$ rpki-client -vvf repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft File: F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft (raw, json) Hash identifier: k90UIekrIAvrlEUtMDRSs/x7al8JyG3PRv8gNbcBOsM= Subject key identifier: 10:71:A1:81:F3:D5:7B:84:71:C0:FA:8B:F0:76:A4:FE:A3:8D:CD:9E Authority key identifier: F6:C8:A7:13:C4:45:14:84:D1:D6:7F:4E:E6:F7:7B:46:AE:E4:17:A9 Certificate issuer: /CN=F6C8A713C4451484D1D67F4EE6F77B46AEE417A9 Certificate serial: 0B52C45CB278F20A85FB2047935DE8F566AC6813 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft Manifest number: 01A7 Signing time: Fri 22 Aug 2025 21:10:37 +0000 Manifest this update: Fri 22 Aug 2025 21:05:37 +0000 Manifest next update: Tue 26 Aug 2025 04:04:37 +0000 Files and hashes: 1: F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl (hash: cJv2WJPcoKNGeRe0TpO9YnfWhY7bjgxbGeHyft0KDAs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 04:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:52:c4:5c:b2:78:f2:0a:85:fb:20:47:93:5d:e8:f5:66:ac:68:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6C8A713C4451484D1D67F4EE6F77B46AEE417A9 Validity Not Before: Aug 22 21:05:37 2025 GMT Not After : Aug 26 04:04:37 2025 GMT Subject: CN=1071A181F3D57B8471C0FA8BF076A4FEA38DCD9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:30:93:6d:2c:cb:74:2f:40:00:6f:78:8e:cd: f8:f6:bf:c5:0c:96:75:dd:b4:20:ac:77:f5:43:3e: 2c:87:e8:49:f0:47:a6:5d:6a:02:c9:ba:f1:97:97: c9:eb:a7:21:23:7c:4c:5e:eb:64:72:7d:46:39:03: 13:e3:64:22:4b:d9:43:4d:f1:8a:83:3c:c8:ed:e1: e1:8b:59:95:e8:e6:ed:3c:eb:4c:91:2c:73:0b:5b: bd:ce:bf:8b:af:a1:8f:7c:f5:5a:d7:36:d7:78:bb: 7c:e8:de:bf:36:35:63:74:86:2e:ca:9e:13:0c:a7: a2:b4:bf:6b:46:17:26:8a:a7:b9:29:e1:22:bc:52: aa:ac:83:4d:c7:aa:c8:6b:40:b0:21:a4:3f:cf:e0: 46:9a:11:74:a9:89:90:01:db:0a:55:b6:20:cd:da: 8f:6a:33:be:ad:d9:cd:31:dd:78:d3:a6:2a:24:07: 59:87:99:d4:4a:a3:27:39:92:6d:6c:71:95:0b:9e: 4b:01:5b:75:e9:a4:6f:8f:db:d1:16:f3:45:7e:c5: a7:04:6f:35:90:92:d7:c0:b7:31:08:10:48:8c:b9: db:df:fb:7a:ee:3f:cd:b7:02:67:3c:e7:8a:f2:56: 73:d8:92:f0:5c:d5:29:31:af:69:a9:03:a0:d6:14: ad:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:71:A1:81:F3:D5:7B:84:71:C0:FA:8B:F0:76:A4:FE:A3:8D:CD:9E X509v3 Authority Key Identifier: keyid:F6:C8:A7:13:C4:45:14:84:D1:D6:7F:4E:E6:F7:7B:46:AE:E4:17:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:05:72:53:63:18:6f:ab:61:ad:73:e9:04:a6:79:a6:8e:82: 