$ rpki-client -vvf repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft File: D6FA07102C8726922074D42DFF59946144A13506.mft (raw, json) Hash identifier: gMRK2YhCOLPGz+0bub4Y829cPGN217bl2hI9mdiinJI= Subject key identifier: 9F:AE:99:56:88:3C:E4:26:9A:B0:DB:9E:BD:8E:D3:F6:B9:CD:91:B9 Authority key identifier: D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06 Certificate issuer: /CN=D6FA07102C8726922074D42DFF59946144A13506 Certificate serial: 7377990B0F20A423D4ECC9B67D885A8662DC88FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft Manifest number: 7D Signing time: Sun 07 Sep 2025 06:52:16 +0000 Manifest this update: Sun 07 Sep 2025 06:47:16 +0000 Manifest next update: Wed 10 Sep 2025 12:29:16 +0000 Files and hashes: 1: D6FA07102C8726922074D42DFF59946144A13506.crl (hash: AUIKCVVYGwxmVadwgPVgA6AeIPnhU3Ljh/sGLhRu/58=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 12:29:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:77:99:0b:0f:20:a4:23:d4:ec:c9:b6:7d:88:5a:86:62:dc:88:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6FA07102C8726922074D42DFF59946144A13506 Validity Not Before: Sep 7 06:47:16 2025 GMT Not After : Sep 10 12:29:16 2025 GMT Subject: CN=9FAE9956883CE4269AB0DB9EBD8ED3F6B9CD91B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:60:d3:fa:9c:fa:70:e3:08:fe:df:2e:e8:d2: cf:a1:b7:19:00:a9:c8:0d:59:e8:5b:d0:b4:d8:8f: 97:45:3e:ff:e5:7d:e1:c4:db:28:1f:7a:3e:f8:64: a7:8f:33:6f:12:e3:cd:4f:05:5b:4e:80:bb:1a:3d: 91:32:f2:06:eb:40:ad:4c:6e:82:9c:1b:8b:70:41: 46:7a:90:c3:9c:ed:80:ea:4c:65:95:44:5d:4a:c3: 0a:b0:7a:3f:1a:e8:11:54:e6:40:30:b0:67:a5:f2: 5e:33:33:a5:9a:ff:83:90:59:e2:d7:07:45:62:8c: cf:c1:5c:3c:b6:8f:46:80:d9:ad:8d:40:a1:6b:cf: 65:5f:b9:4f:6f:a3:7c:43:32:63:77:c1:dd:75:46: 9b:7e:ab:26:6b:96:7e:34:a3:94:94:00:08:35:93: 5e:e6:16:1a:f4:fb:f8:50:e0:9b:5d:d4:68:27:d9: 18:2b:96:79:f5:ea:5d:f4:7c:18:0d:03:e5:94:11: 21:ab:54:4e:c6:11:b5:f5:27:d0:2d:f8:ff:51:11: ba:a4:02:06:20:91:ea:97:00:b6:8d:ae:73:67:60: b1:7a:a9:34:cf:b5:94:bf:9c:ca:a1:9b:6e:6b:6b: 26:3a:fc:4b:dd:ae:a6:3d:8c:b0:a0:4e:77:6b:e0: f5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:AE:99:56:88:3C:E4:26:9A:B0:DB:9E:BD:8E:D3:F6:B9:CD:91:B9 X509v3 Authority Key Identifier: keyid:D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:dd:56:50:1d:85:4f:a8:9a:17:0a:5f:54:b6:1c:59:65:ee: 7d:c8:96:14:8e:20:11:77:f7:da:6f:d5:75:d5:c7:46:4b:8b: 