$ rpki-client -vvf repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft File: D6FA07102C8726922074D42DFF59946144A13506.mft (raw, json) Hash identifier: wTfy3nqBwFXkCcp57MZNZE8m9FXBep5M5DA+yVye2fM= Subject key identifier: 89:E4:71:2A:9A:A1:1F:59:10:21:95:08:69:04:AB:D5:E2:2A:09:43 Authority key identifier: D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06 Certificate issuer: /CN=D6FA07102C8726922074D42DFF59946144A13506 Certificate serial: 472DFA8B23D34A3B60255AA7D6C5ECD550094913 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft Manifest number: 61 Signing time: Fri 04 Jul 2025 22:52:12 +0000 Manifest this update: Fri 04 Jul 2025 22:47:12 +0000 Manifest next update: Tue 08 Jul 2025 09:05:12 +0000 Files and hashes: 1: D6FA07102C8726922074D42DFF59946144A13506.crl (hash: SHdGBjzZAAWbuxrxLD2ZbM9Q3k9VzcCHWp6VeHxH2Fg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:2d:fa:8b:23:d3:4a:3b:60:25:5a:a7:d6:c5:ec:d5:50:09:49:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6FA07102C8726922074D42DFF59946144A13506 Validity Not Before: Jul 4 22:47:12 2025 GMT Not After : Jul 8 09:05:12 2025 GMT Subject: CN=89E4712A9AA11F59102195086904ABD5E22A0943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e0:a7:0d:fe:cf:d1:58:94:4a:b3:b1:4e:79: 74:e2:7e:24:fa:81:cd:2a:11:99:f1:71:73:09:23: dc:e0:c9:79:2e:2e:fb:fe:7e:69:e6:77:45:0c:53: 62:e0:fd:06:51:3f:02:34:fc:d2:bb:48:f0:54:68: b5:07:58:5f:48:f6:74:a7:e3:51:0e:73:7d:ce:75: ef:91:71:79:b2:f9:8e:d8:bd:d4:0b:b3:1a:b3:c7: 6a:6d:08:c3:d9:f2:33:7a:65:18:16:d4:b4:38:9e: 92:9c:14:f4:99:25:e2:74:e9:c9:52:ca:fd:88:c7: 24:e2:c7:b1:56:82:41:87:d6:49:08:99:32:c3:aa: 00:20:ab:56:b4:eb:88:bf:2e:e3:e1:7e:a9:6d:37: 5c:65:71:45:7d:8b:f9:39:7c:1c:4d:d3:02:5b:fb: 13:3f:c0:83:60:3b:0b:a7:bc:8e:27:23:8e:a4:2f: e2:24:fc:68:ab:19:e2:47:4c:b0:37:82:e1:69:29: 3b:c7:4f:a5:89:34:1c:79:44:fd:90:6e:ba:8a:da: 53:ba:29:da:d1:cf:40:11:b3:85:52:49:ae:ac:16: 65:96:ae:40:4e:d6:4e:c5:4c:a7:47:44:8c:88:de: 38:8c:bc:8b:76:18:d7:39:50:9f:a8:e5:f5:36:34: b8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E4:71:2A:9A:A1:1F:59:10:21:95:08:69:04:AB:D5:E2:2A:09:43 X509v3 Authority Key Identifier: keyid:D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:a3:e3:8a:e5:d1:1a:14:f8:d4:64:8f:12:cd:02:af:cb:a9: 01:00:4a:1f:b7:9b:ed:6d:03:46:23:bf:a0:9e:89:08:b4:7b: 13:57:55:ab:c8:34:3e:13:db:53:c6:0e:f3:4f:2f:f0:0d:a7: 