8a:7b:44:45:96:12:c4:2a:99:f3:19:d5:b5:3a:e1:f4:24:21: 17:17:51:76:47:04:ae:e7:be:6d:20:05:b5:eb:7b:d2:8b:95: 27:ec:10:67:49:5f:ec:cd:97:9f:14:79:5f:80:b5:3d:78:d1: a2:ca:63:d8:cf:dc:a2:93:df:5d:ee:dc:0f:89:be:9d:45:5e: af:46:3f:f7:be:56:38:5a:58:a4:24:72:91:d6:2c:5e:7c:ef: 28:55:da:c5:8d:d2:70:d5:b7:01:af:9d:9f:03:01:0a:fd:ff: 23:db:de:40:15:46:64:6c:a5:13:1e:cb:fb:c8:01:c9:ba:6f: 60:2d:3a:2d:26:7a:be:db:a2:6a:6b:19:6d:d9:95:04:9d:24: 3a:1f:23:e8:15:da:45:99:16:03:8e:fe:46:db:5a:66:9e:45: 18:70:17:f8:32:bf:86:a4:38:99:c9:95:43:31:bc:eb:ef:72: fa:16:56:95:9f:f4:f9:30:17:54:4d:5d:4d:f5:d5:95:16:45: ca:e7:36:ec:da:32:d3:06:b0:13:90:66:32:5e:aa:a7:39:3b: 30:0a:51:ad:31:3e:8a:6d:58:45:8f:db:26:5a:0f:26:9b:06: 80:6c:23:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC1LEXLJ48gqF+yBHk13o9WasaBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdCNDZB RUU0MTdBOTAeFw0yNTA4MjIyMTA1MzdaFw0yNTA4MjYwNDA0MzdaMDMxMTAvBgNV BAMTKDEwNzFBMTgxRjNENTdCODQ3MUMwRkE4QkYwNzZBNEZFQTM4RENEOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmMJNtLMt0L0AAb3iOzfj2v8UM lnXdtCCsd/VDPiyH6EnwR6ZdagLJuvGXl8nrpyEjfExe62RyfUY5AxPjZCJL2UNN 8YqDPMjt4eGLWZXo5u0860yRLHMLW73Ov4uvoY989VrXNtd4u3zo3r82NWN0hi7K nhMMp6K0v2tGFyaKp7kp4SK8Uqqsg03HqshrQLAhpD/P4EaaEXSpiZAB2wpVtiDN 2o9qM76t2c0x3XjTpiokB1mHmdRKoyc5km1scZULnksBW3XppG+P29EW80V+xacE bzWQktfAtzEIEEiMudvf+3ruP823Amc854ryVnPYkvBc1Skxr2mpA6DWFK1rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEHGhgfPVe4RxwPqL8Hak/qONzZ4wHwYDVR0j BBgwFoAU9sinE8RFFITR1n9O5vd7Rq7kF6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmM3ZTViMS01MTlkLTQ1NmMtYjNiNi03NTU3OTQ3MDI2NjQvMC9GNkM4QTcxM0M0 NDUxNDg0RDFENjdGNEVFNkY3N0I0NkFFRTQxN0E5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdCNDZBRUU0 MTdBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZjN2U1YjEtNTE5ZC00NTZjLWIz YjYtNzU1Nzk0NzAyNjY0LzAvRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdC NDZBRUU0MTdBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8FclNjGG+rYa1z6QSmeaaOgop7REWWEsQq mfMZ1bU64fQkIRcXUXZHBK7nvm0gBbXre9KLlSfsEGdJX+zNl58UeV+AtT140aLK Y9jP3KKT313u3A+Jvp1FXq9GP/e+VjhaWKQkcpHWLF587yhV2sWN0nDVtwGvnZ8D AQr9/yPb3kAVRmRspRMey/vIAcm6b2AtOi0mer7bomprGW3ZlQSdJDofI+gV2kWZ FgOO/kbbWmaeRRhwF/gyv4akOJnJlUMxvOvvcvoWVpWf9PkwF1RNXU311ZUWRcrn NuzaMtMGsBOQZjJeqqc5OzAKUa0xPoptWEWP2yZaDyabBoBsI6A= -----END CERTIFICATE-----Generated at Sat Aug 23 10:36:37 2025 by rpki-client