$ rpki-client -vvf repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft File: F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft (raw, json) Hash identifier: UC2PNedfFE6bih1EzfxqZD+ndqTwe+itF8UBnxg3A1M= Subject key identifier: A9:83:04:7A:3A:7C:CC:FA:6C:8C:EF:E5:B6:73:34:36:29:A5:37:42 Authority key identifier: F6:C8:A7:13:C4:45:14:84:D1:D6:7F:4E:E6:F7:7B:46:AE:E4:17:A9 Certificate issuer: /CN=F6C8A713C4451484D1D67F4EE6F77B46AEE417A9 Certificate serial: 3DFBBCDCE629D75C28BB4AB5000662DD01527460 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft Manifest number: 0198 Signing time: Sun 20 Jul 2025 09:00:35 +0000 Manifest this update: Sun 20 Jul 2025 08:55:35 +0000 Manifest next update: Wed 23 Jul 2025 16:54:35 +0000 Files and hashes: 1: F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl (hash: yDNyaRoggkVnN6QEvOgL7sXeXHxuAItvt04mAS6hbCk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 16:54:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:fb:bc:dc:e6:29:d7:5c:28:bb:4a:b5:00:06:62:dd:01:52:74:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6C8A713C4451484D1D67F4EE6F77B46AEE417A9 Validity Not Before: Jul 20 08:55:35 2025 GMT Not After : Jul 23 16:54:35 2025 GMT Subject: CN=A983047A3A7CCCFA6C8CEFE5B673343629A53742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:db:75:fb:9e:52:5c:ff:d8:28:ee:30:06:8a: f3:ae:5b:bb:c5:41:7b:14:f1:b4:c0:9c:79:df:08: 7c:89:01:6b:72:e4:a7:7d:ba:16:ab:32:a9:85:e5: 46:c0:fa:8d:81:a7:14:e4:9b:cf:c0:69:4a:f7:71: 38:9b:8e:4f:7e:b0:f2:33:75:79:e7:88:e8:b6:b9: ab:7f:ec:1e:9b:23:d7:93:2d:ef:b9:9b:7b:59:77: 58:34:6b:1d:95:2c:b4:41:bd:f0:e6:ef:9f:7f:1f: 6f:df:75:b4:ea:60:ca:9a:20:04:5f:32:b7:dd:48: 14:66:4d:6c:55:95:b0:8c:23:df:c7:1a:88:62:1f: 35:c6:8a:0f:f4:e8:86:fe:05:58:bc:b0:8d:18:b7: 27:fb:69:0e:1c:de:40:b4:38:33:ee:2e:e3:c8:d0: 46:a9:db:3b:22:70:e7:ac:ed:0f:9c:ac:c0:3a:3c: 56:14:89:15:8b:02:22:da:11:70:9f:9b:1f:15:12: fd:cf:3f:a4:eb:62:e5:9b:85:00:9d:e3:d6:63:6c: 55:22:e3:56:f7:f0:85:e7:05:28:af:a0:ba:69:2c: 95:1b:00:66:b4:e9:bf:a0:fa:ff:3f:16:0a:11:9a: 62:f1:86:6e:a6:58:7a:8f:bd:13:8d:d6:4a:90:de: 78:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:83:04:7A:3A:7C:CC:FA:6C:8C:EF:E5:B6:73:34:36:29:A5:37:42 X509v3 Authority Key Identifier: keyid:F6:C8:A7:13:C4:45:14:84:D1:D6:7F:4E:E6:F7:7B:46:AE:E4:17:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:8f:35:0c:1a:24:5e:90:56:eb:11:2c:f7:94:0c:f8:8e:d6: 