$ rpki-client -vvf repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft File: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft (raw, json) Hash identifier: TBvUAZzZ+rannfp0NZl94ykwyiqNWAn2NwkcHPvFB58= Subject key identifier: 69:BF:6E:C9:C9:CF:79:ED:45:51:58:52:E7:F8:B2:27:04:C2:AC:38 Authority key identifier: 65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC Certificate issuer: /CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Certificate serial: 1A018352BE753D7D4B35493F4597A330B44FF52E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft Manifest number: 041A Signing time: Thu 05 Jun 2025 18:21:52 +0000 Manifest this update: Thu 05 Jun 2025 18:16:52 +0000 Manifest next update: Mon 09 Jun 2025 03:07:52 +0000 Files and hashes: 1: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl (hash: zQY29xyMc+wx+H3PWKa58CP/pVUHKpnNMlN8CaWSlh0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 03:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:01:83:52:be:75:3d:7d:4b:35:49:3f:45:97:a3:30:b4:4f:f5:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Validity Not Before: Jun 5 18:16:52 2025 GMT Not After : Jun 9 03:07:52 2025 GMT Subject: CN=69BF6EC9C9CF79ED45515852E7F8B22704C2AC38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:40:75:1b:4b:65:97:c3:d1:9c:c9:b5:e5:b3: 2b:a4:55:cc:f1:f8:4c:8a:e9:10:d6:a2:c4:b7:d2: 4a:ad:22:2e:d8:92:eb:90:fe:49:b6:91:4c:4f:44: 8f:1c:9c:17:9f:8e:16:ac:62:bd:cd:79:d6:93:02: cc:d1:f4:24:8e:f4:44:64:d5:b6:bc:85:d0:e0:b5: 3a:44:38:80:47:22:6a:ff:cc:99:a9:75:55:81:3e: 90:f6:1f:3a:c9:7e:21:64:fa:c2:90:d7:d2:12:68: 93:99:e5:d6:89:0d:51:05:82:b5:94:89:47:4b:e6: 8f:8f:9b:7d:fb:72:9a:ab:02:ef:e6:7d:f8:60:b2: 2b:e4:7b:05:8f:0b:56:48:c4:79:f2:23:ab:55:e7: cb:b6:ad:d4:44:be:12:6a:81:6d:6a:84:72:85:0f: e4:24:62:d2:a2:a9:7b:63:85:fc:27:47:aa:d4:04: ab:2f:8f:8c:19:a7:c6:20:d2:b4:20:98:10:6d:e0: db:01:94:6f:3e:87:5f:e5:28:21:a0:72:1b:e2:87: 00:48:fe:62:85:35:e7:b7:d1:6b:0d:37:c9:1d:09: f2:e1:3d:46:25:af:9f:9e:ee:8f:a7:80:0b:c8:df: ef:8f:77:f1:20:e7:40:60:d7:50:1c:ac:31:92:1c: f8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:BF:6E:C9:C9:CF:79:ED:45:51:58:52:E7:F8:B2:27:04:C2:AC:38 X509v3 Authority Key Identifier: keyid:65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:00:6c:95:16:bc:90:ac:78:36:2c:62:c5:c0:f9:0e:56:c1: c1:2f:bc:60:d5:dd:4d:fe:1a:63:c3:f4:6f:5d:38:d0:a1:d4: d8:07:1f:8e:2f:26:f7:81:61:70:60:70:5f:59:08:9b:50:0a: 1f:55:1b:00:d0:31:2b:ef:b5:0b:f3:d5:d3:b2:e9:66:1a:23: 4a:0b:39:1e:89:75:77:df:5a:d9:30:83:3c:81:fd:71:b1:21: 50:7e:79:67:2c:5c:25:1a:65:ea:21:70:eb:9a:8e:c5:49:fc: ed:24:1d:32:8c:cc:8d:3b:6c:c6:a9:75:9b:0c:e8:af:06:60: 99:66:02:ca:9c:b3:a2:c2:bc:d0:b7:26:47:0e:9e:f0:1f:5a: a5:12:25:15:a5:7c:35:d6:05:25:01:bd:da:6b:f9:7c:ca:08: 6f:92:2a:5e:82:9c:10:83:f3:78:b5:ba:ff:8c:ae:2b:30:77: ec:45:ab:81:40:31:4d:db:f1:d6:5d:bd:77:c4:03:0a:3f:ff: 6f:d1:ca:4a:cd:1c:6c:1d:79:04:cb:35:30:25:14:75:56:29: e7:1b:45:90:fa:0b:37:8a:7c:c3:20:bc:28:e3:bc:98:ff:d7: 07:43:84:18:91:41:7a:f5:eb:7f:b1:bf:b4:bf:d4:97:81:b5: b3:65:ce:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGgGDUr51PX1LNUk/RZejMLRP9S4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURD QTZGOThCQzAeFw0yNTA2MDUxODE2NTJaFw0yNTA2MDkwMzA3NTJaMDMxMTAvBgNV BAMTKDY5QkY2RUM5QzlDRjc5RUQ0NTUxNTg1MkU3RjhCMjI3MDRDMkFDMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7QHUbS2WXw9GcybXlsyukVczx +EyK6RDWosS30kqtIi7YkuuQ/km2kUxPRI8cnBefjhasYr3NedaTAszR9CSO9ERk 1ba8hdDgtTpEOIBHImr/zJmpdVWBPpD2HzrJfiFk+sKQ19ISaJOZ5daJDVEFgrWU iUdL5o+Pm337cpqrAu/mffhgsivkewWPC1ZIxHnyI6tV58u2rdREvhJqgW1qhHKF D+QkYtKiqXtjhfwnR6rUBKsvj4wZp8Yg0rQgmBBt4NsBlG8+h1/lKCGgchvihwBI /mKFNee30WsNN8kdCfLhPUYlr5+e7o+ngAvI3++Pd/Eg50Bg11AcrDGSHPiDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUab9uycnPee1FUVhS5/iyJwTCrDgwHwYDVR0j BBgwFoAUZYezJUoHRupu/60dwvKdXcpvmLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjcxNjBkZC1mZjgwLTRlZmEtYmNmMS1iYjc1ZDZkNGYwOGEvMC82NTg3QjMyNTRB MDc0NkVBNkVGRkFEMURDMkYyOUQ1RENBNkY5OEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURDQTZG OThCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWY3MTYwZGQtZmY4MC00ZWZhLWJj ZjEtYmI3NWQ2ZDRmMDhhLzAvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlE NURDQTZGOThCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgAbJUWvJCseDYsYsXA+Q5WwcEvvGDV3U3+ GmPD9G9dONCh1NgHH44vJveBYXBgcF9ZCJtQCh9VGwDQMSvvtQvz1dOy6WYaI0oL OR6JdXffWtkwgzyB/XGxIVB+eWcsXCUaZeohcOuajsVJ/O0kHTKMzI07bMapdZsM 6K8GYJlmAsqcs6LCvNC3JkcOnvAfWqUSJRWlfDXWBSUBvdpr+XzKCG+SKl6CnBCD 83i1uv+Mriswd+xFq4FAMU3b8dZdvXfEAwo//2/RykrNHGwdeQTLNTAlFHVWKecb RZD6CzeKfMMgvCjjvJj/1wdDhBiRQXr163+xv7S/1JeBtbNlzqA= -----END CERTIFICATE-----Generated at Fri Jun 6 07:50:51 2025 by rpki-client