$ rpki-client -vvf repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft File: D6FA07102C8726922074D42DFF59946144A13506.mft (raw, json) Hash identifier: 59bPO+qioJxH/XsT3lTJxA0ibqf/lIYRuLITUXkTB5U= Subject key identifier: A6:3C:54:2D:F8:96:1A:21:DC:0B:FB:31:18:69:78:97:35:42:B3:CD Authority key identifier: D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06 Certificate issuer: /CN=D6FA07102C8726922074D42DFF59946144A13506 Certificate serial: 02F0C8A6C88A736A3D90E4F5324BAC1FECB58DBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft Manifest number: 70 Signing time: Fri 08 Aug 2025 05:14:04 +0000 Manifest this update: Fri 08 Aug 2025 05:09:04 +0000 Manifest next update: Mon 11 Aug 2025 06:08:04 +0000 Files and hashes: 1: D6FA07102C8726922074D42DFF59946144A13506.crl (hash: rKwegwCG1yxeaxAhgtswBmgyJI6ArUoN+oL64HGAxIw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 06:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:f0:c8:a6:c8:8a:73:6a:3d:90:e4:f5:32:4b:ac:1f:ec:b5:8d:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6FA07102C8726922074D42DFF59946144A13506 Validity Not Before: Aug 8 05:09:04 2025 GMT Not After : Aug 11 06:08:04 2025 GMT Subject: CN=A63C542DF8961A21DC0BFB31186978973542B3CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:78:59:81:ba:19:cd:73:ff:ce:35:a9:65:f2: 61:50:27:cd:9a:5c:80:0d:fc:ff:5e:9f:64:39:9d: 3a:ea:86:97:da:e2:08:4b:8b:51:58:b4:3b:1e:7f: d2:56:ef:82:fc:c5:47:63:0e:a3:6d:89:43:6e:ca: 6d:71:6e:ea:a2:20:c0:d7:73:b1:3e:6e:f0:1b:dd: dc:6d:74:d4:25:c3:ad:84:ae:67:b8:15:b8:b4:ee: 3a:90:4b:a4:03:d4:16:2e:69:53:d5:ae:d0:13:dd: 3f:75:fa:ce:69:c4:d7:dd:6e:7d:47:ca:24:56:e1: 0b:e8:51:91:98:8f:63:46:b9:0b:61:aa:f1:7f:13: 86:de:ed:87:21:71:07:35:27:64:21:57:06:94:d5: c9:9a:a1:76:9c:9a:ab:5a:2c:68:e2:80:f4:84:a7: 38:37:8c:e0:42:49:9c:bc:f3:27:71:07:f4:f3:42: 28:d0:15:96:6d:f4:bd:0a:46:65:23:77:c7:c7:5d: 00:cf:a9:9f:97:dd:86:64:cc:9d:03:28:cf:eb:de: 69:55:92:d0:9c:ec:46:01:50:80:8e:64:fb:c8:b1: 5f:e6:85:9a:74:12:e7:22:f7:c2:6d:19:cb:3b:f1: 66:29:dc:2c:5c:ce:4d:6e:39:0c:dd:89:69:d5:d5: 9e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3C:54:2D:F8:96:1A:21:DC:0B:FB:31:18:69:78:97:35:42:B3:CD X509v3 Authority Key Identifier: keyid:D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:5a:52:d8:f7:44:0f:be:e7:c3:ce:fa:b4:00:91:1d:8e:f5: 4f:e1:c7:cb:58:bc:ba:17:f7:15:1d:fb:0d:01:80:e3:c7:5f: 