$ rpki-client -vvf repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft File: B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft (raw, json) Hash identifier: ZpWSr6RCTCajZrTrht9hyoTwd4SvNB7DyeHTjwPop7I= Subject key identifier: 28:18:E5:1C:93:CE:E6:71:11:76:66:EF:27:09:BB:FC:3B:32:B5:E9 Authority key identifier: B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 Certificate issuer: /CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Certificate serial: 50DEF221A86C2FCDD14CC221A0FDEADC5492BB3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft Manifest number: 04DC Signing time: Wed 04 Jun 2025 13:31:23 +0000 Manifest this update: Wed 04 Jun 2025 13:26:23 +0000 Manifest next update: Sat 07 Jun 2025 18:10:23 +0000 Files and hashes: 1: B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl (hash: 44catICIhsQ0e5SJCja7NbTWLVHFkhS+8cjIJgbMFwA=) 2: 323030313a6466363a343530303a3a2f34382d3438203d3e20313338303539.roa (hash: IoCq5Fr7ucJSiJXgyl0hLajgLtZdo657+jXfL09lCzQ=) 3: 3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (hash: Zl03XVx57nbxitWYw7MeSszUElsg5oZ5jVn5EskWk+g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:10:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:de:f2:21:a8:6c:2f:cd:d1:4c:c2:21:a0:fd:ea:dc:54:92:bb:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Validity Not Before: Jun 4 13:26:23 2025 GMT Not After : Jun 7 18:10:23 2025 GMT Subject: CN=2818E51C93CEE671117666EF2709BBFC3B32B5E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:85:8e:7b:b2:36:6e:95:c3:69:f2:00:3f:c6: 58:63:5f:98:cb:d7:2f:2c:ec:f5:74:f1:d4:06:54: 93:ff:94:e8:8e:1d:99:23:83:16:a5:53:bf:ae:5a: 14:ff:58:6c:87:9d:d0:49:e6:71:b9:46:35:9f:e5: 5e:7c:1f:2b:b2:7a:ed:bb:d2:cf:6c:6d:db:f6:0c: 2b:0c:18:b2:6e:86:19:5a:b7:b7:25:59:d5:6e:44: 23:56:a8:32:83:62:3b:a3:d6:85:88:36:98:3b:b1: 9a:48:a9:56:05:e1:de:21:b9:5f:6d:55:75:71:00: a5:11:a6:85:9c:bc:ec:ee:e7:7a:4d:ce:d8:cc:33: 6d:1a:84:9e:58:08:c4:63:69:af:c9:eb:7a:e6:2e: c6:fb:b3:5f:2a:90:76:37:9a:16:1d:dc:f2:c7:ce: ff:b6:de:df:6b:81:e1:ba:96:6f:93:b8:87:79:ac: 30:e4:db:70:ed:cc:c9:07:b6:65:15:c0:dc:2c:79: d4:7d:69:d4:de:15:ac:2b:a0:96:ed:ba:d2:9c:ec: da:15:a5:43:cb:01:78:5d:2c:fb:8c:ee:3a:3d:62: c4:f8:47:97:d9:96:6e:08:7d:ef:a0:35:95:5a:0a: 3a:44:30:95:51:6c:d9:dc:8f:13:e9:95:69:fe:03: 54:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:18:E5:1C:93:CE:E6:71:11:76:66:EF:27:09:BB:FC:3B:32:B5:E9 X509v3 Authority Key Identifier: