$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft File: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft (raw, json) Hash identifier: wfz6TMQ7czTk1Rg9w29eGYKzD+wk2WdLNt2HyELFhiE= Subject key identifier: 0D:C7:3B:44:B4:77:8D:CE:9A:67:F7:32:07:11:33:89:0E:82:2B:15 Authority key identifier: 6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 Certificate issuer: /CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Certificate serial: 5D94B6C267C284A25D0421913EE88CBC57B91840 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft Manifest number: 02E8 Signing time: Sun 20 Jul 2025 20:51:27 +0000 Manifest this update: Sun 20 Jul 2025 20:46:27 +0000 Manifest next update: Thu 24 Jul 2025 00:21:27 +0000 Files and hashes: 1: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl (hash: uvZB0WmuN3yRVYW0JW03WmIv1ZRUN7lIZft9OwltiXk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:94:b6:c2:67:c2:84:a2:5d:04:21:91:3e:e8:8c:bc:57:b9:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Validity Not Before: Jul 20 20:46:27 2025 GMT Not After : Jul 24 00:21:27 2025 GMT Subject: CN=0DC73B44B4778DCE9A67F732071133890E822B15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:46:02:7f:f5:a3:66:38:2c:3e:5d:87:a2:6e: 19:dc:a0:5a:a9:26:6b:26:84:66:7b:45:ac:a7:66: f0:d5:5c:df:0d:7f:a6:ad:fc:45:db:97:a2:85:85: d9:83:d8:75:c8:fc:94:ea:0c:7f:56:0a:69:64:bc: aa:84:59:9d:5b:41:fe:eb:a4:ef:35:cb:8f:a3:4e: 74:72:75:74:68:0f:db:74:c5:52:3c:58:5e:e1:53: 1a:d5:81:f5:0a:00:5c:25:f2:cd:fb:38:18:59:f4: 85:aa:e6:31:98:e7:32:ef:89:42:a2:42:0a:8e:92: 71:07:6f:a3:be:43:ba:5c:54:42:45:99:57:f6:97: 4b:28:23:e9:75:de:44:ce:a3:1d:db:8a:05:bd:0a: 0a:2f:c7:8d:47:6d:42:f4:65:47:ad:f2:16:5f:bd: 49:2a:08:b3:0e:58:30:68:c1:f4:fc:f6:09:6c:dc: fb:9f:72:58:67:12:73:bb:50:7c:03:94:e7:ef:bb: c9:2e:6a:be:44:40:b5:5b:da:25:a7:bf:20:4a:bc: 4c:e3:e9:e2:6f:ce:b2:09:7b:d9:fb:31:cf:96:b9: f9:e9:49:68:0c:11:1f:65:8b:4d:69:d0:94:04:e4: 13:60:b8:03:b6:be:09:87:a4:27:58:67:04:37:d5: 5b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C7:3B:44:B4:77:8D:CE:9A:67:F7:32:07:11:33:89:0E:82:2B:15 X509v3 Authority Key Identifier: keyid:6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:14:66:4a:ff:63:3d:be:55:df:d8:31:21:19:5b:4f:a6:9d: a8:f4:c1:82:56:5e:23:26:65:b6:28:d9:63:3b:84:e8:e2:38: 74:03:6f:3b:9f:c8:11:b0:06:ca:f2:80:8d:4a:17:3b:a8:d8: e8:ce:ca:97:d0:38:7e:a5:fe:f3:18:37:c5:71:46:5e:75:64: 7a:f2:2c:cb:b0:05:1f:ee:fe:8f:be:f9:cb:bf:d5:cd:f7:44: 11:31:4a:24:19:3a:41:b8:e1:dc:25:13:f9:df:c3:12:04:8e: 91:42:81:7a:04:f5:ab:d0:3d:45:65:1a:ac:d6:34:a7:bc:2b: e9:b3:d5:b3:b4:53:47:a6:e8:18:37:e9:33:07:bd:92:47:e8: da:87:61:3f:82:ee:d5:82:5c:c4:3a:c8:3b:dd:a1:10:e7:6a: 02:d6:fa:e1:7b:06:7b:1c:3c:a8:4b:84:d9:28:1f:25:dd:b3: 00:b1:23:85:b5:9c:50:1f:bc:8e:a8:a1:ff:da:0d:cf:7f:77: 37:dc:9c:88:e9:d1:2c:0e:cd:8e:ca:44:18:b9:36:75:5d:34: 21:ce:6d:c5:b1:65:12:5d:73:2f:c7:d1:02:43:d0:db:1d:0e: bc:5d:dc:2f:6a:8d:3a:bb:a5:53:24:77:ad:a0:36:e3:e4:9b: 9a:2c:ce:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXZS2wmfChKJdBCGRPuiMvFe5GEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2MDAw RjI1NjFGNzAeFw0yNTA3MjAyMDQ2MjdaFw0yNTA3MjQwMDIxMjdaMDMxMTAvBgNV BAMTKDBEQzczQjQ0QjQ3NzhEQ0U5QTY3RjczMjA3MTEzMzg5MEU4MjJCMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdRgJ/9aNmOCw+XYeibhncoFqp JmsmhGZ7RaynZvDVXN8Nf6at/EXbl6KFhdmD2HXI/JTqDH9WCmlkvKqEWZ1bQf7r pO81y4+jTnRydXRoD9t0xVI8WF7hUxrVgfUKAFwl8s37OBhZ9IWq5jGY5zLviUKi QgqOknEHb6O+Q7pcVEJFmVf2l0soI+l13kTOox3bigW9Cgovx41HbUL0ZUet8hZf vUkqCLMOWDBowfT89gls3PufclhnEnO7UHwDlOfvu8kuar5EQLVb2iWnvyBKvEzj 6eJvzrIJe9n7Mc+WufnpSWgMER9li01p0JQE5BNguAO2vgmHpCdYZwQ31VtfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDcc7RLR3jc6aZ/cyBxEziQ6CKxUwHwYDVR0j BBgwFoAUbeqbJ17M+5IOCoTQ0VjGAA8lYfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWI3N2QxZS0xNTg1LTQ2MDQtYjZiMS0wNzFmMGEyOTQwYzQvMC82REVBOUIyNzVF Q0NGQjkyMEUwQTg0RDBEMTU4QzYwMDBGMjU2MUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2MDAwRjI1 NjFGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiNzdkMWUtMTU4NS00NjA0LWI2 YjEtMDcxZjBhMjk0MGM0LzAvNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2 MDAwRjI1NjFGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwUZkr/Yz2+Vd/YMSEZW0+mnaj0wYJWXiMm ZbYo2WM7hOjiOHQDbzufyBGwBsrygI1KFzuo2OjOypfQOH6l/vMYN8VxRl51ZHry LMuwBR/u/o+++cu/1c33RBExSiQZOkG44dwlE/nfwxIEjpFCgXoE9avQPUVlGqzW NKe8K+mz1bO0U0em6Bg36TMHvZJH6NqHYT+C7tWCXMQ6yDvdoRDnagLW+uF7Bnsc PKhLhNkoHyXdswCxI4W1nFAfvI6oof/aDc9/dzfcnIjp0SwOzY7KRBi5NnVdNCHO bcWxZRJdcy/H0QJD0NsdDrxd3C9qjTq7pVMkd62gNuPkm5oszrQ= -----END CERTIFICATE-----Generated at Mon Jul 21 12:39:10 2025 by rpki-client