$ rpki-client -vvf repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft File: F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft (raw, json) Hash identifier: owLF+3NGPQs5fAmFfMeIRd/UBTd4vN4g7DE2RzBHfhE= Subject key identifier: 79:1C:C5:43:77:E4:9B:DD:92:A2:1F:73:B0:90:3B:5C:2D:7D:CA:9E Authority key identifier: F6:D1:AD:EF:8B:F1:34:4A:2F:5C:BD:A1:88:22:BA:85:D6:EF:6D:17 Certificate issuer: /CN=F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17 Certificate serial: 20507432BDE53788B1E37C5D4ABDCA7E1256173F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft Manifest number: 028F Signing time: Fri 22 Aug 2025 14:01:00 +0000 Manifest this update: Fri 22 Aug 2025 13:56:00 +0000 Manifest next update: Mon 25 Aug 2025 15:10:00 +0000 Files and hashes: 1: F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl (hash: tKBXOBoF2W+JKawQ57Ii1LcAc8n0+GzyRcgYtmJmJww=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:50:74:32:bd:e5:37:88:b1:e3:7c:5d:4a:bd:ca:7e:12:56:17:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17 Validity Not Before: Aug 22 13:56:00 2025 GMT Not After : Aug 25 15:10:00 2025 GMT Subject: CN=791CC54377E49BDD92A21F73B0903B5C2D7DCA9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:28:16:fd:a8:0d:65:bb:4d:c0:75:06:84:98: 3c:1f:a6:4e:26:59:78:93:c2:31:7f:4b:be:5d:e0: 2b:09:98:27:86:f4:24:8c:97:f2:e8:8b:86:50:61: a4:98:98:7d:e4:70:cc:5e:b6:17:78:2f:b2:4b:9d: df:2c:12:9c:db:a9:95:c4:aa:a2:09:e9:95:6d:76: 24:67:66:fa:9e:f9:78:2f:95:c0:2d:ae:dc:c3:e5: d9:c5:33:da:61:98:c8:2b:dd:57:8e:8b:39:73:90: 67:00:0c:63:92:69:76:56:1a:9b:bc:c5:ff:46:3a: 69:6d:cf:63:5c:30:e8:4f:65:9f:9e:7a:51:3e:56: c0:c4:64:7e:bf:4b:af:95:06:44:40:cd:cb:e9:9b: 3e:7d:46:26:cc:b0:b7:75:83:3f:2f:14:f8:7b:bc: 56:77:14:8f:3f:86:92:06:f8:db:e0:40:e8:8c:ee: 76:ac:cd:90:75:1d:8f:c8:55:47:0c:d9:86:0b:83: fb:8c:26:10:f3:09:47:25:0c:b3:ab:db:4a:de:a0: d4:fd:68:e7:be:c6:d2:af:0f:2a:ec:eb:2d:a6:84: c2:c6:9f:11:18:85:28:75:73:fd:0f:42:4c:fb:88: fa:01:33:b3:ff:e1:99:6c:75:a0:05:a9:f1:67:04: 73:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1C:C5:43:77:E4:9B:DD:92:A2:1F:73:B0:90:3B:5C:2D:7D:CA:9E X509v3 Authority Key Identifier: keyid:F6:D1:AD:EF:8B:F1:34:4A:2F:5C:BD:A1:88:22:BA:85:D6:EF:6D:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:1e:0d:7e:13:d2:26:32:04:93:d5:d8:a8:df:6c:c0:e1:09: f1:1d:58:0c:b0:cb:16:be:47:ac:31:45:3f:ca:4b:41:9d:19: 