$ rpki-client -vvf repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft File: B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft (raw, json) Hash identifier: eiV+0b958OfCb9X6QTWCCuCr5iOBb2nNIXll+abBobk= Subject key identifier: 97:9E:16:94:B9:97:32:AF:2B:8D:50:81:13:9F:96:79:50:90:A5:8C Authority key identifier: B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 Certificate issuer: /CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Certificate serial: 35D2A14687761038AE13E5056A2FF7E8FFBBC1E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft Manifest number: 04FF Signing time: Thu 21 Aug 2025 04:21:24 +0000 Manifest this update: Thu 21 Aug 2025 04:16:24 +0000 Manifest next update: Sun 24 Aug 2025 09:36:24 +0000 Files and hashes: 1: B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl (hash: x4yKW7SkRmMjSrbuK9lhmVe2ndSA2cUh+XmKf7oyGew=) 2: 323030313a6466363a343530303a3a2f34382d3438203d3e20313338303539.roa (hash: IoCq5Fr7ucJSiJXgyl0hLajgLtZdo657+jXfL09lCzQ=) 3: 3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (hash: Zl03XVx57nbxitWYw7MeSszUElsg5oZ5jVn5EskWk+g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 09:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d2:a1:46:87:76:10:38:ae:13:e5:05:6a:2f:f7:e8:ff:bb:c1:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Validity Not Before: Aug 21 04:16:24 2025 GMT Not After : Aug 24 09:36:24 2025 GMT Subject: CN=979E1694B99732AF2B8D5081139F96795090A58C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cb:c7:d2:0d:a4:73:06:2d:ec:5e:fd:af:29: b1:5f:e4:dc:88:3f:40:85:7d:44:dd:d7:01:ac:56: 91:45:c3:6e:31:9a:b7:c5:e5:fe:af:c4:90:9b:c9: 94:92:4e:8e:28:7a:af:67:e2:d7:fb:e3:c1:2e:72: f1:f1:35:e5:39:b2:f8:dd:86:59:69:1c:7e:01:7f: 48:a5:44:88:58:56:c1:a4:c3:be:3d:e6:4b:16:0d: 6a:2b:a0:95:59:9f:d5:90:16:a0:ae:8e:8c:cc:ad: 34:a5:af:f0:4a:9c:cd:30:37:f4:7b:e0:2a:c4:1d: cd:62:77:9c:8a:27:d0:9d:cc:5a:c5:1c:fb:9b:c1: 65:76:85:b5:d2:b7:13:47:bc:9f:a4:bc:72:79:91: 11:59:cc:c1:73:50:d9:88:87:e6:5f:38:e2:52:97: 34:8e:67:85:61:c7:6d:6d:da:bd:32:d3:30:2e:87: a1:cb:f7:e2:a4:4d:6a:9b:4a:5f:f0:83:b2:26:ac: 03:67:74:68:6d:d1:ba:aa:3b:3e:8e:24:2c:15:8b: 7b:6d:c3:89:9b:db:29:5f:dc:df:5b:f3:f5:21:ab: ab:9b:0b:e2:47:d7:90:5c:0c:6f:41:24:ae:69:84: 3c:8a:19:20:7f:0d:f8:98:e6:3d:59:34:8e:d4:88: 73:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:9E:16:94:B9:97:32:AF:2B:8D:50:81:13:9F:96:79:50:90:A5:8C X509v3 Authority Key Identifier: