$ rpki-client -vvf repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft File: F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft (raw, json) Hash identifier: 9mLfEobumS9vtWV1DMtICcOz6LvuaBLtNsH2HPCrcK8= Subject key identifier: D4:23:44:9D:EB:0A:9D:CF:EC:81:B1:11:78:FE:C2:2E:6F:22:D7:73 Authority key identifier: F6:D1:AD:EF:8B:F1:34:4A:2F:5C:BD:A1:88:22:BA:85:D6:EF:6D:17 Certificate issuer: /CN=F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17 Certificate serial: 6CFB2807DC58B21EDB4B89B680C346BF2F4A9BA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft Manifest number: 0296 Signing time: Sat 06 Sep 2025 19:21:03 +0000 Manifest this update: Sat 06 Sep 2025 19:16:03 +0000 Manifest next update: Tue 09 Sep 2025 20:26:03 +0000 Files and hashes: 1: F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl (hash: kFU4JxdGNDv3BFr8y8MKt+jvRoiJtwJ8zEspOjqZ4oY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 20:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:fb:28:07:dc:58:b2:1e:db:4b:89:b6:80:c3:46:bf:2f:4a:9b:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17 Validity Not Before: Sep 6 19:16:03 2025 GMT Not After : Sep 9 20:26:03 2025 GMT Subject: CN=D423449DEB0A9DCFEC81B11178FEC22E6F22D773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f0:67:76:8a:9f:48:b0:66:da:dd:17:5f:b3: dc:5a:0a:b9:f9:36:c1:51:c5:ca:40:1e:78:b0:36: c8:e1:51:c3:0b:ab:86:ba:9a:4b:3f:99:76:2d:8f: a2:b1:13:de:7f:b2:fd:7a:5e:70:62:af:a6:23:20: e2:46:b5:17:26:c5:3e:d1:fd:03:2d:29:83:b3:59: 4b:dc:b7:8d:23:63:0c:2a:b2:d3:eb:ae:0c:4f:03: 7b:fa:b7:3b:b3:44:7d:ed:dc:25:33:f5:62:99:09: 27:ac:dd:e0:dc:b8:7d:67:cf:ab:7f:32:80:6c:1c: 7a:49:7c:86:5e:ed:06:d4:3c:8f:9b:fe:8a:1e:4d: f1:c7:ef:66:16:80:a2:48:60:a6:c8:8d:2d:c0:fd: 15:67:cc:8f:1c:13:ef:c8:8b:d3:59:67:01:c6:1b: 10:b6:e8:22:3d:1d:1f:70:b7:6b:79:7d:63:b6:03: 7f:52:1a:e3:d0:b6:d4:ae:94:85:2e:e7:0f:b8:dc: bc:dc:b8:56:d3:05:c1:c5:ab:cb:ba:93:1e:10:1b: f2:0b:88:e5:52:b2:cc:11:05:80:8e:44:fc:ab:f1: 1f:5d:27:41:1b:52:cf:d9:c4:c9:9f:6f:78:1f:00: c7:1b:bc:15:f5:21:4b:b6:9d:17:c2:b3:de:7e:35: 3c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:23:44:9D:EB:0A:9D:CF:EC:81:B1:11:78:FE:C2:2E:6F:22:D7:73 X509v3 Authority Key Identifier: keyid:F6:D1:AD:EF:8B:F1:34:4A:2F:5C:BD:A1:88:22:BA:85:D6:EF:6D:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:f5:1a:d3:42:4a:46:78:53:43:07:3d:e3:58:bd:ce:e3:12: