$ rpki-client -vvf repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft File: 6886844AB176920850E0984917E9713667D0A025.mft (raw, json) Hash identifier: Erax/xwKi1ArAdXDvYLPO8emZphwEis+GhoszrFTvTc= Subject key identifier: 3E:7F:A4:FB:EA:34:52:73:80:1E:08:F1:DD:CA:0D:DB:FF:C9:B4:A7 Authority key identifier: 68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25 Certificate issuer: /CN=6886844AB176920850E0984917E9713667D0A025 Certificate serial: 6625D27081999BE67AA7E47BD5FFE131BD9E363F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft Manifest number: 01B1 Signing time: Thu 21 Aug 2025 23:32:19 +0000 Manifest this update: Thu 21 Aug 2025 23:27:19 +0000 Manifest next update: Mon 25 Aug 2025 09:14:19 +0000 Files and hashes: 1: 6886844AB176920850E0984917E9713667D0A025.crl (hash: iz4AyB5EcSeXLY17h/ICCBXNF0406Ql0JLljsaYnzEs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 09:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:25:d2:70:81:99:9b:e6:7a:a7:e4:7b:d5:ff:e1:31:bd:9e:36:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6886844AB176920850E0984917E9713667D0A025 Validity Not Before: Aug 21 23:27:19 2025 GMT Not After : Aug 25 09:14:19 2025 GMT Subject: CN=3E7FA4FBEA345273801E08F1DDCA0DDBFFC9B4A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:66:47:3b:ab:c5:49:50:2d:4a:83:4c:69:b7: 43:5d:3d:aa:db:b0:a8:75:81:58:52:c1:e9:67:78: 3a:00:e2:4b:9c:64:2a:bd:58:24:42:66:fc:38:05: 73:55:bc:59:f8:d3:63:97:25:05:eb:9a:c1:bd:49: 5b:05:8b:5f:22:99:ba:83:69:33:ad:99:46:67:ce: ff:8d:ca:02:27:68:c3:e0:12:bf:40:22:72:fe:51: f8:f6:b7:a6:c0:2b:49:64:00:e9:24:10:e8:65:4f: cb:c7:51:4b:12:fd:92:b7:20:50:d5:6c:17:a8:d3: ff:a1:44:23:cf:e7:39:29:7a:46:62:ca:00:5d:49: 38:66:fd:6d:33:3e:13:85:df:0c:d5:6d:3c:74:cb: 1f:51:42:0d:f0:5d:b9:fb:df:ca:be:b4:26:c7:90: 0c:80:f2:6c:89:7a:09:4d:d9:41:32:4c:d5:54:4e: 9e:2d:3b:c8:03:fe:db:e0:a0:69:c9:7a:da:ac:a5: 51:b1:a8:b4:2f:1a:aa:c8:0c:fa:63:b3:b6:1d:25: 7c:ae:ee:a4:da:54:7d:8c:c7:a7:53:a9:6f:36:61: a6:54:84:15:77:0e:5d:2d:4d:56:49:58:3a:55:8e: 16:83:6c:1e:9a:a0:da:ac:0b:f8:c0:e1:56:fa:4e: 6c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7F:A4:FB:EA:34:52:73:80:1E:08:F1:DD:CA:0D:DB:FF:C9:B4:A7 X509v3 Authority Key Identifier: keyid:68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:39:35:10:97:c1:36:6d:ad:94:af:cd:2f:54:9b:5e:b5:bc: 6c:20:20:7c:ef:be:fd:5d:94:70:57:64:59:36:47:a6:e3:4a: 