$ rpki-client -vvf repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft File: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft (raw, json) Hash identifier: oR9u1qvZhz8WYsCQYRWQ9TQHfFBt2xHgi26BIjCROQU= Subject key identifier: 69:44:57:84:AF:CA:96:D8:D3:37:4F:A4:0A:F3:8F:9A:A8:C4:4D:99 Authority key identifier: 65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC Certificate issuer: /CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Certificate serial: 36966141C05ECD4DAE2D62B1F8800B727CEC718A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft Manifest number: 043D Signing time: Sat 23 Aug 2025 05:21:55 +0000 Manifest this update: Sat 23 Aug 2025 05:16:55 +0000 Manifest next update: Tue 26 Aug 2025 08:25:55 +0000 Files and hashes: 1: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl (hash: nrll/mn76t5co2WcJYchiZc1EiDCQk80FrCdecXitMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 08:25:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:96:61:41:c0:5e:cd:4d:ae:2d:62:b1:f8:80:0b:72:7c:ec:71:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Validity Not Before: Aug 23 05:16:55 2025 GMT Not After : Aug 26 08:25:55 2025 GMT Subject: CN=69445784AFCA96D8D3374FA40AF38F9AA8C44D99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0c:a4:b2:10:18:14:8b:1c:aa:a9:eb:19:87: 8f:eb:9d:57:ce:77:54:7a:cd:07:12:f2:b6:b7:4f: f4:0c:77:99:ac:56:5a:2d:f3:0f:15:62:b7:57:46: ff:3c:f6:89:cb:7a:b3:4a:a9:f0:97:33:45:f1:ce: 18:c5:91:8a:03:30:bd:cb:6c:d8:32:e4:6d:a8:0c: 72:e5:bd:69:10:a5:1d:12:00:22:97:eb:2e:83:ef: 51:f7:27:c7:59:40:26:8b:80:e1:50:8c:bf:25:92: f2:b8:d5:e8:39:d0:e8:8f:9b:ab:05:b1:a6:56:70: e5:6f:62:32:6e:75:ba:51:0a:51:84:06:47:5d:4a: 2b:0a:14:92:e4:1f:a7:6d:e5:d7:34:27:87:4c:0f: 9f:c0:f9:18:60:78:7e:dd:a1:fd:0c:68:c3:04:32: 8c:1b:b4:22:7c:f1:ee:aa:37:14:37:5d:ab:89:fc: 40:c4:56:a8:8f:ef:01:ac:eb:a7:ba:be:3e:28:99: 15:da:ae:ef:ac:dc:98:92:a3:b1:9c:d9:f9:d9:bb: bd:df:e4:1c:4d:51:1f:fe:c9:6f:00:08:65:38:5e: 6e:1e:09:03:f7:b2:4c:21:b9:58:54:49:de:1e:24: de:cf:a7:83:b5:c0:1f:35:7a:67:fb:5f:65:d3:b1: 8e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:44:57:84:AF:CA:96:D8:D3:37:4F:A4:0A:F3:8F:9A:A8:C4:4D:99 X509v3 Authority Key Identifier: keyid:65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:35:1c:15:10:31:4c:94:dc:42:14:73:19:c6:70:9e:5b:d0: 92:31:79:4a:54:31:3f:dd:c1:5b:90:f4:cf:78:eb:75:5b:d1: b7:8b:11:a5:58:62:5c:93:39:93:e9:99:f9:3e:35:b1:8b:84: d7:93:5a:ec:26:b8:39:3d:26:12:06:9d:9e:74:a8:5e:99:05: 55:f1:31:b3:2a:34:9c:f0:58:de:b5:07:b7:3d:9e:5a:74:9f: e1:5a:6e:72:85:f4:30:cf:0e:36:41:93:41:b0:7a:d2:cf:37: 68:df:52:89:3d:1f:50:a1:84:48:9b:89:a9:46:30:6c:7d:d7: 2c:e1:66:9d:54:61:c1:9f:44:d4:32:f3:57:81:dc:b4:1c:28: 01:a0:5e:eb:00:df:58:16:68:68:26:08:5f:ef:fe:f7:1a:ac: 43:48:f2:8d:f5:85:18:5e:b8:03:26:cc:31:ba:58:7f:b5:73: 0f:89:b9:0b:5c:ba:e5:cd:21:d1:28:9f:6e:78:c9:6f:b6:3c: 6e:43:0d:06:fa:3a:8c:30:a9:46:7d:83:1a:8a:01:70:bd:63: 9b:8d:68:84:b8:e7:0c:48:c5:9f:aa:85:02:2b:90:d0:94:2c: ba:5b:ce:e6:4c:36:9e:65:79:53:6e:14:84:7c:54:f3:0b:77: 1b:4a:22:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNpZhQcBezU2uLWKx+IALcnzscYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURD QTZGOThCQzAeFw0yNTA4MjMwNTE2NTVaFw0yNTA4MjYwODI1NTVaMDMxMTAvBgNV BAMTKDY5NDQ1Nzg0QUZDQTk2RDhEMzM3NEZBNDBBRjM4RjlBQThDNDREOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyDKSyEBgUixyqqesZh4/rnVfO d1R6zQcS8ra3T/QMd5msVlot8w8VYrdXRv889onLerNKqfCXM0XxzhjFkYoDML3L bNgy5G2oDHLlvWkQpR0SACKX6y6D71H3J8dZQCaLgOFQjL8lkvK41eg50OiPm6sF saZWcOVvYjJudbpRClGEBkddSisKFJLkH6dt5dc0J4dMD5/A+RhgeH7dof0MaMME MowbtCJ88e6qNxQ3XauJ/EDEVqiP7wGs66e6vj4omRXaru+s3JiSo7Gc2fnZu73f 5BxNUR/+yW8ACGU4Xm4eCQP3skwhuVhUSd4eJN7Pp4O1wB81emf7X2XTsY7ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaURXhK/KltjTN0+kCvOPmqjETZkwHwYDVR0j BBgwFoAUZYezJUoHRupu/60dwvKdXcpvmLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjcxNjBkZC1mZjgwLTRlZmEtYmNmMS1iYjc1ZDZkNGYwOGEvMC82NTg3QjMyNTRB MDc0NkVBNkVGRkFEMURDMkYyOUQ1RENBNkY5OEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURDQTZG OThCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWY3MTYwZGQtZmY4MC00ZWZhLWJj ZjEtYmI3NWQ2ZDRmMDhhLzAvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlE NURDQTZGOThCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGo1HBUQMUyU3EIUcxnGcJ5b0JIxeUpUMT/d wVuQ9M9463Vb0beLEaVYYlyTOZPpmfk+NbGLhNeTWuwmuDk9JhIGnZ50qF6ZBVXx MbMqNJzwWN61B7c9nlp0n+FabnKF9DDPDjZBk0GwetLPN2jfUok9H1ChhEibialG MGx91yzhZp1UYcGfRNQy81eB3LQcKAGgXusA31gWaGgmCF/v/vcarENI8o31hRhe uAMmzDG6WH+1cw+JuQtcuuXNIdEon254yW+2PG5DDQb6OowwqUZ9gxqKAXC9Y5uN aIS45wxIxZ+qhQIrkNCULLpbzuZMNp5leVNuFIR8VPMLdxtKIhg= -----END CERTIFICATE-----Generated at Sat Aug 23 12:16:39 2025 by rpki-client