$ rpki-client -vvf repo-rpki.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/B6E5A7744DCBF917614CBF06789CD9180354FB9B.mft File: B6E5A7744DCBF917614CBF06789CD9180354FB9B.mft (raw, json) Hash identifier: mz8m9oVrezw4e0pBcowt/9iN6rDAaLMcMAIc8XqIbgg= Subject key identifier: D3:8B:87:D5:23:4A:32:3F:B2:B6:E6:53:95:6F:DD:C6:26:88:04:3A Authority key identifier: B6:E5:A7:74:4D:CB:F9:17:61:4C:BF:06:78:9C:D9:18:03:54:FB:9B Certificate issuer: /CN=B6E5A7744DCBF917614CBF06789CD9180354FB9B Certificate serial: 73CC608E28CEF460C17ED56B0D2817A5EDC5AB88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6E5A7744DCBF917614CBF06789CD9180354FB9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/B6E5A7744DCBF917614CBF06789CD9180354FB9B.mft Manifest number: 0471 Signing time: Tue 01 Jul 2025 13:12:00 +0000 Manifest this update: Tue 01 Jul 2025 13:07:00 +0000 Manifest next update: Fri 04 Jul 2025 18:31:00 +0000 Files and hashes: 1: B6E5A7744DCBF917614CBF06789CD9180354FB9B.crl (hash: z9ccNKZDW4xvurPm6M/ZHfrsMWo7XMqwvvTomkNUtfU=) 2: 3130332e3136312e3134362e302f32332d3234203d3e20313431363238.roa (hash: e4qI+/HPpQdGWwN+QNEZ7WelYi1Yg4WS3gRNgD1IxJs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/B6E5A7744DCBF917614CBF06789CD9180354FB9B.crl rsync://repo-rpki.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/B6E5A7744DCBF917614CBF06789CD9180354FB9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6E5A7744DCBF917614CBF06789CD9180354FB9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 18:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:cc:60:8e:28:ce:f4:60:c1:7e:d5:6b:0d:28:17:a5:ed:c5:ab:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6E5A7744DCBF917614CBF06789CD9180354FB9B Validity Not Before: Jul 1 13:07:00 2025 GMT Not After : Jul 4 18:31:00 2025 GMT Subject: CN=D38B87D5234A323FB2B6E653956FDDC62688043A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1c:c1:c7:db:d6:1d:d2:6f:f1:d5:3b:d0:42: 11:10:bf:87:6e:f4:e5:9d:d2:cc:c3:12:fd:fd:24: 76:7e:15:c8:29:19:42:d7:fc:1f:27:04:bb:40:25: aa:f2:ce:e8:3e:3a:82:91:2a:eb:0e:27:e1:7d:ad: 5d:47:6e:9e:ca:f6:d2:99:97:70:5b:9c:44:12:83: 8d:9b:cf:fb:9e:64:67:ec:b0:db:65:df:19:c8:a3: 76:2a:6a:c6:40:d2:01:c1:26:99:a7:1c:da:91:11: f1:5a:63:0c:ca:6a:ca:2b:8f:21:e9:58:eb:02:87: 17:93:f3:51:3e:02:2a:2e:19:a9:8c:dc:21:86:2e: e8:8d:24:2c:d6:dc:4f:ba:30:91:bb:42:65:17:bc: a5:82:a6:ec:cb:45:94:eb:9b:df:5f:83:42:41:a5: 58:1a:a8:8d:5c:f4:6a:28:7a:6a:ce:36:2f:d8:b3: 60:3f:4a:df:09:bb:90:30:2e:1a:26:2f:04:b6:7b: e4:a1:b4:39:f3:97:69:6f:dc:24:d0:00:6c:fb:2a: 5e:15:bd:91:d9:91:af:18:66:fd:60:51:80:9f:b3: 06:db:3a:f3:fb:2d:f3:06:50:1c:fc:82:05:18:d1: fb:8f:8a:b1:16:09:9c:d5:e0:84:1d:48:bb:61:5e: c4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8B:87:D5:23:4A:32:3F:B2:B6:E6:53:95:6F:DD:C6:26:88:04:3A X509v3 Authority Key Identifier: keyid:B6:E5:A7:74:4D:CB:F9:17:61:4C:BF:06:78:9C:D9:18:03:54:FB:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/B6E5A7744DCBF917614CBF06789CD9180354FB9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6E5A7744DCBF917614CBF06789CD9180354FB9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/B6E5A7744DCBF917614CBF06789CD9180354FB9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:26:63:c8:91:2f:92:e6:8c:d6:e3:83:1e:53:0e:bf:7d:8f: d9:3d:bd:1b:3e:84:2b:f5:38:ca:ad:c9:c9:e3:bf:ab:6e:71: bb:33:c4:3f:db:77:96:7c:ce:97:7c:aa:b6:9d:9a:f5:6f:a9: 27:ca:c6:e7:ea:81:62:17:aa:70:39:4b:00:c0:b4:7a:b9:9f: 56:df:d3:06:01:f3:0a:c3:79:5f:ac:85:96:cc:d7:98:0d:93: 5c:32:ef:60:42:55:0f:e6:db:13:73:17:bc:60:da:b8:62:5c: db:e5:9a:c8:a2:78:f7:21:6a:d9:bd:5d:3c:99:40:49:a1:09: 72:4d:54:43:31:e5:8d:2b:47:d5:22:4a:7f:0f:8f:37:bd:92: 98:6d:9b:80:e0:97:97:4e:7a:0b:94:61:31:76:84:e9:bc:eb: 59:04:03:42:81:cd:00:09:f5:84:3a:a7:a5:fa:9b:9e:1d:c6: 2e:6b:f7:f0:85:5b:f3:d4:47:0d:ae:04:d6:a2:e3:59:c6:c2: ac:20:71:17:ae:d6:50:08:44:e3:80:e2:40:91:65:e8:ca:a2: 44:1e:9d:4e:49:bd:e0:4e:30:37:ad:b0:a2:4f:80:67:14:9b: fe:b3:86:e8:08:33:38:c4:61:9d:3c:c4:f3:97:f2:2a:3f:5f: 44:47:0d:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc8xgjijO9GDBftVrDSgXpe3Fq4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZFNUE3NzQ0RENCRjkxNzYxNENCRjA2Nzg5Q0Q5MTgw MzU0RkI5QjAeFw0yNTA3MDExMzA3MDBaFw0yNTA3MDQxODMxMDBaMDMxMTAvBgNV BAMTKEQzOEI4N0Q1MjM0QTMyM0ZCMkI2RTY1Mzk1NkZEREM2MjY4ODA0M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaHMHH29Yd0m/x1TvQQhEQv4du 9OWd0szDEv39JHZ+FcgpGULX/B8nBLtAJaryzug+OoKRKusOJ+F9rV1Hbp7K9tKZ l3BbnEQSg42bz/ueZGfssNtl3xnIo3YqasZA0gHBJpmnHNqREfFaYwzKasorjyHp WOsChxeT81E+AiouGamM3CGGLuiNJCzW3E+6MJG7QmUXvKWCpuzLRZTrm99fg0JB pVgaqI1c9GooemrONi/Ys2A/St8Ju5AwLhomLwS2e+ShtDnzl2lv3CTQAGz7Kl4V vZHZka8YZv1gUYCfswbbOvP7LfMGUBz8ggUY0fuPirEWCZzV4IQdSLthXsQ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU04uH1SNKMj+ytuZTlW/dxiaIBDowHwYDVR0j BBgwFoAUtuWndE3L+RdhTL8GeJzZGANU+5swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDQwMzY3NS01ZmE5LTRlNzMtYjRhOS0yMzIwNjliMzFhZDkvMC9CNkU1QTc3NDRE Q0JGOTE3NjE0Q0JGMDY3ODlDRDkxODAzNTRGQjlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZFNUE3NzQ0RENCRjkxNzYxNENCRjA2Nzg5Q0Q5MTgwMzU0 RkI5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA0MDM2NzUtNWZhOS00ZTczLWI0 YTktMjMyMDY5YjMxYWQ5LzAvQjZFNUE3NzQ0RENCRjkxNzYxNENCRjA2Nzg5Q0Q5 MTgwMzU0RkI5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwmY8iRL5LmjNbjgx5TDr99j9k9vRs+hCv1 OMqtycnjv6tucbszxD/bd5Z8zpd8qradmvVvqSfKxufqgWIXqnA5SwDAtHq5n1bf 0wYB8wrDeV+shZbM15gNk1wy72BCVQ/m2xNzF7xg2rhiXNvlmsiiePchatm9XTyZ QEmhCXJNVEMx5Y0rR9UiSn8Pjze9kphtm4Dgl5dOeguUYTF2hOm861kEA0KBzQAJ 9YQ6p6X6m54dxi5r9/CFW/PURw2uBNai41nGwqwgcReu1lAIROOA4kCRZejKokQe nU5JveBOMDetsKJPgGcUm/6zhugIMzjEYZ08xPOX8io/X0RHDQs= -----END CERTIFICATE-----Generated at Wed Jul 2 06:17:52 2025 by rpki-client