$ rpki-client -vvf repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft File: 6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft (raw, json) Hash identifier: YZzGxb9GLEvQ1PW1Sv4zhk1aCnT1Zj7/garfd3wYc08= Subject key identifier: 40:91:74:59:8E:85:E6:19:DF:A9:7C:AA:84:CE:96:46:73:A5:BB:41 Authority key identifier: 6E:87:49:98:2F:80:EA:7E:AC:3A:4C:80:01:6F:AC:EC:04:9A:89:FB Certificate issuer: /CN=6E8749982F80EA7EAC3A4C80016FACEC049A89FB Certificate serial: 0AE23B1FCC5E6E0CEA4FF1F94857F4605BE6F186 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft Manifest number: 018B Signing time: Sun 07 Sep 2025 11:31:34 +0000 Manifest this update: Sun 07 Sep 2025 11:26:34 +0000 Manifest next update: Wed 10 Sep 2025 13:51:34 +0000 Files and hashes: 1: 6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl (hash: 3Hci/VSQJmvgfe98uwQU5LtMe9jw6lqCr5elHQIJw9g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:e2:3b:1f:cc:5e:6e:0c:ea:4f:f1:f9:48:57:f4:60:5b:e6:f1:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E8749982F80EA7EAC3A4C80016FACEC049A89FB Validity Not Before: Sep 7 11:26:34 2025 GMT Not After : Sep 10 13:51:34 2025 GMT Subject: CN=409174598E85E619DFA97CAA84CE964673A5BB41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:00:81:ef:34:4a:5b:92:4d:b3:60:18:f2:14: 17:f2:5d:28:78:3d:7e:d5:c7:59:61:27:a1:0d:d2: 39:35:05:b6:6c:87:d9:23:ef:7b:11:3b:98:65:67: 8b:d2:c0:8a:f2:1f:83:ce:61:a3:8e:39:64:f0:75: 60:3e:d0:69:d4:76:8f:81:6f:34:af:21:29:88:4b: 02:2b:8f:f5:e0:22:49:db:dc:44:9e:d8:7e:81:fd: ad:a3:26:ba:c0:df:03:50:52:25:17:82:13:79:3a: bd:4e:0a:8d:07:c2:4e:b2:b7:b6:96:bf:97:e7:66: 60:cd:49:ee:7e:29:88:45:9c:44:b5:04:d2:a2:8e: f6:64:3a:13:44:d7:3e:14:4e:2d:78:af:06:22:2d: 5b:da:79:eb:e8:a0:72:02:a3:43:7a:26:36:dc:80: 2c:f1:76:64:0a:e1:0d:12:dc:9d:32:38:6f:b6:77: ef:2e:37:71:93:c3:5f:53:53:58:f1:bb:a7:71:25: 1f:26:83:e8:b0:47:c1:b2:14:b9:99:43:e3:0e:de: 76:67:23:c1:c2:5a:d2:3b:96:53:07:fa:80:44:71: 67:90:a6:00:49:89:87:a2:d6:16:03:d9:18:d3:9e: 45:ec:0a:09:71:b8:6c:02:04:4c:98:b3:84:89:67: 80:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:91:74:59:8E:85:E6:19:DF:A9:7C:AA:84:CE:96:46:73:A5:BB:41 X509v3 Authority Key Identifier: keyid:6E:87:49:98:2F:80:EA:7E:AC:3A:4C:80:01:6F:AC:EC:04:9A:89:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:08:fb:7b:e7:b9:1a:ff:41:d4:f7:d9:ed:ec:bd:1c:bd:5f: