$ rpki-client -vvf repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft File: D6FA07102C8726922074D42DFF59946144A13506.mft (raw, json) Hash identifier: xe1fVSnubN3rcwH3gIbcQMHfwFLqtzHMe22eTaXLoy4= Subject key identifier: D3:2D:75:80:60:11:75:88:4A:22:14:E5:97:0C:FD:11:95:E9:F3:3C Authority key identifier: D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06 Certificate issuer: /CN=D6FA07102C8726922074D42DFF59946144A13506 Certificate serial: 575F866C9FA4F066DB9874307B623C07EAC7FC34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft Manifest number: 77 Signing time: Sat 23 Aug 2025 21:02:21 +0000 Manifest this update: Sat 23 Aug 2025 20:57:21 +0000 Manifest next update: Wed 27 Aug 2025 07:52:21 +0000 Files and hashes: 1: D6FA07102C8726922074D42DFF59946144A13506.crl (hash: nrkzOkur/l6lCClQ43n7Xg4iifOEreKGMlUaa9zyQi8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:5f:86:6c:9f:a4:f0:66:db:98:74:30:7b:62:3c:07:ea:c7:fc:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6FA07102C8726922074D42DFF59946144A13506 Validity Not Before: Aug 23 20:57:21 2025 GMT Not After : Aug 27 07:52:21 2025 GMT Subject: CN=D32D7580601175884A2214E5970CFD1195E9F33C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:02:75:ae:c4:ec:22:ed:78:90:56:06:1b:ed: 6b:13:2e:30:a7:50:92:b2:20:31:74:fe:43:55:69: 2a:53:28:11:01:57:bb:51:61:9a:fa:ca:83:a8:c3: d3:8d:f8:1e:f1:ec:a0:45:d5:19:7d:3c:28:db:3b: 4c:40:60:1d:81:5b:48:a5:91:a5:88:af:2a:9c:b1: 0b:1b:91:c4:20:f1:5e:70:14:cf:5c:e9:4f:f3:cc: 6c:18:cd:72:db:a6:e2:08:5e:cb:a4:2a:2a:ba:b7: ad:9d:18:98:20:74:3d:c0:59:09:75:ad:5e:63:0f: 40:20:30:17:4c:37:b7:54:82:82:38:90:59:72:09: 45:1f:07:65:a0:14:b5:75:14:52:aa:22:03:f3:b0: 5b:97:c7:fd:61:58:b8:69:fa:ca:ff:70:fc:72:36: e4:e5:a3:42:43:26:74:cd:48:b9:42:59:93:5f:92: e8:05:4c:2d:75:69:b9:76:31:83:45:8a:97:0e:b9: 4a:8e:f2:76:a1:9a:4d:cc:ce:de:4d:42:83:66:01: 2b:25:2b:28:64:95:9c:fd:3f:9f:6c:ce:10:cc:46: e7:23:7d:cc:6e:7c:9d:56:69:ee:31:18:72:d4:29: 9d:ce:31:00:da:9e:b8:82:61:9a:b2:fc:ab:f0:27: ee:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2D:75:80:60:11:75:88:4A:22:14:E5:97:0C:FD:11:95:E9:F3:3C X509v3 Authority Key Identifier: keyid:D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:45:8c:74:40:c7:b9:f0:ea:5a:65:62:9f:a6:1d:3f:25:24: f6:b3:2e:06:df:88:8b:30:fe:32:c7:a5:d6:b5:d5:b1:23:7b: ea:be:86:7f:4d:a6:80:1e:7a:53:b4:4d:21:a7:f1:5a:81:b3: 