$ rpki-client -vvf repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft File: F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft (raw, json) Hash identifier: seqmwv2u5kmR4Cf9uIF8FKkbqX6MBtnPkWrfXAqnlTM= Subject key identifier: 48:87:57:B2:9F:0A:18:05:2D:BA:1F:42:10:9D:C7:6F:9F:E8:D3:25 Authority key identifier: F6:D1:AD:EF:8B:F1:34:4A:2F:5C:BD:A1:88:22:BA:85:D6:EF:6D:17 Certificate issuer: /CN=F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17 Certificate serial: 345BD66F505E25988DF6EE7B2113BA143023A4E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft Manifest number: 0271 Signing time: Sat 14 Jun 2025 12:10:58 +0000 Manifest this update: Sat 14 Jun 2025 12:05:58 +0000 Manifest next update: Tue 17 Jun 2025 21:24:58 +0000 Files and hashes: 1: F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl (hash: sq2ZtgL3wUeh9uxYnrmsXDSYFPMSDPPoZ3hc8xcPdfQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 21:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:5b:d6:6f:50:5e:25:98:8d:f6:ee:7b:21:13:ba:14:30:23:a4:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17 Validity Not Before: Jun 14 12:05:58 2025 GMT Not After : Jun 17 21:24:58 2025 GMT Subject: CN=488757B29F0A18052DBA1F42109DC76F9FE8D325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d1:33:78:c8:a2:db:43:d3:13:2f:d7:a4:63: 7d:8c:ed:6c:22:31:64:09:b7:d1:fa:cc:b3:12:ac: f0:56:fa:a9:6e:a8:8c:70:80:28:5e:e8:bc:4f:65: 5b:d2:7e:c4:f1:d4:ff:45:1b:57:27:4f:0b:73:b5: 17:31:e5:1d:b6:1a:1b:62:28:51:94:28:a0:c7:9d: cc:be:87:49:54:4a:ab:63:bd:85:26:b4:98:b6:98: ec:cb:de:72:af:3f:44:2c:0b:65:5c:70:9d:f4:1f: b0:aa:98:2c:bd:83:84:14:cf:13:b8:f4:38:34:0e: f3:2a:91:3a:a9:ac:83:3d:35:e3:40:e3:33:6a:9f: 1a:20:ff:71:58:60:9c:e2:33:d8:23:60:42:48:63: e1:06:c9:45:e1:7e:83:9a:17:e3:6b:5b:25:86:3e: a4:60:0e:d4:7e:77:8c:59:c3:af:dd:6c:9d:bc:37: c2:d1:b5:43:6f:a1:61:ae:80:6b:2f:ff:bd:d3:a8: fe:5d:e8:41:6a:01:0e:05:80:8f:43:cd:76:a2:3b: 11:a7:38:53:db:02:f8:74:72:38:38:33:a7:ee:e1: eb:ae:7c:e9:15:1b:89:10:23:c5:3f:ab:97:11:4b: 30:a2:a0:d3:7d:bf:6b:4b:cf:0d:a5:d0:8b:5d:75: f7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:87:57:B2:9F:0A:18:05:2D:BA:1F:42:10:9D:C7:6F:9F:E8:D3:25 X509v3 Authority Key Identifier: keyid:F6:D1:AD:EF:8B:F1:34:4A:2F:5C:BD:A1:88:22:BA:85:D6:EF:6D:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:05:15:4c:1c:6c:7f:19:9a:1e:85:5e:22:32:ac:37:96:74: 