$ rpki-client -vvf repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft File: 6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft (raw, json) Hash identifier: ke3UwRLI19Ob6HMJuch/ze1xl75rrAYHB6fBcYANM2I= Subject key identifier: F6:53:B0:55:6F:5A:EC:82:47:7C:5D:19:7A:5B:56:27:C0:3C:85:E2 Authority key identifier: 6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8 Certificate issuer: /CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8 Certificate serial: 067F8014E86081BE4830C523BC5A1502C0FA7721 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft Manifest number: 0448 Signing time: Thu 21 Aug 2025 09:31:22 +0000 Manifest this update: Thu 21 Aug 2025 09:26:22 +0000 Manifest next update: Sun 24 Aug 2025 16:53:22 +0000 Files and hashes: 1: 3130332e34322e3131382e302f32332d3233203d3e203234353139.roa (hash: HHqxnvo/jJQgCNZXpj544snDh99Z+fGyg/N/7YitJ5U=) 2: 3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa (hash: FZlGjWO2QHYzsNelbvnW9T+cFLiq8WyISsSRf/rM5oc=) 3: 3130332e34322e3131372e302f32342d3234203d3e20313431393638.roa (hash: crt2F/X+RQnPJrrglVZI7zbLddWcN6j7uVz/Xw4zeS8=) 4: 6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl (hash: J8iNK/493fXVFEFBC24U67WinINiUzn+8ZZe9OC50JQ=) 5: 3130332e34322e3131392e302f32342d3234203d3e203234353139.roa (hash: tlMLEqQhJ1FXYwOLCCvAFRe52QGRRF02EIII3xVkWN0=) 6: 3130332e34322e3131382e302f32342d3234203d3e203234353139.roa (hash: vCgDnA33NAkXtanYsGnqZiMWsel/bsPJTrf5ZDKywHU=) 7: 3130332e34322e3131362e302f32332d3233203d3e20313431393638.roa (hash: deSk7dhV94Q/bI20PuBTuLDi+FeXmglvV/8pK3EJY0A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 16:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:7f:80:14:e8:60:81:be:48:30:c5:23:bc:5a:15:02:c0:fa:77:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8 Validity Not Before: Aug 21 09:26:22 2025 GMT Not After : Aug 24 16:53:22 2025 GMT Subject: CN=F653B0556F5AEC82477C5D197A5B5627C03C85E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5c:ef:47:9b:f7:3b:8a:a7:22:ed:36:a1:ca: 4a:aa:7e:00:ea:c7:f7:35:36:cb:fe:ab:b5:ec:21: de:ce:70:e5:f0:ec:75:93:da:0b:68:8d:74:87:68: 4c:8c:bb:2a:5f:27:38:1f:00:22:fb:ae:a0:b7:5b: eb:8b:72:c7:b5:07:68:cb:82:13:c1:69:3f:35:b6: e1:6d:ed:79:f5:de:d1:ed:f0:c1:12:0d:a9:63:64: e8:9c:2b:da:1e:5c:a3:ca:04:05:9a:1f:78:bd:17: 63:57:ba:b2:06:9a:d7:fe:8e:2f:77:70:06:96:57: 33:0c:bd:67:fa:3f:c7:d6:7d:aa:13:27:3a:f5:a2: 75:4a:32:df:db:e0:48:67:fa:a4:ca:89:04:cc:f9: 40:26:4e:97:04:98:f2:ef:2c:c2:5e:7f:d3:f7:60: 7c:b2:6c:a0:13:8f:29:98:4b:fa:b4:e9:9c:85:e1: 91:7a:2c:95:99:c0:a3:bd:4f:7f:13:9c:30:3d:a2: dd:4a:a3:1b:7c:54:dd:da:be:8e:fa:ce:a9:62:1d: 6f:b2:af:5f:06:ce:8c:48:09:61:74:f6:1e:3d:47: 7b:69:74:54:2f:87:83:29:b6:81:c0:af:0a:9f:e5: 