98:50:50:2c:4a:8d:10:8d:51:f4:22:74:30:48:32:28:06:cb: a9:f1:99:36:a9:04:82:f7:b9:76:e6:73:a5:4e:28:c3:92:27: eb:af:af:57:f4:15:76:2c:40:d0:41:00:f5:aa:56:34:72:b9: d9:8d:8c:7c:ab:b5:85:21:37:db:41:09:52:ff:8a:ec:19:5d: 5b:5f:5e:d1:51:74:1c:5d:26:2a:2d:b5:ce:fa:25:a7:c2:3a: 90:aa:80:e9:61:58:31:a7:52:32:e3:13:23:82:a5:07:ed:53: a4:6b:5f:dd:7e:d8:99:1c:70:bb:e4:f9:46:33:9c:cc:d1:0e: 00:c9:53:cc:57:f6:d6:33:7e:84:27:a8:36:27:46:20:ae:5d: 63:8c:31:0d:39:06:b7:8b:51:b7:e5:27:77:33:e4:fc:b3:c6: 3a:9b:55:42:81:0a:f1:67:5e:2a:76:e0:d7:b9:56:3d:41:56: d5:30:a9:e5:e4:7b:61:aa:52:ba:7d:bd:fb:7d:17:c4:86:c2: e2:2c:7e:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURy36iyPTSjtgJVqn1sXs1VAJSRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZGQTA3MTAyQzg3MjY5MjIwNzRENDJERkY1OTk0NjE0 NEExMzUwNjAeFw0yNTA3MDQyMjQ3MTJaFw0yNTA3MDgwOTA1MTJaMDMxMTAvBgNV BAMTKDg5RTQ3MTJBOUFBMTFGNTkxMDIxOTUwODY5MDRBQkQ1RTIyQTA5NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa4KcN/s/RWJRKs7FOeXTifiT6 gc0qEZnxcXMJI9zgyXkuLvv+fmnmd0UMU2Lg/QZRPwI0/NK7SPBUaLUHWF9I9nSn 41EOc33Ode+RcXmy+Y7YvdQLsxqzx2ptCMPZ8jN6ZRgW1LQ4npKcFPSZJeJ06clS yv2IxyTix7FWgkGH1kkImTLDqgAgq1a064i/LuPhfqltN1xlcUV9i/k5fBxN0wJb +xM/wINgOwunvI4nI46kL+Ik/GirGeJHTLA3guFpKTvHT6WJNBx5RP2QbrqK2lO6 KdrRz0ARs4VSSa6sFmWWrkBO1k7FTKdHRIyI3jiMvIt2GNc5UJ+o5fU2NLgDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUieRxKpqhH1kQIZUIaQSr1eIqCUMwHwYDVR0j BBgwFoAU1voHECyHJpIgdNQt/1mUYUShNQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDYzYTZlNi1jYWIzLTRmMGMtODVjNy1lMDJiZDY0MWUzY2UvMC9ENkZBMDcxMDJD ODcyNjkyMjA3NEQ0MkRGRjU5OTQ2MTQ0QTEzNTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDZGQTA3MTAyQzg3MjY5MjIwNzRENDJERkY1OTk0NjE0NEEx MzUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2M2E2ZTYtY2FiMy00ZjBjLTg1 YzctZTAyYmQ2NDFlM2NlLzAvRDZGQTA3MTAyQzg3MjY5MjIwNzRENDJERkY1OTk0 NjE0NEExMzUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmj44rl0RoU+NRkjxLNAq/LqQEASh+3m+1t A0Yjv6CeiQi0exNXVavIND4T21PGDvNPL/ANp5hQUCxKjRCNUfQidDBIMigGy6nx mTapBIL3uXbmc6VOKMOSJ+uvr1f0FXYsQNBBAPWqVjRyudmNjHyrtYUhN9tBCVL/ iuwZXVtfXtFRdBxdJiottc76JafCOpCqgOlhWDGnUjLjEyOCpQftU6RrX91+2Jkc cLvk+UYznMzRDgDJU8xX9tYzfoQnqDYnRiCuXWOMMQ05BreLUbflJ3cz5Pyzxjqb VUKBCvFnXip24Ne5Vj1BVtUwqeXke2GqUrp9vft9F8SGwuIsfuM= -----END CERTIFICATE-----Generated at Sat Jul 5 01:14:49 2025 by rpki-client