$ rpki-client -vvf repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft File: D6FA07102C8726922074D42DFF59946144A13506.mft (raw, json) Hash identifier: KCTEb1BfNxuPh6hYpAJizx4A/TefqsCl9/JNsmgmZA0= Subject key identifier: 38:32:B6:FF:40:81:99:5C:4E:63:BE:21:5D:F1:50:80:C7:06:6D:4B Authority key identifier: D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06 Certificate issuer: /CN=D6FA07102C8726922074D42DFF59946144A13506 Certificate serial: 73981403FB0C0AE26AEB6907F785040821DF7CA4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft Manifest number: 67 Signing time: Sat 19 Jul 2025 00:32:16 +0000 Manifest this update: Sat 19 Jul 2025 00:27:16 +0000 Manifest next update: Tue 22 Jul 2025 10:06:16 +0000 Files and hashes: 1: D6FA07102C8726922074D42DFF59946144A13506.crl (hash: jjnMkrH8MOtXwL8dD1LEgdbPBTUl0aWldMe9Jz+/E+U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 10:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:98:14:03:fb:0c:0a:e2:6a:eb:69:07:f7:85:04:08:21:df:7c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6FA07102C8726922074D42DFF59946144A13506 Validity Not Before: Jul 19 00:27:16 2025 GMT Not After : Jul 22 10:06:16 2025 GMT Subject: CN=3832B6FF4081995C4E63BE215DF15080C7066D4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:93:39:d8:4a:4e:a7:eb:d6:b4:24:b9:5e:8d: f3:e2:d6:34:67:8b:10:e5:91:5e:1e:54:36:72:c0: b4:c1:12:ae:6f:4c:67:b0:89:f1:75:82:65:1c:ff: b7:af:07:94:ac:1e:a9:fb:0e:47:fe:2b:0c:67:9b: a3:15:bc:c7:05:51:a9:a3:0d:2a:ea:f1:17:6a:2a: 96:3e:bc:6c:82:81:e2:dc:75:8b:e8:58:bb:37:fb: df:e6:fc:52:4a:60:cb:c4:3c:20:64:b6:30:71:07: b4:f0:a2:32:2b:de:10:9f:b6:d2:19:f6:cd:3d:05: 60:bc:c0:7b:0b:b5:83:6e:98:6c:15:eb:89:3c:0c: 04:84:51:7c:29:1c:18:93:d2:0c:eb:5d:60:9a:34: 27:56:f1:8e:76:98:3a:f2:de:af:7a:83:78:72:80: 69:1f:b2:11:e8:4e:a8:76:c8:50:9b:f7:38:fc:f0: 1d:2c:05:3f:62:64:07:75:9a:40:e7:dd:b5:34:66: 13:64:a3:08:b3:f8:82:12:38:75:83:4c:bd:c7:c6: 16:a6:06:7c:14:a4:57:8f:c5:ef:ca:ca:c4:3c:27: 3c:64:07:4e:1d:f3:04:ee:d4:75:c0:bd:dd:ab:1e: 67:fd:20:e1:75:9b:23:f5:77:d7:95:05:81:2e:bd: e2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:32:B6:FF:40:81:99:5C:4E:63:BE:21:5D:F1:50:80:C7:06:6D:4B X509v3 Authority Key Identifier: keyid:D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e5:87:e8:96:43:7a:cb:7d:6f:fa:79:11:c5:bd:29:8f:51:07: d0:8f:a9:20:48:e6:90:7c:03:fd:f5:1a:fc:82:81:77:4f:33: cf:cb:2e:7f:82:08:35:d5:61:21:a0:30:d8:42:78:0c:8f:11: 90:3d:d1:b2:b6:6b:83:77:a1:68:1c:fa:77:fb:66:fa:1e:32: c5:60:a3:ca:30:c2:fd:cc:96:b0:6a:27:4f:97:4b:ec:83:92: e0:15:3c:35:de:3e:4e:7a:8a:d2:cb:cc:e8:af:e2:54:61:b8: 98:09:3b:a4:b5:bc:6a:84:8e:aa:5a:42:e9:a0:82:23:65:1c: c7:48:c9:c8:ac:81:a2:c6:e5:c8:96:a1:f4:49:5f:fe:bc:23: 9d:3a:f1:15:10:a2:9e:51:4e:c0:89:bc:0e:04:aa:1b:5f:9a: b8:80:7e:80:16:44:ae:d2:c8:d1:f1:ae:f4:dd:a6:a6:f8:4d: c4:b1:d4:1f:ba:42:58:00:03:26:5a:81:77:9a:46:86:fd:18: 49:a7:78:7e:2a:b8:84:03:23:9e:c5:31:be:5d:34:27:46:39: ec:1b:78:57:39:46:02:7a:55:2b:4b:ae:44:a7:02:f2:f1:3c: 69:c8:34:9e:4f:70:14:74:46:ed:21:90:9e:34:d9:4e:41:b0: 30:f8:f3:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc5gUA/sMCuJq62kH94UECCHffKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZGQTA3MTAyQzg3MjY5MjIwNzRENDJERkY1OTk0NjE0 NEExMzUwNjAeFw0yNTA3MTkwMDI3MTZaFw0yNTA3MjIxMDA2MTZaMDMxMTAvBgNV BAMTKDM4MzJCNkZGNDA4MTk5NUM0RTYzQkUyMTVERjE1MDgwQzcwNjZENEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMkznYSk6n69a0JLlejfPi1jRn ixDlkV4eVDZywLTBEq5vTGewifF1gmUc/7evB5SsHqn7Dkf+Kwxnm6MVvMcFUamj DSrq8RdqKpY+vGyCgeLcdYvoWLs3+9/m/FJKYMvEPCBktjBxB7TwojIr3hCfttIZ 9s09BWC8wHsLtYNumGwV64k8DASEUXwpHBiT0gzrXWCaNCdW8Y52mDry3q96g3hy gGkfshHoTqh2yFCb9zj88B0sBT9iZAd1mkDn3bU0ZhNkowiz+IISOHWDTL3Hxham BnwUpFePxe/KysQ8JzxkB04d8wTu1HXAvd2rHmf9IOF1myP1d9eVBYEuveL9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUODK2/0CBmVxOY74hXfFQgMcGbUswHwYDVR0j BBgwFoAU1voHECyHJpIgdNQt/1mUYUShNQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDYzYTZlNi1jYWIzLTRmMGMtODVjNy1lMDJiZDY0MWUzY2UvMC9ENkZBMDcxMDJD ODcyNjkyMjA3NEQ0MkRGRjU5OTQ2MTQ0QTEzNTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDZGQTA3MTAyQzg3MjY5MjIwNzRENDJERkY1OTk0NjE0NEEx MzUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2M2E2ZTYtY2FiMy00ZjBjLTg1 YzctZTAyYmQ2NDFlM2NlLzAvRDZGQTA3MTAyQzg3MjY5MjIwNzRENDJERkY1OTk0 NjE0NEExMzUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOWH6JZDest9b/p5EcW9KY9RB9CPqSBI5pB8 A/31GvyCgXdPM8/LLn+CCDXVYSGgMNhCeAyPEZA90bK2a4N3oWgc+nf7ZvoeMsVg o8owwv3MlrBqJ0+XS+yDkuAVPDXePk56itLLzOiv4lRhuJgJO6S1vGqEjqpaQumg giNlHMdIycisgaLG5ciWofRJX/68I5068RUQop5RTsCJvA4EqhtfmriAfoAWRK7S yNHxrvTdpqb4TcSx1B+6QlgAAyZagXeaRob9GEmneH4quIQDI57FMb5dNCdGOewb eFc5RgJ6VStLrkSnAvLxPGnINJ5PcBR0Ru0hkJ402U5BsDD4854= -----END CERTIFICATE-----Generated at Mon Jul 21 10:53:15 2025 by rpki-client