$ rpki-client -vvf repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft File: 6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft (raw, json) Hash identifier: uSWg543BJMptFKIkMnXq3m7UVhTXZd4VQvBbW+ruUMo= Subject key identifier: 24:BD:56:81:35:B4:F5:A3:8A:7D:20:3A:B5:31:14:AE:F9:FF:70:82 Authority key identifier: 6E:87:49:98:2F:80:EA:7E:AC:3A:4C:80:01:6F:AC:EC:04:9A:89:FB Certificate issuer: /CN=6E8749982F80EA7EAC3A4C80016FACEC049A89FB Certificate serial: 261516EBCA3FD869A840CBA85DD988D25BFC96DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft Manifest number: 016C Signing time: Sun 29 Jun 2025 05:51:32 +0000 Manifest this update: Sun 29 Jun 2025 05:46:32 +0000 Manifest next update: Wed 02 Jul 2025 08:20:32 +0000 Files and hashes: 1: 6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl (hash: EhabW/FNNkY2hHsucVRYka4dFmNvYIKY2/k/ZbeChL8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:15:16:eb:ca:3f:d8:69:a8:40:cb:a8:5d:d9:88:d2:5b:fc:96:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E8749982F80EA7EAC3A4C80016FACEC049A89FB Validity Not Before: Jun 29 05:46:32 2025 GMT Not After : Jul 2 08:20:32 2025 GMT Subject: CN=24BD568135B4F5A38A7D203AB53114AEF9FF7082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a2:d9:9e:7f:ee:1e:e0:3c:b3:d4:89:d6:f0: 5d:91:a8:7f:5e:e3:e9:16:bc:d7:04:30:fd:cd:a5: c0:c8:7d:57:87:2c:88:ef:8f:15:f2:d6:44:e0:55: c6:d0:f6:0d:4d:99:1c:b3:1f:48:4d:8b:cf:76:0f: c1:6a:f1:4d:51:c7:10:2e:c2:4e:df:49:7f:65:4c: d6:3f:03:9a:cb:e9:b7:21:f3:5d:98:42:8b:4d:f4: 0f:4e:5f:7a:1c:1f:08:e9:0a:a6:a1:3c:c6:99:65: 0e:53:b1:35:79:e8:22:a8:57:46:59:e9:5f:04:e1: 72:86:8f:67:38:68:c1:12:ab:81:58:46:1e:1c:07: 96:56:5b:b6:d5:e4:10:4c:fc:b7:cd:46:88:f3:c2: 77:4b:33:96:28:2a:1e:45:5a:9c:88:5f:a4:d2:1e: 0a:de:aa:ca:b2:c5:e3:e0:2b:f2:11:6f:74:1b:47: 93:67:4c:f3:7c:f8:1c:3e:8f:7f:26:78:e5:70:78: e9:44:ce:00:ce:00:a6:cb:b8:1e:2d:64:11:08:3c: 70:81:f2:93:c2:47:ec:1f:67:fe:61:52:eb:a0:9e: 62:8f:56:01:c7:af:70:6a:af:96:63:e2:75:3f:86: 1e:f8:f2:45:95:17:9b:19:16:15:5d:f0:66:56:1b: 7e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BD:56:81:35:B4:F5:A3:8A:7D:20:3A:B5:31:14:AE:F9:FF:70:82 X509v3 Authority Key Identifier: keyid:6E:87:49:98:2F:80:EA:7E:AC:3A:4C:80:01:6F:AC:EC:04:9A:89:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:cb:9e:3b:e5:6b:c3:70:0e:ed:bb:d0:8f:e4:fc:09:9c:76: