$ rpki-client -vvf repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft File: C00606846C7D0E540F5703EC90A0C331460D7ECA.mft (raw, json) Hash identifier: rpByisOtGdviDkPVbhzHrE/PQmeFCBclIQoLLQS2sHk= Subject key identifier: F8:A3:B6:3B:E0:46:6C:DF:71:67:96:49:C6:7C:7A:EF:CB:E1:D2:F9 Authority key identifier: C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA Certificate issuer: /CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Certificate serial: 155FB2B15DD285A3D5934FE793B69CDDD1971199 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft Manifest number: A9 Signing time: Fri 18 Jul 2025 16:51:18 +0000 Manifest this update: Fri 18 Jul 2025 16:46:18 +0000 Manifest next update: Tue 22 Jul 2025 01:33:18 +0000 Files and hashes: 1: C00606846C7D0E540F5703EC90A0C331460D7ECA.crl (hash: 3VxUM05JaUUpfbDlPHra/8xg9wfR6MOv3CEpLIth+vs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 01:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:5f:b2:b1:5d:d2:85:a3:d5:93:4f:e7:93:b6:9c:dd:d1:97:11:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Validity Not Before: Jul 18 16:46:18 2025 GMT Not After : Jul 22 01:33:18 2025 GMT Subject: CN=F8A3B63BE0466CDF71679649C67C7AEFCBE1D2F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0b:3a:ee:97:8d:f9:d9:db:ec:9a:59:70:24: 8e:8c:ee:26:68:7a:07:4b:b7:51:68:19:a0:e8:34: 4e:28:0b:be:34:bc:d1:ae:97:28:55:53:6b:2e:87: aa:4c:53:d6:1d:15:eb:2f:79:42:ad:ba:64:c1:b8: 2d:6a:c7:5c:2d:63:1d:e8:aa:bd:47:ed:66:91:44: b2:91:d0:f8:51:82:28:5f:bc:ac:5c:03:f9:62:46: 9c:ee:81:61:19:de:b0:c6:a9:b8:8f:9d:23:b0:10: d0:6d:35:12:a5:bf:d2:79:0a:1c:5e:a3:61:05:92: 69:2c:d7:35:57:8a:ea:eb:9e:63:45:03:54:aa:47: 04:c4:87:78:9a:21:de:39:a4:cf:61:59:4e:68:b6: d2:d6:fc:37:b1:62:c7:c9:43:16:97:32:be:bf:6a: f8:53:9f:66:d7:76:ce:63:77:53:10:ba:be:ac:1b: 37:69:e8:5a:6b:b2:70:93:50:bd:0e:77:87:96:e1: 2d:68:d3:a3:9a:87:d7:1d:a2:38:d1:3a:3c:be:06: 4c:4d:d2:1d:fd:43:48:67:ad:7d:99:04:df:3b:be: bb:7f:df:30:e4:90:f3:20:6e:6b:f8:19:40:66:29: 40:bd:da:a5:b9:20:1d:3c:dd:bb:ba:f0:3b:cb:99: 9b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A3:B6:3B:E0:46:6C:DF:71:67:96:49:C6:7C:7A:EF:CB:E1:D2:F9 X509v3 Authority Key Identifier: keyid:C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:6c:fa:5a:83:f2:0e:fd:ad:0c:bf:5e:d3:fa:86:0b:1f:f5: 3a:89:fc:15:c9:e5:27:03:76:3c:6e:b2:a1:f0:59:c6:c8:5c: 4b:ed:3f:f8:e6:e4:4b:c3:5c:33:e4:54:c3:3d:77:7c:3a:42: 4a:dd:7c:9c:02:cf:f5:b2:f8:c2:82:a4:22:12:e9:34:76:78: 6d:b5:2e:43:34:6c:13:aa:4e:9a:d9:21:4d:8b:1e:87:4a:62: f4:c0:e2:cc:fe:9b:2a:6f:94:03:25:0d:7d:da:09:f9:07:09: b7:6a:a0:31:f2:07:7e:60:b5:8b:bb:e2:3b:ca:14:e9:10:b7: 3d:2a:4d:24:be:0e:13:80:09:3a:25:20:77:c9:2b:19:63:85: ba:e9:c8:65:9e:bf:e8:c5:53:7e:ec:df:49:fd:8b:95:b1:08: 63:5e:a0:af:0a:ae:a0:8c:38:93:1c:df:85:e3:97:da:e4:ac: 11:d7:e6:4f:14:a8:fb:38:e9:a9:95:45:ff:5f:f8:22:29:be: d3:2e:75:14:6d:92:6f:f4:f5:97:32:f0:b4:c7:44:63:ac:c2: 1d:7c:2d:e6:05:d7:6c:71:7f:e3:90:9b:65:b5:5f:c9:50:2d: 71:f0:d7:45:dc:7e:6e:ea:87:3c:f4:49:dc:10:ab:56:79:94: 67:22:d6:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFV+ysV3ShaPVk0/nk7ac3dGXEZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0 NjBEN0VDQTAeFw0yNTA3MTgxNjQ2MThaFw0yNTA3MjIwMTMzMThaMDMxMTAvBgNV BAMTKEY4QTNCNjNCRTA0NjZDREY3MTY3OTY0OUM2N0M3QUVGQ0JFMUQyRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnCzrul4352dvsmllwJI6M7iZo egdLt1FoGaDoNE4oC740vNGulyhVU2suh6pMU9YdFesveUKtumTBuC1qx1wtYx3o qr1H7WaRRLKR0PhRgihfvKxcA/liRpzugWEZ3rDGqbiPnSOwENBtNRKlv9J5Chxe o2EFkmks1zVXiurrnmNFA1SqRwTEh3iaId45pM9hWU5ottLW/DexYsfJQxaXMr6/ avhTn2bXds5jd1MQur6sGzdp6FprsnCTUL0Od4eW4S1o06Oah9cdojjROjy+BkxN 0h39Q0hnrX2ZBN87vrt/3zDkkPMgbmv4GUBmKUC92qW5IB083bu68DvLmZv5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+KO2O+BGbN9xZ5ZJxnx678vh0vkwHwYDVR0j BBgwFoAUwAYGhGx9DlQPVwPskKDDMUYNfsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTMzNGQwMy1lYWU0LTRkMjAtYmE1NC1iMTg4OWQ5MjQ3YWMvMC9DMDA2MDY4NDZD N0QwRTU0MEY1NzAzRUM5MEEwQzMzMTQ2MEQ3RUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0NjBE N0VDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjEzMzRkMDMtZWFlNC00ZDIwLWJh NTQtYjE4ODlkOTI0N2FjLzAvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMz MzE0NjBEN0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALZs+lqD8g79rQy/XtP6hgsf9TqJ/BXJ5ScD djxusqHwWcbIXEvtP/jm5EvDXDPkVMM9d3w6QkrdfJwCz/Wy+MKCpCIS6TR2eG21 LkM0bBOqTprZIU2LHodKYvTA4sz+mypvlAMlDX3aCfkHCbdqoDHyB35gtYu74jvK FOkQtz0qTSS+DhOACTolIHfJKxljhbrpyGWev+jFU37s30n9i5WxCGNeoK8KrqCM OJMc34Xjl9rkrBHX5k8UqPs46amVRf9f+CIpvtMudRRtkm/09Zcy8LTHRGOswh18 LeYF12xxf+OQm2W1X8lQLXHw10Xcfm7qhzz0SdwQq1Z5lGci1nQ= -----END CERTIFICATE-----Generated at Mon Jul 21 02:07:33 2025 by rpki-client