$ rpki-client -vvf repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.mft File: A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.mft (raw, json) Hash identifier: EPdT/5AQAOMJb+tQsejDjnlJJtF4zgPHGzbpTC7izCY= Subject key identifier: 8D:8A:29:B0:FE:F1:38:8F:88:6E:C4:80:F1:E6:6D:08:88:78:F9:15 Authority key identifier: A6:01:5E:5E:26:05:D4:FD:F6:8E:B9:6F:96:A9:89:4C:EA:EC:DF:BF Certificate issuer: /CN=A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF Certificate serial: 38BAB81572E5AACFD55B12A3D4ECE6D0B6990779 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.mft Manifest number: 01DD Signing time: Wed 06 Aug 2025 19:31:54 +0000 Manifest this update: Wed 06 Aug 2025 19:26:54 +0000 Manifest next update: Sun 10 Aug 2025 06:55:54 +0000 Files and hashes: 1: A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.crl (hash: okU/nax37DGCIDnZJCDcWyVjas2DHMgqhiQmqYKyvHs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.crl rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 06:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ba:b8:15:72:e5:aa:cf:d5:5b:12:a3:d4:ec:e6:d0:b6:99:07:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF Validity Not Before: Aug 6 19:26:54 2025 GMT Not After : Aug 10 06:55:54 2025 GMT Subject: CN=8D8A29B0FEF1388F886EC480F1E66D088878F915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:de:88:93:61:40:69:24:0e:76:43:f1:27:73: 6f:73:5d:57:3e:48:e7:6a:8c:aa:15:49:9b:7f:f2: 96:d3:73:7b:08:bb:92:36:04:05:ce:ce:a7:b8:48: d4:6d:af:66:02:e3:33:02:61:fb:d7:7e:7a:11:36: 50:06:13:12:1c:6b:1d:1a:8f:0e:0b:00:7f:1b:fb: 7c:58:08:a1:50:8c:b8:e6:d9:b7:41:29:87:c1:f1: 75:2d:04:11:8b:e0:d9:f6:49:d8:e9:10:a1:e8:ba: 9c:f8:67:f6:54:9a:bc:ec:bc:7e:21:f4:1c:fd:43: 0e:74:c2:c3:6b:f7:de:a4:e9:2a:49:2a:e3:35:b4: 40:de:5f:ce:2d:17:c5:14:d3:bf:5f:d2:10:5e:2c: 90:6c:cb:54:78:ea:69:67:6a:d8:d2:82:a0:75:d8: 54:26:4a:e0:f7:1d:f2:a9:13:52:d6:5e:04:e0:32: 9d:a3:f0:26:63:dc:8d:8d:5a:f5:f3:0e:33:73:9c: f7:f9:54:48:26:e2:dd:ec:6d:42:5b:9a:c8:00:b3: c8:17:2c:3e:a9:74:c2:5a:18:bf:1d:df:49:fc:75: c5:cf:9e:c6:36:76:89:2e:a4:43:8b:6e:91:02:9b: ae:56:5f:ed:4e:0a:6b:b9:84:84:e7:f0:b4:1b:88: a7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8A:29:B0:FE:F1:38:8F:88:6E:C4:80:F1:E6:6D:08:88:78:F9:15 X509v3 Authority Key Identifier: keyid:A6:01:5E:5E:26:05:D4:FD:F6:8E:B9:6F:96:A9:89:4C:EA:EC:DF:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:61:70:a3:c7:45:b0:f5:e8:5d:e7:42:7f:e9:d6:1d:c7:5d: 