$ rpki-client -vvf repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft File: F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft (raw, json) Hash identifier: Z9JGJL5wh8qhyLdXY08qOQX2VuGpV6ISEhK6+2+BFMo= Subject key identifier: 2C:5A:3D:8F:A6:76:A8:0C:DF:0A:FF:1F:F2:8B:9C:F2:DA:CE:27:8A Authority key identifier: F6:C8:A7:13:C4:45:14:84:D1:D6:7F:4E:E6:F7:7B:46:AE:E4:17:A9 Certificate issuer: /CN=F6C8A713C4451484D1D67F4EE6F77B46AEE417A9 Certificate serial: 74CA07F5641D0EB1A1D2C2872B16C6BDD6BFFA95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft Manifest number: 0191 Signing time: Fri 04 Jul 2025 07:20:36 +0000 Manifest this update: Fri 04 Jul 2025 07:15:36 +0000 Manifest next update: Mon 07 Jul 2025 18:53:36 +0000 Files and hashes: 1: F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl (hash: UpnXbHa0e44/CCS7PWwm/Cyaak0Kjbeep+R1/n1q7Dw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 12:49:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:ca:07:f5:64:1d:0e:b1:a1:d2:c2:87:2b:16:c6:bd:d6:bf:fa:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6C8A713C4451484D1D67F4EE6F77B46AEE417A9 Validity Not Before: Jul 4 07:15:36 2025 GMT Not After : Jul 7 18:53:36 2025 GMT Subject: CN=2C5A3D8FA676A80CDF0AFF1FF28B9CF2DACE278A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4f:67:80:fc:29:5b:fd:9b:10:47:10:b2:0b: fd:59:b8:52:96:a1:f2:a4:ed:62:40:7a:3c:63:e5: 38:ee:0c:39:40:f2:85:ed:fd:69:ca:85:7b:6e:52: b4:60:c8:83:f0:1b:d1:48:f0:ea:7c:42:f9:c7:aa: 80:a3:5f:44:96:a6:76:34:8c:6a:4e:63:9a:ef:1c: 2e:d9:54:54:5b:1b:d9:84:b1:dd:9d:6a:bd:da:44: c8:37:04:55:c3:89:03:40:69:5c:c3:36:79:6f:e8: 6a:2a:cc:22:ef:cc:85:9f:88:39:97:71:07:8f:79: 97:0c:47:7e:bb:ea:ac:14:84:2d:84:c4:64:c6:ca: 41:6e:6c:76:9d:2a:68:5c:20:0d:ec:c8:3c:9c:aa: 80:ea:94:bd:06:72:2b:53:ab:bf:fb:1e:86:fd:16: ff:39:35:80:3f:6d:10:7c:fa:a7:16:c5:b9:25:09: 01:fe:e6:57:5c:c1:3f:67:5e:69:56:84:1c:71:43: a4:a9:be:20:31:7f:f3:ef:6d:f2:cc:9b:d9:eb:26: 79:88:ed:d6:cd:db:a4:91:c6:e9:75:3d:28:be:3e: d7:81:d2:9e:21:83:c3:52:c8:6d:a0:7c:34:13:1a: be:59:36:12:e8:c7:48:da:3a:39:92:1a:71:94:8e: 2b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5A:3D:8F:A6:76:A8:0C:DF:0A:FF:1F:F2:8B:9C:F2:DA:CE:27:8A X509v3 Authority Key Identifier: keyid:F6:C8:A7:13:C4:45:14:84:D1:D6:7F:4E:E6:F7:7B:46:AE:E4:17:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:3a:78:9a:fa:e1:cc:94:28:ec:39:f7:97:74:d0:66:b9:61: 