$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft File: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft (raw, json) Hash identifier: JOkKELDVPRc+poaCDfOur54XROpbeCzfazKh27J51Sg= Subject key identifier: 80:8D:AD:25:09:50:85:EB:37:23:20:1C:6B:48:0E:DE:67:2E:DD:44 Authority key identifier: 6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 Certificate issuer: /CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Certificate serial: 37F8298FDDEF525AA6A24E9F2315CF6343176FDA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft Manifest number: 02D9 Signing time: Tue 17 Jun 2025 03:31:27 +0000 Manifest this update: Tue 17 Jun 2025 03:26:27 +0000 Manifest next update: Fri 20 Jun 2025 07:13:27 +0000 Files and hashes: 1: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl (hash: nElQBlF3kpc2xrSBNIpoRV50w0KR5wvKVRv8dptj/4M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 07:13:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:f8:29:8f:dd:ef:52:5a:a6:a2:4e:9f:23:15:cf:63:43:17:6f:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Validity Not Before: Jun 17 03:26:27 2025 GMT Not After : Jun 20 07:13:27 2025 GMT Subject: CN=808DAD25095085EB3723201C6B480EDE672EDD44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4b:23:63:33:1d:48:b4:39:aa:cc:00:62:46: bb:ea:50:bc:0b:39:4d:5d:eb:1b:4a:70:37:a3:cf: c2:03:c8:24:61:ad:aa:72:47:8a:b8:54:91:07:aa: e7:d9:1b:b6:79:02:4a:c1:f5:9d:7d:aa:21:99:8d: f5:32:85:28:93:9a:1d:44:9c:15:67:da:ab:a5:ef: 6a:ca:1c:50:5b:cd:5b:41:72:cf:06:2b:c3:84:eb: cc:94:e3:f6:5c:d8:d3:29:b5:11:f9:48:25:4c:f9: e5:7b:c5:fc:ea:c4:b3:0e:f3:84:08:e6:0c:84:f7: 3b:ca:6c:4b:3a:d7:d3:85:6a:a8:d3:c4:b3:df:92: 60:96:e1:7c:a3:37:c5:ee:f4:f1:3c:3b:6c:73:fb: 94:f6:5b:e8:e4:2f:ab:33:de:23:bd:a5:c8:0c:0e: 58:b4:9d:cf:a6:c0:14:38:db:4a:1b:2e:a8:14:aa: 0c:95:a7:7e:8a:2b:9d:a2:d6:ce:6b:74:5d:fa:af: fb:74:7f:b5:a6:6e:14:8f:65:df:cf:20:26:37:ff: 33:83:49:be:b8:1e:05:8e:8d:e9:19:0f:41:03:4f: 4a:83:16:f0:9d:75:46:12:4f:c6:30:8a:fc:87:4f: 95:0f:8c:8a:8e:36:58:4f:ed:b7:4a:c6:15:e1:7b: f6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8D:AD:25:09:50:85:EB:37:23:20:1C:6B:48:0E:DE:67:2E:DD:44 X509v3 Authority Key Identifier: keyid:6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:7a:ad:52:66:47:3e:e6:e0:9b:c4:35:97:72:db:de:23:4b: 6d:73:1b:a5:27:17:42:54:41:04:9f:be:6a:6c:ce:ae:39:2b: b8:ef:65:ae:5c:23:f7:1a:4e:4b:12:af:52:6c:69:c8:e0:bb: 19:5b:77:5b:1e:24:a0:ce:db:b6:1f:b9:78:ce:43:1d:fe:15: fd:36:39:0a:59:ca:ba:25:71:59:ca:76:f6:b1:36:3e:36:f3: 02:c3:4b:e7:c5:3f:48:e6:fc:be:b1:fe:c2:f8:07:15:8e:3b: 0c:75:c9:b0:7e:60:5d:02:c4:29:ef:dd:15:03:2f:81:27:b8: 8d:56:a6:a7:e0:c2:d8:17:6d:94:5f:db:a3:d0:ab:86:cb:52: be:6a:70:b7:1e:d7:5b:3d:54:41:ef:25:5d:18:98:4c:37:75: ee:65:b7:48:9b:85:9a:b5:48:bd:dc:7b:23:91:3b:45:55:0c: 8a:53:f0:ac:af:52:99:98:e2:8f:b7:77:df:ca:34:41:9b:67: 85:ef:93:c2:4f:7c:79:2a:69:b3:45:fb:fc:37:29:15:60:19: ca:29:07:b6:8a:7b:0a:0f:f3:60:52:50:bb:3e:0c:26:4e:df: 7d:79:54:ab:88:69:bd:b6:52:46:29:b6:ce:df:ca:ff:25:4a: f2:48:e0:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN/gpj93vUlqmok6fIxXPY0MXb9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2MDAw RjI1NjFGNzAeFw0yNTA2MTcwMzI2MjdaFw0yNTA2MjAwNzEzMjdaMDMxMTAvBgNV BAMTKDgwOERBRDI1MDk1MDg1RUIzNzIzMjAxQzZCNDgwRURFNjcyRURENDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFSyNjMx1ItDmqzABiRrvqULwL OU1d6xtKcDejz8IDyCRhrapyR4q4VJEHqufZG7Z5AkrB9Z19qiGZjfUyhSiTmh1E nBVn2qul72rKHFBbzVtBcs8GK8OE68yU4/Zc2NMptRH5SCVM+eV7xfzqxLMO84QI 5gyE9zvKbEs619OFaqjTxLPfkmCW4XyjN8Xu9PE8O2xz+5T2W+jkL6sz3iO9pcgM Dli0nc+mwBQ420obLqgUqgyVp36KK52i1s5rdF36r/t0f7WmbhSPZd/PICY3/zOD Sb64HgWOjekZD0EDT0qDFvCddUYST8YwivyHT5UPjIqONlhP7bdKxhXhe/bBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgI2tJQlQhes3IyAca0gO3mcu3UQwHwYDVR0j BBgwFoAUbeqbJ17M+5IOCoTQ0VjGAA8lYfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWI3N2QxZS0xNTg1LTQ2MDQtYjZiMS0wNzFmMGEyOTQwYzQvMC82REVBOUIyNzVF Q0NGQjkyMEUwQTg0RDBEMTU4QzYwMDBGMjU2MUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2MDAwRjI1 NjFGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiNzdkMWUtMTU4NS00NjA0LWI2 YjEtMDcxZjBhMjk0MGM0LzAvNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2 MDAwRjI1NjFGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADx6rVJmRz7m4JvENZdy294jS21zG6UnF0JU QQSfvmpszq45K7jvZa5cI/caTksSr1Jsacjguxlbd1seJKDO27YfuXjOQx3+Ff02 OQpZyrolcVnKdvaxNj428wLDS+fFP0jm/L6x/sL4BxWOOwx1ybB+YF0CxCnv3RUD L4EnuI1WpqfgwtgXbZRf26PQq4bLUr5qcLce11s9VEHvJV0YmEw3de5lt0ibhZq1 SL3ceyORO0VVDIpT8KyvUpmY4o+3d9/KNEGbZ4Xvk8JPfHkqabNF+/w3KRVgGcop B7aKewoP82BSULs+DCZO3315VKuIab22UkYpts7fyv8lSvJI4As= -----END CERTIFICATE-----Generated at Wed Jun 18 21:37:35 2025 by rpki-client