$ rpki-client -vvf repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.mft File: C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.mft (raw, json) Hash identifier: Ft2rW64kFmPVEw8pMO/FN/d/EByBC3ApPp4dLvxG7KI= Subject key identifier: 85:6C:4A:DF:F7:D5:94:9C:53:D4:8E:24:9A:5B:1A:90:E5:06:C2:12 Authority key identifier: C6:E9:3E:AA:6C:14:3C:47:BB:6C:1F:02:2B:52:4F:9C:08:9D:B6:F0 Certificate issuer: /CN=C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0 Certificate serial: 7CB37145B950B57AC6D6F2A191B7A0CA55FAC2CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.mft Manifest number: 043E Signing time: Sun 29 Jun 2025 02:12:08 +0000 Manifest this update: Sun 29 Jun 2025 02:07:08 +0000 Manifest next update: Wed 02 Jul 2025 02:47:08 +0000 Files and hashes: 1: C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.crl (hash: rcJcDA7shlHyswobXKR7yz5h9D05mEQZNkam5ZkcuUA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.crl rsync://repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 02:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:b3:71:45:b9:50:b5:7a:c6:d6:f2:a1:91:b7:a0:ca:55:fa:c2:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0 Validity Not Before: Jun 29 02:07:08 2025 GMT Not After : Jul 2 02:47:08 2025 GMT Subject: CN=856C4ADFF7D5949C53D48E249A5B1A90E506C212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:14:bc:9f:7a:40:be:80:85:23:cf:7b:0f:4d: c9:36:f4:4e:e1:fb:22:21:c4:0d:94:49:f0:25:ee: ab:2a:0a:88:c6:f1:fa:10:ed:02:84:1b:f7:e4:76: 58:c5:bb:1a:65:b8:35:04:60:4d:cc:05:83:dd:b8: de:d8:1a:57:7a:9c:ab:51:17:56:90:d1:66:d7:00: ba:36:4c:bd:bf:fb:e8:c6:aa:98:2b:f9:e7:2f:b3: 4f:8e:62:2c:38:2f:f6:58:ac:81:80:2f:77:da:74: 96:5a:8e:90:6d:a5:fd:a6:61:f9:84:5e:cc:33:ec: 92:27:3f:f9:ff:f8:c7:8c:23:be:93:17:76:6f:6f: 65:4f:80:7f:1e:5b:30:d4:a4:5e:5b:2f:94:0a:1c: 4a:1a:00:c2:08:58:5c:1d:ce:76:55:3e:3f:2b:4d: f3:97:93:98:54:48:a7:52:5d:11:52:ce:0d:b6:e3: f3:28:fe:4f:4e:a5:09:56:5b:a6:0e:55:90:0c:89: 68:17:8c:3c:ae:3d:cf:28:d3:b2:77:41:16:cd:4a: ba:7a:3c:75:1b:98:f6:1d:77:c3:31:a0:7f:e0:31: c6:4e:0b:74:fb:60:c2:ae:d0:25:a3:5d:32:fc:b3: 4c:7c:86:f2:e7:f7:31:6d:2e:74:92:a2:f6:74:5f: 31:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6C:4A:DF:F7:D5:94:9C:53:D4:8E:24:9A:5B:1A:90:E5:06:C2:12 X509v3 Authority Key Identifier: keyid:C6:E9:3E:AA:6C:14:3C:47:BB:6C:1F:02:2B:52:4F:9C:08:9D:B6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:07:2d:26:52:a9:eb:92:cd:b2:a8:04:d4:7d:37:4b:d4:d3: