$ rpki-client -vvf repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft File: 6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft (raw, json) Hash identifier: DBn7g3sZa7ouHJWH9DJk8N3v7joXomN24K18uPnk5lc= Subject key identifier: 08:BA:6A:FC:7D:81:D7:08:46:9A:CE:0B:2A:A5:BD:D7:43:C6:DD:27 Authority key identifier: 6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67 Certificate issuer: /CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567 Certificate serial: 266EC920FF411148904B00FC140860A196E0372A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft Manifest number: 75 Signing time: Fri 22 Aug 2025 23:21:23 +0000 Manifest this update: Fri 22 Aug 2025 23:16:23 +0000 Manifest next update: Tue 26 Aug 2025 05:34:23 +0000 Files and hashes: 1: 6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl (hash: 0sJKRNcPFLrRQO8roe9PusvsHS5Vov6grGz5+b88dM0=) 2: 3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa (hash: TQYvew4a918dkXbQmghAnG3D/BGB9JTVAzjo9Xx8OFQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:34:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:6e:c9:20:ff:41:11:48:90:4b:00:fc:14:08:60:a1:96:e0:37:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567 Validity Not Before: Aug 22 23:16:23 2025 GMT Not After : Aug 26 05:34:23 2025 GMT Subject: CN=08BA6AFC7D81D708469ACE0B2AA5BDD743C6DD27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d1:ad:0f:9a:cd:6b:1c:9d:cd:c4:33:3e:d1: f2:fc:4c:c0:68:e1:c7:c7:25:33:5e:d2:02:32:0c: d0:6d:75:25:14:49:d5:f8:8e:6c:05:ef:db:31:cf: 99:49:e2:98:c1:68:e6:a4:d8:11:2f:30:c3:d2:1c: 96:89:ef:41:43:50:3d:6b:66:23:e4:70:b8:35:a6: e8:a2:93:b0:b4:9f:e9:36:5a:24:8d:5c:5d:ae:c9: 6a:93:79:48:89:be:0c:28:3e:37:98:3a:75:82:a7: 10:bb:3e:36:bf:de:8c:b1:8f:08:c8:83:3b:58:08: 06:c5:6a:1c:82:3f:d8:88:ac:d5:5d:cf:06:08:4c: 60:da:15:29:43:96:25:3e:15:b0:94:1a:be:77:7c: b4:1a:2f:e0:bf:86:84:0a:68:97:61:e0:53:42:ee: 6e:f0:ae:7e:b4:e6:6e:61:2e:c9:b6:95:14:05:b9: 06:de:e3:3a:da:ea:51:6f:5f:5e:45:ec:37:9a:82: e2:7d:9b:c6:cd:d1:c0:37:db:a4:39:dd:b1:0f:53: ac:81:df:f1:e2:1f:90:03:23:aa:a8:cf:d5:bf:a9: 3e:43:33:4f:e7:2a:f1:1c:6e:0a:eb:f3:e0:d8:8d: ab:5d:98:e8:bf:d6:57:3b:08:0c:8f:9f:b8:93:43: d9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BA:6A:FC:7D:81:D7:08:46:9A:CE:0B:2A:A5:BD:D7:43:C6:DD:27 X509v3 Authority Key Identifier: keyid:6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:e9:72:51:10:75:78:19:32:95:5b:75:6e:90:77:ce:f5:b3: 27:60:47:28:a9:22:2e:c7:2b:a5:0b:1e:90:d3:54:90:0c:0a: 51:f2:09:f6:1c:fb:ce:90:32:02:97:91:b3:b2:e6:31:29:e5: 29:a3:51:b1:86:12:67:5d:1a:3a:8a:32:b1:97:80:3c:27:eb: 01:51:bc:56:fc:9b:52:a2:ee:e2:97:ea:85:6b:85:b1:8a:73: de:35:62:12:bc:c9:c5:93:27:a1:84:17:7d:f4:24:64:d3:ff: 42:4c:26:a1:30:be:f6:f7:3d:40:f4:ee:54:58:9b:44:0b:60: c7:40:7b:cd:24:83:f7:9d:51:eb:0a:bf:21:41:bb:69:ee:0f: 59:9d:71:25:70:69:0f:e5:d6:5d:cd:17:27:b9:85:a5:ec:10: 66:c5:1b:00:bc:15:e0:cc:9f:02:c7:75:44:bc:22:8b:58:55: d5:23:d1:32:91:b1:32:dc:8c:da:3e:76:bf:26:7b:ad:9b:99: bb:3b:e7:57:9d:c1:23:1b:9e:91:59:d6:65:4d:24:6d:41:0c: 16:c6:31:20:0f:05:3e:49:71:1f:be:54:b3:a7:6b:54:ae:f6: 03:cb:25:ee:bf:17:f6:35:6b:f2:cb:b1:75:de:3b:bc:fd:04: 14:1e:66:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJm7JIP9BEUiQSwD8FAhgoZbgNyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIzOUNB MkJENDU2NzAeFw0yNTA4MjIyMzE2MjNaFw0yNTA4MjYwNTM0MjNaMDMxMTAvBgNV BAMTKDA4QkE2QUZDN0Q4MUQ3MDg0NjlBQ0UwQjJBQTVCREQ3NDNDNkREMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs0a0Pms1rHJ3NxDM+0fL8TMBo 4cfHJTNe0gIyDNBtdSUUSdX4jmwF79sxz5lJ4pjBaOak2BEvMMPSHJaJ70FDUD1r ZiPkcLg1puiik7C0n+k2WiSNXF2uyWqTeUiJvgwoPjeYOnWCpxC7Pja/3oyxjwjI gztYCAbFahyCP9iIrNVdzwYITGDaFSlDliU+FbCUGr53fLQaL+C/hoQKaJdh4FNC 7m7wrn605m5hLsm2lRQFuQbe4zra6lFvX15F7DeaguJ9m8bN0cA326Q53bEPU6yB 3/HiH5ADI6qoz9W/qT5DM0/nKvEcbgrr8+DYjatdmOi/1lc7CAyPn7iTQ9lxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCLpq/H2B1whGms4LKqW910PG3ScwHwYDVR0j BBgwFoAUa9Rc2RLUGSvN659rc7AjnKK9RWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzU4ZmI3Yy02N2I4LTRiY2UtOTZkOS1iZTkxMmUzZjczZGQvMC82QkQ0NUNEOTEy RDQxOTJCQ0RFQjlGNkI3M0IwMjM5Q0EyQkQ0NTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIzOUNBMkJE NDU2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzAvNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIz OUNBMkJENDU2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTpclEQdXgZMpVbdW6Qd871sydgRyipIi7H K6ULHpDTVJAMClHyCfYc+86QMgKXkbOy5jEp5SmjUbGGEmddGjqKMrGXgDwn6wFR vFb8m1Ki7uKX6oVrhbGKc941YhK8ycWTJ6GEF330JGTT/0JMJqEwvvb3PUD07lRY m0QLYMdAe80kg/edUesKvyFBu2nuD1mdcSVwaQ/l1l3NFye5haXsEGbFGwC8FeDM nwLHdUS8IotYVdUj0TKRsTLcjNo+dr8me62bmbs751edwSMbnpFZ1mVNJG1BDBbG MSAPBT5JcR++VLOna1Su9gPLJe6/F/Y1a/LLsXXeO7z9BBQeZh0= -----END CERTIFICATE-----Generated at Sat Aug 23 20:45:59 2025 by rpki-client