$ rpki-client -vvf repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.mft File: C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.mft (raw, json) Hash identifier: vQ6Ahqz2EF7QNflTRl8I6F3/e7UXvHSn6muE9EII4i4= Subject key identifier: 84:4E:F0:80:81:81:31:D4:E1:6C:16:87:01:7A:57:0C:0F:35:A0:37 Authority key identifier: C6:E9:3E:AA:6C:14:3C:47:BB:6C:1F:02:2B:52:4F:9C:08:9D:B6:F0 Certificate issuer: /CN=C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0 Certificate serial: 4C23428AB59B03FD024743B9DB52C5A707B5DE74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.mft Manifest number: 0433 Signing time: Tue 03 Jun 2025 21:26:43 +0000 Manifest this update: Tue 03 Jun 2025 21:21:43 +0000 Manifest next update: Sat 07 Jun 2025 09:24:43 +0000 Files and hashes: 1: C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.crl (hash: ivIRDI1tpCcocrjm12bnUFd0Pn+nfQdCYGEq0v/OoDw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.crl rsync://repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 09:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:23:42:8a:b5:9b:03:fd:02:47:43:b9:db:52:c5:a7:07:b5:de:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0 Validity Not Before: Jun 3 21:21:43 2025 GMT Not After : Jun 7 09:24:43 2025 GMT Subject: CN=844EF080818131D4E16C1687017A570C0F35A037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:45:6f:ec:c6:a1:ad:d1:0d:8a:db:47:54:8e: 9c:9e:9b:cf:d3:92:af:96:83:0c:6b:71:c5:eb:d9: 01:7e:e3:38:82:eb:2b:62:7b:c4:69:71:8b:a6:45: eb:43:5c:87:3c:67:25:3e:59:33:f7:cd:c0:94:2e: 89:60:66:9d:05:ed:51:bf:38:e7:d2:75:13:dd:32: 84:6e:d5:4a:17:b9:b7:7a:76:05:70:c8:ab:94:77: cd:bc:3b:2a:92:f9:15:0f:9c:5a:b7:c0:dd:bc:ac: 47:1f:90:c4:31:9c:19:48:59:05:ce:8f:ac:7a:47: 64:20:a3:93:c3:7e:94:4e:c6:3a:e5:d6:97:9d:57: be:fc:c6:8b:a1:7d:18:06:c9:5f:57:a9:a1:48:a4: 42:38:b0:8c:bd:9d:fa:34:5f:9a:c5:af:71:d0:e7: bf:af:61:a6:2c:0b:04:4e:da:80:ce:7f:8a:35:aa: 95:5a:a7:54:91:13:fd:ba:9d:43:a7:66:a4:0a:5f: 69:1b:ae:ee:9d:85:69:e3:67:63:c5:b5:d9:ab:06: 59:c8:73:88:56:3e:73:fd:aa:55:1c:a4:4b:0b:db: 67:32:35:07:57:b6:46:21:df:ae:b7:26:b9:f8:64: e5:09:8b:50:23:28:9f:c3:6d:89:0e:2f:15:9b:a7: e1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4E:F0:80:81:81:31:D4:E1:6C:16:87:01:7A:57:0C:0F:35:A0:37 X509v3 Authority Key Identifier: keyid:C6:E9:3E:AA:6C:14:3C:47:BB:6C:1F:02:2B:52:4F:9C:08:9D:B6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:08:5a:0a:b2:e6:20:57:b5:79:d6:cc:c1:a7:c1:59:23:21: ee:03:7e:a6:18:25:83:50:27:56:4e:c0:28:f7:e6:cc:b0:8b: 83:13:37:54:87:ac:90:dc:0e:83:8d:6f:e2:b6:41:d4:b5:29: 59:20:1d:4c:5e:e7:c9:f1:11:a0:9a:87:cb:94:cd:b7:05:67: 8c:b1:5f:ef:71:5b:89:6e:71:05:9c:44:74:ff:6e:87:6c:ce: 4f:f8:62:a4:74:7c:b3:02:af:23:c7:25:60:0d:57:f7:ba:d4: a2:24:82:f2:03:6a:ec:34:4f:bf:38:99:58:0c:67:50:9e:38: 4a:1f:56:48:a2:f7:00:6b:59:54:e2:14:db:1d:db:30:3a:c0: 91:ce:37:7a:9f:9d:5a:be:ef:68:73:7d:82:90:51:69:87:b9: 46:96:08:e2:36:fc:e0:62:72:90:ef:c1:77:ed:92:02:35:a8: 60:93:8c:07:62:3b:92:bd:f1:64:b4:57:8e:3d:3f:c3:97:95: b5:92:fc:63:ff:76:0c:45:15:e5:7e:74:fd:98:e7:46:55:1a: cf:a0:c0:7f:61:b7:97:f5:a8:bd:e1:f4:62:06:d2:73:ca:35: 24:4a:3e:f9:31:b7:ca:35:c0:b5:7f:61:a4:53:eb:ff:ba:8f: 77:4a:ce:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTCNCirWbA/0CR0O521LFpwe13nQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZFOTNFQUE2QzE0M0M0N0JCNkMxRjAyMkI1MjRGOUMw ODlEQjZGMDAeFw0yNTA2MDMyMTIxNDNaFw0yNTA2MDcwOTI0NDNaMDMxMTAvBgNV BAMTKDg0NEVGMDgwODE4MTMxRDRFMTZDMTY4NzAxN0E1NzBDMEYzNUEwMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyRW/sxqGt0Q2K20dUjpyem8/T kq+WgwxrccXr2QF+4ziC6ytie8RpcYumRetDXIc8ZyU+WTP3zcCULolgZp0F7VG/ OOfSdRPdMoRu1UoXubd6dgVwyKuUd828OyqS+RUPnFq3wN28rEcfkMQxnBlIWQXO j6x6R2Qgo5PDfpROxjrl1pedV778xouhfRgGyV9XqaFIpEI4sIy9nfo0X5rFr3HQ 57+vYaYsCwRO2oDOf4o1qpVap1SRE/26nUOnZqQKX2kbru6dhWnjZ2PFtdmrBlnI c4hWPnP9qlUcpEsL22cyNQdXtkYh3663Jrn4ZOUJi1AjKJ/DbYkOLxWbp+ErAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhE7wgIGBMdThbBaHAXpXDA81oDcwHwYDVR0j BBgwFoAUxuk+qmwUPEe7bB8CK1JPnAidtvAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmE2YmNhOC0zNzQxLTQ0ZWYtOGE1Zi0wZTc2YjgwZDQxNDYvMC9DNkU5M0VBQTZD MTQzQzQ3QkI2QzFGMDIyQjUyNEY5QzA4OURCNkYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzZFOTNFQUE2QzE0M0M0N0JCNkMxRjAyMkI1MjRGOUMwODlE QjZGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZhNmJjYTgtMzc0MS00NGVmLThh NWYtMGU3NmI4MGQ0MTQ2LzAvQzZFOTNFQUE2QzE0M0M0N0JCNkMxRjAyMkI1MjRG OUMwODlEQjZGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKoIWgqy5iBXtXnWzMGnwVkjIe4DfqYYJYNQ J1ZOwCj35sywi4MTN1SHrJDcDoONb+K2QdS1KVkgHUxe58nxEaCah8uUzbcFZ4yx X+9xW4lucQWcRHT/bodszk/4YqR0fLMCryPHJWANV/e61KIkgvIDauw0T784mVgM Z1CeOEofVkii9wBrWVTiFNsd2zA6wJHON3qfnVq+72hzfYKQUWmHuUaWCOI2/OBi cpDvwXftkgI1qGCTjAdiO5K98WS0V449P8OXlbWS/GP/dgxFFeV+dP2Y50ZVGs+g wH9ht5f1qL3h9GIG0nPKNSRKPvkxt8o1wLV/YaRT6/+6j3dKzs8= -----END CERTIFICATE-----Generated at Thu Jun 5 18:19:01 2025 by rpki-client