$ rpki-client -vvf repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft File: 6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft (raw, json) Hash identifier: jEHibM74MknmoHiL8lNHvp5kAkz4a8LldRwRWdVKiS0= Subject key identifier: 5E:3A:70:05:4C:5E:12:BD:9B:55:D9:34:81:48:F8:46:4C:FB:CC:97 Authority key identifier: 6E:87:49:98:2F:80:EA:7E:AC:3A:4C:80:01:6F:AC:EC:04:9A:89:FB Certificate issuer: /CN=6E8749982F80EA7EAC3A4C80016FACEC049A89FB Certificate serial: 6346E30488A42B6C98BA9D34FF4C5B47E0C6C7F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft Manifest number: 0161 Signing time: Wed 04 Jun 2025 19:01:45 +0000 Manifest this update: Wed 04 Jun 2025 18:56:45 +0000 Manifest next update: Sat 07 Jun 2025 19:32:45 +0000 Files and hashes: 1: 6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl (hash: hwLKFJSOvBQUoIMZYSiRKN1pFFApRvWC7R2L8wLrxOk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 19:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:46:e3:04:88:a4:2b:6c:98:ba:9d:34:ff:4c:5b:47:e0:c6:c7:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E8749982F80EA7EAC3A4C80016FACEC049A89FB Validity Not Before: Jun 4 18:56:45 2025 GMT Not After : Jun 7 19:32:45 2025 GMT Subject: CN=5E3A70054C5E12BD9B55D9348148F8464CFBCC97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:92:c6:c9:ff:25:bf:4d:25:f1:a8:2c:f1:5f: 71:f1:a1:cf:77:5e:9f:4a:c0:7c:2c:7b:cd:e1:9c: 8d:3c:cf:ae:3d:9a:0a:48:f8:b9:e4:a7:f0:fc:0f: 52:1d:26:f4:68:6c:00:a5:b6:10:4f:e2:6a:d2:ef: 2a:4b:91:88:84:1c:6a:18:0d:dd:26:17:b0:0d:71: 1f:9d:92:6a:28:da:cc:d1:b1:96:93:c2:cf:cc:96: eb:c9:7e:86:35:b4:e3:33:14:3f:58:fe:1f:e5:98: 2b:7f:dd:5f:65:1c:81:91:81:8c:f5:94:e9:21:ac: f9:67:66:a9:4d:96:ee:bc:df:e9:e3:3a:8b:8a:4d: e8:f8:c6:a1:87:05:77:f6:2f:11:d3:a2:84:c4:c3: 56:eb:aa:53:b0:45:e4:b5:68:fc:fe:7c:21:6a:9e: a7:f0:3f:59:20:85:02:83:35:6e:ba:66:79:4c:3d: 47:7f:30:aa:f3:9e:7c:73:cd:06:ae:55:8d:72:bf: 0c:21:72:a6:77:d2:6e:c0:e1:ed:a5:d7:79:cd:a9: dc:47:9f:9d:3f:8a:c6:8c:88:29:c2:e4:78:e8:d7: bd:d8:98:b0:fd:ce:e5:63:b7:95:f9:a3:53:44:9a: 53:c5:0c:89:51:c8:cd:ea:df:75:80:33:09:24:32: 1b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:3A:70:05:4C:5E:12:BD:9B:55:D9:34:81:48:F8:46:4C:FB:CC:97 X509v3 Authority Key Identifier: keyid:6E:87:49:98:2F:80:EA:7E:AC:3A:4C:80:01:6F:AC:EC:04:9A:89:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:e6:b6:e3:3d:4d:e3:bb:04:f2:f0:00:e6:9f:4b:69:6e:83: