$ rpki-client -vvf repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft File: 6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft (raw, json) Hash identifier: 8vD2Z4kXbKjV/6QFHiHFfco3RcyJFdCz7LUh85V+S9k= Subject key identifier: 2A:6B:DA:81:7A:58:3D:55:1F:AE:65:41:C5:DA:72:D0:1E:CE:AB:F3 Authority key identifier: 6E:87:49:98:2F:80:EA:7E:AC:3A:4C:80:01:6F:AC:EC:04:9A:89:FB Certificate issuer: /CN=6E8749982F80EA7EAC3A4C80016FACEC049A89FB Certificate serial: 7CF81E15A9AD6D8A211D292F59C1DA5DE293CEFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft Manifest number: 017D Signing time: Wed 06 Aug 2025 19:51:41 +0000 Manifest this update: Wed 06 Aug 2025 19:46:41 +0000 Manifest next update: Sun 10 Aug 2025 05:53:41 +0000 Files and hashes: 1: 6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl (hash: zXqNgmUxMPRK75N5JhcrYtUZ4haQcM/YImKOHF9kICw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 05:53:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:f8:1e:15:a9:ad:6d:8a:21:1d:29:2f:59:c1:da:5d:e2:93:ce:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E8749982F80EA7EAC3A4C80016FACEC049A89FB Validity Not Before: Aug 6 19:46:41 2025 GMT Not After : Aug 10 05:53:41 2025 GMT Subject: CN=2A6BDA817A583D551FAE6541C5DA72D01ECEABF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:06:b1:b7:53:55:51:08:f1:ab:09:84:43:a5: a8:b8:fa:5e:19:b4:17:1f:10:6a:f1:9f:a1:94:9d: 72:cf:d3:5c:1d:a2:9a:b5:97:b9:d9:61:ba:cc:96: bb:cb:fd:95:7d:8c:7e:c1:ea:67:ed:2f:cf:5f:38: 18:b7:2e:51:2d:de:8f:58:b8:19:81:19:4c:17:b2: 9d:1d:76:d2:c4:3f:3e:df:72:94:2a:2f:01:ef:fc: b4:31:1a:c7:f1:fa:7f:53:08:1a:19:bf:82:91:4a: e1:6e:0c:84:3d:ba:1d:3d:d4:31:6e:ce:1a:bd:4f: d4:01:53:98:4d:e9:9f:3f:a6:1d:3e:2c:8e:28:15: f7:da:19:cf:3a:c3:55:97:62:9c:90:dc:ff:61:86: 90:e2:f7:04:fb:c6:8c:45:7d:63:62:56:9f:3f:07: bf:5f:4f:91:d0:a1:da:9a:01:ac:c0:21:a2:e0:dc: d4:4d:dc:3d:5e:e9:03:f6:82:d5:ef:1a:6e:84:73: 2a:73:5a:bc:44:aa:ba:e2:a0:8a:35:bc:ae:81:85: 25:cc:e4:8a:49:91:8d:1b:53:09:69:0f:0c:db:d6: e2:c1:d8:92:70:b5:30:21:43:89:91:77:0c:11:4e: 51:54:48:13:e4:f6:d5:3c:09:4c:3a:9c:6e:92:26: d5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6B:DA:81:7A:58:3D:55:1F:AE:65:41:C5:DA:72:D0:1E:CE:AB:F3 X509v3 Authority Key Identifier: keyid:6E:87:49:98:2F:80:EA:7E:AC:3A:4C:80:01:6F:AC:EC:04:9A:89:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:3b:87:d9:63:8b:d2:83:32:42:ed:c9:ea:b3:ae:83:03:26: 