$ rpki-client -vvf repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft File: 6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft (raw, json) Hash identifier: J7SRFsGqsUjY7IB5hrP17fmYU3/w/2+n5Mwp9ILwD3E= Subject key identifier: DB:13:D3:B5:D3:C3:3D:3C:77:27:5C:49:85:F8:2C:15:D2:7A:C4:8A Authority key identifier: 6E:87:49:98:2F:80:EA:7E:AC:3A:4C:80:01:6F:AC:EC:04:9A:89:FB Certificate issuer: /CN=6E8749982F80EA7EAC3A4C80016FACEC049A89FB Certificate serial: 1F92DD4DCCF1F07A84884C444011EB5F70AB9593 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft Manifest number: 0184 Signing time: Fri 22 Aug 2025 16:01:33 +0000 Manifest this update: Fri 22 Aug 2025 15:56:33 +0000 Manifest next update: Mon 25 Aug 2025 20:18:33 +0000 Files and hashes: 1: 6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl (hash: 1XAMZajEcqXX5YjpekRrZBabWD60UYn/plE9zkWPLcI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 20:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:92:dd:4d:cc:f1:f0:7a:84:88:4c:44:40:11:eb:5f:70:ab:95:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E8749982F80EA7EAC3A4C80016FACEC049A89FB Validity Not Before: Aug 22 15:56:33 2025 GMT Not After : Aug 25 20:18:33 2025 GMT Subject: CN=DB13D3B5D3C33D3C77275C4985F82C15D27AC48A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a2:6b:51:ed:4e:f1:09:42:14:5e:d2:bd:98: 9f:54:c1:36:25:c8:72:ad:1d:25:31:e5:7a:fd:c7: 76:42:cf:c8:f7:a0:7a:fd:63:89:b6:82:b2:fe:5c: e0:77:ad:43:38:42:06:b6:26:dd:9a:c6:dc:24:12: 51:93:6a:91:f2:86:bc:ed:80:98:9c:97:27:ec:eb: a4:44:75:d5:43:0c:68:6d:db:09:e1:37:8b:9b:6c: c6:2e:87:46:f2:ae:1c:83:e1:4d:55:cb:d8:90:6b: 39:e4:63:7a:5c:7b:d0:e3:e5:19:d2:c7:a1:10:b6: b5:e4:4c:d5:37:28:6e:a7:d4:b9:a7:1d:00:13:42: e8:07:d0:97:c6:53:83:10:43:a0:d6:1a:56:01:df: 43:c7:8c:b7:31:d0:0b:c1:d2:cd:47:ef:31:31:05: eb:21:ac:10:16:1b:f4:04:18:77:cc:84:ed:65:1d: 4c:b6:25:8d:ec:a9:d7:1a:2b:50:60:8d:f9:42:4b: 00:7b:a0:5e:ba:62:f1:e5:4b:14:89:2f:77:41:c0: 0d:ac:34:87:a2:06:41:5f:e4:84:83:ec:60:dc:39: 6c:c0:82:f1:19:09:2c:37:64:3e:1b:a4:ab:04:40: c2:bd:25:83:2d:98:f8:d2:71:27:89:af:e7:25:b0: a6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:13:D3:B5:D3:C3:3D:3C:77:27:5C:49:85:F8:2C:15:D2:7A:C4:8A X509v3 Authority Key Identifier: keyid:6E:87:49:98:2F:80:EA:7E:AC:3A:4C:80:01:6F:AC:EC:04:9A:89:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ed:05:0b:36:64:b0:56:6e:57:d5:87:5e:6b:40:ac:d1:a3: