$ rpki-client -vvf repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft File: F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft (raw, json) Hash identifier: YID8qYztTXPmQUbY8Aj8ygFYE6neqFsyM62MSbP4EsQ= Subject key identifier: EA:EF:3B:8F:36:3E:4F:79:8A:E8:F4:42:74:61:EF:F6:D2:D8:90:F5 Authority key identifier: F6:D1:AD:EF:8B:F1:34:4A:2F:5C:BD:A1:88:22:BA:85:D6:EF:6D:17 Certificate issuer: /CN=F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17 Certificate serial: 13685C0E778FEC46AE568E9921568792E7C22ADC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft Manifest number: 0260 Signing time: Tue 06 May 2025 11:10:59 +0000 Manifest this update: Tue 06 May 2025 11:05:59 +0000 Manifest next update: Fri 09 May 2025 22:08:59 +0000 Files and hashes: 1: F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl (hash: 5Kw2A6FDumN8bHLT1ZLcDr+PaHAwIDqCoyrnM/4A83k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 22:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:68:5c:0e:77:8f:ec:46:ae:56:8e:99:21:56:87:92:e7:c2:2a:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17 Validity Not Before: May 6 11:05:59 2025 GMT Not After : May 9 22:08:59 2025 GMT Subject: CN=EAEF3B8F363E4F798AE8F4427461EFF6D2D890F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cd:01:12:2a:0a:6c:6a:47:ae:7f:25:cc:c8: 5a:5e:a6:6e:d7:fb:b3:a1:d2:0c:1b:c0:3a:90:9b: 3d:43:6d:c9:a6:01:2b:ff:3a:0c:c3:8a:88:bb:ec: 9a:ed:b4:48:ec:9b:01:2d:d1:51:e6:cf:19:45:fa: 11:1e:7f:83:ed:11:4b:23:86:65:63:d6:af:d5:36: a9:54:69:29:46:b9:90:6c:6a:2d:41:64:f6:86:a0: be:dc:fd:45:4e:5d:55:57:60:5e:fc:0a:e9:3d:39: 03:fa:86:e3:1b:ca:9d:92:c3:c7:87:5d:8f:71:0d: 4f:c5:85:13:7b:6f:d1:93:a5:10:46:69:80:59:9c: 96:63:de:20:e9:7c:8b:eb:d2:af:da:66:c7:cc:24: 31:a4:0f:ab:ac:a6:8a:00:76:ad:32:b9:85:bb:84: 71:06:00:68:01:1f:6f:8b:c6:e6:d8:d0:c1:2d:ea: 4d:06:c5:eb:dd:4d:95:fc:8c:c9:75:5a:98:23:3f: ce:df:dd:b2:94:90:db:97:97:89:35:99:28:5d:3f: c4:59:03:59:07:37:be:69:f6:7b:06:df:5c:af:f5: ce:cd:1c:57:73:0a:c1:e8:d3:71:03:4e:6d:64:46: b8:c9:a1:99:e1:4e:2f:28:97:bc:46:e0:6c:9c:73: f2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:EF:3B:8F:36:3E:4F:79:8A:E8:F4:42:74:61:EF:F6:D2:D8:90:F5 X509v3 Authority Key Identifier: keyid:F6:D1:AD:EF:8B:F1:34:4A:2F:5C:BD:A1:88:22:BA:85:D6:EF:6D:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:a9:2a:81:09:ec:cb:6c:e8:87:f9:55:fc:a6:d0:33:e5:42: 