$ rpki-client -vvf repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft File: F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft (raw, json) Hash identifier: 6eXgc7L2PSNPgoNeE3ZHwulj/UWEBy1wbXCKRdHhYBM= Subject key identifier: ED:7A:06:4C:68:3D:9D:27:D0:82:6D:12:4B:F2:02:B9:D3:8F:B0:21 Authority key identifier: F6:C8:A7:13:C4:45:14:84:D1:D6:7F:4E:E6:F7:7B:46:AE:E4:17:A9 Certificate issuer: /CN=F6C8A713C4451484D1D67F4EE6F77B46AEE417A9 Certificate serial: 3CE46DBE0DE39434821EF24C6592C6297574AD6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft Manifest number: 01A1 Signing time: Sat 09 Aug 2025 17:20:37 +0000 Manifest this update: Sat 09 Aug 2025 17:15:37 +0000 Manifest next update: Tue 12 Aug 2025 23:48:37 +0000 Files and hashes: 1: F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl (hash: gGG3Jg6u8ffASmBQZBZpxmgkBqLkhqjjpke+OOT6kHM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 23:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:e4:6d:be:0d:e3:94:34:82:1e:f2:4c:65:92:c6:29:75:74:ad:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6C8A713C4451484D1D67F4EE6F77B46AEE417A9 Validity Not Before: Aug 9 17:15:37 2025 GMT Not After : Aug 12 23:48:37 2025 GMT Subject: CN=ED7A064C683D9D27D0826D124BF202B9D38FB021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:87:3d:06:2c:4a:91:3d:6b:2d:de:26:fb:27: 7e:97:33:3b:64:b2:65:65:c6:db:b4:4a:b3:c0:0a: 62:62:17:d4:08:69:dd:64:b7:84:9d:bd:4f:9f:c1: 88:d4:4e:8e:9d:38:fa:6e:9c:1a:26:ed:4b:21:33: ce:aa:e8:22:99:00:6b:b3:40:4b:c6:a5:df:65:80: 6d:59:38:7e:d4:b3:20:b9:5a:a4:44:c3:e3:a0:30: f7:66:21:c0:45:87:0f:24:67:dd:d9:89:2b:f9:5d: 34:5f:68:8a:65:4b:44:3e:12:24:c0:83:ec:45:e1: cc:93:de:3e:e3:88:97:20:62:1c:3b:a9:e9:da:4e: 2f:5e:2a:85:52:dc:2a:8b:6b:a1:8c:3e:fa:43:8e: 61:11:8e:6d:9e:19:25:01:6b:c4:3c:a9:41:99:91: f2:a1:51:78:d3:db:11:b5:37:91:19:1b:93:fc:7c: 9a:21:05:59:90:80:ae:16:dd:9f:26:2e:b8:d5:e6: 13:63:0f:12:bc:c2:a1:6a:6a:b5:b2:5c:02:15:dc: f4:aa:f4:37:82:16:ed:d9:62:df:b1:28:b8:38:f0: 6f:9d:0c:56:23:1c:7a:77:fb:1a:0f:4f:33:1e:c6: f1:6c:2e:5f:e0:82:0f:29:19:c2:79:25:89:a8:64: 1a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7A:06:4C:68:3D:9D:27:D0:82:6D:12:4B:F2:02:B9:D3:8F:B0:21 X509v3 Authority Key Identifier: keyid:F6:C8:A7:13:C4:45:14:84:D1:D6:7F:4E:E6:F7:7B:46:AE:E4:17:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:e8:b1:03:a9:f6:14:d0:1f:9d:f0:14:d1:12:b8:06:05:70: 