$ rpki-client -vvf repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft File: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft (raw, json) Hash identifier: MEjSy/EBk+I2NBwQekmvWv4RT022TfUB8m98fRhJzcU= Subject key identifier: 72:D9:93:E6:CD:1F:20:87:3B:31:B4:E9:6B:DB:F7:99:A7:B5:F4:E2 Authority key identifier: 65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC Certificate issuer: /CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Certificate serial: 077A5021D1A667BCD89B18FDCE2719CA2A04AA51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft Manifest number: 0425 Signing time: Mon 30 Jun 2025 15:31:51 +0000 Manifest this update: Mon 30 Jun 2025 15:26:51 +0000 Manifest next update: Thu 03 Jul 2025 23:57:51 +0000 Files and hashes: 1: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl (hash: QcAqeHR247Rr+I3Odb9bEBpWzrKx1bvs5IvKh+F7b6w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 23:57:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:7a:50:21:d1:a6:67:bc:d8:9b:18:fd:ce:27:19:ca:2a:04:aa:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Validity Not Before: Jun 30 15:26:51 2025 GMT Not After : Jul 3 23:57:51 2025 GMT Subject: CN=72D993E6CD1F20873B31B4E96BDBF799A7B5F4E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:66:d4:dd:10:9e:ec:85:9b:4e:f9:46:09:e9: c3:55:11:16:6b:89:65:c8:11:d5:90:2c:df:bc:d4: 8b:36:c0:e6:ba:51:06:cd:6f:72:ec:9a:58:11:7a: 1b:2b:78:08:5c:4b:92:7c:71:dd:c5:aa:c8:95:bb: 98:d7:09:d6:cd:bc:a8:03:8b:94:fa:59:2b:24:4b: 67:66:01:29:7a:05:0b:8e:bd:b4:20:19:f1:78:0c: 51:88:59:96:56:1c:89:81:04:42:96:d0:0e:a8:2a: ac:f4:07:d3:55:e1:94:07:ee:ad:15:a1:7a:97:24: 1d:5e:36:e4:fc:ae:d2:b8:7c:58:3b:35:4f:19:17: 60:fb:8f:0a:bd:46:63:f0:35:87:d5:35:69:38:be: 93:09:8e:6b:32:fb:f9:05:88:af:bb:30:f2:18:19: b1:dc:2f:01:38:ab:05:7f:0f:23:8c:a7:33:fb:14: 11:68:ff:f8:70:96:27:32:fa:90:f7:11:ad:39:9e: d9:b0:49:cb:b1:82:3f:67:48:62:c4:43:22:f9:2f: e4:b4:31:18:12:e9:2f:d2:14:39:88:15:af:4c:f1: 10:91:c9:91:3c:14:fd:29:64:a0:23:1e:d2:98:0d: 0b:8b:e5:3d:52:79:54:38:f8:5e:e1:c1:a9:a2:ae: 1b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D9:93:E6:CD:1F:20:87:3B:31:B4:E9:6B:DB:F7:99:A7:B5:F4:E2 X509v3 Authority Key Identifier: keyid:65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:6f:ac:e0:5d:87:bf:13:79:fe:bc:17:ab:b5:9b:ca:9d:97: a1:5b:ec:0d:32:4b:6b:f7:4d:26:94:98:53:ab:b0:2f:18:9f: cd:ac:3c:88:26:10:67:c7:7f:b8:4a:7c:d4:2a:bf:22:c9:47: c0:2c:5e:00:1c:64:52:12:14:f1:3e:03:9b:48:d3:d5:84:83: f7:74:67:fe:62:1f:18:05:0f:7c:a2:bb:ca:7e:d5:8b:66:69: 31:c1:91:64:37:ba:0f:7c:78:14:4f:b1:60:32:87:82:8a:c9: f0:60:f0:c7:5d:cb:bd:57:79:64:af:d5:25:30:1f:bd:98:27: 22:19:1b:ae:bd:5f:05:ee:ae:97:e6:12:2a:dc:dd:d5:01:3b: 95:f3:32:60:87:41:39:2a:11:14:ac:8e:8b:3d:46:da:25:97: 87:05:4b:3b:9c:9c:c3:a3:56:32:71:d1:1a:00:1f:cc:41:7f: f5:7c:13:3e:c9:d0:bb:89:82:e5:0d:86:9e:24:19:34:c5:01: 4b:80:74:9c:93:38:2e:83:87:bd:e6:ff:06:58:29:5c:c7:5c: 91:b0:d5:32:f2:65:42:7a:81:69:91:b9:9f:c2:92:61:e6:8e: 6c:08:16:af:5b:ac:80:5c:0a:0d:07:81:80:89:72:35:37:f5: 88:5e:7e:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB3pQIdGmZ7zYmxj9zicZyioEqlEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURD QTZGOThCQzAeFw0yNTA2MzAxNTI2NTFaFw0yNTA3MDMyMzU3NTFaMDMxMTAvBgNV BAMTKDcyRDk5M0U2Q0QxRjIwODczQjMxQjRFOTZCREJGNzk5QTdCNUY0RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ZtTdEJ7shZtO+UYJ6cNVERZr iWXIEdWQLN+81Is2wOa6UQbNb3LsmlgRehsreAhcS5J8cd3FqsiVu5jXCdbNvKgD i5T6WSskS2dmASl6BQuOvbQgGfF4DFGIWZZWHImBBEKW0A6oKqz0B9NV4ZQH7q0V oXqXJB1eNuT8rtK4fFg7NU8ZF2D7jwq9RmPwNYfVNWk4vpMJjmsy+/kFiK+7MPIY GbHcLwE4qwV/DyOMpzP7FBFo//hwlicy+pD3Ea05ntmwScuxgj9nSGLEQyL5L+S0 MRgS6S/SFDmIFa9M8RCRyZE8FP0pZKAjHtKYDQuL5T1SeVQ4+F7hwamirhspAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUctmT5s0fIIc7MbTpa9v3mae19OIwHwYDVR0j BBgwFoAUZYezJUoHRupu/60dwvKdXcpvmLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjcxNjBkZC1mZjgwLTRlZmEtYmNmMS1iYjc1ZDZkNGYwOGEvMC82NTg3QjMyNTRB MDc0NkVBNkVGRkFEMURDMkYyOUQ1RENBNkY5OEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURDQTZG OThCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWY3MTYwZGQtZmY4MC00ZWZhLWJj ZjEtYmI3NWQ2ZDRmMDhhLzAvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlE NURDQTZGOThCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZvrOBdh78Tef68F6u1m8qdl6Fb7A0yS2v3 TSaUmFOrsC8Yn82sPIgmEGfHf7hKfNQqvyLJR8AsXgAcZFISFPE+A5tI09WEg/d0 Z/5iHxgFD3yiu8p+1YtmaTHBkWQ3ug98eBRPsWAyh4KKyfBg8Mddy71XeWSv1SUw H72YJyIZG669XwXurpfmEirc3dUBO5XzMmCHQTkqERSsjos9Rtoll4cFSzucnMOj VjJx0RoAH8xBf/V8Ez7J0LuJguUNhp4kGTTFAUuAdJyTOC6Dh73m/wZYKVzHXJGw 1TLyZUJ6gWmRuZ/CkmHmjmwIFq9brIBcCg0HgYCJcjU39Yhefv4= -----END CERTIFICATE-----Generated at Tue Jul 1 23:26:04 2025 by rpki-client