keyid:B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:04:10:64:8d:ee:47:3d:01:2f:cc:f2:e9:8f:d2:f7:73:62: d7:1f:f9:76:96:17:37:87:e7:43:ca:86:0d:70:e3:31:58:b4: 89:b5:0b:5e:35:7b:dd:6b:8b:2d:cb:b9:70:f7:8c:11:c5:00: 53:ea:4c:7d:d4:9e:85:10:47:1e:8d:8f:82:87:f7:29:56:e2: a3:1b:92:a4:a0:ba:3f:c3:fc:f1:64:4c:58:ce:08:ad:fe:7a: b9:39:bb:1f:71:6d:3e:18:1c:88:05:57:2f:35:db:5b:78:80: 0c:f5:db:4a:1c:47:7c:df:0c:92:c6:46:f3:3d:87:35:cc:94: 43:9c:d6:75:2a:29:77:b1:06:54:02:9e:d5:bd:63:69:6c:8b: fc:20:21:69:f8:a1:1c:f2:ae:8b:3a:f2:3a:88:a1:20:66:4c: 46:a4:d2:c0:5d:cf:48:e0:a4:8f:66:f2:a6:c9:ad:ac:b6:dc: d4:8a:e7:ad:70:ec:01:5a:b9:17:9b:e4:5c:af:57:ab:85:bd: a4:5e:80:ce:73:45:4f:ba:2c:08:70:4e:ee:70:98:bf:12:3f: a1:ec:35:12:a8:f9:cf:7e:ce:1f:db:66:f9:20:69:d2:57:0e: 3a:45:1e:5a:18:f6:2c:49:e4:c9:ec:7b:3f:90:ec:bc:46:87: 2f:1c:6b:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNdKhRod2EDiuE+UFai/36P+7weUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZG NERFQzhBNTAeFw0yNTA4MjEwNDE2MjRaFw0yNTA4MjQwOTM2MjRaMDMxMTAvBgNV BAMTKDk3OUUxNjk0Qjk5NzMyQUYyQjhENTA4MTEzOUY5Njc5NTA5MEE1OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIy8fSDaRzBi3sXv2vKbFf5NyI P0CFfUTd1wGsVpFFw24xmrfF5f6vxJCbyZSSTo4oeq9n4tf748EucvHxNeU5svjd hllpHH4Bf0ilRIhYVsGkw7495ksWDWoroJVZn9WQFqCujozMrTSlr/BKnM0wN/R7 4CrEHc1id5yKJ9CdzFrFHPubwWV2hbXStxNHvJ+kvHJ5kRFZzMFzUNmIh+ZfOOJS lzSOZ4Vhx21t2r0y0zAuh6HL9+KkTWqbSl/wg7ImrANndGht0bqqOz6OJCwVi3tt w4mb2ylf3N9b8/Uhq6ubC+JH15BcDG9BJK5phDyKGSB/DfiY5j1ZNI7UiHOpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl54WlLmXMq8rjVCBE5+WeVCQpYwwHwYDVR0j BBgwFoAUtoR7kowwgAKC17qOM3SC3/TeyKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2RlZGVkMS1kMTRlLTQxMjMtYjVjOS1jOTNhNTk5N2ZjMzAvMC9CNjg0N0I5MjhD MzA4MDAyODJEN0JBOEUzMzc0ODJERkY0REVDOEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZGNERF QzhBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdkZWRlZDEtZDE0ZS00MTIzLWI1 YzktYzkzYTU5OTdmYzMwLzAvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgy REZGNERFQzhBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoEEGSN7kc9AS/M8umP0vdzYtcf+XaWFzeH 50PKhg1w4zFYtIm1C141e91riy3LuXD3jBHFAFPqTH3UnoUQRx6Nj4KH9ylW4qMb kqSguj/D/PFkTFjOCK3+erk5ux9xbT4YHIgFVy8121t4gAz120ocR3zfDJLGRvM9 hzXMlEOc1nUqKXexBlQCntW9Y2lsi/wgIWn4oRzyros68jqIoSBmTEak0sBdz0jg pI9m8qbJray23NSK561w7AFauReb5FyvV6uFvaRegM5zRU+6LAhwTu5wmL8SP6Hs NRKo+c9+zh/bZvkgadJXDjpFHloY9ixJ5Mnsez+Q7LxGhy8cazs= -----END CERTIFICATE-----Generated at Sat Aug 23 10:22:00 2025 by rpki-client