c0:24:b3:d1:d2:5c:f2:79:13:c6:dc:a3:df:20:fd:3e:f1:1f: 45:93:c1:d9:55:62:db:da:4f:a9:44:7b:8b:1a:90:e1:30:77: 74:b4:02:16:d6:60:e6:81:84:3b:32:63:94:7e:7d:11:d8:32: d3:41:29:3b:2c:c1:2e:04:c9:2c:5a:01:f5:53:f4:71:ab:dc: 0e:d3:4b:f0:c2:e0:47:68:75:46:5a:85:36:ac:b8:f7:e5:be: be:96:9c:da:bb:8b:3e:28:28:8f:16:a1:60:94:2c:8b:dc:71: 61:08:44:a3:8b:45:c4:ae:0b:b4:20:61:d3:3f:72:87:42:72: 1f:91:b6:f4:e0:f1:e1:a2:6b:c6:5d:ff:03:52:8e:8b:08:40: 8f:32:c7:03:8b:60:7f:14:39:16:3b:1b:e6:3a:39:e8:01:53: e0:1c:75:7a:0c:18:47:82:99:05:96:b4:d2:b0:0a:fe:49:c6: 6f:be:9b:ea:6d:5e:3e:b1:ea:4d:cf:2b:93:a3:8c:44:60:ce: 80:cf:79:4a:64:05:6a:af:16:7f:10:33:9e:10:63:7d:7b:9c: 75:04:c0:87:ee:a3:01:30:3c:92:1a:86:ca:3b:0a:82:64:55: 62:f0:83:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY0bjBIikK2yYup00/0xbR+DGx/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFDRUMw NDlBODlGQjAeFw0yNTA2MDQxODU2NDVaFw0yNTA2MDcxOTMyNDVaMDMxMTAvBgNV BAMTKDVFM0E3MDA1NEM1RTEyQkQ5QjU1RDkzNDgxNDhGODQ2NENGQkNDOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVksbJ/yW/TSXxqCzxX3Hxoc93 Xp9KwHwse83hnI08z649mgpI+Lnkp/D8D1IdJvRobAClthBP4mrS7ypLkYiEHGoY Dd0mF7ANcR+dkmoo2szRsZaTws/MluvJfoY1tOMzFD9Y/h/lmCt/3V9lHIGRgYz1 lOkhrPlnZqlNlu683+njOouKTej4xqGHBXf2LxHTooTEw1brqlOwReS1aPz+fCFq nqfwP1kghQKDNW66ZnlMPUd/MKrznnxzzQauVY1yvwwhcqZ30m7A4e2l13nNqdxH n50/isaMiCnC5Hjo173YmLD9zuVjt5X5o1NEmlPFDIlRyM3q33WAMwkkMhthAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXjpwBUxeEr2bVdk0gUj4Rkz7zJcwHwYDVR0j BBgwFoAUbodJmC+A6n6sOkyAAW+s7ASaifswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmU3ZGU5Zi1iZmQyLTQ4NWMtOGJhMi05MjRlZWQ1MmEzMDUvMC82RTg3NDk5ODJG ODBFQTdFQUMzQTRDODAwMTZGQUNFQzA0OUE4OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFDRUMwNDlB ODlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlN2RlOWYtYmZkMi00ODVjLThi YTItOTI0ZWVkNTJhMzA1LzAvNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFD RUMwNDlBODlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXmtuM9TeO7BPLwAOafS2lug8Aks9HSXPJ5 E8bco98g/T7xH0WTwdlVYtvaT6lEe4sakOEwd3S0AhbWYOaBhDsyY5R+fRHYMtNB KTsswS4EySxaAfVT9HGr3A7TS/DC4EdodUZahTasuPflvr6WnNq7iz4oKI8WoWCU LIvccWEIRKOLRcSuC7QgYdM/codCch+RtvTg8eGia8Zd/wNSjosIQI8yxwOLYH8U ORY7G+Y6OegBU+AcdXoMGEeCmQWWtNKwCv5Jxm++m+ptXj6x6k3PK5OjjERgzoDP eUpkBWqvFn8QM54QY317nHUEwIfuowEwPJIahso7CoJkVWLwg4w= -----END CERTIFICATE-----Generated at Thu Jun 5 18:19:15 2025 by rpki-client