$ rpki-client -vvf repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft File: 6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft (raw, json) Hash identifier: qvwc2aZaHBfQAA7hnelPodjcITfOSKPfmQ3pRaHbK+Q= Subject key identifier: 5B:25:8E:D2:6A:9E:03:F1:90:FD:9D:4C:3D:6B:93:3B:3D:72:F7:A9 Authority key identifier: 6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67 Certificate issuer: /CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567 Certificate serial: 632D395CB2A0E0F40049ED16ABB0862A92ACEA04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft Manifest number: 67 Signing time: Tue 22 Jul 2025 11:21:22 +0000 Manifest this update: Tue 22 Jul 2025 11:16:22 +0000 Manifest next update: Fri 25 Jul 2025 20:31:22 +0000 Files and hashes: 1: 3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa (hash: TQYvew4a918dkXbQmghAnG3D/BGB9JTVAzjo9Xx8OFQ=) 2: 6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl (hash: nryY0eIYWVow5WZGZb7GknowQhqBewH75cv8i7x8mOI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:2d:39:5c:b2:a0:e0:f4:00:49:ed:16:ab:b0:86:2a:92:ac:ea:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567 Validity Not Before: Jul 22 11:16:22 2025 GMT Not After : Jul 25 20:31:22 2025 GMT Subject: CN=5B258ED26A9E03F190FD9D4C3D6B933B3D72F7A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e2:e9:de:02:93:ee:fb:7a:2f:e6:2b:60:82: 8e:62:2b:d7:45:53:b4:4a:3b:9a:b7:51:82:92:ad: 3e:a0:19:6e:ee:8b:8b:12:22:20:8c:54:80:fa:8f: cf:55:47:51:35:18:f5:db:d6:c1:d5:98:9b:21:f7: 54:45:f3:e9:02:b1:8a:7e:ca:29:a0:f1:dc:6f:14: 75:9e:05:3c:f8:48:bf:a6:fc:e4:83:b1:66:e6:14: c0:c7:80:41:85:76:9e:9a:74:66:38:6c:45:7e:ec: b3:3f:6f:1a:13:cf:54:4d:cf:82:04:a1:c1:f9:35: 63:21:27:a1:b3:11:c1:bc:46:c6:a7:cf:3a:f8:cf: ab:21:8c:6e:95:bb:b6:42:cd:37:71:39:9c:ab:ea: a6:df:8a:91:f8:d6:38:c8:fd:4d:a9:08:3b:e0:72: 30:5c:bf:6c:23:ca:b5:15:11:15:ec:1b:b3:79:1f: 6a:99:d9:3b:6b:db:26:a8:a4:7a:11:4a:dc:45:33: 72:03:f2:ff:e3:52:e8:42:12:86:1d:10:e6:00:bc: bd:17:28:03:12:66:fd:b4:8b:cc:77:51:fb:44:c2: c1:22:a2:e9:8c:4a:ee:7a:72:1f:f6:ed:19:79:e0: 89:f8:97:06:a6:b2:5b:8e:ad:10:da:1e:42:76:a0: 95:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:25:8E:D2:6A:9E:03:F1:90:FD:9D:4C:3D:6B:93:3B:3D:72:F7:A9 X509v3 Authority Key Identifier: keyid:6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:3b:18:f8:19:e1:b6:df:92:5e:7f:4f:56:80:b0:b2:ee:6c: c8:e0:fb:9d:b1:f8:f7:f2:11:9e:1f:dc:5a:e5:3c:00:35:20: 62:18:c3:3d:bb:13:50:0d:d9:b8:3a:d4:bc:aa:c6:61:62:26: a5:86:b2:bd:b5:b0:35:f8:9d:e3:ea:b0:6e:11:5d:21:bc:3c: cb:af:73:ae:2d:28:4a:c0:b1:a7:e9:98:46:e4:26:45:cd:74: 24:19:0f:7c:cf:3a:17:df:b0:09:26:12:79:27:4c:40:8b:54: 00:18:94:69:77:51:a0:ee:f6:d2:34:d1:f3:cb:ad:3e:98:95: f9:fe:65:eb:39:f8:d7:85:b2:20:7c:dc:b7:b1:3f:15:3b:83: 35:df:fc:86:3a:4f:a5:4f:59:2f:8a:04:8d:be:b3:80:97:1a: cd:3e:79:12:b3:07:e6:80:5e:2e:db:42:36:f2:c4:09:14:e4: 27:c3:18:aa:c0:6d:a0:a1:ed:22:47:71:71:73:40:13:e3:92: e4:17:83:45:97:ab:88:6c:e3:27:f8:09:6f:bc:93:78:7c:8e: 42:19:d2:af:29:03:06:e6:6f:9b:c9:8d:73:52:b6:76:fa:80: 19:16:f1:0d:78:ab:b7:d3:59:44:78:e0:2c:96:e4:16:63:31: ce:6f:e5:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYy05XLKg4PQASe0Wq7CGKpKs6gQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIzOUNB MkJENDU2NzAeFw0yNTA3MjIxMTE2MjJaFw0yNTA3MjUyMDMxMjJaMDMxMTAvBgNV BAMTKDVCMjU4RUQyNkE5RTAzRjE5MEZEOUQ0QzNENkI5MzNCM0Q3MkY3QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq4uneApPu+3ov5itggo5iK9dF U7RKO5q3UYKSrT6gGW7ui4sSIiCMVID6j89VR1E1GPXb1sHVmJsh91RF8+kCsYp+ yimg8dxvFHWeBTz4SL+m/OSDsWbmFMDHgEGFdp6adGY4bEV+7LM/bxoTz1RNz4IE ocH5NWMhJ6GzEcG8Rsanzzr4z6shjG6Vu7ZCzTdxOZyr6qbfipH41jjI/U2pCDvg cjBcv2wjyrUVERXsG7N5H2qZ2Ttr2yaopHoRStxFM3ID8v/jUuhCEoYdEOYAvL0X KAMSZv20i8x3UftEwsEioumMSu56ch/27Rl54In4lwamsluOrRDaHkJ2oJWDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWyWO0mqeA/GQ/Z1MPWuTOz1y96kwHwYDVR0j BBgwFoAUa9Rc2RLUGSvN659rc7AjnKK9RWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzU4ZmI3Yy02N2I4LTRiY2UtOTZkOS1iZTkxMmUzZjczZGQvMC82QkQ0NUNEOTEy RDQxOTJCQ0RFQjlGNkI3M0IwMjM5Q0EyQkQ0NTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIzOUNBMkJE NDU2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzAvNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIz OUNBMkJENDU2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD87GPgZ4bbfkl5/T1aAsLLubMjg+52x+Pfy EZ4f3FrlPAA1IGIYwz27E1AN2bg61LyqxmFiJqWGsr21sDX4nePqsG4RXSG8PMuv c64tKErAsafpmEbkJkXNdCQZD3zPOhffsAkmEnknTECLVAAYlGl3UaDu9tI00fPL rT6Ylfn+Zes5+NeFsiB83LexPxU7gzXf/IY6T6VPWS+KBI2+s4CXGs0+eRKzB+aA Xi7bQjbyxAkU5CfDGKrAbaCh7SJHcXFzQBPjkuQXg0WXq4hs4yf4CW+8k3h8jkIZ 0q8pAwbmb5vJjXNStnb6gBkW8Q14q7fTWUR44CyW5BZjMc5v5TM= -----END CERTIFICATE-----Generated at Thu Jul 24 04:51:29 2025 by rpki-client