$ rpki-client -vvf repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft File: F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft (raw, json) Hash identifier: oQrnBA3dIlJXH+dOOprHpMEl6TUZIy17tfDwDOOSznI= Subject key identifier: B8:20:95:84:F1:6F:4C:1B:C6:2F:DB:7C:D3:80:58:60:44:AE:EA:C2 Authority key identifier: F6:D1:AD:EF:8B:F1:34:4A:2F:5C:BD:A1:88:22:BA:85:D6:EF:6D:17 Certificate issuer: /CN=F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17 Certificate serial: 7FC2C09E4027C40784A44EC18DDD89C2348D2945 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft Manifest number: 0277 Signing time: Sat 28 Jun 2025 10:30:58 +0000 Manifest this update: Sat 28 Jun 2025 10:25:58 +0000 Manifest next update: Tue 01 Jul 2025 10:41:58 +0000 Files and hashes: 1: F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl (hash: 3Fi89m8aUrlct5sE55vNjSWSbfF00xOSEbpI6Ft6ooI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 10:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:c2:c0:9e:40:27:c4:07:84:a4:4e:c1:8d:dd:89:c2:34:8d:29:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17 Validity Not Before: Jun 28 10:25:58 2025 GMT Not After : Jul 1 10:41:58 2025 GMT Subject: CN=B8209584F16F4C1BC62FDB7CD380586044AEEAC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:76:d4:06:61:3b:ab:aa:87:b9:8e:d1:f4:d2: d1:68:7f:c4:4e:2d:73:53:16:fb:1a:be:ec:98:6c: 5c:10:12:a5:02:2a:37:b4:8c:c7:a4:f0:bf:65:78: 30:f5:85:33:3b:d4:23:4b:db:86:a1:3b:90:f3:31: 2b:ce:59:e5:fe:7e:93:90:1d:ff:96:2c:a8:4d:e3: e8:dd:44:f3:c2:f8:c8:43:c2:76:18:d5:45:b9:2d: 0a:ff:32:ee:0a:a4:d8:72:63:b6:bf:9a:c9:6d:4b: 06:d6:95:2e:bc:0f:92:53:2d:d2:46:6e:26:f7:a5: ec:6e:0f:50:76:86:fa:e5:01:14:25:79:db:41:35: cf:07:e9:20:c3:12:a7:5d:ef:21:c2:ba:d8:bd:62: 08:d0:37:7c:54:a9:ed:78:83:df:86:f6:0d:92:bd: 66:bd:8b:4a:45:05:6d:3a:21:22:51:ab:66:c9:dc: ed:5e:f9:1a:0e:2c:d8:50:1a:90:be:95:15:b1:72: 15:1f:27:4d:4e:44:90:f3:06:d8:ef:f2:4a:4e:57: 90:42:3e:01:e6:46:85:9d:3a:8d:e9:89:af:c2:7d: 73:47:75:5f:ee:f0:7a:31:1d:b8:2e:0b:4d:8f:d9: 77:ba:d8:19:20:4e:b0:36:8f:c2:4e:0d:91:d4:6e: 36:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:20:95:84:F1:6F:4C:1B:C6:2F:DB:7C:D3:80:58:60:44:AE:EA:C2 X509v3 Authority Key Identifier: keyid:F6:D1:AD:EF:8B:F1:34:4A:2F:5C:BD:A1:88:22:BA:85:D6:EF:6D:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:73:06:9c:bd:2b:39:5f:01:ce:b1:33:bd:ee:e1:e5:3f:65: 