$ rpki-client -vvf repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft File: 0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft (raw, json) Hash identifier: Ba1B+WZcmViZrYBi26LBRPrdV7+Secc++akFO+vQflA= Subject key identifier: 81:F0:6A:CA:55:72:0F:AB:21:6E:52:FA:B7:E3:A1:B6:3F:87:EE:3F Authority key identifier: 06:90:81:5B:5E:9C:22:28:26:3F:17:C9:B3:F5:F9:9D:D6:88:2F:9C Certificate issuer: /CN=0690815B5E9C2228263F17C9B3F5F99DD6882F9C Certificate serial: 0DBCF4DA0F2DDB1237FE7F17DDD74A3826CB2F26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft Manifest number: 016A Signing time: Tue 05 Aug 2025 18:41:12 +0000 Manifest this update: Tue 05 Aug 2025 18:36:12 +0000 Manifest next update: Fri 08 Aug 2025 23:02:12 +0000 Files and hashes: 1: 0690815B5E9C2228263F17C9B3F5F99DD6882F9C.crl (hash: /RgKeFTJ1/Ney8HpeC4oEFewefPa7Z6MkWkYzLdW4B0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.crl rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 23:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:bc:f4:da:0f:2d:db:12:37:fe:7f:17:dd:d7:4a:38:26:cb:2f:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0690815B5E9C2228263F17C9B3F5F99DD6882F9C Validity Not Before: Aug 5 18:36:12 2025 GMT Not After : Aug 8 23:02:12 2025 GMT Subject: CN=81F06ACA55720FAB216E52FAB7E3A1B63F87EE3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2a:87:a6:2e:0f:f6:cd:31:de:d4:cc:2d:bb: 39:10:ba:f3:f1:ee:fd:43:21:72:d8:75:b9:50:31: a1:ad:17:07:88:4f:c6:2f:37:38:39:a2:db:5a:10: cd:5f:5b:e3:ad:5d:44:ed:65:ea:34:22:a2:af:ff: 66:f3:ad:81:e3:e4:4d:93:e3:54:af:88:bf:08:6a: 0a:20:86:da:ff:10:e7:d8:bf:1c:d7:8f:19:89:ea: 93:85:90:57:c2:67:8b:c0:34:ff:9f:af:c1:aa:03: 2b:ae:d0:75:23:9c:46:af:7c:2e:12:03:cc:00:bd: 08:24:95:8c:97:e2:ff:09:32:c9:da:6a:bf:03:8c: 15:bd:b5:1c:f3:2a:5e:e9:a1:dd:49:8d:ab:97:5d: bb:f1:1f:2d:3a:95:ef:70:47:3c:7e:33:dd:89:c7: 4f:68:6e:b2:4d:d7:5b:53:2d:d5:1f:51:bc:ae:a4: 59:4f:18:bb:9e:42:7f:36:a2:d9:ae:05:03:06:7e: 01:a0:4f:cd:76:65:97:41:44:04:68:cc:d8:9f:10: f0:97:11:8c:8b:e2:20:13:f6:6f:d3:3b:07:46:d7: 55:dc:5b:01:41:4f:80:b6:5a:bc:db:7b:46:00:fb: e2:63:68:ba:27:3c:bb:6f:f8:98:86:fd:bb:bb:39: ae:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F0:6A:CA:55:72:0F:AB:21:6E:52:FA:B7:E3:A1:B6:3F:87:EE:3F X509v3 Authority Key Identifier: keyid:06:90:81:5B:5E:9C:22:28:26:3F:17:C9:B3:F5:F9:9D:D6:88:2F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:4c:b0:ae:a9:2e:e1:4a:f7:b6:8b:7f:17:f7:bb:61:ca:f7: b2:6c:f3:a5:cf:57:fc:42:ad:0d:a7:ce:5e:77:65:eb:45:f0: bc:69:99:c5:60:f8:2c:f7:fd:7d:e8:45:2d:09:84:33:9f:1f: 07:a5:8a:de:43:b4:57:d9:38:c5:a9:36:8a:a1:c5:9d:f6:8c: d0:10:87:d0:10:dd:ef:54:e4:8e:5a:39:a1:c5:5d:8f:d0:ee: 25:32:ac:37:16:1c:32:16:62:dd:1b:22:0e:6f:b7:e6:75:15: 81:5a:15:76:11:20:27:1a:67:e4:28:13:3d:5a:be:ae:93:04: 25:02:e9:55:af:e3:4e:40:fa:07:d6:3e:ce:48:ac:7a:49:43: 8f:dd:a8:14:6f:b0:b5:ed:dc:d3:60:81:8c:d9:17:63:53:5e: c7:69:3d:16:20:07:36:ce:c6:e4:f9:62:4d:8e:64:25:dc:40: 25:51:ba:91:d4:83:62:46:4d:08:3c:3c:55:a9:9b:1a:3c:1a: 89:71:44:41:30:eb:8c:57:39:18:60:22:bb:60:ce:7a:55:24: 94:2e:b6:db:21:7c:6a:20:5b:ed:6c:0a:40:12:ca:47:e7:94: 7e:21:56:a4:2f:af:6f:28:33:98:da:52:c7:ef:0e:32:45:53: 68:b4:69:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDbz02g8t2xI3/n8X3ddKOCbLLyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5MDgxNUI1RTlDMjIyODI2M0YxN0M5QjNGNUY5OURE Njg4MkY5QzAeFw0yNTA4MDUxODM2MTJaFw0yNTA4MDgyMzAyMTJaMDMxMTAvBgNV BAMTKDgxRjA2QUNBNTU3MjBGQUIyMTZFNTJGQUI3RTNBMUI2M0Y4N0VFM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjKoemLg/2zTHe1MwtuzkQuvPx 7v1DIXLYdblQMaGtFweIT8YvNzg5ottaEM1fW+OtXUTtZeo0IqKv/2bzrYHj5E2T 41SviL8Iagoghtr/EOfYvxzXjxmJ6pOFkFfCZ4vANP+fr8GqAyuu0HUjnEavfC4S A8wAvQgklYyX4v8JMsnaar8DjBW9tRzzKl7pod1JjauXXbvxHy06le9wRzx+M92J x09obrJN11tTLdUfUbyupFlPGLueQn82otmuBQMGfgGgT812ZZdBRARozNifEPCX EYyL4iAT9m/TOwdG11XcWwFBT4C2Wrzbe0YA++JjaLonPLtv+JiG/bu7Oa4BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgfBqylVyD6shblL6t+Ohtj+H7j8wHwYDVR0j BBgwFoAUBpCBW16cIigmPxfJs/X5ndaIL5wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x M2ZhN2Q1Yy0zNjhkLTRhZjMtYjhlNy0xNzg2MjQ2ZGQ2MmYvMC8wNjkwODE1QjVF OUMyMjI4MjYzRjE3QzlCM0Y1Rjk5REQ2ODgyRjlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY5MDgxNUI1RTlDMjIyODI2M0YxN0M5QjNGNUY5OURENjg4 MkY5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTNmYTdkNWMtMzY4ZC00YWYzLWI4 ZTctMTc4NjI0NmRkNjJmLzAvMDY5MDgxNUI1RTlDMjIyODI2M0YxN0M5QjNGNUY5 OURENjg4MkY5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBMsK6pLuFK97aLfxf3u2HK97Js86XPV/xC rQ2nzl53ZetF8LxpmcVg+Cz3/X3oRS0JhDOfHwelit5DtFfZOMWpNoqhxZ32jNAQ h9AQ3e9U5I5aOaHFXY/Q7iUyrDcWHDIWYt0bIg5vt+Z1FYFaFXYRICcaZ+QoEz1a vq6TBCUC6VWv405A+gfWPs5IrHpJQ4/dqBRvsLXt3NNggYzZF2NTXsdpPRYgBzbO xuT5Yk2OZCXcQCVRupHUg2JGTQg8PFWpmxo8GolxREEw64xXORhgIrtgznpVJJQu ttshfGogW+1sCkASykfnlH4hVqQvr28oM5jaUsfvDjJFU2i0aVQ= -----END CERTIFICATE-----Generated at Thu Aug 7 00:25:57 2025 by rpki-client