$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft File: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft (raw, json) Hash identifier: CEcc8V6HwHhrhFihz20gYVVMZMOqUF33JjaE8NrmIRY= Subject key identifier: 81:60:3D:1A:CB:B8:C7:34:D9:F0:13:87:80:5A:E6:EF:2B:DF:1C:07 Authority key identifier: 6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 Certificate issuer: /CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Certificate serial: 3FACCDF2ADCFEA7A1EE1D9B64ED5AE57F1844787 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft Manifest number: 02F7 Signing time: Sat 23 Aug 2025 07:11:29 +0000 Manifest this update: Sat 23 Aug 2025 07:06:29 +0000 Manifest next update: Tue 26 Aug 2025 09:32:29 +0000 Files and hashes: 1: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl (hash: B7Aa0ahWEbh/7LhPWf6n4GcK/KVr+vDRTO3EIsyjxpU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 09:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ac:cd:f2:ad:cf:ea:7a:1e:e1:d9:b6:4e:d5:ae:57:f1:84:47:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Validity Not Before: Aug 23 07:06:29 2025 GMT Not After : Aug 26 09:32:29 2025 GMT Subject: CN=81603D1ACBB8C734D9F01387805AE6EF2BDF1C07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:21:df:ec:3b:14:f4:57:e4:49:a6:43:72:e4: 7f:1a:94:10:6f:f0:19:a8:8c:ee:cd:80:31:27:af: 2a:b4:40:7e:13:35:07:5f:cc:80:06:36:13:bf:f0: 7e:62:9a:5a:e3:f8:35:43:95:92:07:29:f9:9e:8f: 14:e2:a1:53:87:e5:3e:b8:ab:e4:f4:25:8b:9e:7b: 5d:c8:d4:13:24:93:00:68:ce:6c:62:4e:00:49:37: ef:57:72:f7:03:ae:ba:c3:e7:1a:d2:a8:b3:6e:45: 9b:9f:fb:45:53:24:0f:2e:99:f7:5e:18:3f:dc:32: 1b:73:0e:74:86:43:1d:2d:7e:b4:14:4f:40:66:a2: 02:46:b6:f5:19:1d:5c:69:08:ea:11:94:e7:4a:70: c4:fe:1c:80:31:f0:84:57:9e:18:23:df:49:21:c6: 3c:66:b2:bc:4d:dd:1d:f7:1d:04:dd:ad:cf:30:67: fb:b2:21:aa:c0:f2:a7:16:53:c6:12:2a:3c:33:d0: 5a:9e:98:6e:e7:9d:a3:90:16:61:6d:05:a3:a0:0e: 7d:eb:e9:db:05:cf:99:f6:1c:9c:05:24:7a:e8:b1: da:99:f3:5d:ac:43:99:2a:ca:d0:06:2b:41:30:e3: a5:fa:02:73:4b:55:da:ed:b5:7f:33:5e:9a:e6:ef: 66:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:60:3D:1A:CB:B8:C7:34:D9:F0:13:87:80:5A:E6:EF:2B:DF:1C:07 X509v3 Authority Key Identifier: keyid:6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:35:b8:f3:c4:be:88:12:b7:b1:76:86:1f:d9:da:0e:72:34: cd:bb:3b:ed:47:09:e7:f5:9b:e1:25:48:cc:f4:98:dc:fd:35: 8e:17:a4:54:37:9c:e2:80:a2:71:b5:b8:25:86:e7:44:66:71: 8a:36:9d:a9:8b:85:95:dc:a8:c0:12:33:7b:ca:6a:34:74:ff: 48:1b:4d:bc:db:8b:4d:88:33:dc:4b:d6:48:f8:51:31:29:58: 7a:6f:7a:04:08:97:5e:24:f4:60:5c:97:12:87:84:28:58:24: be:c1:d4:bf:b7:fa:c1:0a:6c:9f:a4:9c:4b:fb:19:43:e5:bd: 1e:1f:5b:6a:27:e3:ea:df:ed:c2:0d:cc:6b:d7:36:96:1c:dc: 58:e3:bd:60:6d:ba:04:07:50:0c:95:58:cc:b0:e4:10:2a:7d: b1:73:90:df:6b:8c:08:b7:08:ff:fe:07:71:62:a8:00:24:6b: df:e3:12:87:ab:f2:50:19:ff:ec:21:46:f0:b0:fb:45:03:08: f5:1e:e0:06:b5:d5:96:b0:c7:0e:9b:23:47:e3:7d:e7:c2:8c: f6:7a:72:bd:15:8d:ee:d2:9b:a1:95:c3:f1:3c:ac:78:55:8f: cb:72:83:70:25:59:a4:fb:3c:83:05:fd:b0:1f:67:7d:b5:a3: 90:a2:8d:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP6zN8q3P6noe4dm2TtWuV/GER4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2MDAw RjI1NjFGNzAeFw0yNTA4MjMwNzA2MjlaFw0yNTA4MjYwOTMyMjlaMDMxMTAvBgNV BAMTKDgxNjAzRDFBQ0JCOEM3MzREOUYwMTM4NzgwNUFFNkVGMkJERjFDMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBId/sOxT0V+RJpkNy5H8alBBv 8BmojO7NgDEnryq0QH4TNQdfzIAGNhO/8H5imlrj+DVDlZIHKfmejxTioVOH5T64 q+T0JYuee13I1BMkkwBozmxiTgBJN+9XcvcDrrrD5xrSqLNuRZuf+0VTJA8umfde GD/cMhtzDnSGQx0tfrQUT0BmogJGtvUZHVxpCOoRlOdKcMT+HIAx8IRXnhgj30kh xjxmsrxN3R33HQTdrc8wZ/uyIarA8qcWU8YSKjwz0FqemG7nnaOQFmFtBaOgDn3r 6dsFz5n2HJwFJHrosdqZ812sQ5kqytAGK0Ew46X6AnNLVdrttX8zXprm72Z5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgWA9Gsu4xzTZ8BOHgFrm7yvfHAcwHwYDVR0j BBgwFoAUbeqbJ17M+5IOCoTQ0VjGAA8lYfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWI3N2QxZS0xNTg1LTQ2MDQtYjZiMS0wNzFmMGEyOTQwYzQvMC82REVBOUIyNzVF Q0NGQjkyMEUwQTg0RDBEMTU4QzYwMDBGMjU2MUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2MDAwRjI1 NjFGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiNzdkMWUtMTU4NS00NjA0LWI2 YjEtMDcxZjBhMjk0MGM0LzAvNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2 MDAwRjI1NjFGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAo1uPPEvogSt7F2hh/Z2g5yNM27O+1HCef1 m+ElSMz0mNz9NY4XpFQ3nOKAonG1uCWG50RmcYo2namLhZXcqMASM3vKajR0/0gb Tbzbi02IM9xL1kj4UTEpWHpvegQIl14k9GBclxKHhChYJL7B1L+3+sEKbJ+knEv7 GUPlvR4fW2on4+rf7cINzGvXNpYc3FjjvWBtugQHUAyVWMyw5BAqfbFzkN9rjAi3 CP/+B3FiqAAka9/jEoer8lAZ/+whRvCw+0UDCPUe4Aa11Zawxw6bI0fjfefCjPZ6 cr0Vje7Sm6GVw/E8rHhVj8tyg3AlWaT7PIMF/bAfZ321o5CijUY= -----END CERTIFICATE-----Generated at Sat Aug 23 10:36:56 2025 by rpki-client