30:b4:b8:67:bf:0f:14:6b:6f:d6:ab:b0:5a:b8:f0: 5c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:53:B0:55:6F:5A:EC:82:47:7C:5D:19:7A:5B:56:27:C0:3C:85:E2 X509v3 Authority Key Identifier: keyid:6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:1b:ba:7f:f2:b2:ab:c7:ca:be:1f:bd:8e:c5:d1:e3:07:55: b3:49:d9:b6:64:0f:d1:9b:b5:73:07:71:ad:01:65:8f:87:40: 58:78:9b:c3:be:52:25:9f:95:99:a9:2c:d1:d9:2c:44:41:61: cc:9d:02:4e:4e:83:96:3e:24:fd:e4:3f:b9:60:ca:37:e5:19: b3:50:63:ad:8c:c0:04:23:40:20:3d:fa:78:a6:53:8f:ce:2f: 2a:15:58:47:87:83:8d:67:5f:e2:f4:f0:36:99:e1:a4:15:2b: 5b:aa:5b:6a:04:b7:71:dd:56:87:7c:e2:45:4f:5b:21:51:a7: 1a:ce:5e:36:72:cd:e2:d9:b8:43:c1:98:c1:7f:1b:56:60:63: 4f:4f:5e:37:47:24:2e:9d:23:3c:2d:b0:8a:ac:b9:35:5f:a0: a5:b5:7f:a5:1c:34:da:5b:1a:39:b2:9f:de:c3:9e:0d:42:64: 6c:43:fd:f9:35:14:20:89:e4:59:d5:77:73:07:4d:3a:e6:7c: 3a:74:36:e3:3d:bc:12:f4:03:46:fc:3a:5c:4e:68:2c:08:5e: 0b:fc:cd:95:cf:af:a9:5e:0d:2d:e4:e7:26:8e:a9:7d:ba:19: 47:16:3a:52:af:37:a2:be:b4:4c:45:ce:bc:bd:80:dc:b1:db: 0e:af:bc:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBn+AFOhggb5IMMUjvFoVAsD6dyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY0ODVBREFEMjA2ODMzN0ZERjhCMjhGRjAwN0JDREM1 QjQ5OTlEODAeFw0yNTA4MjEwOTI2MjJaFw0yNTA4MjQxNjUzMjJaMDMxMTAvBgNV BAMTKEY2NTNCMDU1NkY1QUVDODI0NzdDNUQxOTdBNUI1NjI3QzAzQzg1RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcXO9Hm/c7iqci7TahykqqfgDq x/c1Nsv+q7XsId7OcOXw7HWT2gtojXSHaEyMuypfJzgfACL7rqC3W+uLcse1B2jL ghPBaT81tuFt7Xn13tHt8MESDaljZOicK9oeXKPKBAWaH3i9F2NXurIGmtf+ji93 cAaWVzMMvWf6P8fWfaoTJzr1onVKMt/b4Ehn+qTKiQTM+UAmTpcEmPLvLMJef9P3 YHyybKATjymYS/q06ZyF4ZF6LJWZwKO9T38TnDA9ot1Koxt8VN3avo76zqliHW+y r18GzoxICWF09h49R3tpdFQvh4MptoHArwqf5TC0uGe/DxRrb9arsFq48FwjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9lOwVW9a7IJHfF0ZeltWJ8A8heIwHwYDVR0j BBgwFoAUb0ha2tIGgzf9+LKP8Ae83FtJmdgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjU4OTM0ZC0xYjAwLTQ0ODktOTJlZC0xY2E2ZGM0YjI5MGYvMC82RjQ4NUFEQUQy MDY4MzM3RkRGOEIyOEZGMDA3QkNEQzVCNDk5OUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkY0ODVBREFEMjA2ODMzN0ZERjhCMjhGRjAwN0JDREM1QjQ5 OTlEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY1ODkzNGQtMWIwMC00NDg5LTky ZWQtMWNhNmRjNGIyOTBmLzAvNkY0ODVBREFEMjA2ODMzN0ZERjhCMjhGRjAwN0JD REM1QjQ5OTlEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIbun/ysqvHyr4fvY7F0eMHVbNJ2bZkD9Gb tXMHca0BZY+HQFh4m8O+UiWflZmpLNHZLERBYcydAk5Og5Y+JP3kP7lgyjflGbNQ Y62MwAQjQCA9+nimU4/OLyoVWEeHg41nX+L08DaZ4aQVK1uqW2oEt3HdVod84kVP WyFRpxrOXjZyzeLZuEPBmMF/G1ZgY09PXjdHJC6dIzwtsIqsuTVfoKW1f6UcNNpb Gjmyn97Dng1CZGxD/fk1FCCJ5FnVd3MHTTrmfDp0NuM9vBL0A0b8OlxOaCwIXgv8 zZXPr6leDS3k5yaOqX26GUcWOlKvN6K+tExFzry9gNyx2w6vvM8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:30:39 2025 by rpki-client