df:e6:7f:45:4d:cf:55:c5:21:38:7d:0f:33:10:2e:b3:5a:3d: 99:23:5f:de:70:01:a8:f9:4c:fe:08:7a:4f:3f:07:58:f5:eb: e2:d0:c6:e4:2c:80:85:a8:c4:20:79:b7:33:27:7e:8c:96:75: cd:c9:b0:cc:d0:68:96:6d:58:70:ff:31:5b:ed:4a:84:2f:8e: f5:07:1c:d5:56:ca:51:6c:d9:c5:71:2f:a3:c2:7d:3d:46:3d: 15:cc:71:a8:de:ca:82:c8:d5:54:71:87:84:96:04:69:dc:fb: b9:48:b8:ce:7f:57:f0:e4:03:6c:7c:5a:d6:05:bf:f0:23:20: 44:09:06:10:28:49:33:42:0c:53:58:6e:43:05:5b:8b:47:17: ce:2e:f5:37:03:d3:17:ee:f5:fc:da:09:a0:7d:4a:ed:bd:3e: e5:90:fb:5c:d0:be:f8:33:bb:d2:fd:ba:d7:c9:db:ed:b8:fe: 24:02:51:74:47:84:35:31:2d:ed:23:bd:4b:0c:ca:5f:51:67: fa:cf:fe:4d:6b:1c:31:cb:06:c7:63:6a:5b:dd:04:f1:45:b3: 53:7f:eb:b3:72:65:48:d3:27:48:5d:cd:1d:7e:17:a8:0d:ce: 15:73:b8:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCuI7H8xebgzqT/H5SFf0YFvm8YYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFDRUMw NDlBODlGQjAeFw0yNTA5MDcxMTI2MzRaFw0yNTA5MTAxMzUxMzRaMDMxMTAvBgNV BAMTKDQwOTE3NDU5OEU4NUU2MTlERkE5N0NBQTg0Q0U5NjQ2NzNBNUJCNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfAIHvNEpbkk2zYBjyFBfyXSh4 PX7Vx1lhJ6EN0jk1BbZsh9kj73sRO5hlZ4vSwIryH4POYaOOOWTwdWA+0GnUdo+B bzSvISmISwIrj/XgIknb3ESe2H6B/a2jJrrA3wNQUiUXghN5Or1OCo0Hwk6yt7aW v5fnZmDNSe5+KYhFnES1BNKijvZkOhNE1z4UTi14rwYiLVvaeevooHICo0N6Jjbc gCzxdmQK4Q0S3J0yOG+2d+8uN3GTw19TU1jxu6dxJR8mg+iwR8GyFLmZQ+MO3nZn I8HCWtI7llMH+oBEcWeQpgBJiYei1hYD2RjTnkXsCglxuGwCBEyYs4SJZ4ATAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQJF0WY6F5hnfqXyqhM6WRnOlu0EwHwYDVR0j BBgwFoAUbodJmC+A6n6sOkyAAW+s7ASaifswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmU3ZGU5Zi1iZmQyLTQ4NWMtOGJhMi05MjRlZWQ1MmEzMDUvMC82RTg3NDk5ODJG ODBFQTdFQUMzQTRDODAwMTZGQUNFQzA0OUE4OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFDRUMwNDlB ODlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlN2RlOWYtYmZkMi00ODVjLThi YTItOTI0ZWVkNTJhMzA1LzAvNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFD RUMwNDlBODlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKkI+3vnuRr/QdT32e3svRy9X9/mf0VNz1XF ITh9DzMQLrNaPZkjX95wAaj5TP4Iek8/B1j16+LQxuQsgIWoxCB5tzMnfoyWdc3J sMzQaJZtWHD/MVvtSoQvjvUHHNVWylFs2cVxL6PCfT1GPRXMcajeyoLI1VRxh4SW BGnc+7lIuM5/V/DkA2x8WtYFv/AjIEQJBhAoSTNCDFNYbkMFW4tHF84u9TcD0xfu 9fzaCaB9Su29PuWQ+1zQvvgzu9L9utfJ2+24/iQCUXRHhDUxLe0jvUsMyl9RZ/rP /k1rHDHLBsdjalvdBPFFs1N/67NyZUjTJ0hdzR1+F6gNzhVzuPw= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:48 2025 by rpki-client