$ rpki-client -vvf repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft File: 6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft (raw, json) Hash identifier: jtfkIckktYA7sHgarjZpWwKFalUT2bAldvoeOdi7O/g= Subject key identifier: 7A:BF:87:3E:E9:FA:BF:74:AB:49:2B:C8:8D:5E:AF:C9:F6:9F:B1:08 Authority key identifier: 6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B Certificate issuer: /CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B Certificate serial: 54D7FFCE0DE0EA05439A4EC7E653C7A389AB7B2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft Manifest number: 018C Signing time: Fri 22 Aug 2025 10:11:48 +0000 Manifest this update: Fri 22 Aug 2025 10:06:48 +0000 Manifest next update: Mon 25 Aug 2025 19:00:48 +0000 Files and hashes: 1: 3130332e3232332e302e302f32322d3232203d3e20313335343435.roa (hash: Gp+3hoUQHoSs7BqoZ98uo/JPIvevE7xLEnrTa4hmSmU=) 2: 3130332e3232332e332e302f32342d3234203d3e20313335343435.roa (hash: 3ivbK9KpjZVb/XVJskMLhHcZHY/PxWUUM4YeUyN+bNw=) 3: 3130332e3232332e302e302f32342d3234203d3e20313335343435.roa (hash: Ysc9Qtc/MJl5dYJb0Qhr9xILFagM64+bvGrjMt7zT9k=) 4: 6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl (hash: x5wy5YQyyiZ2CFCaBFC1B3g2rqeK+DWjNey8wbW4b1I=) 5: 3130332e3232332e312e302f32342d3234203d3e20313335343435.roa (hash: Meqto9gp7Tw3/wVHdB4HIOhRI0iUBfsDLYkbvujxqHk=) 6: 3130332e3232332e322e302f32342d3234203d3e20313335343435.roa (hash: kiwAboKBcY+KUfdKJ8QPyYYmhUR1O0Z8PHji6TPQSyQ=) 7: 3130332e3232332e322e302f32332d3233203d3e20313335343435.roa (hash: 1514IP+F3fs/wWPY76J3M+VGkLwDN+TVOPCGmIn0YeI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 19:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d7:ff:ce:0d:e0:ea:05:43:9a:4e:c7:e6:53:c7:a3:89:ab:7b:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B Validity Not Before: Aug 22 10:06:48 2025 GMT Not After : Aug 25 19:00:48 2025 GMT Subject: CN=7ABF873EE9FABF74AB492BC88D5EAFC9F69FB108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:92:81:44:7d:4a:d8:86:42:bf:24:57:54:60: 2e:75:b9:b0:2b:ca:35:cf:c5:51:1c:56:69:30:5c: 2c:02:32:52:94:ec:51:ee:3a:ac:1a:47:d1:f6:51: db:32:76:e6:6e:06:74:e3:80:ad:aa:90:cd:97:52: 14:ce:0c:66:60:ea:37:f0:66:c7:5d:f9:3b:24:cb: d7:cf:18:fe:42:b7:fd:08:3d:99:c8:da:94:c2:1d: 0e:8a:0f:94:46:16:b7:cc:44:1d:ae:21:f0:53:0a: 45:ef:12:50:45:92:bf:9d:cc:d1:d2:76:8a:ee:8a: e3:f6:48:59:57:b8:c4:94:a2:ea:2d:e2:e5:a3:62: f4:6c:28:9e:c4:3a:01:4a:d3:56:c1:30:6f:b6:89: 88:bb:39:15:20:7f:4f:1b:f6:bf:40:bf:64:2f:58: 24:e1:16:68:ce:b4:1a:6e:aa:25:c2:87:85:78:8f: f8:23:b9:2c:19:db:0b:67:a6:e1:e2:59:cd:3f:28: f1:04:f5:1f:88:a3:4c:dd:8e:b9:9f:55:43:63:51: c6:7f:c3:d5:1b:c3:d7:ce:bb:e9:02:67:07:f7:ef: e1:bb:8c:e0:83:60:97:9d:d6:8d:85:41:76:30:22: d2:fb:aa:c7:30:e4:30:07:fe:2c:8b:f8:b8:49:0c: dc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:BF:87:3E:E9:FA:BF:74:AB:49:2B:C8:8D:5E:AF:C9:F6:9F:B1:08 X509v3 Authority Key Identifier: keyid:6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:25:2e:86:f8:45:d7:7f:d3:06:ca:d7:8e:3a:82:76:4e:81: 3f:c8:a2:7a:b2:8d:4e:f0:5f:be:77:42:ea:a1:97:63:7a:ad: 1a:0c:78:bb:88:49:73:30:d9:f0:93:5a:31:6d:03:10:d6:a6: 0e:e8:2a:de:22:2c:b8:46:db:12:19:64:64:f4:8d:9c:e6:db: a9:da:f6:07:3d:0e:eb:12:57:16:0f:a1:b4:83:06:52:f1:fc: e8:b7:26:b2:1f:78:1a:4c:ba:1c:ac:e9:6a:e4:1d:5d:11:f0: bb:35:5f:64:22:13:a3:ea:31:be:97:b1:84:9b:18:ff:54:a8: ea:ca:51:64:0c:f5:31:b8:06:ee:2b:d6:8b:0c:af:99:d4:4a: 93:20:3d:d4:22:7c:51:bd:55:ce:3e:aa:93:96:f5:2d:9e:cc: 01:f1:12:ea:31:dc:16:b7:a8:b3:6a:2e:cc:e4:aa:51:35:e6: 03:27:86:e9:22:eb:8d:83:b4:d1:53:53:4f:a5:1a:64:a5:74: 8a:80:16:0f:06:5d:6a:1d:49:45:c1:5f:44:78:d0:01:e7:11: 8b:85:40:5a:30:77:44:1c:15:ff:7d:66:1d:fa:56:17:64:eb: 67:f8:7f:57:6f:43:ef:37:0b:45:a9:89:3b:f1:ea:f1:81:e8: 08:2c:e4:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVNf/zg3g6gVDmk7H5lPHo4mreyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI0RDE0RkM2RDM3NEFGQ0NBQjE5MEM1NERERjNBMUE5 RDREOTMwQjAeFw0yNTA4MjIxMDA2NDhaFw0yNTA4MjUxOTAwNDhaMDMxMTAvBgNV BAMTKDdBQkY4NzNFRTlGQUJGNzRBQjQ5MkJDODhENUVBRkM5RjY5RkIxMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCkoFEfUrYhkK/JFdUYC51ubAr yjXPxVEcVmkwXCwCMlKU7FHuOqwaR9H2UdsyduZuBnTjgK2qkM2XUhTODGZg6jfw Zsdd+Tsky9fPGP5Ct/0IPZnI2pTCHQ6KD5RGFrfMRB2uIfBTCkXvElBFkr+dzNHS doruiuP2SFlXuMSUouot4uWjYvRsKJ7EOgFK01bBMG+2iYi7ORUgf08b9r9Av2Qv WCThFmjOtBpuqiXCh4V4j/gjuSwZ2wtnpuHiWc0/KPEE9R+Io0zdjrmfVUNjUcZ/ w9Ubw9fOu+kCZwf37+G7jOCDYJed1o2FQXYwItL7qscw5DAH/iyL+LhJDNxzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUer+HPun6v3SrSSvIjV6vyfafsQgwHwYDVR0j BBgwFoAUa00U/G03SvzKsZDFTd86Gp1NkwswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzU0NWI4NS05Mjc0LTQ3MGEtYWQyNy0yNDY5ZTlkMTU1YmMvMC82QjREMTRGQzZE Mzc0QUZDQ0FCMTkwQzU0RERGM0ExQTlENEQ5MzBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkI0RDE0RkM2RDM3NEFGQ0NBQjE5MEM1NERERjNBMUE5RDRE OTMwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjc1NDViODUtOTI3NC00NzBhLWFk MjctMjQ2OWU5ZDE1NWJjLzAvNkI0RDE0RkM2RDM3NEFGQ0NBQjE5MEM1NERERjNB MUE5RDREOTMwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJklLob4Rdd/0wbK1446gnZOgT/IonqyjU7w X753Quqhl2N6rRoMeLuISXMw2fCTWjFtAxDWpg7oKt4iLLhG2xIZZGT0jZzm26na 9gc9DusSVxYPobSDBlLx/Oi3JrIfeBpMuhys6WrkHV0R8Ls1X2QiE6PqMb6XsYSb GP9UqOrKUWQM9TG4Bu4r1osMr5nUSpMgPdQifFG9Vc4+qpOW9S2ezAHxEuox3Ba3 qLNqLszkqlE15gMnhuki642DtNFTU0+lGmSldIqAFg8GXWodSUXBX0R40AHnEYuF QFowd0QcFf99Zh36Vhdk62f4f1dvQ+83C0WpiTvx6vGB6Ags5LU= -----END CERTIFICATE-----Generated at Sat Aug 23 17:47:22 2025 by rpki-client