6c:77:4b:87:7d:99:09:87:65:e6:b1:ef:de:c4:9e:4c:27:b4: 65:c2:7e:e5:23:3b:c7:b6:67:44:99:83:44:b2:2e:f6:2c:ef: 80:fe:a1:5e:53:fc:4e:ae:59:60:f1:85:50:5f:28:d5:8e:6c: 09:72:d9:d1:39:b4:1c:e5:16:a3:d8:cf:f8:85:14:08:93:94: 46:bc:ba:74:e9:ab:23:4e:6f:b4:2b:d9:18:7a:6c:2e:29:92: e3:76:cf:3b:b4:10:bd:62:f8:7b:26:6c:4c:0a:8b:ef:59:e7: 96:e6:fb:d7:9d:51:57:72:65:f4:56:78:59:66:b3:aa:da:af: 0e:e4:6f:83:93:ad:c2:84:61:48:49:03:38:e5:c2:aa:6a:96: d1:4f:1d:3c:c8:f2:a8:9d:3b:22:96:d1:29:a3:56:03:e5:f4: 5f:2f:52:44:31:9c:9e:62:2f:83:33:24:83:a5:43:e3:b1:d9: 88:1c:73:9c:d9:81:16:ca:06:52:26:ff:9b:62:24:13:d7:7d: 57:b7:61:4f:ff:c2:4d:a8:46:b2:83:8c:22:67:23:20:d9:5c: 18:3d:6c:60:f3:6f:71:f0:6a:f9:d7:71:ea:39:44:db:26:f1: 81:cd:87:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPfu83OYp11wou0q1AAZi3QFSdGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdCNDZB RUU0MTdBOTAeFw0yNTA3MjAwODU1MzVaFw0yNTA3MjMxNjU0MzVaMDMxMTAvBgNV BAMTKEE5ODMwNDdBM0E3Q0NDRkE2QzhDRUZFNUI2NzMzNDM2MjlBNTM3NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD23X7nlJc/9go7jAGivOuW7vF QXsU8bTAnHnfCHyJAWty5Kd9uharMqmF5UbA+o2BpxTkm8/AaUr3cTibjk9+sPIz dXnniOi2uat/7B6bI9eTLe+5m3tZd1g0ax2VLLRBvfDm759/H2/fdbTqYMqaIARf MrfdSBRmTWxVlbCMI9/HGohiHzXGig/06Ib+BVi8sI0Ytyf7aQ4c3kC0ODPuLuPI 0Eap2zsicOes7Q+crMA6PFYUiRWLAiLaEXCfmx8VEv3PP6TrYuWbhQCd49ZjbFUi 41b38IXnBSivoLppLJUbAGa06b+g+v8/FgoRmmLxhm6mWHqPvRON1kqQ3ng7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqYMEejp8zPpsjO/ltnM0NimlN0IwHwYDVR0j BBgwFoAU9sinE8RFFITR1n9O5vd7Rq7kF6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmM3ZTViMS01MTlkLTQ1NmMtYjNiNi03NTU3OTQ3MDI2NjQvMC9GNkM4QTcxM0M0 NDUxNDg0RDFENjdGNEVFNkY3N0I0NkFFRTQxN0E5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdCNDZBRUU0 MTdBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZjN2U1YjEtNTE5ZC00NTZjLWIz YjYtNzU1Nzk0NzAyNjY0LzAvRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdC NDZBRUU0MTdBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCPNQwaJF6QVusRLPeUDPiO1mx3S4d9mQmH Zeax797EnkwntGXCfuUjO8e2Z0SZg0SyLvYs74D+oV5T/E6uWWDxhVBfKNWObAly 2dE5tBzlFqPYz/iFFAiTlEa8unTpqyNOb7Qr2Rh6bC4pkuN2zzu0EL1i+HsmbEwK i+9Z55bm+9edUVdyZfRWeFlms6rarw7kb4OTrcKEYUhJAzjlwqpqltFPHTzI8qid OyKW0SmjVgPl9F8vUkQxnJ5iL4MzJIOlQ+Ox2Ygcc5zZgRbKBlIm/5tiJBPXfVe3 YU//wk2oRrKDjCJnIyDZXBg9bGDzb3HwavnXceo5RNsm8YHNh/w= -----END CERTIFICATE-----Generated at Tue Jul 22 12:23:11 2025 by rpki-client