$ rpki-client -vvf repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft File: 6886844AB176920850E0984917E9713667D0A025.mft (raw, json) Hash identifier: 4lP0trErLoCHm4FrFNsdG2dala9ILH7IlFn/GXJ3yOA= Subject key identifier: 4B:AE:1A:DF:3A:F5:21:68:7B:2D:19:82:05:87:B9:33:9E:B7:AA:D0 Authority key identifier: 68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25 Certificate issuer: /CN=6886844AB176920850E0984917E9713667D0A025 Certificate serial: 597EFC17726CA6A871F61D0E70DC80CE3AA92461 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft Manifest number: 01A4 Signing time: Tue 22 Jul 2025 22:42:13 +0000 Manifest this update: Tue 22 Jul 2025 22:37:13 +0000 Manifest next update: Sat 26 Jul 2025 05:45:13 +0000 Files and hashes: 1: 6886844AB176920850E0984917E9713667D0A025.crl (hash: oCH3Hzdis47Vieaf2Tu7ZpRTL4opSpUPmVaaVnvzu9Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:7e:fc:17:72:6c:a6:a8:71:f6:1d:0e:70:dc:80:ce:3a:a9:24:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6886844AB176920850E0984917E9713667D0A025 Validity Not Before: Jul 22 22:37:13 2025 GMT Not After : Jul 26 05:45:13 2025 GMT Subject: CN=4BAE1ADF3AF521687B2D19820587B9339EB7AAD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:42:8f:a0:a7:d9:b5:bf:cb:44:7d:df:69:69: a0:7c:83:f0:e1:95:16:9c:ab:a7:23:47:9e:fc:bd: 6e:fb:b1:51:45:cc:9f:34:94:2e:f1:1f:9a:be:0e: 2a:4a:6d:45:15:94:03:14:cb:b3:8c:7c:f2:97:9d: 3c:f5:f1:37:11:4a:44:7a:89:7d:b7:ff:dd:bc:7a: 00:b1:bf:ec:a7:c2:a5:a9:7b:71:a6:97:c7:0c:18: a8:52:fe:46:8d:5e:ae:83:73:8e:12:0a:52:6f:0a: cc:47:c4:c6:d8:b5:49:94:94:b2:4f:f6:50:50:0e: 76:e2:77:6c:65:f8:c3:2f:93:fc:cf:02:38:df:86: 8c:2e:cd:5e:8f:14:6b:83:df:0d:13:43:13:53:11: 22:2a:f0:c0:13:7c:fa:85:64:6b:81:1b:35:a1:5b: 4c:9d:e8:e0:ae:2b:10:38:90:9b:ef:7e:91:c2:df: 5f:5a:d3:8a:27:c2:af:6e:fd:84:8f:79:ad:74:9b: 08:b9:c7:64:29:16:bd:a6:4d:49:16:2b:53:da:7f: 48:2a:12:1a:78:08:36:42:76:3b:87:04:0a:c5:cc: 61:2f:65:d6:bf:92:47:2d:b3:90:24:74:89:72:18: 0c:79:5a:7b:44:36:ef:9e:bd:a7:fc:ca:4f:6e:5c: 12:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AE:1A:DF:3A:F5:21:68:7B:2D:19:82:05:87:B9:33:9E:B7:AA:D0 X509v3 Authority Key Identifier: keyid:68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:6c:c5:46:64:92:5e:53:eb:81:e1:3e:53:da:18:3d:8f:41: 5a:e8:a7:76:af:6b:10:0c:cd:49:59:2f:78:82:27:b7:e0:c2: 