0b:25:24:ba:d3:27:cb:54:20:19:38:dc:ff:4f:40:dd:34:db: 18:5d:ca:8d:76:0a:4e:68:24:1d:68:0c:6e:db:58:08:cd:f4: f8:9d:37:20:d9:97:4c:5b:a9:22:b4:1b:f6:b3:fd:53:9b:7e: 1e:cf:93:31:db:7f:56:a7:3f:e0:c1:c9:bd:95:a7:fa:48:af: 99:21:fe:36:67:7a:e0:71:c1:09:b0:68:6c:ac:99:21:44:ed: c4:0d:f8:1a:db:9d:51:10:a4:0a:df:da:69:a3:1a:0e:0a:1c: bf:8c:af:79:13:f3:3d:6f:bd:c6:1f:e4:e8:c0:e8:d2:b7:51: 70:f7:9d:3c:fe:18:10:1e:1b:e8:d3:f4:74:93:f6:9e:29:4f: 74:e7:df:c2:87:de:21:6d:e8:c3:de:66:96:e8:78:a2:ae:73: 16:75:90:78:23:36:04:eb:1b:3c:44:12:d6:65:00:6e:79:99: 20:45:f0:0b:50:53:6d:18:09:b1:10:ae:04:6e:42:3a:d2:06: 1e:66:93:13:5e:dd:72:20:3d:74:55:d7:0f:0d:75:f1:c3:b0: 0a:d1:1d:bc:14:b7:97:d0:7e:a3:0e:64:06:3d:b1:ae:0a:14: 4a:8e:25:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE2hcDneP7EauVo6ZIVaHkufCKtwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJBODVE NkVGNkQxNzAeFw0yNTA1MDYxMTA1NTlaFw0yNTA1MDkyMjA4NTlaMDMxMTAvBgNV BAMTKEVBRUYzQjhGMzYzRTRGNzk4QUU4RjQ0Mjc0NjFFRkY2RDJEODkwRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuzQESKgpsakeufyXMyFpepm7X +7Oh0gwbwDqQmz1DbcmmASv/OgzDioi77JrttEjsmwEt0VHmzxlF+hEef4PtEUsj hmVj1q/VNqlUaSlGuZBsai1BZPaGoL7c/UVOXVVXYF78Cuk9OQP6huMbyp2Sw8eH XY9xDU/FhRN7b9GTpRBGaYBZnJZj3iDpfIvr0q/aZsfMJDGkD6uspooAdq0yuYW7 hHEGAGgBH2+LxubY0MEt6k0GxevdTZX8jMl1WpgjP87f3bKUkNuXl4k1mShdP8RZ A1kHN75p9nsG31yv9c7NHFdzCsHo03EDTm1kRrjJoZnhTi8ol7xG4Gycc/I5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6u87jzY+T3mK6PRCdGHv9tLYkPUwHwYDVR0j BBgwFoAU9tGt74vxNEovXL2hiCK6hdbvbRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTEzZTdjNC03NzNmLTQ3NGMtYjA2ZC02MjYwYTMwNmEwY2EvMC9GNkQxQURFRjhC RjEzNDRBMkY1Q0JEQTE4ODIyQkE4NUQ2RUY2RDE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJBODVENkVG NkQxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTExM2U3YzQtNzczZi00NzRjLWIw NmQtNjI2MGEzMDZhMGNhLzAvRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJB ODVENkVGNkQxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKqpKoEJ7Mts6If5Vfym0DPlQgslJLrTJ8tU IBk43P9PQN002xhdyo12Ck5oJB1oDG7bWAjN9PidNyDZl0xbqSK0G/az/VObfh7P kzHbf1anP+DByb2Vp/pIr5kh/jZneuBxwQmwaGysmSFE7cQN+BrbnVEQpArf2mmj Gg4KHL+Mr3kT8z1vvcYf5OjA6NK3UXD3nTz+GBAeG+jT9HST9p4pT3Tn38KH3iFt 6MPeZpboeKKucxZ1kHgjNgTrGzxEEtZlAG55mSBF8AtQU20YCbEQrgRuQjrSBh5m kxNe3XIgPXRV1w8NdfHDsArRHbwUt5fQfqMOZAY9sa4KFEqOJVM= -----END CERTIFICATE-----Generated at Wed May 7 23:42:20 2025 by rpki-client