9e:8a:81:17:51:52:72:0d:d5:84:b3:e3:19:5c:34:37:a8:63: 67:99:ed:2e:2d:e4:10:52:5a:d7:b1:6b:7c:f0:72:63:34:fb: a1:63:70:d1:35:88:c3:82:36:6a:25:0b:f3:9c:fe:c5:49:f3: 32:6f:6b:b1:99:03:d2:af:f5:b3:54:50:17:5e:4c:1a:be:f2: 15:74:b7:f7:9f:2a:da:55:09:a3:ff:82:be:49:23:5c:4f:3b: 0c:97:a8:c8:8d:c5:50:2e:ef:cf:65:b8:24:95:42:24:01:81: e6:ca:a9:00:fd:52:25:b0:21:3c:ef:48:af:59:4a:25:4a:76: e8:bd:98:f9:4e:2e:6d:df:8d:2e:a2:41:bf:9d:51:8d:5f:79: ac:8b:c9:ce:0a:15:41:40:cc:31:88:59:0a:37:a9:23:dc:17: 79:5e:7a:23:40:e8:32:28:02:6e:82:b3:71:d8:c2:03:96:4b: b3:a5:2f:fe:42:48:ba:4d:6b:6d:0d:b7:6b:0a:3b:6d:c6:da: d8:7e:45:00:5f:6b:71:84:b7:c6:49:9b:ab:61:04:7f:bb:c3: 13:bb:c3:c7:d4:ec:b8:0f:98:77:67:b7:7d:fc:6c:ef:ee:78: 82:89:d4:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPORtvg3jlDSCHvJMZZLGKXV0rW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdCNDZB RUU0MTdBOTAeFw0yNTA4MDkxNzE1MzdaFw0yNTA4MTIyMzQ4MzdaMDMxMTAvBgNV BAMTKEVEN0EwNjRDNjgzRDlEMjdEMDgyNkQxMjRCRjIwMkI5RDM4RkIwMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVhz0GLEqRPWst3ib7J36XMztk smVlxtu0SrPACmJiF9QIad1kt4SdvU+fwYjUTo6dOPpunBom7UshM86q6CKZAGuz QEvGpd9lgG1ZOH7UsyC5WqREw+OgMPdmIcBFhw8kZ93ZiSv5XTRfaIplS0Q+EiTA g+xF4cyT3j7jiJcgYhw7qenaTi9eKoVS3CqLa6GMPvpDjmERjm2eGSUBa8Q8qUGZ kfKhUXjT2xG1N5EZG5P8fJohBVmQgK4W3Z8mLrjV5hNjDxK8wqFqarWyXAIV3PSq 9DeCFu3ZYt+xKLg48G+dDFYjHHp3+xoPTzMexvFsLl/ggg8pGcJ5JYmoZBq7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7XoGTGg9nSfQgm0SS/ICudOPsCEwHwYDVR0j BBgwFoAU9sinE8RFFITR1n9O5vd7Rq7kF6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmM3ZTViMS01MTlkLTQ1NmMtYjNiNi03NTU3OTQ3MDI2NjQvMC9GNkM4QTcxM0M0 NDUxNDg0RDFENjdGNEVFNkY3N0I0NkFFRTQxN0E5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdCNDZBRUU0 MTdBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZjN2U1YjEtNTE5ZC00NTZjLWIz YjYtNzU1Nzk0NzAyNjY0LzAvRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdC NDZBRUU0MTdBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnosQOp9hTQH53wFNESuAYFcJ6KgRdRUnIN 1YSz4xlcNDeoY2eZ7S4t5BBSWtexa3zwcmM0+6FjcNE1iMOCNmolC/Oc/sVJ8zJv a7GZA9Kv9bNUUBdeTBq+8hV0t/efKtpVCaP/gr5JI1xPOwyXqMiNxVAu789luCSV QiQBgebKqQD9UiWwITzvSK9ZSiVKdui9mPlOLm3fjS6iQb+dUY1feayLyc4KFUFA zDGIWQo3qSPcF3leeiNA6DIoAm6Cs3HYwgOWS7OlL/5CSLpNa20Nt2sKO23G2th+ RQBfa3GEt8ZJm6thBH+7wxO7w8fU7LgPmHdnt338bO/ueIKJ1GU= -----END CERTIFICATE-----Generated at Mon Aug 11 05:06:36 2025 by rpki-client