$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft File: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft (raw, json) Hash identifier: o4IUS39pQ2WzAVf0I+GuIOwnzEEQO0WZ0DAtF3pPLiM= Subject key identifier: DE:A1:14:51:80:53:99:E8:B7:42:5A:4A:6E:67:08:EA:9D:36:8C:C8 Authority key identifier: 6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 Certificate issuer: /CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Certificate serial: 0B99778BBED798EB731C86351FB7DD6F31AF7FCE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft Manifest number: 02C9 Signing time: Sun 11 May 2025 20:41:28 +0000 Manifest this update: Sun 11 May 2025 20:36:28 +0000 Manifest next update: Thu 15 May 2025 06:46:28 +0000 Files and hashes: 1: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl (hash: lXRk9klFX8k7YSBhk7aF8G97apI8brjdswrvKsQNlOY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 06:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:99:77:8b:be:d7:98:eb:73:1c:86:35:1f:b7:dd:6f:31:af:7f:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Validity Not Before: May 11 20:36:28 2025 GMT Not After : May 15 06:46:28 2025 GMT Subject: CN=DEA11451805399E8B7425A4A6E6708EA9D368CC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:08:69:09:bc:bd:21:1a:5c:29:cd:f6:ad:47: 4a:c3:3a:f5:6f:ec:c9:2d:4a:3a:9b:48:b8:68:f4: 5b:72:8c:b3:4e:43:ac:4a:f2:45:fc:61:53:03:18: a0:3e:ce:3f:f5:e9:75:fb:d1:0f:49:1e:e8:1a:68: 1a:56:32:a2:8a:fc:e2:fb:dd:2c:25:55:46:18:d7: 21:45:c8:d9:39:cc:d3:2c:16:91:3a:3d:49:1d:8e: d4:29:14:7d:ec:42:bb:fa:82:10:12:84:23:53:fc: d6:d7:d5:56:37:92:eb:21:31:81:b4:44:53:a5:8e: 33:20:af:45:50:e6:05:ea:44:97:a4:b2:d8:fc:10: 7e:08:31:3b:97:99:3d:50:ff:b3:93:1d:81:15:d9: 6b:26:e2:1a:84:dc:9a:fd:48:a0:0b:30:d7:93:58: e0:27:df:8a:c7:a4:43:a9:5f:67:91:c6:23:7f:52: 69:5b:e7:46:aa:42:59:58:30:d7:ff:b4:73:d0:7c: 5d:26:2a:a8:3a:e5:8a:ad:bf:c5:5d:49:23:4c:40: ce:00:b1:b2:fd:44:03:88:c0:da:63:82:f4:f7:4e: 42:b3:25:65:e1:7b:09:4b:ac:40:f8:6a:d5:97:79: f0:29:aa:e8:e5:7e:da:5f:8d:c6:56:79:72:c7:99: 19:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A1:14:51:80:53:99:E8:B7:42:5A:4A:6E:67:08:EA:9D:36:8C:C8 X509v3 Authority Key Identifier: keyid:6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:c1:40:75:e9:dc:b3:d2:11:89:2a:6d:84:30:9a:a5:36:23: 8d:9b:e6:6a:bf:7e:e6:c1:d4:6a:6f:d7:7a:f7:3a:be:17:a4: 26:4f:15:19:c6:18:10:fc:50:6e:bf:c6:44:2e:e8:ca:bd:e9: 49:78:4d:17:cc:ea:7e:17:cd:d1:1f:43:a8:c3:bc:97:49:a7: 2f:3b:f1:b5:84:1f:8e:a7:ae:4a:6c:72:04:96:3f:5f:2d:be: f8:3e:91:6e:a7:73:80:cc:10:4a:c2:64:f0:40:c8:31:8e:0e: 87:62:45:c1:19:b0:b8:ab:69:23:27:15:04:40:d7:ee:32:d1: 9b:a8:59:57:11:1a:1d:3b:e1:17:86:30:2a:85:f9:ce:bc:22: 1d:03:b0:7d:fa:a1:e4:37:3f:8a:29:2b:35:f5:4e:46:a8:1a: ab:1d:2a:85:49:32:29:f4:89:4f:53:c1:23:ad:fd:5b:23:98: de:64:68:c0:82:20:e9:3a:4c:eb:14:39:6a:dc:85:71:b8:d2: ec:a8:48:63:bc:c3:ce:0c:4c:f6:69:71:17:77:ba:18:69:ff: ef:81:36:88:83:05:d0:50:10:10:7b:1d:42:6d:73:ff:3f:8f: 74:20:92:af:ad:3d:45:4f:e2:95:17:7e:4b:87:f1:7e:ac:79: 2f:5d:ea:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC5l3i77XmOtzHIY1H7fdbzGvf84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2MDAw RjI1NjFGNzAeFw0yNTA1MTEyMDM2MjhaFw0yNTA1MTUwNjQ2MjhaMDMxMTAvBgNV BAMTKERFQTExNDUxODA1Mzk5RThCNzQyNUE0QTZFNjcwOEVBOUQzNjhDQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUCGkJvL0hGlwpzfatR0rDOvVv 7MktSjqbSLho9FtyjLNOQ6xK8kX8YVMDGKA+zj/16XX70Q9JHugaaBpWMqKK/OL7 3SwlVUYY1yFFyNk5zNMsFpE6PUkdjtQpFH3sQrv6ghAShCNT/NbX1VY3kushMYG0 RFOljjMgr0VQ5gXqRJekstj8EH4IMTuXmT1Q/7OTHYEV2Wsm4hqE3Jr9SKALMNeT WOAn34rHpEOpX2eRxiN/Umlb50aqQllYMNf/tHPQfF0mKqg65Yqtv8VdSSNMQM4A sbL9RAOIwNpjgvT3TkKzJWXhewlLrED4atWXefApqujlftpfjcZWeXLHmRnhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3qEUUYBTmei3QlpKbmcI6p02jMgwHwYDVR0j BBgwFoAUbeqbJ17M+5IOCoTQ0VjGAA8lYfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWI3N2QxZS0xNTg1LTQ2MDQtYjZiMS0wNzFmMGEyOTQwYzQvMC82REVBOUIyNzVF Q0NGQjkyMEUwQTg0RDBEMTU4QzYwMDBGMjU2MUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2MDAwRjI1 NjFGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiNzdkMWUtMTU4NS00NjA0LWI2 YjEtMDcxZjBhMjk0MGM0LzAvNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2 MDAwRjI1NjFGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXBQHXp3LPSEYkqbYQwmqU2I42b5mq/fubB 1Gpv13r3Or4XpCZPFRnGGBD8UG6/xkQu6Mq96Ul4TRfM6n4XzdEfQ6jDvJdJpy87 8bWEH46nrkpscgSWP18tvvg+kW6nc4DMEErCZPBAyDGODodiRcEZsLiraSMnFQRA 1+4y0ZuoWVcRGh074ReGMCqF+c68Ih0DsH36oeQ3P4opKzX1TkaoGqsdKoVJMin0 iU9TwSOt/VsjmN5kaMCCIOk6TOsUOWrchXG40uyoSGO8w84MTPZpcRd3uhhp/++B NoiDBdBQEBB7HUJtc/8/j3Qgkq+tPUVP4pUXfkuH8X6seS9d6i0= -----END CERTIFICATE-----Generated at Mon May 12 12:45:31 2025 by rpki-client