07:ec:41:3c:28:19:3f:ed:63:e6:93:13:82:df:7c:48:e8:8c: f6:d9:85:a2:bf:70:4d:9f:28:6b:93:1d:8a:a2:9b:5f:9a:10: 2a:a9:d1:f0:90:0c:26:66:14:05:ea:9d:e5:35:1f:f5:92:49: ea:d5:a1:cf:04:1b:90:02:43:20:43:70:6a:bb:47:8c:cf:3b: f2:ed:fe:23:3a:8a:78:cb:f7:bf:df:97:11:66:86:4e:55:e9: cc:b0:fc:dd:03:49:b6:fb:0e:d0:90:3b:60:d2:d7:12:e5:03: 4a:33:90:23:4a:96:63:ca:2f:e8:cd:61:fb:4e:fc:3f:ca:09: 3d:af:34:83:23:79:db:58:74:63:67:d7:cc:87:e6:d9:e9:54: 42:30:7d:8e:8c:13:87:ce:9f:37:ee:5f:c2:6b:77:32:71:c0: cf:ca:b9:6c:ae:8a:37:db:c7:30:77:ca:a2:cf:33:d1:c8:12: c3:13:47:b8:0c:a3:7d:6a:83:ac:a1:5f:6b:51:9f:fb:e4:66: 6c:48:df:47:66:fb:69:7c:9a:6d:81:34:0c:2a:6b:f1:26:d6: 35:09:50:5a:f0:99:fa:61:72:41:c7:70:11:04:ec:5a:f1:ca: d3:1c:6e:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdMoH9WQdDrGh0sKHKxbGvda/+pUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdCNDZB RUU0MTdBOTAeFw0yNTA3MDQwNzE1MzZaFw0yNTA3MDcxODUzMzZaMDMxMTAvBgNV BAMTKDJDNUEzRDhGQTY3NkE4MENERjBBRkYxRkYyOEI5Q0YyREFDRTI3OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKT2eA/Clb/ZsQRxCyC/1ZuFKW ofKk7WJAejxj5TjuDDlA8oXt/WnKhXtuUrRgyIPwG9FI8Op8QvnHqoCjX0SWpnY0 jGpOY5rvHC7ZVFRbG9mEsd2dar3aRMg3BFXDiQNAaVzDNnlv6GoqzCLvzIWfiDmX cQePeZcMR3676qwUhC2ExGTGykFubHadKmhcIA3syDycqoDqlL0GcitTq7/7Hob9 Fv85NYA/bRB8+qcWxbklCQH+5ldcwT9nXmlWhBxxQ6SpviAxf/PvbfLMm9nrJnmI 7dbN26SRxul1PSi+PteB0p4hg8NSyG2gfDQTGr5ZNhLox0jaOjmSGnGUjit1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULFo9j6Z2qAzfCv8f8ouc8trOJ4owHwYDVR0j BBgwFoAU9sinE8RFFITR1n9O5vd7Rq7kF6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmM3ZTViMS01MTlkLTQ1NmMtYjNiNi03NTU3OTQ3MDI2NjQvMC9GNkM4QTcxM0M0 NDUxNDg0RDFENjdGNEVFNkY3N0I0NkFFRTQxN0E5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdCNDZBRUU0 MTdBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZjN2U1YjEtNTE5ZC00NTZjLWIz YjYtNzU1Nzk0NzAyNjY0LzAvRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdC NDZBRUU0MTdBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAE6eJr64cyUKOw595d00Ga5YQfsQTwoGT/t Y+aTE4LffEjojPbZhaK/cE2fKGuTHYqim1+aECqp0fCQDCZmFAXqneU1H/WSSerV oc8EG5ACQyBDcGq7R4zPO/Lt/iM6injL97/flxFmhk5V6cyw/N0DSbb7DtCQO2DS 1xLlA0ozkCNKlmPKL+jNYftO/D/KCT2vNIMjedtYdGNn18yH5tnpVEIwfY6ME4fO nzfuX8JrdzJxwM/KuWyuijfbxzB3yqLPM9HIEsMTR7gMo31qg6yhX2tRn/vkZmxI 30dm+2l8mm2BNAwqa/Em1jUJUFrwmfphckHHcBEE7FrxytMcbgg= -----END CERTIFICATE-----Generated at Fri Jul 4 10:25:54 2025 by rpki-client