a6:7d:45:2d:cf:eb:c8:81:66:58:ba:1d:48:3f:12:61:1c:5d: e5:2a:46:7f:b5:b0:fc:e4:56:14:40:0b:cb:ac:87:24:d5:a6: 64:54:ba:c0:c2:1f:e7:99:dd:05:98:ac:90:c2:2b:9f:2a:6a: 2f:e1:dd:ce:4d:ed:03:eb:14:31:ef:23:32:e1:f7:23:86:58: d7:cd:62:0e:69:b6:c7:84:ac:c8:12:35:e7:36:4e:a3:50:b8: 04:ff:d1:bd:d1:1b:c8:d4:45:c8:c1:c3:49:da:e6:3a:3d:54: 94:23:ef:c4:b0:6d:af:17:a9:13:c4:ea:2f:b1:69:29:c2:3a: 4c:36:a1:4c:02:7f:8b:31:44:ae:00:b7:60:74:a1:d0:66:fd: 19:d6:21:6d:da:3b:d6:0a:b6:03:bf:b9:57:e8:05:27:fd:9f: 03:bf:75:cb:ef:4d:65:2a:c9:39:7a:4a:22:32:61:75:e5:b0: da:d9:0c:1a:79:a7:9a:ef:43:e8:e4:62:ca:62:86:04:af:2c: bc:cf:1d:2d:58:30:f6:9b:ea:48:b1:4c:63:f2:f5:1a:2b:36: 7c:5e:5e:51:34:ce:2e:ee:ff:fe:7b:09:d0:bb:69:0b:22:0f: c6:8b:5d:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbPsoB9xYsh7bS4m2gMNGvy9Km6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJBODVE NkVGNkQxNzAeFw0yNTA5MDYxOTE2MDNaFw0yNTA5MDkyMDI2MDNaMDMxMTAvBgNV BAMTKEQ0MjM0NDlERUIwQTlEQ0ZFQzgxQjExMTc4RkVDMjJFNkYyMkQ3NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV8Gd2ip9IsGba3Rdfs9xaCrn5 NsFRxcpAHniwNsjhUcMLq4a6mks/mXYtj6KxE95/sv16XnBir6YjIOJGtRcmxT7R /QMtKYOzWUvct40jYwwqstPrrgxPA3v6tzuzRH3t3CUz9WKZCSes3eDcuH1nz6t/ MoBsHHpJfIZe7QbUPI+b/ooeTfHH72YWgKJIYKbIjS3A/RVnzI8cE+/Ii9NZZwHG GxC26CI9HR9wt2t5fWO2A39SGuPQttSulIUu5w+43LzcuFbTBcHFq8u6kx4QG/IL iOVSsswRBYCORPyr8R9dJ0EbUs/ZxMmfb3gfAMcbvBX1IUu2nRfCs95+NTzlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1CNEnesKnc/sgbEReP7CLm8i13MwHwYDVR0j BBgwFoAU9tGt74vxNEovXL2hiCK6hdbvbRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTEzZTdjNC03NzNmLTQ3NGMtYjA2ZC02MjYwYTMwNmEwY2EvMC9GNkQxQURFRjhC RjEzNDRBMkY1Q0JEQTE4ODIyQkE4NUQ2RUY2RDE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJBODVENkVG NkQxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTExM2U3YzQtNzczZi00NzRjLWIw NmQtNjI2MGEzMDZhMGNhLzAvRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJB ODVENkVGNkQxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALj1GtNCSkZ4U0MHPeNYvc7jEqZ9RS3P68iB Zli6HUg/EmEcXeUqRn+1sPzkVhRAC8ushyTVpmRUusDCH+eZ3QWYrJDCK58qai/h 3c5N7QPrFDHvIzLh9yOGWNfNYg5ptseErMgSNec2TqNQuAT/0b3RG8jURcjBw0na 5jo9VJQj78Swba8XqRPE6i+xaSnCOkw2oUwCf4sxRK4At2B0odBm/RnWIW3aO9YK tgO/uVfoBSf9nwO/dcvvTWUqyTl6SiIyYXXlsNrZDBp5p5rvQ+jkYspihgSvLLzP HS1YMPab6kixTGPy9RorNnxeXlE0zi7u//57CdC7aQsiD8aLXfU= -----END CERTIFICATE-----Generated at Sun Sep 7 15:36:38 2025 by rpki-client