$ rpki-client -vvf repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft File: F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft (raw, json) Hash identifier: RfcSW+ZxN+E5C0RlcD0CG8tiNj8BdDv1i0FuWdXDEbM= Subject key identifier: 95:1C:AA:6B:24:21:55:98:0D:FB:FA:12:88:8B:45:74:3F:49:B2:4B Authority key identifier: F6:C8:A7:13:C4:45:14:84:D1:D6:7F:4E:E6:F7:7B:46:AE:E4:17:A9 Certificate issuer: /CN=F6C8A713C4451484D1D67F4EE6F77B46AEE417A9 Certificate serial: 504D45BB5D2B25955FBB5FB4DFEF9D0181BA69F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft Manifest number: 0179 Signing time: Sun 11 May 2025 13:10:35 +0000 Manifest this update: Sun 11 May 2025 13:05:35 +0000 Manifest next update: Wed 14 May 2025 19:19:35 +0000 Files and hashes: 1: F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl (hash: bQvnkY/2dt2bkS+aCmALW2/qIZrHfIEb/obuDDgXL6o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 19:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:4d:45:bb:5d:2b:25:95:5f:bb:5f:b4:df:ef:9d:01:81:ba:69:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6C8A713C4451484D1D67F4EE6F77B46AEE417A9 Validity Not Before: May 11 13:05:35 2025 GMT Not After : May 14 19:19:35 2025 GMT Subject: CN=951CAA6B242155980DFBFA12888B45743F49B24B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:12:5a:60:9b:3f:0f:c4:d2:5f:81:3d:38:76: 32:51:58:10:7f:6f:7f:d0:78:ce:6a:eb:a8:ec:df: b0:8a:87:17:83:36:70:7f:aa:1a:1f:54:0b:2b:37: ea:7c:3e:ce:a0:8f:8e:54:e1:95:3e:8b:b7:d5:cf: cb:f7:61:af:15:31:2d:4e:27:bd:54:1d:ef:1e:1d: b1:98:73:e0:92:f6:28:c7:a8:e4:a8:36:9f:b2:87: a7:83:a4:c0:67:bb:02:23:78:d1:3e:05:47:54:3c: 3b:6e:dd:4c:81:29:1c:74:8a:ee:6b:48:ac:b2:f7: 04:20:c5:06:c3:fc:c9:a8:3a:fa:4d:e7:b0:d0:5f: fd:3a:04:fc:05:c0:07:7d:7b:e9:64:af:0c:55:cc: 4b:0d:47:54:0f:ec:6b:33:97:fa:67:a9:f8:6b:45: 00:97:fa:b7:0e:06:00:37:17:e6:05:02:dd:d2:81: 66:e3:b8:b5:30:4d:98:a2:bd:b4:73:4b:02:0d:05: f6:3b:7d:17:b2:73:8b:0d:1f:65:31:d1:ab:9a:ea: 7e:5a:cb:3e:7c:5f:16:58:80:6c:63:43:0d:64:10: ff:d4:b5:c0:4c:9b:54:75:33:1c:9d:ac:0f:92:d1: b2:74:38:94:f5:6f:ef:dd:5a:06:38:26:02:4e:b2: 13:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1C:AA:6B:24:21:55:98:0D:FB:FA:12:88:8B:45:74:3F:49:B2:4B X509v3 Authority Key Identifier: keyid:F6:C8:A7:13:C4:45:14:84:D1:D6:7F:4E:E6:F7:7B:46:AE:E4:17:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:c3:36:02:31:77:73:54:f1:ad:9d:1a:5c:b8:24:de:14:42: 