$ rpki-client -vvf repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft File: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft (raw, json) Hash identifier: zwcWThnG7p90KVXMVduwJWN28tGap7FmVPnDXE1bNgE= Subject key identifier: 6C:FA:60:2A:EA:74:DF:0D:A1:A6:16:AD:11:36:25:0B:B5:67:AC:32 Authority key identifier: 65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC Certificate issuer: /CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Certificate serial: 5A23BED80F5EF53138ABA6652F05793EF94601AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft Manifest number: 040D Signing time: Tue 06 May 2025 21:42:18 +0000 Manifest this update: Tue 06 May 2025 21:37:18 +0000 Manifest next update: Fri 09 May 2025 21:55:18 +0000 Files and hashes: 1: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl (hash: D9SiAz0sndi82BFnuE/8zwfJjDuAI0qXJnkm/Vu34uw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 21:55:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:23:be:d8:0f:5e:f5:31:38:ab:a6:65:2f:05:79:3e:f9:46:01:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Validity Not Before: May 6 21:37:18 2025 GMT Not After : May 9 21:55:18 2025 GMT Subject: CN=6CFA602AEA74DF0DA1A616AD1136250BB567AC32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6f:ff:66:12:2e:c0:1c:9a:ef:3b:a3:26:32: 1c:66:4b:55:f2:5a:2a:86:04:78:c4:d7:fd:62:7b: 85:5c:dd:81:39:b0:63:ac:9c:e9:40:67:f5:0f:22: 8e:b9:4e:e7:1e:05:95:8b:c7:02:61:50:ff:01:ec: 86:54:3a:4b:bf:26:fb:c2:a9:6e:e7:d6:18:9a:28: a3:ce:06:91:34:29:c3:71:14:60:2e:50:50:d3:54: cb:9a:0f:9c:5c:e6:f7:87:c6:7e:0b:e5:92:18:77: 90:a5:ac:f4:f4:57:79:08:34:db:91:a5:5b:2f:93: 0f:ee:6e:11:be:95:43:41:9f:6e:04:d8:5d:ee:3a: db:7e:68:1e:6d:cf:78:20:c4:bc:92:98:1d:62:c7: 9b:42:45:f0:e3:aa:28:0a:ed:05:ad:f5:08:29:f5: a8:0c:92:b6:12:9a:d2:1e:2d:37:75:ef:dd:e9:c7: 22:fc:6b:18:8c:9f:51:14:b8:0c:17:fb:82:c9:f1: 43:00:a5:51:1d:a6:94:bd:a4:42:d6:d3:8b:04:4b: e4:f8:4e:72:2c:40:dc:72:c8:48:58:b0:30:93:56: 8d:1a:66:cc:0b:2d:68:8a:3d:96:2b:c3:78:d6:b2: f2:67:7d:4d:75:b0:27:17:e0:cd:8e:de:1c:2d:90: f8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FA:60:2A:EA:74:DF:0D:A1:A6:16:AD:11:36:25:0B:B5:67:AC:32 X509v3 Authority Key Identifier: keyid:65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:b4:5d:a3:a4:c1:bc:29:62:b4:35:42:84:fa:06:3d:0d:d2: 87:77:f2:62:9d:e7:77:0d:9c:28:27:c3:9f:22:25:ad:9b:35: 76:e3:3a:3c:e8:f5:18:42:be:e6:7a:b9:7b:6b:a9:fb:9f:19: cc:82:0b:ae:2a:7d:52:fd:8d:14:35:59:46:a8:bb:9f:98:8e: 48:6e:a3:2d:52:1d:cb:16:0e:1d:7d:4b:60:50:fe:41:1b:e3: 15:e7:70:f1:65:6d:2b:57:ec:50:60:75:b3:24:a9:d9:96:b4: 8c:40:db:ff:b9:c4:f3:4b:83:14:55:5f:23:ff:f5:c4:b0:6b: 80:ba:0e:97:bb:ba:92:26:a9:b5:ef:23:64:9c:3c:68:52:42: 37:79:a0:e7:57:c5:d3:d3:6c:f1:24:ae:98:07:4e:52:4b:55: b6:ca:6b:f2:2c:bb:31:26:83:09:c4:9f:f2:a1:6e:44:ca:9a: 60:05:83:3a:26:14:85:90:fd:84:c1:a0:df:d7:16:0b:5f:00: db:7c:f2:aa:a2:00:35:16:36:17:83:ed:a4:29:49:24:75:c4: 3e:6a:21:0e:e9:42:0b:c4:c2:65:39:78:be:08:5f:9c:90:ac: 09:4f:a9:a6:e4:30:4d:fd:89:97:d6:b2:1d:3a:12:14:65:98: 3a:28:83:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWiO+2A9e9TE4q6ZlLwV5PvlGAawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURD QTZGOThCQzAeFw0yNTA1MDYyMTM3MThaFw0yNTA1MDkyMTU1MThaMDMxMTAvBgNV BAMTKDZDRkE2MDJBRUE3NERGMERBMUE2MTZBRDExMzYyNTBCQjU2N0FDMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCob/9mEi7AHJrvO6MmMhxmS1Xy WiqGBHjE1/1ie4Vc3YE5sGOsnOlAZ/UPIo65TuceBZWLxwJhUP8B7IZUOku/JvvC qW7n1hiaKKPOBpE0KcNxFGAuUFDTVMuaD5xc5veHxn4L5ZIYd5ClrPT0V3kINNuR pVsvkw/ubhG+lUNBn24E2F3uOtt+aB5tz3ggxLySmB1ix5tCRfDjqigK7QWt9Qgp 9agMkrYSmtIeLTd1793pxyL8axiMn1EUuAwX+4LJ8UMApVEdppS9pELW04sES+T4 TnIsQNxyyEhYsDCTVo0aZswLLWiKPZYrw3jWsvJnfU11sCcX4M2O3hwtkPhVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbPpgKup03w2hphatETYlC7VnrDIwHwYDVR0j BBgwFoAUZYezJUoHRupu/60dwvKdXcpvmLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjcxNjBkZC1mZjgwLTRlZmEtYmNmMS1iYjc1ZDZkNGYwOGEvMC82NTg3QjMyNTRB MDc0NkVBNkVGRkFEMURDMkYyOUQ1RENBNkY5OEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURDQTZG OThCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWY3MTYwZGQtZmY4MC00ZWZhLWJj ZjEtYmI3NWQ2ZDRmMDhhLzAvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlE NURDQTZGOThCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHW0XaOkwbwpYrQ1QoT6Bj0N0od38mKd53cN nCgnw58iJa2bNXbjOjzo9RhCvuZ6uXtrqfufGcyCC64qfVL9jRQ1WUaou5+Yjkhu oy1SHcsWDh19S2BQ/kEb4xXncPFlbStX7FBgdbMkqdmWtIxA2/+5xPNLgxRVXyP/ 9cSwa4C6Dpe7upImqbXvI2ScPGhSQjd5oOdXxdPTbPEkrpgHTlJLVbbKa/IsuzEm gwnEn/KhbkTKmmAFgzomFIWQ/YTBoN/XFgtfANt88qqiADUWNheD7aQpSSR1xD5q IQ7pQgvEwmU5eL4IX5yQrAlPqabkME39iZfWsh06EhRlmDoog60= -----END CERTIFICATE-----Generated at Thu May 8 06:54:30 2025 by rpki-client