6d:bd:f8:1a:53:84:d6:6c:43:9a:1f:8f:e4:9e:e7:83:fd:66: 6f:34:31:5d:ba:44:47:0a:f9:8b:1c:67:e2:4a:5d:a1:13:17: e1:31:f7:ac:c0:e5:dd:f7:db:74:11:a1:1a:46:c9:bc:dc:99: c7:72:06:e3:59:c7:b7:37:ee:00:4c:5d:cf:25:70:ca:69:d5: b6:90:43:35:90:39:b5:32:fc:93:2e:e1:41:73:c7:66:70:5d: c9:0f:80:dc:a5:4b:0c:fc:c5:bb:e7:f2:3f:97:d0:97:fd:ff: 6a:40:9a:8a:26:ff:75:4e:41:4b:7c:ea:b2:14:5b:12:d5:3c: 66:61:06:f8:3d:9e:0e:8e:ef:4f:fe:65:a0:3d:38:22:a8:2c: 75:a3:0a:07:c6:58:b8:31:43:40:12:23:c4:de:5a:a1:49:f3: 03:8b:02:45:91:f8:dd:d9:6e:10:7a:60:31:5b:ef:08:2a:97: 59:26:9c:0b:80:b9:4b:45:44:7b:48:43:99:87:1a:f4:e9:2a: 8f:c1:0d:36:33:13:0f:de:d0:34:3e:5f:d2:d9:a8:29:0c:b1: e2:d0:b7:ec:d7:ea:d8:c9:cb:d6:4a:36:cd:67:fa:38:c4:7d: 63:78:54:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOLq4FXLlqs/VWxKj1Ozm0LaZB3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwMTVFNUUyNjA1RDRGREY2OEVCOTZGOTZBOTg5NENF QUVDREZCRjAeFw0yNTA4MDYxOTI2NTRaFw0yNTA4MTAwNjU1NTRaMDMxMTAvBgNV BAMTKDhEOEEyOUIwRkVGMTM4OEY4ODZFQzQ4MEYxRTY2RDA4ODg3OEY5MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC83oiTYUBpJA52Q/Enc29zXVc+ SOdqjKoVSZt/8pbTc3sIu5I2BAXOzqe4SNRtr2YC4zMCYfvXfnoRNlAGExIcax0a jw4LAH8b+3xYCKFQjLjm2bdBKYfB8XUtBBGL4Nn2SdjpEKHoupz4Z/ZUmrzsvH4h 9Bz9Qw50wsNr996k6SpJKuM1tEDeX84tF8UU079f0hBeLJBsy1R46mlnatjSgqB1 2FQmSuD3HfKpE1LWXgTgMp2j8CZj3I2NWvXzDjNznPf5VEgm4t3sbUJbmsgAs8gX LD6pdMJaGL8d30n8dcXPnsY2dokupEOLbpECm65WX+1OCmu5hITn8LQbiKctAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjYopsP7xOI+IbsSA8eZtCIh4+RUwHwYDVR0j BBgwFoAUpgFeXiYF1P32jrlvlqmJTOrs378wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGQzZWYyYy03ODFkLTRkMGMtYTY4Mi05MWFjMDExZWY2YjcvMC9BNjAxNUU1RTI2 MDVENEZERjY4RUI5NkY5NkE5ODk0Q0VBRUNERkJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYwMTVFNUUyNjA1RDRGREY2OEVCOTZGOTZBOTg5NENFQUVD REZCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRkM2VmMmMtNzgxZC00ZDBjLWE2 ODItOTFhYzAxMWVmNmI3LzAvQTYwMTVFNUUyNjA1RDRGREY2OEVCOTZGOTZBOTg5 NENFQUVDREZCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHphcKPHRbD16F3nQn/p1h3HXW29+BpThNZs Q5ofj+Se54P9Zm80MV26REcK+YscZ+JKXaETF+Ex96zA5d3323QRoRpGybzcmcdy BuNZx7c37gBMXc8lcMpp1baQQzWQObUy/JMu4UFzx2ZwXckPgNylSwz8xbvn8j+X 0Jf9/2pAmoom/3VOQUt86rIUWxLVPGZhBvg9ng6O70/+ZaA9OCKoLHWjCgfGWLgx Q0ASI8TeWqFJ8wOLAkWR+N3ZbhB6YDFb7wgql1kmnAuAuUtFRHtIQ5mHGvTpKo/B DTYzEw/e0DQ+X9LZqCkMseLQt+zX6tjJy9ZKNs1n+jjEfWN4VDI= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:19 2025 by rpki-client