$ rpki-client -vvf repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft File: 6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft (raw, json) Hash identifier: juA1S1JMc4I45hZg3sRzhxqMhxMz7S/rv4iJY3q4K7g= Subject key identifier: 08:9B:46:9E:F9:5A:C3:2A:87:F1:9B:31:3F:7F:13:D4:7A:13:AD:E5 Authority key identifier: 6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67 Certificate issuer: /CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567 Certificate serial: 4F139FB779507563D8497B9454DF2D3555BFD74F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft Manifest number: 7C Signing time: Sun 07 Sep 2025 21:01:23 +0000 Manifest this update: Sun 07 Sep 2025 20:56:23 +0000 Manifest next update: Wed 10 Sep 2025 21:04:23 +0000 Files and hashes: 1: 6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl (hash: 3bQWNoO6JudpVGhpERUkGnq+vEEvDBH36YsXO9SDv0w=) 2: 3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa (hash: TQYvew4a918dkXbQmghAnG3D/BGB9JTVAzjo9Xx8OFQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 21:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:13:9f:b7:79:50:75:63:d8:49:7b:94:54:df:2d:35:55:bf:d7:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567 Validity Not Before: Sep 7 20:56:23 2025 GMT Not After : Sep 10 21:04:23 2025 GMT Subject: CN=089B469EF95AC32A87F19B313F7F13D47A13ADE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:81:38:66:0c:1a:af:24:72:38:50:26:84:12: cf:bd:0d:d6:8b:ae:25:66:63:68:d1:47:c6:90:09: a1:62:0d:40:95:24:80:2a:b9:12:fc:0b:6c:2b:90: 4b:06:20:7b:3d:2b:fd:74:01:66:fd:cb:af:c8:80: 41:ea:a8:17:55:07:f3:6d:58:63:09:4c:28:85:29: 83:7f:fd:86:92:86:ef:00:db:ee:6b:f3:e7:ef:c6: cb:17:5d:66:81:89:25:e9:7b:36:b0:c7:7a:80:cf: c5:b4:ee:d1:aa:ee:e6:3d:9d:d7:56:45:aa:30:2a: 31:13:7e:25:27:71:7c:b7:f8:fb:d4:15:10:d6:5f: 5d:98:40:38:26:01:ba:d3:d8:71:1b:29:e5:e7:b7: 63:61:e9:96:27:ab:97:20:f1:88:4d:be:ee:8a:38: 0a:c7:17:9c:4e:71:b7:d8:f2:d1:ce:09:b9:e8:90: 82:35:b2:fd:c7:72:2d:bc:81:b1:57:1f:e4:ad:d6: 84:ea:15:36:ca:87:d7:fe:b2:52:fd:ed:d5:4f:76: ea:a5:ed:ec:e0:98:30:c3:4e:92:10:0f:18:6a:6a: 3b:a3:f7:36:57:66:3f:96:7d:a2:93:21:a6:70:3c: 35:11:fa:3f:09:d4:0e:a6:51:7e:18:13:d3:fa:9f: d7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9B:46:9E:F9:5A:C3:2A:87:F1:9B:31:3F:7F:13:D4:7A:13:AD:E5 X509v3 Authority Key Identifier: keyid:6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:72:18:ee:aa:b4:4d:2d:68:0d:bf:2f:e0:41:5d:c7:f4:10: f2:38:c6:40:6e:b9:fd:ec:bd:9a:80:bc:8e:09:f8:a7:ff:3b: 56:b1:2c:0a:64:1b:ca:43:ae:37:eb:21:4f:3e:01:db:76:7a: de:6f:59:ec:aa:ea:92:da:cb:53:05:95:5b:94:8b:a3:ea:39: 91:ee:d0:2c:17:a2:f3:d3:0c:2e:c3:f7:1c:29:b5:50:99:d8: 51:9c:ac:b0:42:bc:66:9a:bc:b4:35:26:65:c9:c2:ff:0d:05: 2b:1c:20:0e:d5:af:5d:18:fe:bf:21:12:29:a4:f7:83:9f:b1: 86:5f:d8:7c:8c:44:47:81:b7:6a:68:e4:2c:6a:bc:0a:68:fa: f9:a3:c6:89:04:e0:40:f3:bb:4f:8f:df:b5:0f:dd:0f:8e:50: 53:bc:c6:6d:74:cc:3b:27:76:ea:27:cd:ac:20:7e:8e:f3:ed: 3f:e0:61:48:72:4a:78:77:bd:eb:90:94:1d:10:ad:4a:50:e8: ef:11:f6:5e:8d:13:c8:4b:61:f6:93:e3:85:e8:28:2e:49:22: 87:8f:f2:93:dd:87:31:72:94:f2:38:83:e9:07:66:67:19:15: da:2c:a0:6e:55:28:54:71:34:79:51:44:21:79:1d:0a:d1:a5: 24:b9:fe:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTxOft3lQdWPYSXuUVN8tNVW/108wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIzOUNB MkJENDU2NzAeFw0yNTA5MDcyMDU2MjNaFw0yNTA5MTAyMTA0MjNaMDMxMTAvBgNV BAMTKDA4OUI0NjlFRjk1QUMzMkE4N0YxOUIzMTNGN0YxM0Q0N0ExM0FERTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvgThmDBqvJHI4UCaEEs+9DdaL riVmY2jRR8aQCaFiDUCVJIAquRL8C2wrkEsGIHs9K/10AWb9y6/IgEHqqBdVB/Nt WGMJTCiFKYN//YaShu8A2+5r8+fvxssXXWaBiSXpezawx3qAz8W07tGq7uY9nddW RaowKjETfiUncXy3+PvUFRDWX12YQDgmAbrT2HEbKeXnt2Nh6ZYnq5cg8YhNvu6K OArHF5xOcbfY8tHOCbnokII1sv3Hci28gbFXH+St1oTqFTbKh9f+slL97dVPduql 7ezgmDDDTpIQDxhqajuj9zZXZj+WfaKTIaZwPDUR+j8J1A6mUX4YE9P6n9d9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCJtGnvlawyqH8ZsxP38T1HoTreUwHwYDVR0j BBgwFoAUa9Rc2RLUGSvN659rc7AjnKK9RWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzU4ZmI3Yy02N2I4LTRiY2UtOTZkOS1iZTkxMmUzZjczZGQvMC82QkQ0NUNEOTEy RDQxOTJCQ0RFQjlGNkI3M0IwMjM5Q0EyQkQ0NTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIzOUNBMkJE NDU2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzAvNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIz OUNBMkJENDU2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFyGO6qtE0taA2/L+BBXcf0EPI4xkBuuf3s vZqAvI4J+Kf/O1axLApkG8pDrjfrIU8+Adt2et5vWeyq6pLay1MFlVuUi6PqOZHu 0CwXovPTDC7D9xwptVCZ2FGcrLBCvGaavLQ1JmXJwv8NBSscIA7Vr10Y/r8hEimk 94OfsYZf2HyMREeBt2po5CxqvApo+vmjxokE4EDzu0+P37UP3Q+OUFO8xm10zDsn duonzawgfo7z7T/gYUhySnh3veuQlB0QrUpQ6O8R9l6NE8hLYfaT44XoKC5JIoeP 8pPdhzFylPI4g+kHZmcZFdosoG5VKFRxNHlRRCF5HQrRpSS5/jM= -----END CERTIFICATE-----Generated at Mon Sep 8 05:09:14 2025 by rpki-client