e7:75:0c:90:55:dc:77:79:46:24:ab:9d:e4:59:d0:f3:3c:6f: c0:57:78:c4:f4:07:d4:2a:de:9b:49:ea:08:d3:43:3e:c2:47: 18:1a:df:27:6c:a6:a8:10:90:01:3d:67:97:59:21:45:fd:71: 48:9f:a8:a4:7c:64:5f:73:5a:58:84:35:bd:7b:8c:7f:80:71: e7:ec:bd:7b:36:0b:4a:96:ba:cc:27:7b:c4:d9:78:b0:a8:b8: 17:21:21:b9:b1:5f:bd:d3:80:6c:80:c1:09:55:a9:27:35:8a: 1d:a1:55:5d:a9:11:9b:0b:3f:87:0e:07:57:22:17:5d:dd:af: 70:ba:56:11:a6:67:92:bc:4e:de:92:7a:5e:0f:0d:ed:41:b9: be:0b:81:0a:8b:df:88:58:1d:43:fe:7d:bd:6b:5d:2f:63:6b: 91:75:b9:c0:48:a6:35:c2:f4:fb:f5:60:21:6b:7a:f2:3b:f9: d0:db:4b:ea:02:61:e2:16:dd:1e:f7:72:ac:52:98:66:ec:72: 76:fc:d2:38:09:87:7e:0e:c2:51:d8:1c:d4:15:a4:f0:b5:01: 21:43:9c:e8:96:1e:ed:54:4d:15:32:25:48:fb:f4:eb:dd:7b: f8:93:30:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJhUW68o/2GmoQMuoXdmI0lv8ltwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFDRUMw NDlBODlGQjAeFw0yNTA2MjkwNTQ2MzJaFw0yNTA3MDIwODIwMzJaMDMxMTAvBgNV BAMTKDI0QkQ1NjgxMzVCNEY1QTM4QTdEMjAzQUI1MzExNEFFRjlGRjcwODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5otmef+4e4Dyz1InW8F2RqH9e 4+kWvNcEMP3NpcDIfVeHLIjvjxXy1kTgVcbQ9g1NmRyzH0hNi892D8Fq8U1RxxAu wk7fSX9lTNY/A5rL6bch812YQotN9A9OX3ocHwjpCqahPMaZZQ5TsTV56CKoV0ZZ 6V8E4XKGj2c4aMESq4FYRh4cB5ZWW7bV5BBM/LfNRojzwndLM5YoKh5FWpyIX6TS HgreqsqyxePgK/IRb3QbR5NnTPN8+Bw+j38meOVweOlEzgDOAKbLuB4tZBEIPHCB 8pPCR+wfZ/5hUuugnmKPVgHHr3Bqr5Zj4nU/hh748kWVF5sZFhVd8GZWG37RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJL1WgTW09aOKfSA6tTEUrvn/cIIwHwYDVR0j BBgwFoAUbodJmC+A6n6sOkyAAW+s7ASaifswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmU3ZGU5Zi1iZmQyLTQ4NWMtOGJhMi05MjRlZWQ1MmEzMDUvMC82RTg3NDk5ODJG ODBFQTdFQUMzQTRDODAwMTZGQUNFQzA0OUE4OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFDRUMwNDlB ODlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlN2RlOWYtYmZkMi00ODVjLThi YTItOTI0ZWVkNTJhMzA1LzAvNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFD RUMwNDlBODlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLLnjvla8NwDu270I/k/Amcdud1DJBV3Hd5 RiSrneRZ0PM8b8BXeMT0B9Qq3ptJ6gjTQz7CRxga3ydspqgQkAE9Z5dZIUX9cUif qKR8ZF9zWliENb17jH+AcefsvXs2C0qWuswne8TZeLCouBchIbmxX73TgGyAwQlV qSc1ih2hVV2pEZsLP4cOB1ciF13dr3C6VhGmZ5K8Tt6Sel4PDe1Bub4LgQqL34hY HUP+fb1rXS9ja5F1ucBIpjXC9Pv1YCFrevI7+dDbS+oCYeIW3R73cqxSmGbscnb8 0jgJh34OwlHYHNQVpPC1ASFDnOiWHu1UTRUyJUj79Ovde/iTMBs= -----END CERTIFICATE-----Generated at Sun Jun 29 19:04:34 2025 by rpki-client