$ rpki-client -vvf repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft File: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft (raw, json) Hash identifier: T4Ow3xl1gpbfjuxVMh/XHa4Q4T/r8hqO2iKs2j7FG40= Subject key identifier: 11:9D:76:47:06:71:65:69:59:EF:06:59:54:2C:BB:0B:A4:52:C4:1D Authority key identifier: 65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC Certificate issuer: /CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Certificate serial: 3DEB573C2E3CF268A18565977789AF85D84B5EB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft Manifest number: 042E Signing time: Mon 21 Jul 2025 07:41:53 +0000 Manifest this update: Mon 21 Jul 2025 07:36:53 +0000 Manifest next update: Thu 24 Jul 2025 15:07:53 +0000 Files and hashes: 1: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl (hash: 9uPNJs8/IEbO9B4JeiqgV36cs2zziBF98R5GcrvGKRo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 15:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:eb:57:3c:2e:3c:f2:68:a1:85:65:97:77:89:af:85:d8:4b:5e:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Validity Not Before: Jul 21 07:36:53 2025 GMT Not After : Jul 24 15:07:53 2025 GMT Subject: CN=119D76470671656959EF0659542CBB0BA452C41D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:30:3a:d7:8e:62:52:22:b9:8d:dc:09:09:66: 6e:bb:7e:ad:49:f8:06:b9:33:6c:f3:70:5c:a2:91: ac:3a:6e:5e:fc:20:4c:fa:eb:0a:02:bc:25:33:83: ae:42:4f:18:b6:6d:ff:ad:e8:5c:eb:ba:a0:2e:6a: a0:58:10:c4:54:23:cf:a7:7b:ab:08:23:14:a7:b8: 9a:39:ea:fe:8f:8d:da:f6:57:ed:a3:07:82:cb:c1: e8:5c:66:52:24:e4:df:c8:43:39:f8:d6:68:24:d8: 80:86:1f:4e:71:8b:7e:c1:ec:76:68:33:8f:27:6b: a3:f2:ff:fa:20:de:39:5d:85:8a:e1:fa:5f:b7:43: ae:69:e9:a2:3c:2a:09:44:d0:71:d2:df:5c:0f:3a: ca:2a:71:13:33:c6:7b:cf:52:40:43:a2:2f:18:d7: a3:4c:ca:21:e1:9c:27:46:0f:dd:7e:c7:66:b1:73: ff:ac:e2:36:0e:38:6f:48:40:bf:5a:7c:4f:46:0f: b0:fd:d4:a4:fe:4b:54:f8:91:4e:a4:61:05:57:82: a1:d1:d0:01:c6:7b:cd:17:ac:fa:5f:95:37:a2:74: 35:55:c6:d0:e7:04:44:76:3b:de:fc:f3:d4:90:40: 15:67:a7:ea:c9:86:23:07:94:60:a8:05:ef:d1:14: 61:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:9D:76:47:06:71:65:69:59:EF:06:59:54:2C:BB:0B:A4:52:C4:1D X509v3 Authority Key Identifier: keyid:65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a1:f8:02:c2:64:dd:ac:51:d8:5a:82:8b:4f:1e:70:93:9c: b3:e3:f1:08:36:a5:d1:0c:ec:dd:df:4f:c4:07:68:cd:02:4f: cd:90:9f:86:0f:ae:5e:e0:98:11:aa:64:0a:84:1d:c3:10:7b: 8d:95:b2:88:f6:e2:da:bd:4b:25:9e:f3:fb:63:8e:85:03:4c: 46:69:5d:b0:d2:ac:3b:50:27:09:bb:4a:87:81:d6:dd:f5:08: ad:6b:c7:d1:eb:cc:c9:8e:f3:8b:d1:d6:38:83:5d:d7:f7:58: 61:36:61:16:9c:d5:19:07:fe:51:31:f4:c4:4a:63:62:4b:7e: 22:4d:59:35:0e:0a:67:fe:f9:55:de:67:98:e5:cd:8c:54:6b: 00:35:1e:11:db:fe:6a:64:0b:5f:2e:98:a3:18:dc:57:7d:3a: 7b:7b:bc:93:cd:52:01:e8:a4:b9:4a:22:ed:87:5c:8e:ca:86: ee:be:53:fa:23:1e:f5:6d:9c:90:84:5c:e0:00:70:49:a1:fa: a0:0e:6d:26:52:76:6e:24:e1:ec:26:bd:37:2a:6d:ee:75:15: d6:53:b0:d3:0a:33:75:82:0d:3e:2b:79:7c:aa:60:0b:e9:62: 82:51:09:de:d0:27:9c:66:9b:25:fe:b8:2b:69:07:90:55:9a: 0a:14:57:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPetXPC488mihhWWXd4mvhdhLXrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURD QTZGOThCQzAeFw0yNTA3MjEwNzM2NTNaFw0yNTA3MjQxNTA3NTNaMDMxMTAvBgNV BAMTKDExOUQ3NjQ3MDY3MTY1Njk1OUVGMDY1OTU0MkNCQjBCQTQ1MkM0MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsMDrXjmJSIrmN3AkJZm67fq1J +Aa5M2zzcFyikaw6bl78IEz66woCvCUzg65CTxi2bf+t6FzruqAuaqBYEMRUI8+n e6sIIxSnuJo56v6Pjdr2V+2jB4LLwehcZlIk5N/IQzn41mgk2ICGH05xi37B7HZo M48na6Py//og3jldhYrh+l+3Q65p6aI8KglE0HHS31wPOsoqcRMzxnvPUkBDoi8Y 16NMyiHhnCdGD91+x2axc/+s4jYOOG9IQL9afE9GD7D91KT+S1T4kU6kYQVXgqHR 0AHGe80XrPpflTeidDVVxtDnBER2O97889SQQBVnp+rJhiMHlGCoBe/RFGHtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEZ12RwZxZWlZ7wZZVCy7C6RSxB0wHwYDVR0j BBgwFoAUZYezJUoHRupu/60dwvKdXcpvmLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjcxNjBkZC1mZjgwLTRlZmEtYmNmMS1iYjc1ZDZkNGYwOGEvMC82NTg3QjMyNTRB MDc0NkVBNkVGRkFEMURDMkYyOUQ1RENBNkY5OEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURDQTZG OThCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWY3MTYwZGQtZmY4MC00ZWZhLWJj ZjEtYmI3NWQ2ZDRmMDhhLzAvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlE NURDQTZGOThCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6h+ALCZN2sUdhagotPHnCTnLPj8Qg2pdEM 7N3fT8QHaM0CT82Qn4YPrl7gmBGqZAqEHcMQe42Vsoj24tq9SyWe8/tjjoUDTEZp XbDSrDtQJwm7SoeB1t31CK1rx9HrzMmO84vR1jiDXdf3WGE2YRac1RkH/lEx9MRK Y2JLfiJNWTUOCmf++VXeZ5jlzYxUawA1HhHb/mpkC18umKMY3Fd9Ont7vJPNUgHo pLlKIu2HXI7Khu6+U/ojHvVtnJCEXOAAcEmh+qAObSZSdm4k4ewmvTcqbe51FdZT sNMKM3WCDT4reXyqYAvpYoJRCd7QJ5xmmyX+uCtpB5BVmgoUV6U= -----END CERTIFICATE-----Generated at Mon Jul 21 23:24:03 2025 by rpki-client