$ rpki-client -vvf repo-rpki.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/B6E5A7744DCBF917614CBF06789CD9180354FB9B.mft File: B6E5A7744DCBF917614CBF06789CD9180354FB9B.mft (raw, json) Hash identifier: WXUkxLNlOypXt9C0xVOFx3UXcOJUerhAeX+qbXzeHfQ= Subject key identifier: E6:10:23:61:0E:C2:87:93:E2:D2:92:6B:8B:FA:D0:37:59:D3:A0:4F Authority key identifier: B6:E5:A7:74:4D:CB:F9:17:61:4C:BF:06:78:9C:D9:18:03:54:FB:9B Certificate issuer: /CN=B6E5A7744DCBF917614CBF06789CD9180354FB9B Certificate serial: 18D41BF56A55E464C1F8ED3A5F9C5C2D5875AA29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6E5A7744DCBF917614CBF06789CD9180354FB9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/B6E5A7744DCBF917614CBF06789CD9180354FB9B.mft Manifest number: 0488 Signing time: Thu 21 Aug 2025 21:02:04 +0000 Manifest this update: Thu 21 Aug 2025 20:57:04 +0000 Manifest next update: Mon 25 Aug 2025 06:53:04 +0000 Files and hashes: 1: 3130332e3136312e3134362e302f32332d3234203d3e20313431363238.roa (hash: e4qI+/HPpQdGWwN+QNEZ7WelYi1Yg4WS3gRNgD1IxJs=) 2: B6E5A7744DCBF917614CBF06789CD9180354FB9B.crl (hash: 7uhSv29oYz9P0A0xdRpjrzv4Ju+e1KhFzEqnAc1vO7I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/B6E5A7744DCBF917614CBF06789CD9180354FB9B.crl rsync://repo-rpki.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/B6E5A7744DCBF917614CBF06789CD9180354FB9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6E5A7744DCBF917614CBF06789CD9180354FB9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 06:53:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:d4:1b:f5:6a:55:e4:64:c1:f8:ed:3a:5f:9c:5c:2d:58:75:aa:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6E5A7744DCBF917614CBF06789CD9180354FB9B Validity Not Before: Aug 21 20:57:04 2025 GMT Not After : Aug 25 06:53:04 2025 GMT Subject: CN=E61023610EC28793E2D2926B8BFAD03759D3A04F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:30:e0:0d:85:3e:74:b5:e6:80:06:7b:1e:00: d5:95:80:7b:a9:b4:2d:da:e2:30:3e:ab:52:88:c2: b5:ac:bd:45:d7:5e:f2:e6:51:b2:30:b4:65:7f:6f: 7c:f0:3f:75:1b:a0:32:c3:93:6e:11:5b:a0:4e:b8: 40:f8:3b:56:5e:4b:a8:1b:5d:40:23:87:b6:1f:7c: 74:13:0e:47:1e:18:c9:89:07:0d:91:e2:b9:39:5a: 21:3d:33:51:67:52:af:17:f6:c6:9c:06:f4:5c:5c: 91:65:aa:df:b0:4c:0c:8a:3f:c7:24:57:9c:22:cf: 03:86:20:9f:99:b4:8d:f2:b6:5b:9c:51:d0:b4:dc: 44:31:60:65:0f:1d:96:a9:16:7a:fa:e0:00:6e:1f: c4:0f:84:b1:f2:97:2e:48:13:03:df:e5:ac:44:54: 96:9e:9e:88:54:0b:c9:4a:51:2e:a5:66:7b:d4:d8: c2:bb:29:2c:3c:db:6d:12:27:f0:17:c4:52:4d:19: 92:ce:b1:a3:d9:55:60:69:31:fa:b9:a3:bf:f1:e1: 4a:2b:b8:a6:d9:30:45:5c:dd:19:d1:7e:28:30:de: 82:cf:12:50:a1:18:ab:69:ba:59:9d:04:f4:d0:9c: 83:97:12:7b:30:e4:0d:55:e0:e9:c6:0a:50:d1:6f: 8d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:10:23:61:0E:C2:87:93:E2:D2:92:6B:8B:FA:D0:37:59:D3:A0:4F X509v3 Authority Key Identifier: keyid:B6:E5:A7:74:4D:CB:F9:17:61:4C:BF:06:78:9C:D9:18:03:54:FB:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/B6E5A7744DCBF917614CBF06789CD9180354FB9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6E5A7744DCBF917614CBF06789CD9180354FB9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/B6E5A7744DCBF917614CBF06789CD9180354FB9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:94:a6:ed:8a:82:20:40:5b:58:bd:c3:7a:44:e5:33:6d:d2: 9b:22:39:95:39:ae:98:9c:11:70:7d:a1:94:25:27:64:3b:51: 14:72:cc:7e:89:1e:0f:ed:55:b9:65:d0:2b:67:e1:42:6d:e1: b6:93:b9:ca:06:87:c9:72:73:1c:9b:bf:fa:46:69:0c:19:f0: 4c:f7:6b:4c:bf:63:65:31:c0:1b:f9:cc:f6:7c:3b:43:b9:bd: e6:ed:a8:60:ec:f0:8e:9f:ca:55:b2:22:eb:84:63:67:dc:f8: 86:81:0a:63:82:e0:13:e3:5e:9a:cd:9b:b1:68:1f:41:fe:df: 11:5c:c0:96:97:ac:08:91:1d:25:2c:0a:95:40:63:af:8b:8b: f8:ef:0d:50:f4:5e:9a:44:1a:94:86:4c:cd:3f:93:55:d6:53: c0:f5:0a:06:31:ed:3d:c4:b0:c9:31:8c:db:66:64:02:ba:e5: ed:d5:f1:b4:9d:5a:8e:9e:f7:64:c4:48:50:db:7c:a8:f8:24: 04:c5:3d:9e:ac:e1:8e:cf:6a:ab:e4:0e:63:73:bb:82:62:d0: a3:bb:55:0b:bc:42:fa:0b:2c:b8:da:2d:8f:c3:17:02:6f:a2: 0d:36:58:16:a1:eb:73:4b:36:36:8d:f7:1d:21:e8:40:15:b5: cb:d1:52:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGNQb9WpV5GTB+O06X5xcLVh1qikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZFNUE3NzQ0RENCRjkxNzYxNENCRjA2Nzg5Q0Q5MTgw MzU0RkI5QjAeFw0yNTA4MjEyMDU3MDRaFw0yNTA4MjUwNjUzMDRaMDMxMTAvBgNV BAMTKEU2MTAyMzYxMEVDMjg3OTNFMkQyOTI2QjhCRkFEMDM3NTlEM0EwNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoMOANhT50teaABnseANWVgHup tC3a4jA+q1KIwrWsvUXXXvLmUbIwtGV/b3zwP3UboDLDk24RW6BOuED4O1ZeS6gb XUAjh7YffHQTDkceGMmJBw2R4rk5WiE9M1FnUq8X9sacBvRcXJFlqt+wTAyKP8ck V5wizwOGIJ+ZtI3ytlucUdC03EQxYGUPHZapFnr64ABuH8QPhLHyly5IEwPf5axE VJaenohUC8lKUS6lZnvU2MK7KSw8220SJ/AXxFJNGZLOsaPZVWBpMfq5o7/x4Uor uKbZMEVc3RnRfigw3oLPElChGKtpulmdBPTQnIOXEnsw5A1V4OnGClDRb43pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5hAjYQ7Ch5Pi0pJri/rQN1nToE8wHwYDVR0j BBgwFoAUtuWndE3L+RdhTL8GeJzZGANU+5swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDQwMzY3NS01ZmE5LTRlNzMtYjRhOS0yMzIwNjliMzFhZDkvMC9CNkU1QTc3NDRE Q0JGOTE3NjE0Q0JGMDY3ODlDRDkxODAzNTRGQjlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZFNUE3NzQ0RENCRjkxNzYxNENCRjA2Nzg5Q0Q5MTgwMzU0 RkI5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA0MDM2NzUtNWZhOS00ZTczLWI0 YTktMjMyMDY5YjMxYWQ5LzAvQjZFNUE3NzQ0RENCRjkxNzYxNENCRjA2Nzg5Q0Q5 MTgwMzU0RkI5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISUpu2KgiBAW1i9w3pE5TNt0psiOZU5rpic EXB9oZQlJ2Q7URRyzH6JHg/tVbll0Ctn4UJt4baTucoGh8lycxybv/pGaQwZ8Ez3 a0y/Y2UxwBv5zPZ8O0O5vebtqGDs8I6fylWyIuuEY2fc+IaBCmOC4BPjXprNm7Fo H0H+3xFcwJaXrAiRHSUsCpVAY6+Li/jvDVD0XppEGpSGTM0/k1XWU8D1CgYx7T3E sMkxjNtmZAK65e3V8bSdWo6e92TESFDbfKj4JATFPZ6s4Y7PaqvkDmNzu4Ji0KO7 VQu8QvoLLLjaLY/DFwJvog02WBah63NLNjaN9x0h6EAVtcvRUnI= -----END CERTIFICATE-----Generated at Sat Aug 23 22:14:31 2025 by rpki-client