82:7d:30:39:71:70:02:e1:dc:a2:f2:03:b0:50:f1:04:6e:99: 3c:fb:98:b9:16:42:34:2f:f0:b8:d7:c3:93:0f:68:21:ed:44: d0:fa:d8:9f:9e:74:cd:43:08:1e:62:64:6f:28:f8:c5:a0:db: 33:0f:76:ac:e6:70:8f:75:59:e8:6e:61:f6:29:43:48:f6:17: 34:dc:ab:f3:bd:1a:5e:f7:94:c4:db:5a:6c:06:8b:be:d4:4c: 16:d1:94:43:63:2d:aa:02:95:de:55:0d:61:22:ac:c0:b5:3e: 8b:a5:0f:03:fa:82:2f:f2:27:48:39:c6:1e:d5:b6:71:14:30: 09:f1:a1:c0:95:d6:ee:c8:43:76:b1:ef:a3:c5:2c:a7:a1:f0: 7d:96:33:7b:1f:61:d9:c1:f3:44:cf:dd:c0:99:30:b3:2d:b8: 9e:ee:9b:82:90:95:eb:52:48:3d:87:0d:57:45:e5:06:f9:b8: 1b:60:2d:3a:fd:01:a8:aa:ba:e5:18:bb:5f:f0:f9:1c:c2:eb: cc:86:55:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV1+GbJ+k8GbbmHQwe2I8B+rH/DQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZGQTA3MTAyQzg3MjY5MjIwNzRENDJERkY1OTk0NjE0 NEExMzUwNjAeFw0yNTA4MjMyMDU3MjFaFw0yNTA4MjcwNzUyMjFaMDMxMTAvBgNV BAMTKEQzMkQ3NTgwNjAxMTc1ODg0QTIyMTRFNTk3MENGRDExOTVFOUYzM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHAnWuxOwi7XiQVgYb7WsTLjCn UJKyIDF0/kNVaSpTKBEBV7tRYZr6yoOow9ON+B7x7KBF1Rl9PCjbO0xAYB2BW0il kaWIryqcsQsbkcQg8V5wFM9c6U/zzGwYzXLbpuIIXsukKiq6t62dGJggdD3AWQl1 rV5jD0AgMBdMN7dUgoI4kFlyCUUfB2WgFLV1FFKqIgPzsFuXx/1hWLhp+sr/cPxy NuTlo0JDJnTNSLlCWZNfkugFTC11abl2MYNFipcOuUqO8nahmk3Mzt5NQoNmASsl KyhklZz9P59szhDMRucjfcxufJ1Wae4xGHLUKZ3OMQDanriCYZqy/KvwJ+6pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0y11gGARdYhKIhTllwz9EZXp8zwwHwYDVR0j BBgwFoAU1voHECyHJpIgdNQt/1mUYUShNQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDYzYTZlNi1jYWIzLTRmMGMtODVjNy1lMDJiZDY0MWUzY2UvMC9ENkZBMDcxMDJD ODcyNjkyMjA3NEQ0MkRGRjU5OTQ2MTQ0QTEzNTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDZGQTA3MTAyQzg3MjY5MjIwNzRENDJERkY1OTk0NjE0NEEx MzUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2M2E2ZTYtY2FiMy00ZjBjLTg1 YzctZTAyYmQ2NDFlM2NlLzAvRDZGQTA3MTAyQzg3MjY5MjIwNzRENDJERkY1OTk0 NjE0NEExMzUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG1FjHRAx7nw6lplYp+mHT8lJPazLgbfiIsw /jLHpda11bEje+q+hn9NpoAeelO0TSGn8VqBs4J9MDlxcALh3KLyA7BQ8QRumTz7 mLkWQjQv8LjXw5MPaCHtRND62J+edM1DCB5iZG8o+MWg2zMPdqzmcI91WehuYfYp Q0j2FzTcq/O9Gl73lMTbWmwGi77UTBbRlENjLaoCld5VDWEirMC1PoulDwP6gi/y J0g5xh7VtnEUMAnxocCV1u7IQ3ax76PFLKeh8H2WM3sfYdnB80TP3cCZMLMtuJ7u m4KQletSSD2HDVdF5Qb5uBtgLTr9AaiquuUYu1/w+RzC68yGVbI= -----END CERTIFICATE-----Generated at Sun Aug 24 00:28:06 2025 by rpki-client