42:57:c6:0a:6c:da:28:4f:41:d5:78:ed:d5:16:5e:a5:06:dc: a0:4a:d6:de:d2:99:14:53:1f:d4:5b:e7:e8:a9:20:35:89:de: bd:74:d7:ec:e5:c8:38:be:f3:59:76:22:55:4e:7b:67:24:6d: c3:ba:83:3f:ba:e4:82:08:6d:92:3e:f7:69:c5:0a:f7:8f:dd: a7:fe:bf:de:55:ed:de:a9:c8:25:99:9c:67:e8:a8:b0:d7:05: 8d:20:88:88:0a:0d:5c:f6:37:fb:80:59:53:95:f8:fd:fc:f0: 60:5f:02:e5:88:35:65:2f:5b:56:15:af:5a:88:ea:f1:71:68: f6:c5:1f:f4:73:20:73:cc:ed:e4:eb:9a:2f:16:9b:46:d3:6f: 26:0e:4f:9c:44:82:92:11:a7:d1:d9:ca:48:91:40:34:81:98: da:38:c1:22:f2:f6:96:9d:ef:b3:6e:68:73:bd:f3:e9:e3:2f: be:8c:1a:3b:57:90:2f:37:d4:4d:9c:e8:0c:cc:5b:88:7d:ae: 9b:cb:44:2f:30:33:f2:5f:a3:3a:57:2c:fe:32:f5:31:2a:d3: 89:95:34:d8:8f:81:c9:13:04:20:98:4a:46:22:67:31:02:29: f7:b2:8f:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNFvWb1BeJZiN9u57IRO6FDAjpOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJBODVE NkVGNkQxNzAeFw0yNTA2MTQxMjA1NThaFw0yNTA2MTcyMTI0NThaMDMxMTAvBgNV BAMTKDQ4ODc1N0IyOUYwQTE4MDUyREJBMUY0MjEwOURDNzZGOUZFOEQzMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj0TN4yKLbQ9MTL9ekY32M7Wwi MWQJt9H6zLMSrPBW+qluqIxwgChe6LxPZVvSfsTx1P9FG1cnTwtztRcx5R22Ghti KFGUKKDHncy+h0lUSqtjvYUmtJi2mOzL3nKvP0QsC2VccJ30H7CqmCy9g4QUzxO4 9Dg0DvMqkTqprIM9NeNA4zNqnxog/3FYYJziM9gjYEJIY+EGyUXhfoOaF+NrWyWG PqRgDtR+d4xZw6/dbJ28N8LRtUNvoWGugGsv/73TqP5d6EFqAQ4FgI9DzXaiOxGn OFPbAvh0cjg4M6fu4euufOkVG4kQI8U/q5cRSzCioNN9v2tLzw2l0Itddfe5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSIdXsp8KGAUtuh9CEJ3Hb5/o0yUwHwYDVR0j BBgwFoAU9tGt74vxNEovXL2hiCK6hdbvbRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTEzZTdjNC03NzNmLTQ3NGMtYjA2ZC02MjYwYTMwNmEwY2EvMC9GNkQxQURFRjhC RjEzNDRBMkY1Q0JEQTE4ODIyQkE4NUQ2RUY2RDE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJBODVENkVG NkQxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTExM2U3YzQtNzczZi00NzRjLWIw NmQtNjI2MGEzMDZhMGNhLzAvRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJB ODVENkVGNkQxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANYFFUwcbH8Zmh6FXiIyrDeWdEJXxgps2ihP QdV47dUWXqUG3KBK1t7SmRRTH9Rb5+ipIDWJ3r101+zlyDi+81l2IlVOe2ckbcO6 gz+65IIIbZI+92nFCveP3af+v95V7d6pyCWZnGfoqLDXBY0giIgKDVz2N/uAWVOV +P388GBfAuWINWUvW1YVr1qI6vFxaPbFH/RzIHPM7eTrmi8Wm0bTbyYOT5xEgpIR p9HZykiRQDSBmNo4wSLy9pad77NuaHO98+njL76MGjtXkC831E2c6AzMW4h9rpvL RC8wM/JfozpXLP4y9TEq04mVNNiPgckTBCCYSkYiZzECKfeyj1g= -----END CERTIFICATE-----Generated at Mon Jun 16 11:34:00 2025 by rpki-client