$ rpki-client -vvf repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft File: 6886844AB176920850E0984917E9713667D0A025.mft (raw, json) Hash identifier: /xig5ry1XCul7eZciXxqpx3TN6jDdIudahmbUul6Gyw= Subject key identifier: C9:52:79:9A:AE:A1:12:E9:B9:DE:83:FE:9D:54:CD:8C:A3:FF:8B:D5 Authority key identifier: 68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25 Certificate issuer: /CN=6886844AB176920850E0984917E9713667D0A025 Certificate serial: 2891D769B82081B694861352D84DABE2B2A4A53B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft Manifest number: 0194 Signing time: Tue 17 Jun 2025 01:52:14 +0000 Manifest this update: Tue 17 Jun 2025 01:47:14 +0000 Manifest next update: Fri 20 Jun 2025 11:39:14 +0000 Files and hashes: 1: 6886844AB176920850E0984917E9713667D0A025.crl (hash: 5O73PYZXJSYiZEsgxc0BWwMehrRcNoVeHDUgFGuAAII=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:91:d7:69:b8:20:81:b6:94:86:13:52:d8:4d:ab:e2:b2:a4:a5:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6886844AB176920850E0984917E9713667D0A025 Validity Not Before: Jun 17 01:47:14 2025 GMT Not After : Jun 20 11:39:14 2025 GMT Subject: CN=C952799AAEA112E9B9DE83FE9D54CD8CA3FF8BD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b2:69:79:7e:8d:14:15:8c:67:76:71:f6:5c: 7a:48:ac:7e:df:1e:bd:b5:3e:e1:77:61:d8:c1:41: 8e:c6:f3:a6:d1:af:b7:1b:48:b0:86:5e:13:e1:6e: 6e:cc:3d:3a:24:ab:50:89:dc:45:df:fb:bd:ea:74: 71:dc:b6:a3:c0:e3:27:3c:38:b9:be:75:a3:82:28: b8:94:86:b6:29:1b:49:ef:8d:14:b7:8b:81:f8:a8: 41:01:32:1f:61:ce:97:cf:03:ff:af:65:da:8a:4c: b5:52:9d:38:4d:5b:2b:e8:16:02:21:9c:50:0d:59: 6c:3d:46:b9:ce:55:63:56:da:ea:45:1d:d8:08:54: bf:f7:ad:81:fb:eb:81:9a:c1:6c:c8:ca:14:db:34: 4d:3c:8d:7c:71:1d:42:16:a3:f3:32:bd:62:05:53: c2:85:3e:0d:88:9f:5f:2d:5f:ad:d8:19:9b:3a:34: 30:8c:31:cb:20:99:34:28:a6:90:11:eb:c1:11:4a: 17:1d:fb:2c:bc:06:dc:16:ed:02:96:e9:0b:48:dc: f9:e3:b8:92:81:a2:aa:50:0d:3e:5f:69:c6:bb:bc: 6a:a0:13:ce:67:ff:eb:fa:8e:3f:0e:74:06:8e:eb: 71:3d:fd:d0:97:fb:db:cd:2d:d1:a5:30:3a:f2:c8: 2e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:52:79:9A:AE:A1:12:E9:B9:DE:83:FE:9D:54:CD:8C:A3:FF:8B:D5 X509v3 Authority Key Identifier: keyid:68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:57:0e:22:26:52:9a:da:66:01:25:cb:ee:6f:9e:fa:97:bb: 8f:7a:94:69:7b:1e:da:8b:8b:ff:fc:61:84:c4:e9:cf:30:bf: df:30:9a:37:56:16:22:e3:4f:35:8f:bb:8d:1d:63:8e:34:d5: 22:71:3b:80:c7:52:d4:4b:e3:52:00:d5:e4:40:b6:96:71:1f: c7:eb:c5:9e:11:63:aa:9d:2c:5b:19:ec:12:54:7b:25:76:17: 8d:c0:ca:b5:2f:2f:94:0b:da:7d:74:3b:8d:88:51:e7:e8:e1: 7d:b5:12:ad:9b:fc:75:21:88:64:10:fb:95:03:1e:5d:c9:ba: c4:75:6c:9f:a1:57:00:f6:28:b6:07:1f:ad:86:9b:a4:36:7b: 17:a9:c9:f9:66:1e:05:28:5e:4e:a5:75:d6:59:ba:0e:36:9d: d3:b3:fa:94:4b:13:2e:7f:39:85:1d:45:b6:2c:ea:c1:c8:e2: cb:37:67:44:66:a8:dc:3d:99:c1:39:40:1f:52:df:4d:af:78: 2b:38:45:5e:72:90:d9:07:a5:c4:5c:f2:ec:bc:6c:4d:00:4a: 50:40:89:5c:18:85:4c:5b:26:8f:fb:df:f4:a9:99:33:8a:cf: f5:fd:41:99:65:b3:8a:0c:b2:af:c5:39:1f:06:1f:7a:3d:29: 77:c2:b6:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKJHXabgggbaUhhNS2E2r4rKkpTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcxMzY2 N0QwQTAyNTAeFw0yNTA2MTcwMTQ3MTRaFw0yNTA2MjAxMTM5MTRaMDMxMTAvBgNV BAMTKEM5NTI3OTlBQUVBMTEyRTlCOURFODNGRTlENTRDRDhDQTNGRjhCRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYsml5fo0UFYxndnH2XHpIrH7f Hr21PuF3YdjBQY7G86bRr7cbSLCGXhPhbm7MPTokq1CJ3EXf+73qdHHctqPA4yc8 OLm+daOCKLiUhrYpG0nvjRS3i4H4qEEBMh9hzpfPA/+vZdqKTLVSnThNWyvoFgIh nFANWWw9RrnOVWNW2upFHdgIVL/3rYH764GawWzIyhTbNE08jXxxHUIWo/MyvWIF U8KFPg2In18tX63YGZs6NDCMMcsgmTQoppAR68ERShcd+yy8BtwW7QKW6QtI3Pnj uJKBoqpQDT5faca7vGqgE85n/+v6jj8OdAaO63E9/dCX+9vNLdGlMDryyC5tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyVJ5mq6hEum53oP+nVTNjKP/i9UwHwYDVR0j BBgwFoAUaIaESrF2kghQ4JhJF+lxNmfQoCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDU1Y2IyOS01Mjc2LTRhNzktYjMzYS1jYzUxNTE3YmRkMTgvMC82ODg2ODQ0QUIx NzY5MjA4NTBFMDk4NDkxN0U5NzEzNjY3RDBBMDI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcxMzY2N0Qw QTAyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ1NWNiMjktNTI3Ni00YTc5LWIz M2EtY2M1MTUxN2JkZDE4LzAvNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcx MzY2N0QwQTAyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADRXDiImUpraZgEly+5vnvqXu496lGl7HtqL i//8YYTE6c8wv98wmjdWFiLjTzWPu40dY4401SJxO4DHUtRL41IA1eRAtpZxH8fr xZ4RY6qdLFsZ7BJUeyV2F43AyrUvL5QL2n10O42IUefo4X21Eq2b/HUhiGQQ+5UD Hl3JusR1bJ+hVwD2KLYHH62Gm6Q2exepyflmHgUoXk6lddZZug42ndOz+pRLEy5/ OYUdRbYs6sHI4ss3Z0RmqNw9mcE5QB9S302veCs4RV5ykNkHpcRc8uy8bE0ASlBA iVwYhUxbJo/73/SpmTOKz/X9QZlls4oMsq/FOR8GH3o9KXfCtgQ= -----END CERTIFICATE-----Generated at Tue Jun 17 06:26:00 2025 by rpki-client