27:15:06:a1:b1:3c:31:2c:1c:eb:76:06:cd:93:d7:66:db:b1: 55:6f:26:ea:ca:3f:59:4f:74:1e:28:c1:74:08:48:f6:0e:b6: 47:40:d1:3c:2c:5b:f8:41:02:6d:fe:fb:ef:5f:af:d6:f9:5e: 73:f5:73:e9:f0:e8:79:4d:3e:51:99:80:3b:8e:74:80:2b:c4: eb:97:fb:20:38:ed:98:98:31:17:80:82:86:79:01:c8:b3:9d: 8e:21:0e:da:2d:46:e5:2c:18:e4:c2:3f:0e:27:10:77:a6:63: 22:d3:66:4a:0b:37:79:7c:9c:ee:4b:ef:e8:aa:bc:c0:64:95: ee:fb:55:4d:6c:66:7a:31:ea:fe:1d:70:a1:87:7c:2c:b1:f4: d1:0b:58:c9:76:3c:7b:00:64:fd:43:dd:ae:cb:36:e7:c2:15: d2:f2:d5:cf:22:7b:47:9f:21:6a:65:f4:1f:90:92:c8:f2:da: 17:71:80:a7:89:f0:f7:5a:06:1e:66:20:79:db:7c:05:4a:a8: b1:9a:13:a3:95:e9:ce:b6:f9:6e:4b:be:c7:54:8f:32:da:f0: 9f:21:4d:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAvDIpsiKc2o9kOT1MkusH+y1jb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZGQTA3MTAyQzg3MjY5MjIwNzRENDJERkY1OTk0NjE0 NEExMzUwNjAeFw0yNTA4MDgwNTA5MDRaFw0yNTA4MTEwNjA4MDRaMDMxMTAvBgNV BAMTKEE2M0M1NDJERjg5NjFBMjFEQzBCRkIzMTE4Njk3ODk3MzU0MkIzQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4eFmBuhnNc//ONall8mFQJ82a XIAN/P9en2Q5nTrqhpfa4ghLi1FYtDsef9JW74L8xUdjDqNtiUNuym1xbuqiIMDX c7E+bvAb3dxtdNQlw62Erme4Fbi07jqQS6QD1BYuaVPVrtAT3T91+s5pxNfdbn1H yiRW4QvoUZGYj2NGuQthqvF/E4be7YchcQc1J2QhVwaU1cmaoXacmqtaLGjigPSE pzg3jOBCSZy88ydxB/TzQijQFZZt9L0KRmUjd8fHXQDPqZ+X3YZkzJ0DKM/r3mlV ktCc7EYBUICOZPvIsV/mhZp0Euci98JtGcs78WYp3Cxczk1uOQzdiWnV1Z5lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpjxULfiWGiHcC/sxGGl4lzVCs80wHwYDVR0j BBgwFoAU1voHECyHJpIgdNQt/1mUYUShNQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDYzYTZlNi1jYWIzLTRmMGMtODVjNy1lMDJiZDY0MWUzY2UvMC9ENkZBMDcxMDJD ODcyNjkyMjA3NEQ0MkRGRjU5OTQ2MTQ0QTEzNTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDZGQTA3MTAyQzg3MjY5MjIwNzRENDJERkY1OTk0NjE0NEEx MzUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2M2E2ZTYtY2FiMy00ZjBjLTg1 YzctZTAyYmQ2NDFlM2NlLzAvRDZGQTA3MTAyQzg3MjY5MjIwNzRENDJERkY1OTk0 NjE0NEExMzUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANxaUtj3RA++58PO+rQAkR2O9U/hx8tYvLoX 9xUd+w0BgOPHXycVBqGxPDEsHOt2Bs2T12bbsVVvJurKP1lPdB4owXQISPYOtkdA 0TwsW/hBAm3+++9fr9b5XnP1c+nw6HlNPlGZgDuOdIArxOuX+yA47ZiYMReAgoZ5 AciznY4hDtotRuUsGOTCPw4nEHemYyLTZkoLN3l8nO5L7+iqvMBkle77VU1sZnox 6v4dcKGHfCyx9NELWMl2PHsAZP1D3a7LNufCFdLy1c8ie0efIWpl9B+Qksjy2hdx gKeJ8PdaBh5mIHnbfAVKqLGaE6OV6c62+W5LvsdUjzLa8J8hTaY= -----END CERTIFICATE-----Generated at Sat Aug 9 05:35:24 2025 by rpki-client