a1:5b:74:b7:50:f9:9b:b0:48:1c:d3:99:6b:be:2b:6a:13:bd: 7c:af:69:15:24:0c:bf:8d:55:7c:4f:13:05:65:7e:28:17:70: e8:aa:66:76:ee:04:79:87:34:6b:e2:c7:72:cd:3c:ea:16:dd: 12:df:91:5e:c1:5b:2a:1f:ac:43:ac:f7:ea:0f:5e:91:b3:e9: 0d:5f:c5:f6:49:a7:46:34:07:bc:f2:30:47:c7:d0:28:89:ab: 75:ef:f3:71:ba:a4:0f:3b:c0:bf:86:93:4d:d3:7f:96:4b:aa: 29:e0:d6:ab:67:8e:ad:d8:a6:52:99:7e:a4:fe:e1:28:e2:79: 4e:eb:ac:18:e6:8a:23:5f:38:a0:8e:83:59:f4:a2:c3:5a:9f: 5f:9e:33:5c:94:09:99:d6:22:a2:90:37:a9:9b:43:20:d4:8e: 55:e1:1a:73:cb:49:14:d0:5c:f2:c1:fe:00:9d:a9:33:d1:a4: 50:67:c9:77:17:06:19:d3:d2:35:fa:6c:48:76:9e:97:ff:53: 7c:c9:10:86:c5:52:2c:97:3a:7b:b0:80:ee:f4:f0:4b:e3:75: b4:da:46:22:50:a2:1a:27:eb:67:7c:b0:6b:82:dc:b1:9d:4b: d4:ea:9c:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfLNxRblQtXrG1vKhkbegylX6ws4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZFOTNFQUE2QzE0M0M0N0JCNkMxRjAyMkI1MjRGOUMw ODlEQjZGMDAeFw0yNTA2MjkwMjA3MDhaFw0yNTA3MDIwMjQ3MDhaMDMxMTAvBgNV BAMTKDg1NkM0QURGRjdENTk0OUM1M0Q0OEUyNDlBNUIxQTkwRTUwNkMyMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5FLyfekC+gIUjz3sPTck29E7h +yIhxA2USfAl7qsqCojG8foQ7QKEG/fkdljFuxpluDUEYE3MBYPduN7YGld6nKtR F1aQ0WbXALo2TL2/++jGqpgr+ecvs0+OYiw4L/ZYrIGAL3fadJZajpBtpf2mYfmE Xswz7JInP/n/+MeMI76TF3Zvb2VPgH8eWzDUpF5bL5QKHEoaAMIIWFwdznZVPj8r TfOXk5hUSKdSXRFSzg224/Mo/k9OpQlWW6YOVZAMiWgXjDyuPc8o07J3QRbNSrp6 PHUbmPYdd8MxoH/gMcZOC3T7YMKu0CWjXTL8s0x8hvLn9zFtLnSSovZ0XzEJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhWxK3/fVlJxT1I4kmlsakOUGwhIwHwYDVR0j BBgwFoAUxuk+qmwUPEe7bB8CK1JPnAidtvAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmE2YmNhOC0zNzQxLTQ0ZWYtOGE1Zi0wZTc2YjgwZDQxNDYvMC9DNkU5M0VBQTZD MTQzQzQ3QkI2QzFGMDIyQjUyNEY5QzA4OURCNkYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzZFOTNFQUE2QzE0M0M0N0JCNkMxRjAyMkI1MjRGOUMwODlE QjZGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZhNmJjYTgtMzc0MS00NGVmLThh NWYtMGU3NmI4MGQ0MTQ2LzAvQzZFOTNFQUE2QzE0M0M0N0JCNkMxRjAyMkI1MjRG OUMwODlEQjZGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIIHLSZSqeuSzbKoBNR9N0vU06FbdLdQ+Zuw SBzTmWu+K2oTvXyvaRUkDL+NVXxPEwVlfigXcOiqZnbuBHmHNGvix3LNPOoW3RLf kV7BWyofrEOs9+oPXpGz6Q1fxfZJp0Y0B7zyMEfH0CiJq3Xv83G6pA87wL+Gk03T f5ZLqing1qtnjq3YplKZfqT+4SjieU7rrBjmiiNfOKCOg1n0osNan1+eM1yUCZnW IqKQN6mbQyDUjlXhGnPLSRTQXPLB/gCdqTPRpFBnyXcXBhnT0jX6bEh2npf/U3zJ EIbFUiyXOnuwgO708EvjdbTaRiJQohon62d8sGuC3LGdS9TqnAY= -----END CERTIFICATE-----Generated at Sun Jun 29 19:04:53 2025 by rpki-client