$ rpki-client -vvf repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft File: 6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft (raw, json) Hash identifier: 2dL6KvN85mxIwv/rti6uNt+z7QQ32ctTYLCLYQjwOjY= Subject key identifier: E6:5B:37:70:64:4C:62:DB:8F:5C:B0:13:2D:9E:8A:85:DE:61:8F:C1 Authority key identifier: 6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E Certificate issuer: /CN=6B647F696A9BB5C718605E8922BEF1BEE566F94E Certificate serial: 2B57ACCDE6DCE76C55CE009EDEF0579A04DCC1B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft Manifest number: 03C4 Signing time: Fri 22 Aug 2025 13:01:58 +0000 Manifest this update: Fri 22 Aug 2025 12:56:58 +0000 Manifest next update: Mon 25 Aug 2025 13:41:58 +0000 Files and hashes: 1: 3130332e3132302e36362e302f32342d3234203d3e20313337333733.roa (hash: 8JbwHHtI2+x8Q7Ly9bJcp9ZLV+q/WXTIRy0nL9ot5M8=) 2: 3130332e3132302e36342e302f32332d3234203d3e20313337333733.roa (hash: iFaAxi0PM/hgZKE/oQtyBH44ESJg2ZCsggHfIjGB4BQ=) 3: 3130332e3132302e36372e302f32342d3234203d3e2036393339.roa (hash: qvK+skO3QT34G8uQRqHtG6VsmJ/hmuNcrRmSO599EIs=) 4: 6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl (hash: JKEgkZIOpD9vfHI1EU7ZPza+0dMm7qLjEFbc2l7hYrQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 13:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:57:ac:cd:e6:dc:e7:6c:55:ce:00:9e:de:f0:57:9a:04:dc:c1:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B647F696A9BB5C718605E8922BEF1BEE566F94E Validity Not Before: Aug 22 12:56:58 2025 GMT Not After : Aug 25 13:41:58 2025 GMT Subject: CN=E65B3770644C62DB8F5CB0132D9E8A85DE618FC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:97:4f:b0:52:9b:2b:8d:08:29:2f:4e:05:72: d5:d0:7d:c4:cb:08:34:96:b3:36:9b:76:6e:14:5f: 64:4f:74:36:10:b2:ff:af:04:c2:ce:6c:3f:eb:8f: 3e:e1:e8:c2:e8:6d:88:61:2a:82:2d:32:21:9f:0b: 8e:b1:81:f0:f8:f0:96:52:65:6f:4e:ea:27:7c:cb: 33:8b:f0:1f:a1:a6:ad:5a:9c:73:26:12:72:cc:b3: 72:4b:ce:56:b2:a7:bb:bf:02:55:0a:37:29:4a:bb: 1e:9f:f3:71:bf:f2:51:e8:a9:6b:d2:bf:0d:d4:2c: c4:3b:3b:b7:8a:9c:de:24:a9:68:08:a7:82:50:d3: b1:8c:45:62:2d:dc:e5:b2:25:e6:9f:b9:ba:16:5b: e3:3b:f8:4a:59:54:ce:9b:b2:31:fb:06:a1:73:3f: 32:5b:8e:38:b5:44:fb:c8:64:a3:e1:5f:55:1f:19: bd:22:2d:2e:3d:fa:42:bd:42:54:5e:24:b3:4a:93: f0:a4:51:3f:64:dc:5f:93:a0:7e:b5:b3:24:b4:c0: 14:d0:f3:48:5a:3e:6b:98:50:55:d2:c9:4e:54:2c: 2f:20:cf:d5:67:b9:51:7f:5b:0c:27:58:84:b8:76: 43:56:98:e3:64:3b:7a:7d:65:ae:96:c8:24:fc:35: 68:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5B:37:70:64:4C:62:DB:8F:5C:B0:13:2D:9E:8A:85:DE:61:8F:C1 X509v3 Authority Key