keyid:B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:fe:64:47:c1:37:11:39:41:0b:af:38:a1:e7:4c:71:84:63: 52:15:3c:7d:7f:3c:4e:8b:10:ef:ea:7a:5a:03:6c:19:2a:57: 02:71:02:d7:5b:fd:c0:0a:a3:03:b6:fe:dd:0b:ee:80:0c:94: f9:23:b8:44:42:05:24:46:38:cd:6a:d3:59:0e:1d:1f:29:57: 0c:d9:12:74:32:54:11:b4:98:4e:11:e5:60:4c:31:ee:8a:7a: 04:49:e7:a5:98:9a:bf:8a:6f:48:f6:b1:3c:82:ce:78:29:bc: 02:ce:12:d6:9c:68:71:d8:9d:80:7a:7a:d7:9f:61:27:8b:0f: 99:e3:d5:33:99:b2:e1:a4:f5:20:0d:bd:29:5b:38:a3:34:3e: 28:b7:fa:ba:9c:34:ee:d8:3c:76:94:6e:1d:87:c8:af:f1:a3: 0c:9a:7f:45:a0:c2:46:8b:52:e1:16:9a:ce:e1:7f:5e:f5:62: 5c:13:e7:3a:70:b5:92:ed:37:1b:1f:27:25:39:06:e6:a6:5e: 24:31:c1:aa:8d:cf:3f:f3:63:fd:09:6b:9c:94:b5:1f:e4:39: 18:ec:6b:39:a7:2f:95:c4:54:7a:14:59:70:d6:5d:af:ca:69: 93:2e:47:22:13:0d:0c:f1:c0:87:47:82:bb:b6:b6:e6:e9:67: b2:08:38:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUN7yIahsL83RTMIhoP3q3FSSuz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZG NERFQzhBNTAeFw0yNTA2MDQxMzI2MjNaFw0yNTA2MDcxODEwMjNaMDMxMTAvBgNV BAMTKDI4MThFNTFDOTNDRUU2NzExMTc2NjZFRjI3MDlCQkZDM0IzMkI1RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxhY57sjZulcNp8gA/xlhjX5jL 1y8s7PV08dQGVJP/lOiOHZkjgxalU7+uWhT/WGyHndBJ5nG5RjWf5V58Hyuyeu27 0s9sbdv2DCsMGLJuhhlat7clWdVuRCNWqDKDYjuj1oWINpg7sZpIqVYF4d4huV9t VXVxAKURpoWcvOzu53pNztjMM20ahJ5YCMRjaa/J63rmLsb7s18qkHY3mhYd3PLH zv+23t9rgeG6lm+TuId5rDDk23DtzMkHtmUVwNwsedR9adTeFawroJbtutKc7NoV pUPLAXhdLPuM7jo9YsT4R5fZlm4Ife+gNZVaCjpEMJVRbNncjxPplWn+A1RFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKBjlHJPO5nERdmbvJwm7/DsytekwHwYDVR0j BBgwFoAUtoR7kowwgAKC17qOM3SC3/TeyKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2RlZGVkMS1kMTRlLTQxMjMtYjVjOS1jOTNhNTk5N2ZjMzAvMC9CNjg0N0I5MjhD MzA4MDAyODJEN0JBOEUzMzc0ODJERkY0REVDOEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZGNERF QzhBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdkZWRlZDEtZDE0ZS00MTIzLWI1 YzktYzkzYTU5OTdmYzMwLzAvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgy REZGNERFQzhBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABT+ZEfBNxE5QQuvOKHnTHGEY1IVPH1/PE6L EO/qeloDbBkqVwJxAtdb/cAKowO2/t0L7oAMlPkjuERCBSRGOM1q01kOHR8pVwzZ EnQyVBG0mE4R5WBMMe6KegRJ56WYmr+Kb0j2sTyCzngpvALOEtacaHHYnYB6etef YSeLD5nj1TOZsuGk9SANvSlbOKM0Pii3+rqcNO7YPHaUbh2HyK/xowyaf0WgwkaL UuEWms7hf171YlwT5zpwtZLtNxsfJyU5BuamXiQxwaqNzz/zY/0Ja5yUtR/kORjs azmnL5XEVHoUWXDWXa/KaZMuRyITDQzxwIdHgru2tubpZ7IIOGw= -----END CERTIFICATE-----Generated at Thu Jun 5 18:18:31 2025 by rpki-client