49:97:d1:7c:cc:fe:b0:e3:4e:00:5a:15:5d:4f:b2:2e:18:31: 36:62:a1:c8:c2:fc:6f:f2:ec:75:c1:71:9a:e5:91:6d:97:cf: 90:56:a0:24:67:ea:f6:eb:55:6d:ba:78:8b:72:52:f0:82:13: c0:53:cb:1e:f8:11:15:33:34:8c:9f:c8:c8:c2:62:4e:f5:e2: f6:89:a4:21:ba:b2:8c:d5:8e:36:da:08:b5:68:dc:e2:25:65: e7:af:4d:55:c4:88:2f:ab:10:fe:0c:bd:a6:17:2d:0f:a9:73: 28:03:4a:0a:e4:d1:04:ac:20:99:31:45:02:24:44:79:77:42: 3f:4f:41:01:ec:d0:f4:fd:3f:79:f2:51:72:0f:08:c0:bc:59: 02:33:2d:df:eb:6d:f8:6c:29:b8:16:aa:aa:e1:e5:8b:71:75: 6c:24:38:96:d1:57:12:a6:d4:4e:30:64:eb:23:22:c6:b2:25: 75:a5:fc:c7:8f:a6:82:63:7a:8a:7c:1e:56:55:ad:a1:de:00: 40:1d:aa:cb:e5:9b:9c:3f:1c:a6:8c:1f:fb:67:5b:97:e7:e9: cc:46:19:81:b1:22:98:16:20:1d:a5:ef:e7:79:82:bb:0c:38: cb:e2:fa:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUE1Fu10rJZVfu1+03++dAYG6afAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdCNDZB RUU0MTdBOTAeFw0yNTA1MTExMzA1MzVaFw0yNTA1MTQxOTE5MzVaMDMxMTAvBgNV BAMTKDk1MUNBQTZCMjQyMTU1OTgwREZCRkExMjg4OEI0NTc0M0Y0OUIyNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmElpgmz8PxNJfgT04djJRWBB/ b3/QeM5q66js37CKhxeDNnB/qhofVAsrN+p8Ps6gj45U4ZU+i7fVz8v3Ya8VMS1O J71UHe8eHbGYc+CS9ijHqOSoNp+yh6eDpMBnuwIjeNE+BUdUPDtu3UyBKRx0iu5r SKyy9wQgxQbD/MmoOvpN57DQX/06BPwFwAd9e+lkrwxVzEsNR1QP7Gszl/pnqfhr RQCX+rcOBgA3F+YFAt3SgWbjuLUwTZiivbRzSwINBfY7fReyc4sNH2Ux0aua6n5a yz58XxZYgGxjQw1kEP/UtcBMm1R1MxydrA+S0bJ0OJT1b+/dWgY4JgJOshOpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlRyqayQhVZgN+/oSiItFdD9JskswHwYDVR0j BBgwFoAU9sinE8RFFITR1n9O5vd7Rq7kF6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmM3ZTViMS01MTlkLTQ1NmMtYjNiNi03NTU3OTQ3MDI2NjQvMC9GNkM4QTcxM0M0 NDUxNDg0RDFENjdGNEVFNkY3N0I0NkFFRTQxN0E5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdCNDZBRUU0 MTdBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZjN2U1YjEtNTE5ZC00NTZjLWIz YjYtNzU1Nzk0NzAyNjY0LzAvRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdC NDZBRUU0MTdBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPDNgIxd3NU8a2dGly4JN4UQkmX0XzM/rDj TgBaFV1Psi4YMTZiocjC/G/y7HXBcZrlkW2Xz5BWoCRn6vbrVW26eItyUvCCE8BT yx74ERUzNIyfyMjCYk714vaJpCG6sozVjjbaCLVo3OIlZeevTVXEiC+rEP4MvaYX LQ+pcygDSgrk0QSsIJkxRQIkRHl3Qj9PQQHs0PT9P3nyUXIPCMC8WQIzLd/rbfhs KbgWqqrh5YtxdWwkOJbRVxKm1E4wZOsjIsayJXWl/MePpoJjeop8HlZVraHeAEAd qsvlm5w/HKaMH/tnW5fn6cxGGYGxIpgWIB2l7+d5grsMOMvi+pQ= -----END CERTIFICATE-----Generated at Mon May 12 21:48:29 2025 by rpki-client