09:93:5c:f4:e0:39:30:8d:64:d9:86:36:92:cf:51:09:01:2d: 96:a4:fe:9c:11:6d:26:e4:5d:26:72:d0:12:0c:42:46:f7:55: 5a:00:34:93:6d:95:1e:8f:8a:cc:c0:59:09:6d:7b:5f:a3:b0: 34:d9:b1:1c:a1:d6:fd:25:86:6e:65:7a:b5:e4:d1:24:18:63: cc:b6:0e:55:e4:4b:b6:1c:25:c2:fe:07:03:ac:8e:76:68:b2: fe:38:dd:47:31:4a:f4:51:98:ab:49:19:73:de:47:98:f8:fb: 19:fc:6d:03:ad:16:67:fb:c6:43:5a:d6:3b:f4:b7:be:90:2f: fd:00:c5:a9:24:c0:51:25:72:1b:a8:64:94:4a:fa:23:fa:6f: 2a:69:b7:f0:83:bf:6d:d6:98:56:88:7c:c6:b8:0d:00:43:8f: 29:fd:6a:f6:c5:80:2f:1b:da:c9:2e:06:52:e8:f4:5a:63:c7: c5:27:ca:a3:f8:75:5c:b2:47:45:f0:38:15:65:ee:a5:f5:93: df:5a:a3:ff:24:e7:d4:b6:4b:84:70:26:e1:1e:20:a7:0e:93: 84:67:00:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc3eZCw8gpCPU7Mm2fYhahmLciPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZGQTA3MTAyQzg3MjY5MjIwNzRENDJERkY1OTk0NjE0 NEExMzUwNjAeFw0yNTA5MDcwNjQ3MTZaFw0yNTA5MTAxMjI5MTZaMDMxMTAvBgNV BAMTKDlGQUU5OTU2ODgzQ0U0MjY5QUIwREI5RUJEOEVEM0Y2QjlDRDkxQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGYNP6nPpw4wj+3y7o0s+htxkA qcgNWehb0LTYj5dFPv/lfeHE2ygfej74ZKePM28S481PBVtOgLsaPZEy8gbrQK1M boKcG4twQUZ6kMOc7YDqTGWVRF1Kwwqwej8a6BFU5kAwsGel8l4zM6Wa/4OQWeLX B0VijM/BXDy2j0aA2a2NQKFrz2VfuU9vo3xDMmN3wd11Rpt+qyZrln40o5SUAAg1 k17mFhr0+/hQ4Jtd1Ggn2Rgrlnn16l30fBgNA+WUESGrVE7GEbX1J9At+P9REbqk AgYgkeqXALaNrnNnYLF6qTTPtZS/nMqhm25rayY6/EvdrqY9jLCgTndr4PVPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn66ZVog85CaasNuevY7T9rnNkbkwHwYDVR0j BBgwFoAU1voHECyHJpIgdNQt/1mUYUShNQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDYzYTZlNi1jYWIzLTRmMGMtODVjNy1lMDJiZDY0MWUzY2UvMC9ENkZBMDcxMDJD ODcyNjkyMjA3NEQ0MkRGRjU5OTQ2MTQ0QTEzNTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDZGQTA3MTAyQzg3MjY5MjIwNzRENDJERkY1OTk0NjE0NEEx MzUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2M2E2ZTYtY2FiMy00ZjBjLTg1 YzctZTAyYmQ2NDFlM2NlLzAvRDZGQTA3MTAyQzg3MjY5MjIwNzRENDJERkY1OTk0 NjE0NEExMzUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN7dVlAdhU+omhcKX1S2HFll7n3IlhSOIBF3 99pv1XXVx0ZLiwmTXPTgOTCNZNmGNpLPUQkBLZak/pwRbSbkXSZy0BIMQkb3VVoA NJNtlR6PiszAWQlte1+jsDTZsRyh1v0lhm5lerXk0SQYY8y2DlXkS7YcJcL+BwOs jnZosv443UcxSvRRmKtJGXPeR5j4+xn8bQOtFmf7xkNa1jv0t76QL/0AxakkwFEl chuoZJRK+iP6byppt/CDv23WmFaIfMa4DQBDjyn9avbFgC8b2skuBlLo9Fpjx8Un yqP4dVyyR0XwOBVl7qX1k99ao/8k59S2S4RwJuEeIKcOk4RnANI= -----END CERTIFICATE-----Generated at Mon Sep 8 05:09:39 2025 by rpki-client