$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft File: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft (raw, json) Hash identifier: zB4sofxLjtuatO3wPIWA3OXs9VKXxZ0EXTZiTeUh/cM= Subject key identifier: DE:3D:44:75:CF:F5:F3:0F:2D:22:A8:5C:3D:F1:A1:1C:4C:93:EC:C5 Authority key identifier: 6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 Certificate issuer: /CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Certificate serial: 042F2BD6B22A87D4968A6AD0B83DB38FAB7DA6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft Manifest number: 02F2 Signing time: Tue 12 Aug 2025 00:41:28 +0000 Manifest this update: Tue 12 Aug 2025 00:36:28 +0000 Manifest next update: Fri 15 Aug 2025 08:23:28 +0000 Files and hashes: 1: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl (hash: /esIAbtjv4LRbnAOYv02zkvTPiq5ZcvB/QIvyHMMKO4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 Aug 2025 08:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:2f:2b:d6:b2:2a:87:d4:96:8a:6a:d0:b8:3d:b3:8f:ab:7d:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Validity Not Before: Aug 12 00:36:28 2025 GMT Not After : Aug 15 08:23:28 2025 GMT Subject: CN=DE3D4475CFF5F30F2D22A85C3DF1A11C4C93ECC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:59:70:2c:fa:e0:88:89:c9:1b:bb:ea:c6:6b: 57:f4:27:4b:f0:bf:73:2f:de:ff:f7:c5:b5:86:d6: 3a:d7:42:26:ca:fb:a2:4e:6f:eb:6f:03:4e:74:12: b9:b9:42:b9:a0:82:ab:4d:18:f3:75:87:45:cc:91: 83:83:89:49:03:3a:09:d5:b7:72:7b:2c:d6:85:3d: 7a:e6:0e:3b:43:96:ea:a6:07:8b:fc:d7:2d:24:1f: 71:a2:00:bb:7f:03:7e:41:47:26:f6:19:64:3e:9e: a5:c5:85:e1:8d:0c:c8:d1:43:af:fa:49:ec:c6:e8: d4:6c:7f:9a:01:30:ca:c8:bb:66:17:4b:0d:32:66: 37:42:a0:05:65:e8:5f:2e:06:13:e9:46:7e:7e:2c: 6e:8c:e9:8e:e3:55:33:6e:08:10:21:81:84:d8:01: 83:c8:55:2a:e0:4b:38:91:99:70:a4:44:58:9a:d4: b0:9c:99:d3:d7:da:1c:cf:09:83:c0:48:85:33:12: af:14:4d:dd:02:4f:a9:d3:03:63:b7:a7:93:58:77: 44:b4:77:5c:9a:4a:fc:74:41:89:8d:ed:c7:5e:bf: 74:6e:33:09:58:6c:1a:0d:75:97:b6:2c:12:09:a0: c9:b2:95:38:1d:2f:33:ea:6d:15:dc:1f:13:4a:c5: 0b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3D:44:75:CF:F5:F3:0F:2D:22:A8:5C:3D:F1:A1:1C:4C:93:EC:C5 X509v3 Authority Key Identifier: keyid:6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:6e:1c:b3:bc:1f:b7:4c:4f:28:c1:4b:96:61:85:df:a9:d2: a6:68:0a:57:30:38:d8:5f:13:ae:e8:46:08:56:a7:bc:5b:6b: 36:ee:62:ac:5b:d6:76:58:47:c1:8a:f4:5a:17:a8:6e:99:64: 