4c:e3:e0:45:20:18:91:89:16:e8:96:0e:8a:24:a9:5a:a2:40: 34:5c:f4:5e:cd:af:79:76:09:7d:b7:17:22:64:d8:12:6c:23: f9:8a:96:eb:69:57:21:ce:9a:6e:1a:e2:3b:2c:ed:b5:26:84: 0f:ba:c8:88:8d:58:44:cf:69:a9:cc:f7:d4:81:e3:96:21:b0: a2:d8:ab:84:4e:50:46:3a:37:9d:b6:2d:17:db:8d:e1:52:16: ee:b7:f5:be:62:c7:0a:4e:8c:6a:57:6e:09:79:57:2b:ad:63: 8d:a3:d0:b1:ab:b2:f3:03:1a:e4:31:af:d0:1d:81:25:3b:45: a3:66:a8:30:06:c8:3b:96:ec:05:6f:f3:cb:bd:7b:5c:77:0a: f6:fa:8f:28:d3:5a:b3:af:21:88:ba:52:ea:a9:35:6a:9d:68: 49:7c:9b:94:59:f2:50:a2:b3:a9:fc:b0:94:3b:bd:a6:bb:e7: 87:7b:e8:54:ff:37:8c:7b:18:66:ba:e0:2b:02:50:b0:cb:d5: 32:36:a3:fa:bf:5e:07:a8:7d:b8:86:b8:be:bf:e5:a3:0e:02: 7a:e5:8e:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIFB0Mr3lN4ix43xdSr3KfhJWFz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJBODVE NkVGNkQxNzAeFw0yNTA4MjIxMzU2MDBaFw0yNTA4MjUxNTEwMDBaMDMxMTAvBgNV BAMTKDc5MUNDNTQzNzdFNDlCREQ5MkEyMUY3M0IwOTAzQjVDMkQ3RENBOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYKBb9qA1lu03AdQaEmDwfpk4m WXiTwjF/S75d4CsJmCeG9CSMl/Loi4ZQYaSYmH3kcMxethd4L7JLnd8sEpzbqZXE qqIJ6ZVtdiRnZvqe+XgvlcAtrtzD5dnFM9phmMgr3VeOizlzkGcADGOSaXZWGpu8 xf9GOmltz2NcMOhPZZ+eelE+VsDEZH6/S6+VBkRAzcvpmz59RibMsLd1gz8vFPh7 vFZ3FI8/hpIG+NvgQOiM7naszZB1HY/IVUcM2YYLg/uMJhDzCUclDLOr20reoNT9 aOe+xtKvDyrs6y2mhMLGnxEYhSh1c/0PQkz7iPoBM7P/4ZlsdaAFqfFnBHPxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeRzFQ3fkm92Soh9zsJA7XC19yp4wHwYDVR0j BBgwFoAU9tGt74vxNEovXL2hiCK6hdbvbRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTEzZTdjNC03NzNmLTQ3NGMtYjA2ZC02MjYwYTMwNmEwY2EvMC9GNkQxQURFRjhC RjEzNDRBMkY1Q0JEQTE4ODIyQkE4NUQ2RUY2RDE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJBODVENkVG NkQxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTExM2U3YzQtNzczZi00NzRjLWIw NmQtNjI2MGEzMDZhMGNhLzAvRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJB ODVENkVGNkQxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGEeDX4T0iYyBJPV2KjfbMDhCfEdWAywyxa+ R6wxRT/KS0GdGUzj4EUgGJGJFuiWDookqVqiQDRc9F7Nr3l2CX23FyJk2BJsI/mK lutpVyHOmm4a4jss7bUmhA+6yIiNWETPaanM99SB45YhsKLYq4ROUEY6N522LRfb jeFSFu639b5ixwpOjGpXbgl5VyutY42j0LGrsvMDGuQxr9AdgSU7RaNmqDAGyDuW 7AVv88u9e1x3Cvb6jyjTWrOvIYi6UuqpNWqdaEl8m5RZ8lCis6n8sJQ7vaa754d7 6FT/N4x7GGa64CsCULDL1TI2o/q/XgeofbiGuL6/5aMOAnrljvk= -----END CERTIFICATE-----Generated at Sat Aug 23 15:39:04 2025 by rpki-client