$ rpki-client -vvf repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft File: 6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft (raw, json) Hash identifier: HhmCwq4SqbJpELGsKGof/e4plNieEGWf+POBtHFBuiE= Subject key identifier: 34:47:D5:46:C5:61:70:99:9F:1A:8E:46:94:E2:4D:8D:99:16:68:75 Authority key identifier: 6B:A0:87:A8:C1:BF:46:BB:D4:74:8D:23:F9:E3:4B:92:77:4F:CC:66 Certificate issuer: /CN=6BA087A8C1BF46BBD4748D23F9E34B92774FCC66 Certificate serial: 170B4B11E0D204D7FC99FDBC5B578EC2FD03507B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft Manifest number: B1 Signing time: Fri 22 Aug 2025 13:40:53 +0000 Manifest this update: Fri 22 Aug 2025 13:35:53 +0000 Manifest next update: Mon 25 Aug 2025 17:36:53 +0000 Files and hashes: 1: 6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl (hash: oY3Hwb6PQw9cB1VkSTm8B7X0OuY5NlmdCt32noIFluo=) 2: 3230332e3131342e3232342e302f32332d3234203d3e203435363937.roa (hash: teH2zqo+KFTz5fsLV5Az67IPM5Fevb+2T7eyV5BSfR4=) 3: 323030313a6466303a39613a3a2f34382d3438203d3e203435363937.roa (hash: ZceMWlNxLHIqsif36KN1ms0kpQpQ1f71pr5K0XWa9aY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 17:36:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:0b:4b:11:e0:d2:04:d7:fc:99:fd:bc:5b:57:8e:c2:fd:03:50:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6BA087A8C1BF46BBD4748D23F9E34B92774FCC66 Validity Not Before: Aug 22 13:35:53 2025 GMT Not After : Aug 25 17:36:53 2025 GMT Subject: CN=3447D546C56170999F1A8E4694E24D8D99166875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c1:7e:c6:b9:b8:77:12:5f:2d:59:6e:59:72: 03:68:31:e6:55:55:21:c0:72:b0:48:a9:4d:54:eb: 3e:da:82:8b:93:c0:a0:60:ec:82:cc:6e:89:00:03: fc:4d:82:f7:7a:59:3b:12:4a:37:fc:95:a1:59:f3: 46:88:f1:e8:98:d5:85:1b:0e:03:6c:ee:ae:1b:15: 7a:24:69:94:e9:39:68:3d:95:b0:13:2c:46:31:36: 7e:81:d1:a1:2b:fb:03:7f:61:5d:f1:2c:bb:a9:47: 36:c8:7e:dd:43:8a:c4:c3:6f:a3:c2:ab:f9:69:79: e6:7c:de:1d:91:2e:06:6d:54:b0:1f:34:05:e1:1b: 4f:ff:e7:93:cd:c5:c6:7a:f6:08:11:c1:72:95:64: 84:9b:a4:da:47:48:36:b8:7e:90:11:9e:4d:0e:a3: ba:97:83:f0:5e:0f:a8:f0:02:1e:2f:18:25:80:ea: 83:e6:92:d2:ce:bd:ff:1c:a0:34:c3:91:9d:1d:d9: e6:c7:a3:fa:76:ca:13:ea:f6:cc:cb:e0:ea:d5:27: 9c:27:f4:ca:b4:8e:26:09:9f:db:38:ff:49:90:b0: ed:b6:29:91:1c:d5:b7:1d:3e:7f:ef:9d:38:73:6b: fa:d5:01:23:2b:f1:0d:f3:23:83:5b:fa:27:db:41: 92:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:47:D5:46:C5:61:70:99:9F:1A:8E:46:94:E2:4D:8D:99:16:68:75 X509v3 Authority Key Identifier: keyid:6B:A0:87:A8:C1:BF:46:BB:D4:74:8D:23:F9:E3:4B:92:77:4F:CC:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:89:d6:10:72:d2:d2:10:e7:bf:7f:2e:0e:7b:56:fe:19:8d: cb:f9:31:61:20:3a:4e:6d:8a:d4:76:dd:6c:75:97:c3:73:4c: 64:60:09:0c:86:64:34:d5:da:fa:9c:ba:05:4c:3e:95:ff:2b: 11:a8:30:42:d7:a3:c2:98:98:55:10:f6:e7:5b:46:1b:cb:66: eb:a8:ee:96:cc:35:0c:a5:8a:f6:a3:89:0b:62:02:0b:06:95: ba:33:0f:06:20:a3:6e:0d:66:0b:69:ba:76:5b:a5:02:9c:ba: 39:62:3c:05:80:da:bc:82:00:7a:e1:5c:a0:c9:04:c7:5c:67: 03:96:7a:b2:a5:1e:fb:57:f7:56:7e:93:38:83:7e:2e:b9:f3: c9:5e:9a:12:63:1c:f4:e0:c4:9f:d4:ae:eb:47:5f:09:84:7a: 20:3e:12:95:23:da:3c:86:e3:b7:db:eb:f2:05:9c:46:d1:d2: e2:5a:af:dd:b0:dc:b9:03:54:04:4b:f7:db:76:8c:1d:f8:70: 3b:5b:3c:12:cc:4f:4f:60:5d:53:9f:1d:f7:6a:89:b9:30:07: 0e:42:c2:e0:84:5c:dc:af:6b:3f:64:9f:31:ee:be:6f:bc:d1: 19:22:2d:46:c1:96:ab:36:8f:7e:28:17:af:d7:f7:5a:f3:aa: d1:c8:27:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFwtLEeDSBNf8mf28W1eOwv0DUHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkJBMDg3QThDMUJGNDZCQkQ0NzQ4RDIzRjlFMzRCOTI3 NzRGQ0M2NjAeFw0yNTA4MjIxMzM1NTNaFw0yNTA4MjUxNzM2NTNaMDMxMTAvBgNV BAMTKDM0NDdENTQ2QzU2MTcwOTk5RjFBOEU0Njk0RTI0RDhEOTkxNjY4NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkwX7Gubh3El8tWW5ZcgNoMeZV VSHAcrBIqU1U6z7agouTwKBg7ILMbokAA/xNgvd6WTsSSjf8laFZ80aI8eiY1YUb DgNs7q4bFXokaZTpOWg9lbATLEYxNn6B0aEr+wN/YV3xLLupRzbIft1DisTDb6PC q/lpeeZ83h2RLgZtVLAfNAXhG0//55PNxcZ69ggRwXKVZISbpNpHSDa4fpARnk0O o7qXg/BeD6jwAh4vGCWA6oPmktLOvf8coDTDkZ0d2ebHo/p2yhPq9szL4OrVJ5wn 9Mq0jiYJn9s4/0mQsO22KZEc1bcdPn/vnThza/rVASMr8Q3zI4Nb+ifbQZLTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNEfVRsVhcJmfGo5GlOJNjZkWaHUwHwYDVR0j BBgwFoAUa6CHqMG/RrvUdI0j+eNLkndPzGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzUwMDc2Ny05MjI3LTQzZWMtYTUyNS0yZTk3ZDVhMDNmMDkvMC82QkEwODdBOEMx QkY0NkJCRDQ3NDhEMjNGOUUzNEI5Mjc3NEZDQzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkJBMDg3QThDMUJGNDZCQkQ0NzQ4RDIzRjlFMzRCOTI3NzRG Q0M2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDM1MDA3NjctOTIyNy00M2VjLWE1 MjUtMmU5N2Q1YTAzZjA5LzAvNkJBMDg3QThDMUJGNDZCQkQ0NzQ4RDIzRjlFMzRC OTI3NzRGQ0M2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuJ1hBy0tIQ579/Lg57Vv4Zjcv5MWEgOk5t itR23Wx1l8NzTGRgCQyGZDTV2vqcugVMPpX/KxGoMELXo8KYmFUQ9udbRhvLZuuo 7pbMNQylivajiQtiAgsGlbozDwYgo24NZgtpunZbpQKcujliPAWA2ryCAHrhXKDJ BMdcZwOWerKlHvtX91Z+kziDfi6588lemhJjHPTgxJ/UrutHXwmEeiA+EpUj2jyG 47fb6/IFnEbR0uJar92w3LkDVARL99t2jB34cDtbPBLMT09gXVOfHfdqibkwBw5C wuCEXNyvaz9knzHuvm+80RkiLUbBlqs2j34oF6/X91rzqtHIJ1E= -----END CERTIFICATE-----Generated at Sat Aug 23 10:33:12 2025 by rpki-client