$ rpki-client -vvf repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft File: 6886844AB176920850E0984917E9713667D0A025.mft (raw, json) Hash identifier: YDjbrM5/kbRMLYjBiIOOq7CVYOmEpqL/SC9zZfcIP8k= Subject key identifier: 6D:CF:0C:16:C0:78:46:C7:65:09:B8:1F:2C:FB:56:70:28:40:6D:36 Authority key identifier: 68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25 Certificate issuer: /CN=6886844AB176920850E0984917E9713667D0A025 Certificate serial: 63BCE0F4F8FB34FC81D8707E0423C6905E4E17B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft Manifest number: 01AB Signing time: Fri 08 Aug 2025 13:12:24 +0000 Manifest this update: Fri 08 Aug 2025 13:07:24 +0000 Manifest next update: Mon 11 Aug 2025 17:34:24 +0000 Files and hashes: 1: 6886844AB176920850E0984917E9713667D0A025.crl (hash: 74bBmIT5hz7ghTGYERG+vWLe/QFhXtgoDWyUnxgmJU4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 17:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:bc:e0:f4:f8:fb:34:fc:81:d8:70:7e:04:23:c6:90:5e:4e:17:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6886844AB176920850E0984917E9713667D0A025 Validity Not Before: Aug 8 13:07:24 2025 GMT Not After : Aug 11 17:34:24 2025 GMT Subject: CN=6DCF0C16C07846C76509B81F2CFB567028406D36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:91:7d:7f:e5:f5:bc:e5:90:f3:b1:d7:8b:b5: 25:46:46:dc:ae:2e:db:52:bc:2a:62:91:35:a1:70: 55:db:7f:20:aa:d3:40:f1:ce:fa:80:f0:12:43:83: 8b:8d:17:ae:39:ed:30:b5:e2:c2:54:fc:3e:d6:1e: 01:db:1c:c9:b5:b2:e8:5c:b4:71:b4:76:c0:cf:88: b9:73:df:4f:fd:63:7b:e0:5d:a7:14:65:fe:7a:4d: e8:a4:e8:1b:b1:be:56:71:6a:53:50:89:3c:9a:c9: 9f:6f:83:44:e2:e2:56:59:4b:50:a4:dc:63:b6:b7: a8:a1:af:0c:28:47:6c:c0:c9:16:c2:d0:84:2f:bb: 0b:df:f4:00:7f:c0:8f:c2:c0:35:c4:76:8d:d1:b5: 88:37:3e:eb:66:3a:f5:cd:c8:3a:be:72:7e:76:05: a9:89:a5:96:54:23:85:02:10:ff:30:5e:8d:84:fb: 30:d9:6c:8e:5a:89:66:68:f3:3f:92:a7:eb:83:de: 15:8c:bd:6c:85:2d:99:ab:e9:1c:95:a0:8a:2c:cf: bf:53:8c:6c:cd:2a:13:bd:8f:db:08:d2:ec:41:24: 03:47:e3:99:49:6f:ed:a3:7d:57:7d:fc:48:49:b2: 5c:4f:eb:cb:35:97:ae:e5:0b:16:a1:ab:da:05:ba: 25:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:CF:0C:16:C0:78:46:C7:65:09:B8:1F:2C:FB:56:70:28:40:6D:36 X509v3 Authority Key Identifier: keyid:68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:2f:64:1c:60:e0:0f:cd:4c:89:69:c6:2f:d3:9c:35:de:24: 08:1a:0d:6b:9b:2a:72:71:4b:cd:f9:ba:54:7d:22:9e:b3:4d: de:6f:73:50:1a:3b:9a:ef:9a:bf:e2:c6:9c:94:1a:1f:2b:d4: b7:f8:bc:ba:27:41:16:4f:f1:fb:1f:d3:37:2b:15:4f:c2:24: e0:07:0d:a7:ac:bd:02:66:d3:6f:f9:3a:21:8d:2e:b6:9e:a1: b2:98:e0:da:72:01:d0:43:f5:c1:26:10:20:60:73:7d:95:cc: 1d:80:44:aa:40:c3:38:ed:5c:e3:cc:08:92:3f:83:40:f2:b5: 9f:24:35:59:8c:d8:98:00:89:a1:53:78:67:04:a8:d7:e5:a9: 78:a0:35:43:5b:7a:62:8d:ea:0d:38:3f:b6:39:ad:1b:da:83: ca:47:54:95:4d:36:db:bb:db:28:59:d3:56:f2:69:86:3c:7b: d7:1f:74:10:ec:f1:87:f8:6d:e1:68:c6:3b:4c:bc:a5:95:22: 26:13:81:12:44:9d:a0:57:a1:da:d9:1c:df:e4:cb:a1:99:36: 5d:55:a0:66:83:ee:cd:db:24:39:64:75:70:65:fb:bf:ab:74: 8a:29:26:e7:96:c7:4d:86:f3:9c:e7:8d:08:a7:4e:69:c0:3f: 65:10:54:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY7zg9Pj7NPyB2HB+BCPGkF5OF7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcxMzY2 N0QwQTAyNTAeFw0yNTA4MDgxMzA3MjRaFw0yNTA4MTExNzM0MjRaMDMxMTAvBgNV BAMTKDZEQ0YwQzE2QzA3ODQ2Qzc2NTA5QjgxRjJDRkI1NjcwMjg0MDZEMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYkX1/5fW85ZDzsdeLtSVGRtyu LttSvCpikTWhcFXbfyCq00DxzvqA8BJDg4uNF6457TC14sJU/D7WHgHbHMm1suhc tHG0dsDPiLlz30/9Y3vgXacUZf56Teik6BuxvlZxalNQiTyayZ9vg0Ti4lZZS1Ck 3GO2t6ihrwwoR2zAyRbC0IQvuwvf9AB/wI/CwDXEdo3RtYg3PutmOvXNyDq+cn52 BamJpZZUI4UCEP8wXo2E+zDZbI5aiWZo8z+Sp+uD3hWMvWyFLZmr6RyVoIosz79T jGzNKhO9j9sI0uxBJANH45lJb+2jfVd9/EhJslxP68s1l67lCxahq9oFuiU1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbc8MFsB4RsdlCbgfLPtWcChAbTYwHwYDVR0j BBgwFoAUaIaESrF2kghQ4JhJF+lxNmfQoCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDU1Y2IyOS01Mjc2LTRhNzktYjMzYS1jYzUxNTE3YmRkMTgvMC82ODg2ODQ0QUIx NzY5MjA4NTBFMDk4NDkxN0U5NzEzNjY3RDBBMDI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcxMzY2N0Qw QTAyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ1NWNiMjktNTI3Ni00YTc5LWIz M2EtY2M1MTUxN2JkZDE4LzAvNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcx MzY2N0QwQTAyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0vZBxg4A/NTIlpxi/TnDXeJAgaDWubKnJx S835ulR9Ip6zTd5vc1AaO5rvmr/ixpyUGh8r1Lf4vLonQRZP8fsf0zcrFU/CJOAH DaesvQJm02/5OiGNLraeobKY4NpyAdBD9cEmECBgc32VzB2ARKpAwzjtXOPMCJI/ g0DytZ8kNVmM2JgAiaFTeGcEqNflqXigNUNbemKN6g04P7Y5rRvag8pHVJVNNtu7 2yhZ01byaYY8e9cfdBDs8Yf4beFoxjtMvKWVIiYTgRJEnaBXodrZHN/ky6GZNl1V oGaD7s3bJDlkdXBl+7+rdIopJueWx02G85znjQinTmnAP2UQVLs= -----END CERTIFICATE-----Generated at Sat Aug 9 14:24:01 2025 by rpki-client