0c:60:70:ea:dd:d9:9d:b8:0f:30:61:98:e6:01:ea:56:cd:d9: 73:d9:48:c0:a9:36:cc:ff:b7:af:22:ed:e7:ef:9d:3f:f1:48: 58:f1:43:26:b7:6e:33:72:b8:a4:ad:25:26:2c:60:cc:eb:49: 76:dd:25:7d:e9:e0:7e:de:8b:92:3d:f5:94:fc:e8:d7:58:1a: f6:2e:95:59:22:31:80:6d:39:37:ba:48:0a:e4:c2:c5:93:c8: 73:bb:2b:9d:dd:99:b2:be:cc:6c:fa:78:61:9c:ea:bf:d5:b8: f1:8a:2f:d2:67:09:a4:32:bc:98:42:be:22:ff:92:a1:95:3a: 38:a1:0f:8a:8f:e3:1e:2f:0f:51:bc:25:92:f1:df:08:45:ef: 98:90:3b:20:31:52:51:d9:b6:a7:3a:a5:78:c2:c8:99:f3:ef: 87:3d:6b:97:0b:33:c7:bf:bb:9c:06:0d:a7:6f:da:8f:1a:06: 9f:ce:93:40:65:6b:b3:82:3c:8d:0a:7e:1e:6f:d3:be:73:1b: 79:61:31:f1:0f:53:b0:1d:fb:30:f0:dc:f3:4c:00:5e:00:d6: 6c:0d:87:11:e2:fa:b6:fb:d7:d0:b4:16:26:5f:07:db:84:8e: 88:54:4a:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf8LAnkAnxAeEpE7Bjd2JwjSNKUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJBODVE NkVGNkQxNzAeFw0yNTA2MjgxMDI1NThaFw0yNTA3MDExMDQxNThaMDMxMTAvBgNV BAMTKEI4MjA5NTg0RjE2RjRDMUJDNjJGREI3Q0QzODA1ODYwNDRBRUVBQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRdtQGYTurqoe5jtH00tFof8RO LXNTFvsavuyYbFwQEqUCKje0jMek8L9leDD1hTM71CNL24ahO5DzMSvOWeX+fpOQ Hf+WLKhN4+jdRPPC+MhDwnYY1UW5LQr/Mu4KpNhyY7a/msltSwbWlS68D5JTLdJG bib3pexuD1B2hvrlARQledtBNc8H6SDDEqdd7yHCuti9YgjQN3xUqe14g9+G9g2S vWa9i0pFBW06ISJRq2bJ3O1e+RoOLNhQGpC+lRWxchUfJ01ORJDzBtjv8kpOV5BC PgHmRoWdOo3pia/CfXNHdV/u8HoxHbguC02P2Xe62BkgTrA2j8JODZHUbjYNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuCCVhPFvTBvGL9t804BYYESu6sIwHwYDVR0j BBgwFoAU9tGt74vxNEovXL2hiCK6hdbvbRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTEzZTdjNC03NzNmLTQ3NGMtYjA2ZC02MjYwYTMwNmEwY2EvMC9GNkQxQURFRjhC RjEzNDRBMkY1Q0JEQTE4ODIyQkE4NUQ2RUY2RDE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJBODVENkVG NkQxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTExM2U3YzQtNzczZi00NzRjLWIw NmQtNjI2MGEzMDZhMGNhLzAvRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJB ODVENkVGNkQxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdzBpy9KzlfAc6xM73u4eU/ZQxgcOrd2Z24 DzBhmOYB6lbN2XPZSMCpNsz/t68i7efvnT/xSFjxQya3bjNyuKStJSYsYMzrSXbd JX3p4H7ei5I99ZT86NdYGvYulVkiMYBtOTe6SArkwsWTyHO7K53dmbK+zGz6eGGc 6r/VuPGKL9JnCaQyvJhCviL/kqGVOjihD4qP4x4vD1G8JZLx3whF75iQOyAxUlHZ tqc6pXjCyJnz74c9a5cLM8e/u5wGDadv2o8aBp/Ok0Bla7OCPI0Kfh5v075zG3lh MfEPU7Ad+zDw3PNMAF4A1mwNhxHi+rb719C0FiZfB9uEjohUSvQ= -----END CERTIFICATE-----Generated at Mon Jun 30 01:35:28 2025 by rpki-client