14:3d:a4:4e:e4:28:2e:02:48:34:64:7a:ac:6c:fa:eb:23:55: f3:ef:a5:d7:3f:9c:11:eb:33:d2:73:c3:fc:1d:b1:0e:4f:c9: 53:dc:57:f3:7c:ef:03:dd:3f:84:bc:83:5d:76:76:1b:0b:dc: d3:7d:54:2d:71:a0:f2:0e:31:71:d6:71:ce:71:17:32:58:c9: 56:cb:7b:1e:dc:a7:85:9f:a7:83:5f:63:68:92:19:fe:63:d8: bb:04:ab:e9:66:3a:fa:38:a4:dc:c2:dd:40:d4:7b:c1:c9:55: 3a:b2:08:a4:df:f2:ad:70:14:97:01:4c:a6:ce:98:23:db:f4: ff:2f:2b:e6:75:86:d4:71:77:eb:99:18:c9:f7:11:5e:15:25: 62:73:02:18:e7:0f:eb:cf:b8:97:2b:14:9e:a1:eb:8b:5f:a0: be:66:c0:6b:10:f0:28:4e:e6:c6:a8:69:12:e6:b6:c9:d5:b2: 03:b2:e0:37:d8:56:9d:e3:3c:61:3b:85:4b:38:9e:23:91:16: 52:10:6d:3c -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITBC8r1rIqh9SWimrQuD2zj6t9pjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg2REVBOUIyNzVFQ0NGQjkyMEUwQTg0RDBEMTU4QzYwMDBG MjU2MUY3MB4XDTI1MDgxMjAwMzYyOFoXDTI1MDgxNTA4MjMyOFowMzExMC8GA1UE AxMoREUzRDQ0NzVDRkY1RjMwRjJEMjJBODVDM0RGMUExMUM0QzkzRUNDNTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ1ZcCz64IiJyRu76sZrV/QnS/C/ cy/e//fFtYbWOtdCJsr7ok5v628DTnQSublCuaCCq00Y83WHRcyRg4OJSQM6CdW3 cnss1oU9euYOO0OW6qYHi/zXLSQfcaIAu38DfkFHJvYZZD6epcWF4Y0MyNFDr/pJ 7Mbo1Gx/mgEwysi7ZhdLDTJmN0KgBWXoXy4GE+lGfn4sbozpjuNVM24IECGBhNgB g8hVKuBLOJGZcKREWJrUsJyZ09faHM8Jg8BIhTMSrxRN3QJPqdMDY7enk1h3RLR3 XJpK/HRBiY3tx16/dG4zCVhsGg11l7YsEgmgybKVOB0vM+ptFdwfE0rFCwkCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBTePUR1z/XzDy0iqFw98aEcTJPsxTAfBgNVHSME GDAWgBRt6psnXsz7kg4KhNDRWMYADyVh9zAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Mx Yjc3ZDFlLTE1ODUtNDYwNC1iNmIxLTA3MWYwYTI5NDBjNC8wLzZERUE5QjI3NUVD Q0ZCOTIwRTBBODREMEQxNThDNjAwMEYyNTYxRjcuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi82REVBOUIyNzVFQ0NGQjkyMEUwQTg0RDBEMTU4QzYwMDBGMjU2 MUY3LmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9jMWI3N2QxZS0xNTg1LTQ2MDQtYjZi MS0wNzFmMGEyOTQwYzQvMC82REVBOUIyNzVFQ0NGQjkyMEUwQTg0RDBEMTU4QzYw MDBGMjU2MUY3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAZG4cs7wft0xPKMFLlmGF36nSpmgKVzA42F8T ruhGCFanvFtrNu5irFvWdlhHwYr0WheobplkFD2kTuQoLgJINGR6rGz66yNV8++l 1z+cEesz0nPD/B2xDk/JU9xX83zvA90/hLyDXXZ2Gwvc031ULXGg8g4xcdZxznEX MljJVst7HtynhZ+ng19jaJIZ/mPYuwSr6WY6+jik3MLdQNR7wclVOrIIpN/yrXAU lwFMps6YI9v0/y8r5nWG1HF365kYyfcRXhUlYnMCGOcP68+4lysUnqHri1+gvmbA axDwKE7mxqhpEua2ydWyA7LgN9hWneM8YTuFSzieI5EWUhBtPA== -----END CERTIFICATE-----Generated at Wed Aug 13 05:52:29 2025 by rpki-client