32:32:a7:ce:30:f4:49:3e:25:d8:4e:96:ae:0d:f7:a9:4a:f4: 16:3c:b0:fe:6c:97:aa:45:c0:1d:48:1d:63:34:06:e5:48:5b: 01:93:50:54:c4:21:fa:59:98:4d:44:6e:a9:d7:52:26:be:ba: 8c:91:83:07:a4:45:b6:2c:95:52:36:86:4b:10:f5:d9:80:04: dd:0a:c5:59:dc:e9:bb:ab:07:44:ab:73:d8:b4:da:91:0c:5b: 71:fe:62:3e:67:82:d7:bc:83:2f:02:d4:ed:4d:eb:bd:9d:65: 2b:96:6c:25:22:ae:87:55:28:a2:15:19:70:d0:b9:85:d1:b6: 4a:3f:54:3f:b6:21:01:04:7e:2b:04:f0:32:79:f5:47:58:40: ac:42:28:0a:c4:5b:44:e8:60:85:e2:35:b2:07:81:c9:3b:10: 2e:b6:d1:07:7a:f7:ef:2d:2a:49:2f:58:ea:b6:8d:07:2a:87: 07:d7:f7:7d:1e:d2:10:aa:50:39:f7:c9:34:7c:8f:e8:d8:21: f1:28:2d:ae:9b:d9:e3:8e:3d:3f:bd:34:3c:a1:bb:43:bd:4a: d9:34:6e:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWX78F3Jspqhx9h0OcNyAzjqpJGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcxMzY2 N0QwQTAyNTAeFw0yNTA3MjIyMjM3MTNaFw0yNTA3MjYwNTQ1MTNaMDMxMTAvBgNV BAMTKDRCQUUxQURGM0FGNTIxNjg3QjJEMTk4MjA1ODdCOTMzOUVCN0FBRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMQo+gp9m1v8tEfd9paaB8g/Dh lRacq6cjR578vW77sVFFzJ80lC7xH5q+DipKbUUVlAMUy7OMfPKXnTz18TcRSkR6 iX23/928egCxv+ynwqWpe3Gml8cMGKhS/kaNXq6Dc44SClJvCsxHxMbYtUmUlLJP 9lBQDnbid2xl+MMvk/zPAjjfhowuzV6PFGuD3w0TQxNTESIq8MATfPqFZGuBGzWh W0yd6OCuKxA4kJvvfpHC319a04onwq9u/YSPea10mwi5x2QpFr2mTUkWK1Paf0gq Ehp4CDZCdjuHBArFzGEvZda/kkcts5AkdIlyGAx5WntENu+evaf8yk9uXBLXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS64a3zr1IWh7LRmCBYe5M563qtAwHwYDVR0j BBgwFoAUaIaESrF2kghQ4JhJF+lxNmfQoCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDU1Y2IyOS01Mjc2LTRhNzktYjMzYS1jYzUxNTE3YmRkMTgvMC82ODg2ODQ0QUIx NzY5MjA4NTBFMDk4NDkxN0U5NzEzNjY3RDBBMDI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcxMzY2N0Qw QTAyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ1NWNiMjktNTI3Ni00YTc5LWIz M2EtY2M1MTUxN2JkZDE4LzAvNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcx MzY2N0QwQTAyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVsxUZkkl5T64HhPlPaGD2PQVrop3avaxAM zUlZL3iCJ7fgwjIyp84w9Ek+JdhOlq4N96lK9BY8sP5sl6pFwB1IHWM0BuVIWwGT UFTEIfpZmE1EbqnXUia+uoyRgwekRbYslVI2hksQ9dmABN0KxVnc6burB0Src9i0 2pEMW3H+Yj5ngte8gy8C1O1N672dZSuWbCUirodVKKIVGXDQuYXRtko/VD+2IQEE fisE8DJ59UdYQKxCKArEW0ToYIXiNbIHgck7EC620Qd69+8tKkkvWOq2jQcqhwfX 930e0hCqUDn3yTR8j+jYIfEoLa6b2eOOPT+9NDyhu0O9Stk0bpA= -----END CERTIFICATE-----Generated at Thu Jul 24 08:43:06 2025 by rpki-client