1a:87:af:98:59:46:2e:45:79:6b:f3:5a:7a:0f:6b:92:67:07: 91:ae:45:de:f4:60:02:2c:b3:30:15:3a:aa:27:50:75:29:40: 66:04:2e:4f:03:cf:b4:20:44:26:55:5d:19:2d:15:ae:cb:42: 1b:db:e7:b6:45:6f:58:3f:a3:f7:fe:86:e2:24:37:46:de:41: d8:49:87:a5:6e:d4:a8:db:d8:bd:8b:5c:a4:98:6b:f0:1e:cf: 22:46:2c:d9:07:73:83:3f:3a:3e:5e:3b:e1:41:45:0d:c4:81: 81:8e:00:3b:9f:9c:75:b7:79:76:39:5c:73:c1:8b:7a:9d:b7: 17:a5:ff:38:99:15:82:fc:f3:f2:ea:39:5a:dc:04:d2:d1:61: 69:08:46:5d:0d:1d:23:89:bc:58:88:c3:57:74:1a:99:60:89: 5d:cd:13:30:b1:81:35:ab:3d:22:ee:f1:0e:b0:03:a6:95:ff: 18:87:7a:05:7b:a4:f3:5f:d9:0f:1d:4f:a4:88:ac:63:16:a7: e0:5d:6d:31:7a:87:bc:f2:85:98:f7:bb:45:96:8c:7e:f5:d2: f6:1f:ce:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZiXScIGZm+Z6p+R71f/hMb2eNj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcxMzY2 N0QwQTAyNTAeFw0yNTA4MjEyMzI3MTlaFw0yNTA4MjUwOTE0MTlaMDMxMTAvBgNV BAMTKDNFN0ZBNEZCRUEzNDUyNzM4MDFFMDhGMUREQ0EwRERCRkZDOUI0QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqZkc7q8VJUC1Kg0xpt0NdParb sKh1gVhSwelneDoA4kucZCq9WCRCZvw4BXNVvFn402OXJQXrmsG9SVsFi18imbqD aTOtmUZnzv+NygInaMPgEr9AInL+Ufj2t6bAK0lkAOkkEOhlT8vHUUsS/ZK3IFDV bBeo0/+hRCPP5zkpekZiygBdSThm/W0zPhOF3wzVbTx0yx9RQg3wXbn738q+tCbH kAyA8myJeglN2UEyTNVUTp4tO8gD/tvgoGnJetqspVGxqLQvGqrIDPpjs7YdJXyu 7qTaVH2Mx6dTqW82YaZUhBV3Dl0tTVZJWDpVjhaDbB6aoNqsC/jA4Vb6TmxnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPn+k++o0UnOAHgjx3coN2//JtKcwHwYDVR0j BBgwFoAUaIaESrF2kghQ4JhJF+lxNmfQoCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDU1Y2IyOS01Mjc2LTRhNzktYjMzYS1jYzUxNTE3YmRkMTgvMC82ODg2ODQ0QUIx NzY5MjA4NTBFMDk4NDkxN0U5NzEzNjY3RDBBMDI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcxMzY2N0Qw QTAyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ1NWNiMjktNTI3Ni00YTc5LWIz M2EtY2M1MTUxN2JkZDE4LzAvNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcx MzY2N0QwQTAyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACo5NRCXwTZtrZSvzS9Um161vGwgIHzvvv1d lHBXZFk2R6bjShqHr5hZRi5FeWvzWnoPa5JnB5GuRd70YAIsszAVOqonUHUpQGYE Lk8Dz7QgRCZVXRktFa7LQhvb57ZFb1g/o/f+huIkN0beQdhJh6Vu1Kjb2L2LXKSY a/AezyJGLNkHc4M/Oj5eO+FBRQ3EgYGOADufnHW3eXY5XHPBi3qdtxel/ziZFYL8 8/LqOVrcBNLRYWkIRl0NHSOJvFiIw1d0GplgiV3NEzCxgTWrPSLu8Q6wA6aV/xiH egV7pPNf2Q8dT6SIrGMWp+BdbTF6h7zyhZj3u0WWjH710vYfzoE= -----END CERTIFICATE-----Generated at Sat Aug 23 12:32:41 2025 by rpki-client