f1:0b:2a:18:b0:fb:bc:f1:0d:21:32:01:f1:6d:04:e5:36:2f: 78:a9:6b:e0:f0:67:a1:e5:1b:e8:3b:9e:5e:64:9d:63:7b:6b: 1c:e6:47:65:04:a4:64:e8:6d:a8:66:28:91:b7:5e:eb:18:14: 3d:3e:99:07:6f:67:c0:70:cf:ff:ad:67:7b:20:0b:fc:aa:4d: 44:00:83:0e:76:96:ff:7f:75:1d:a8:c6:eb:88:b5:aa:13:92: 3d:73:74:48:c2:b9:f5:4d:5b:99:9b:78:df:c6:bd:c2:f9:7d: a2:8e:91:f8:b0:22:d3:f3:e7:c3:2b:a4:7a:9b:1d:5e:c7:b0: df:7f:ad:76:4f:59:96:9b:e8:50:af:37:ad:e0:26:5a:20:86: 13:1a:08:2c:83:19:fe:74:9c:2d:4c:8a:c7:44:eb:9b:da:5f: 94:e3:ab:2c:c3:c4:f6:a3:6b:40:a6:a7:5f:53:8e:3d:e3:db: 62:49:45:e6:a4:48:1c:ab:0a:b5:55:68:cd:f2:f2:59:24:63: ce:fd:ee:cc:df:be:41:fd:d6:66:b2:79:47:75:ff:7f:f9:39: 89:9a:68:05:f0:32:96:72:7e:39:49:7e:15:f2:b1:17:b2:a6: d8:06:61:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH5LdTczx8HqEiExEQBHrX3CrlZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFDRUMw NDlBODlGQjAeFw0yNTA4MjIxNTU2MzNaFw0yNTA4MjUyMDE4MzNaMDMxMTAvBgNV BAMTKERCMTNEM0I1RDNDMzNEM0M3NzI3NUM0OTg1RjgyQzE1RDI3QUM0OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIomtR7U7xCUIUXtK9mJ9UwTYl yHKtHSUx5Xr9x3ZCz8j3oHr9Y4m2grL+XOB3rUM4Qga2Jt2axtwkElGTapHyhrzt gJiclyfs66REddVDDGht2wnhN4ubbMYuh0byrhyD4U1Vy9iQaznkY3pce9Dj5RnS x6EQtrXkTNU3KG6n1LmnHQATQugH0JfGU4MQQ6DWGlYB30PHjLcx0AvB0s1H7zEx BeshrBAWG/QEGHfMhO1lHUy2JY3sqdcaK1BgjflCSwB7oF66YvHlSxSJL3dBwA2s NIeiBkFf5ISD7GDcOWzAgvEZCSw3ZD4bpKsEQMK9JYMtmPjScSeJr+clsKaFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2xPTtdPDPTx3J1xJhfgsFdJ6xIowHwYDVR0j BBgwFoAUbodJmC+A6n6sOkyAAW+s7ASaifswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmU3ZGU5Zi1iZmQyLTQ4NWMtOGJhMi05MjRlZWQ1MmEzMDUvMC82RTg3NDk5ODJG ODBFQTdFQUMzQTRDODAwMTZGQUNFQzA0OUE4OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFDRUMwNDlB ODlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlN2RlOWYtYmZkMi00ODVjLThi YTItOTI0ZWVkNTJhMzA1LzAvNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFD RUMwNDlBODlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFvtBQs2ZLBWblfVh15rQKzRo/ELKhiw+7zx DSEyAfFtBOU2L3ipa+DwZ6HlG+g7nl5knWN7axzmR2UEpGTobahmKJG3XusYFD0+ mQdvZ8Bwz/+tZ3sgC/yqTUQAgw52lv9/dR2oxuuItaoTkj1zdEjCufVNW5mbeN/G vcL5faKOkfiwItPz58MrpHqbHV7HsN9/rXZPWZab6FCvN63gJloghhMaCCyDGf50 nC1MisdE65vaX5TjqyzDxPaja0Cmp19Tjj3j22JJReakSByrCrVVaM3y8lkkY879 7szfvkH91mayeUd1/3/5OYmaaAXwMpZyfjlJfhXysReyptgGYas= -----END CERTIFICATE-----Generated at Sat Aug 23 10:12:49 2025 by rpki-client