:49:80:5c:f9:7a:0d:72:8f: 76:79:dc:17:2a:8c:86:de:ba:6c:45:79:44:20:da: 70:0a:ee:f3:2f:f7:ad:32:c6:2c:01:5b:ab:cf:cb: 06:d8:ab:eb:ce:59:c7:9a:1e:ec:40:09:a7:18:49: 1f:dc:e4:fc:ad:17:e9:f4:19:40:d9:d9:22:80:e1: 95:a0:b8:d5:96:1d:ab:78:0c:4f:23:61:d2:a3:d6: e1:f3:73:bb:d5:4c:a4:cd:c3:4a:be:b0:8a:89:ad: 59:91:d4:b7:b1:d8:bc:19:fb:3d:df:3a:6e:e4:2b: ec:99:e9:bb:3d:8c:cb:59:5a:1e:4d:b4:53:54:89: 33:18:c8:ad:33:d9:cd:26:fe:13:04:1d:84:52:d1: a0:1e:9a:70:0d:b6:f9:c0:cc:17:a0:df:4a:9f:12: dd:3c:fc:9d:39:9f:e4:c9:e2:8a:68:6b:c2:69:4a: aa:83:e9:d7:25:79:aa:5f:f7:04:73:24:98:fa:f4: fd:35:9b:4a:9b:30:a5:84:f4:12:6c:3a:4c:4b:1c: 6a:ae:39:4a:05:a4:99:e3:46:5c:99:0c:75:91:22: dd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:32:15:2F:20:56:77:0B:10:BD:9C:B5:F5:3A:1D:74:C4:D3:2C:F8 X509v3 Authority Key Identifier: keyid:B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:0e:17:87:05:13:8b:b1:10:f0:5a:ca:74:fe:6f:35:80:3b: 5d:b8:c6:c0:a0:90:f2:99:82:55:c3:be:6f:a4:e1:89:9c:37: 9b:24:a6:d8:b1:be:95:0a:3d:1a:62:86:4c:b2:85:27:db:85: 6c:8b:69:8b:37:a4:da:ed:70:42:f5:b9:45:30:57:88:ec:a1: f4:ba:c0:00:0d:72:9c:b4:9c:70:7c:e3:46:46:83:ce:d2:24: fa:23:b4:b8:b6:2b:e0:3b:bc:31:a4:c2:c9:ac:25:69:ff:35: ac:71:83:54:a7:51:e0:36:7c:d1:86:73:2b:7a:58:a3:a5:cb: 57:ed:ff:da:9e:e4:88:10:7d:a1:81:0d:f2:cd:cd:6d:93:b9: 89:d3:40:1a:58:1b:bd:42:e4:03:40:e3:39:fe:da:31:a3:b5: 21:0e:d4:a8:a2:2c:82:83:47:1a:3a:f4:f6:5c:f8:d1:07:fe: 16:30:3b:92:31:60:e4:fc:70:44:61:f6:a6:36:cb:5d:6e:c3: 8b:a1:af:16:f2:54:8d:0d:95:48:2a:e7:1a:c8:ba:75:47:fe: e0:ed:c0:07:de:32:2a:34:ff:9f:43:0f:a6:7b:fb:51:84:98: cd:1a:c3:fc:8e:ba:3f:d7:b5:6e:45:be:89:0d:3d:2c:c1:c5: f2:63:f2:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWuxedvsw1Rn7UA9xTA6kDSiKD9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZG NERFQzhBNTAeFw0yNTA5MDQwNDI2MjNaFw0yNTA5MDcxMjU0MjNaMDMxMTAvBgNV BAMTKDE5MzIxNTJGMjA1Njc3MEIxMEJEOUNCNUY1M0ExRDc0QzREMzJDRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7rHI9hWLvDwv1IuZ9tJ4Fg+Vr 7E0fTgYDONhJK8dHRHz01PpJgFz5eg1yj3Z53BcqjIbeumxFeUQg2nAK7vMv960y xiwBW6vPywbYq+vOWceaHuxACacYSR/c5PytF+n0GUDZ2SKA4ZWguNWWHat4DE8j YdKj1uHzc7vVTKTNw0q+sIqJrVmR1Lex2LwZ+z3fOm7kK+yZ6bs9jMtZWh5NtFNU iTMYyK0z2c0m/hMEHYRS0aAemnANtvnAzBeg30qfEt08/J05n+TJ4opoa8JpSqqD 6dcleapf9wRzJJj69P01m0qbMKWE9BJsOkxLHGquOUoFpJnjRlyZDHWRIt2fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGTIVLyBWdwsQvZy19ToddMTTLPgwHwYDVR0j BBgwFoAUtoR7kowwgAKC17qOM3SC3/TeyKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2RlZGVkMS1kMTRlLTQxMjMtYjVjOS1jOTNhNTk5N2ZjMzAvMC9CNjg0N0I5MjhD MzA4MDAyODJEN0JBOEUzMzc0ODJERkY0REVDOEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZGNERF QzhBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdkZWRlZDEtZDE0ZS00MTIzLWI1 YzktYzkzYTU5OTdmYzMwLzAvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgy REZGNERFQzhBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcOF4cFE4uxEPBaynT+bzWAO124xsCgkPKZ glXDvm+k4YmcN5skptixvpUKPRpihkyyhSfbhWyLaYs3pNrtcEL1uUUwV4jsofS6 wAANcpy0nHB840ZGg87SJPojtLi2K+A7vDGkwsmsJWn/Naxxg1SnUeA2fNGGcyt6 WKOly1ft/9qe5IgQfaGBDfLNzW2TuYnTQBpYG71C5ANA4zn+2jGjtSEO1KiiLIKD Rxo69PZc+NEH/hYwO5IxYOT8cERh9qY2y11uw4uhrxbyVI0NlUgq5xrIunVH/uDt wAfeMio0/59DD6Z7+1GEmM0aw/yOuj/XtW5FvokNPSzBxfJj8rU= -----END CERTIFICATE-----Generated at Fri Sep 5 10:27:07 2025 by rpki-client