Identifier: keyid:6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e7:68:9c:74:4f:6d:9e:1b:d0:f4:6a:d4:ce:a5:91:63:9f: e1:dc:56:c2:e8:80:fd:75:93:62:ac:e0:f8:2e:e7:db:7b:90: de:2d:6d:54:ed:47:de:52:50:8a:d2:ee:75:44:f9:65:2c:d4: ba:3e:a3:0a:48:58:24:1b:c1:ad:1b:e2:a2:1f:3b:5d:9f:1c: 83:af:d0:64:f7:58:c0:82:6a:53:e3:fa:23:94:d3:98:92:de: 99:53:56:9c:17:6d:62:49:51:c9:39:41:83:cd:b6:ef:82:bb: cc:16:c3:7d:f2:cc:a9:89:93:63:e1:d6:1c:d7:48:4f:90:a9: 68:42:d3:7f:50:c6:f7:97:8c:1a:86:67:ee:6f:56:f3:a4:61: bc:39:db:f2:48:78:22:a2:9a:5f:ce:bf:98:13:b8:99:7a:4e: f7:98:3b:c2:2c:0f:15:77:b6:74:a8:e4:73:bd:91:1b:b0:85: 44:0f:b7:9b:e2:73:9e:fe:0c:10:cc:87:97:6d:ad:b6:08:d0: 96:e9:06:50:bb:ee:bf:9f:a4:76:a1:32:15:f4:8b:37:5f:a4: 71:31:c0:a9:33:de:f4:9b:db:2b:c3:18:f7:4e:96:98:17:55: a6:ed:9a:60:70:12:11:45:d3:88:26:a3:10:80:7f:d9:db:22: c7:36:22:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK1eszebc52xVzgCe3vBXmgTcwbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI2NDdGNjk2QTlCQjVDNzE4NjA1RTg5MjJCRUYxQkVF NTY2Rjk0RTAeFw0yNTA4MjIxMjU2NThaFw0yNTA4MjUxMzQxNThaMDMxMTAvBgNV BAMTKEU2NUIzNzcwNjQ0QzYyREI4RjVDQjAxMzJEOUU4QTg1REU2MThGQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdl0+wUpsrjQgpL04FctXQfcTL CDSWszabdm4UX2RPdDYQsv+vBMLObD/rjz7h6MLobYhhKoItMiGfC46xgfD48JZS ZW9O6id8yzOL8B+hpq1anHMmEnLMs3JLzlayp7u/AlUKNylKux6f83G/8lHoqWvS vw3ULMQ7O7eKnN4kqWgIp4JQ07GMRWIt3OWyJeafuboWW+M7+EpZVM6bsjH7BqFz PzJbjji1RPvIZKPhX1UfGb0iLS49+kK9QlReJLNKk/CkUT9k3F+ToH61syS0wBTQ 80haPmuYUFXSyU5ULC8gz9VnuVF/WwwnWIS4dkNWmONkO3p9Za6WyCT8NWibAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5ls3cGRMYtuPXLATLZ6Khd5hj8EwHwYDVR0j BBgwFoAUa2R/aWqbtccYYF6JIr7xvuVm+U4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODZlNDZlYy1kZjVjLTRiNGQtYTMwZS0xMGIyYzY4OGMyZmMvMC82QjY0N0Y2OTZB OUJCNUM3MTg2MDVFODkyMkJFRjFCRUU1NjZGOTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkI2NDdGNjk2QTlCQjVDNzE4NjA1RTg5MjJCRUYxQkVFNTY2 Rjk0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTg2ZTQ2ZWMtZGY1Yy00YjRkLWEz MGUtMTBiMmM2ODhjMmZjLzAvNkI2NDdGNjk2QTlCQjVDNzE4NjA1RTg5MjJCRUYx QkVFNTY2Rjk0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrnaJx0T22eG9D0atTOpZFjn+HcVsLogP11 k2Ks4Pgu59t7kN4tbVTtR95SUIrS7nVE+WUs1Lo+owpIWCQbwa0b4qIfO12fHIOv 0GT3WMCCalPj+iOU05iS3plTVpwXbWJJUck5QYPNtu+Cu8wWw33yzKmJk2Ph1hzX SE+QqWhC039QxveXjBqGZ+5vVvOkYbw52/JIeCKiml/Ov5gTuJl6TveYO8IsDxV3 tnSo5HO9kRuwhUQPt5vic57+DBDMh5dtrbYI0JbpBlC77r+fpHahMhX0izdfpHEx wKkz3vSb2yvDGPdOlpgXVabtmmBwEhFF04gmoxCAf9nbIsc2IsA= -----END CERTIFICATE-----Generated at Sat Aug 23 12:07:22 2025 by rpki-client