$ rpki-client -vvf repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.mft File: B6F29F770F5B30B5F7B738F4524506F1A235DABC.mft (raw, json) Hash identifier: IJXL/mGMHvS1OgIFsZ2jjCwoX5ol+Or9HbjzN+n0LRw= Subject key identifier: 3B:A7:EF:67:A0:79:AB:70:DB:E8:2C:29:87:AE:D8:11:F0:D1:B4:A3 Authority key identifier: B6:F2:9F:77:0F:5B:30:B5:F7:B7:38:F4:52:45:06:F1:A2:35:DA:BC Certificate issuer: /CN=B6F29F770F5B30B5F7B738F4524506F1A235DABC Certificate serial: 3DA9DE3251CE2DE675989693528B30BAE8E857FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F29F770F5B30B5F7B738F4524506F1A235DABC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.mft Manifest number: 0B Signing time: Thu 21 Aug 2025 14:31:46 +0000 Manifest this update: Thu 21 Aug 2025 14:26:46 +0000 Manifest next update: Sun 24 Aug 2025 20:25:46 +0000 Files and hashes: 1: B6F29F770F5B30B5F7B738F4524506F1A235DABC.crl (hash: AK17mk+sCdGVjMrdMiwLzc7F+c5rXnqHpIexpqYd+Ns=) 2: 3130332e3232342e36342e302f32342d3234203d3e203539313538.roa (hash: DZ++EX33vrVv29PriPGZOi+tkuRnHbRvl+nMO8/2+oI=) 3: 3130332e3232342e36352e302f32342d3234203d3e203539313538.roa (hash: KdcszIzsjtlFTy1TnrOq7FG5XAfFe/aLCqLEjewq8yE=) 4: 3130332e3232342e36372e302f32342d3234203d3e203539313538.roa (hash: 63tfpqlJCEzr1F8+1HAkrMYkUUC5brVRNqbAmx9Yovs=) 5: 3130332e3232342e36362e302f32342d3234203d3e203539313538.roa (hash: pZ8/jlcW67uo3RV+YVwV6BROA/FZ969qlSyF5c20C4w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.crl rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F29F770F5B30B5F7B738F4524506F1A235DABC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 20:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a9:de:32:51:ce:2d:e6:75:98:96:93:52:8b:30:ba:e8:e8:57:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F29F770F5B30B5F7B738F4524506F1A235DABC Validity Not Before: Aug 21 14:26:46 2025 GMT Not After : Aug 24 20:25:46 2025 GMT Subject: CN=3BA7EF67A079AB70DBE82C2987AED811F0D1B4A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7f:5f:44:06:ed:bb:7f:19:e0:83:a6:41:f9: c4:92:34:20:c5:65:09:c4:42:22:4a:fa:d9:e9:2b: 13:ae:e7:9a:af:ab:e1:8f:97:75:80:7d:33:38:df: 0d:aa:46:76:99:41:a7:5b:ca:e7:c1:55:2c:56:c6: 8c:e9:38:11:65:3d:05:b6:f2:3c:8a:30:d4:7b:b8: d8:92:2a:70:00:38:ba:14:3e:57:72:96:e4:f4:0a: 0a:a2:93:da:3c:cc:c6:58:8f:59:77:78:46:eb:cb: 34:0a:9b:ac:26:72:1c:1b:16:a2:a4:78:7a:a1:70: f3:c5:91:cf:bb:72:4a:c7:dd:2b:6a:a5:c4:f7:d8: d6:be:c2:c8:5c:b2:26:e7:d3:8f:98:c3:04:d6:5e: 97:68:57:55:94:58:b6:cb:05:13:b3:4d:2a:ed:51: e1:3c:91:49:8e:58:dd:51:c8:5e:28:6a:2c:60:65: a9:49:f2:1b:54:ee:77:12:dd:7e:65:19:5e:c1:de: a5:11:b8:10:e2:1c:60:80:d2:89:da:55:ec:1e:e7: d4:e0:2c:ab:5c:5c:3b:d6:5d:b5:92:0f:78:20:7a: f1:cc:cf:af:fa:7a:da:39:76:b9:c3:32:59:7e:56: 8f:4b:58:31:3e:34:e1:ed:33:47:60:41:a1:1e:20: c7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A7:EF:67:A0:79:AB:70:DB:E8:2C:29:87:AE:D8:11:F0:D1:B4:A3 X509v3 Authority Key Identifier: keyid:B6:F2:9F:77:0F:5B:30:B5:F7:B7:38:F4:52:45:06:F1:A2:35:DA:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F29F770F5B30B5F7B738F4524506F1A235DABC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:fc:0f:c2:a6:46:ae:79:88:42:bd:26:07:79:1e:74:00:a4: 1d:22:f0:64:4c:91:26:de:22:3f:9e:7a:ab:e4:0b:63:55:b0: 90:3b:e8:dd:39:05:d2:33:c2:e9:56:ff:cb:73:52:0c:a1:49: 72:84:d0:b2:48:8b:28:2c:74:e4:48:f6:00:b4:ac:87:8f:19: 0a:0b:7e:6a:21:21:ff:9d:a1:4d:a5:7f:a9:51:ad:b7:3e:f0: 24:cc:11:2b:e9:c9:5a:b0:47:71:11:2f:dc:f9:e1:9e:b7:a6: 44:d5:f3:d8:03:9c:8f:93:0b:46:39:62:3a:82:c0:a9:c9:11: df:8f:4e:ca:36:07:ca:e5:83:97:31:20:00:ba:98:a7:d6:76: 9a:af:19:be:86:aa:eb:6f:82:e4:d4:3d:ad:1c:50:5e:c5:8a: 9a:34:c2:ab:48:49:94:8e:68:db:ae:f7:64:47:39:16:87:28: 52:59:ba:2b:a7:8e:2f:3c:b4:97:5c:2f:ab:af:64:fa:66:45: ef:c0:62:4f:a8:d5:58:4f:3a:ab:d4:7d:3d:d3:aa:95:0d:44: ef:a9:db:85:44:dd:73:4d:98:8f:40:69:2d:73:00:f3:ab:52: 6e:38:03:06:2e:e0:4b:62:91:f6:6b:87:54:f2:3a:57:99:84: c8:65:18:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPaneMlHOLeZ1mJaTUoswuujoV/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMjlGNzcwRjVCMzBCNUY3QjczOEY0NTI0NTA2RjFB MjM1REFCQzAeFw0yNTA4MjExNDI2NDZaFw0yNTA4MjQyMDI1NDZaMDMxMTAvBgNV BAMTKDNCQTdFRjY3QTA3OUFCNzBEQkU4MkMyOTg3QUVEODExRjBEMUI0QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtf19EBu27fxngg6ZB+cSSNCDF ZQnEQiJK+tnpKxOu55qvq+GPl3WAfTM43w2qRnaZQadbyufBVSxWxozpOBFlPQW2 8jyKMNR7uNiSKnAAOLoUPldyluT0Cgqik9o8zMZYj1l3eEbryzQKm6wmchwbFqKk eHqhcPPFkc+7ckrH3StqpcT32Na+wshcsibn04+YwwTWXpdoV1WUWLbLBROzTSrt UeE8kUmOWN1RyF4oaixgZalJ8htU7ncS3X5lGV7B3qURuBDiHGCA0onaVewe59Tg LKtcXDvWXbWSD3ggevHMz6/6eto5drnDMll+Vo9LWDE+NOHtM0dgQaEeIMfXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO6fvZ6B5q3Db6Cwph67YEfDRtKMwHwYDVR0j BBgwFoAUtvKfdw9bMLX3tzj0UkUG8aI12rwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YThkNTRhZS04NzBkLTQzNDgtYWI1OC0zMDA5MGE3NjBhMzYvMC9CNkYyOUY3NzBG NUIzMEI1RjdCNzM4RjQ1MjQ1MDZGMUEyMzVEQUJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMjlGNzcwRjVCMzBCNUY3QjczOEY0NTI0NTA2RjFBMjM1 REFCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGE4ZDU0YWUtODcwZC00MzQ4LWFi NTgtMzAwOTBhNzYwYTM2LzAvQjZGMjlGNzcwRjVCMzBCNUY3QjczOEY0NTI0NTA2 RjFBMjM1REFCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/8D8KmRq55iEK9Jgd5HnQApB0i8GRMkSbe Ij+eeqvkC2NVsJA76N05BdIzwulW/8tzUgyhSXKE0LJIiygsdORI9gC0rIePGQoL fmohIf+doU2lf6lRrbc+8CTMESvpyVqwR3ERL9z54Z63pkTV89gDnI+TC0Y5YjqC wKnJEd+PTso2B8rlg5cxIAC6mKfWdpqvGb6GqutvguTUPa0cUF7Fipo0wqtISZSO aNuu92RHORaHKFJZuiunji88tJdcL6uvZPpmRe/AYk+o1VhPOqvUfT3TqpUNRO+p 24VE3XNNmI9AaS1zAPOrUm44AwYu4EtikfZrh1TyOleZhMhlGH8= -----END CERTIFICATE-----Generated at Sat Aug 23 17:11:53 2025 by rpki-client