2b:e4:d9:5a:49:bd:10:5b:7b:56:59:fe:34:60:2c:fc:c4:1f: b0:7d:2b:01:b9:90:34:91:b2:77:fd:5b:a9:98:14:61:03:f3: b4:fd:40:a2:3c:7e:e2:fb:c3:3e:a9:5c:c4:06:ba:21:a2:42: 22:d6:92:97:28:83:e2:fa:ec:5f:39:95:f6:0a:8a:d4:2e:38: 4d:bb:61:7c:f2:d7:92:1e:16:68:c5:81:e8:32:8f:44:ee:fe: 26:83:60:35:20:86:ec:53:18:00:6e:c5:51:67:24:6f:56:df: 35:c1:1d:be:3d:84:99:24:13:47:17:51:86:9a:8d:17:1a:06: bc:4b:3a:95:76:32:ec:a6:60:2f:72:87:68:cd:db:f3:28:6e: c8:cc:95:61:5b:79:9e:c4:30:54:3c:ad:d4:05:35:0a:91:f2: 74:b7:e8:eb:69:a8:5a:de:5f:46:30:17:cb:06:18:35:0b:33: 98:44:2a:4c:dc:74:bf:8c:dd:92:5a:7f:f6:c6:0a:7f:a4:81: 42:e1:d2:6b:64:92:68:fc:6a:70:be:4d:6a:72:b9:a7:25:03: 30:17:9c:e9:e2:60:4f:f8:2e:c7:ce:40:c6:8c:3f:94:24:44: c7:33:12:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfPgeFamtbYohHSkvWcHaXeKTzvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFDRUMw NDlBODlGQjAeFw0yNTA4MDYxOTQ2NDFaFw0yNTA4MTAwNTUzNDFaMDMxMTAvBgNV BAMTKDJBNkJEQTgxN0E1ODNENTUxRkFFNjU0MUM1REE3MkQwMUVDRUFCRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjBrG3U1VRCPGrCYRDpai4+l4Z tBcfEGrxn6GUnXLP01wdopq1l7nZYbrMlrvL/ZV9jH7B6mftL89fOBi3LlEt3o9Y uBmBGUwXsp0ddtLEPz7fcpQqLwHv/LQxGsfx+n9TCBoZv4KRSuFuDIQ9uh091DFu zhq9T9QBU5hN6Z8/ph0+LI4oFffaGc86w1WXYpyQ3P9hhpDi9wT7xoxFfWNiVp8/ B79fT5HQodqaAazAIaLg3NRN3D1e6QP2gtXvGm6EcypzWrxEqrrioIo1vK6BhSXM 5IpJkY0bUwlpDwzb1uLB2JJwtTAhQ4mRdwwRTlFUSBPk9tU8CUw6nG6SJtVRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKmvagXpYPVUfrmVBxdpy0B7Oq/MwHwYDVR0j BBgwFoAUbodJmC+A6n6sOkyAAW+s7ASaifswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmU3ZGU5Zi1iZmQyLTQ4NWMtOGJhMi05MjRlZWQ1MmEzMDUvMC82RTg3NDk5ODJG ODBFQTdFQUMzQTRDODAwMTZGQUNFQzA0OUE4OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFDRUMwNDlB ODlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlN2RlOWYtYmZkMi00ODVjLThi YTItOTI0ZWVkNTJhMzA1LzAvNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFD RUMwNDlBODlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALw7h9lji9KDMkLtyeqzroMDJivk2VpJvRBb e1ZZ/jRgLPzEH7B9KwG5kDSRsnf9W6mYFGED87T9QKI8fuL7wz6pXMQGuiGiQiLW kpcog+L67F85lfYKitQuOE27YXzy15IeFmjFgegyj0Tu/iaDYDUghuxTGABuxVFn JG9W3zXBHb49hJkkE0cXUYaajRcaBrxLOpV2MuymYC9yh2jN2/MobsjMlWFbeZ7E MFQ8rdQFNQqR8nS36OtpqFreX0YwF8sGGDULM5hEKkzcdL+M3ZJaf/bGCn+kgULh 0mtkkmj8anC+TWpyuaclAzAXnOniYE/4LsfOQMaMP5QkRMczEsI= -----END CERTIFICATE-----Generated at Thu Aug 7 03:15:05 2025 by rpki-client