$ rpki-client -vvf repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft File: F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft (raw, json) Hash identifier: mhKso+VguGDKrFdNbicihzU+xzLmQ1p6vV1MkCvspMk= Subject key identifier: 5B:07:C7:DE:45:14:D0:A0:4D:42:5E:AB:C0:BD:CE:A3:A4:55:63:B7 Authority key identifier: F6:D1:AD:EF:8B:F1:34:4A:2F:5C:BD:A1:88:22:BA:85:D6:EF:6D:17 Certificate issuer: /CN=F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17 Certificate serial: 4A72307A6982BA349E23F2CC944C9E31915E312C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft Manifest number: 026E Signing time: Sat 07 Jun 2025 12:50:59 +0000 Manifest this update: Sat 07 Jun 2025 12:45:59 +0000 Manifest next update: Tue 10 Jun 2025 18:36:59 +0000 Files and hashes: 1: F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl (hash: Iz5lK+862S6wWXgkpUjrGXtDqMlDLPJcPPGtnJKkMxY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 18:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:72:30:7a:69:82:ba:34:9e:23:f2:cc:94:4c:9e:31:91:5e:31:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17 Validity Not Before: Jun 7 12:45:59 2025 GMT Not After : Jun 10 18:36:59 2025 GMT Subject: CN=5B07C7DE4514D0A04D425EABC0BDCEA3A45563B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ed:29:6c:c3:b9:88:2a:6b:47:c1:09:bd:8c: 89:4b:c1:89:db:09:2a:46:1f:48:fe:67:19:9d:4f: 33:9b:ec:d6:d4:de:f5:3d:67:b6:4d:cb:11:ae:82: 8b:98:3c:fc:5b:de:79:50:ee:ad:2d:e3:ca:17:76: ca:21:2a:42:86:25:89:e7:e1:fa:e3:db:2e:27:74: 63:52:30:16:dd:71:67:42:83:1f:a3:c8:85:ec:cf: 19:58:73:df:8e:9c:5c:50:57:7a:3c:39:91:56:fc: 0e:cb:0c:03:4e:1b:89:90:85:5b:03:07:fa:38:7f: 46:5a:d5:42:88:c1:1d:d6:20:9a:55:19:54:c4:57: 73:ad:91:ec:30:8a:31:03:24:d7:ca:12:da:b8:f7: 29:d0:cb:98:6e:46:f8:5c:7e:fb:35:02:ba:7d:5d: c9:1f:00:28:12:d1:86:64:f7:47:20:8c:f3:c3:ea: 53:3c:bc:f1:8d:93:f3:9e:e2:a0:d4:a1:e8:46:57: 6c:b5:a7:01:63:11:f5:b0:99:04:da:8f:9e:8c:d7: ca:b4:ae:89:90:15:50:af:2d:01:61:c2:bd:6e:f0: 5b:15:70:fd:01:e1:4f:a9:12:10:99:24:53:e9:2a: 27:f6:1a:d4:54:1f:40:d0:68:b2:10:04:6e:cd:7a: 59:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:07:C7:DE:45:14:D0:A0:4D:42:5E:AB:C0:BD:CE:A3:A4:55:63:B7 X509v3 Authority Key Identifier: keyid:F6:D1:AD:EF:8B:F1:34:4A:2F:5C:BD:A1:88:22:BA:85:D6:EF:6D:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:f7:e0:f1:df:fd:2a:67:aa:22:81:3e:1f:6c:0c:3f:27:a9: 9e:a7:73:0c:0c:21:5b:6d:f8:ab:03:6a:bb:19:25:37:44:7b: 44:e8:0a:f6:f1:61:9e:8a:b2:3b:a0:70:58:60:c2:bd:0a:36: 50:c7:d8:1f:05:77:21:62:8f:1f:cc:c9:22:be:93:49:0f:c0: 93:eb:04:70:a9:a8:51:bb:9e:fb:38:8c:68:f1:91:77:8d:0e: d1:61:29:f7:6a:3f:82:3b:35:46:2e:8d:23:e6:33:61:4d:03: ad:14:b0:ca:c1:6f:be:02:e6:2a:e7:4f:e7:c6:5c:3e:87:58: 31:d9:7a:08:c5:64:35:5d:3b:76:17:45:8f:5b:82:29:41:9e: 38:bb:d0:e1:df:82:f0:29:fe:50:2b:8c:8b:6a:8c:ef:9f:e0: 25:63:cd:86:2e:b4:3c:91:17:96:4f:8f:8f:98:58:22:3d:66: f6:96:a0:54:3d:fd:b2:eb:c1:18:3b:65:63:fa:12:76:b2:ef: 19:c1:95:9b:76:32:9f:10:28:e5:5b:83:50:fc:9d:b0:d7:cc: 58:e5:d2:a3:4c:35:cc:43:07:1f:a0:fe:dc:36:81:fc:7c:6c: 02:ac:aa:f5:45:c2:6c:9d:cf:9d:42:37:fd:e8:81:e1:11:77: b9:19:df:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSnIwemmCujSeI/LMlEyeMZFeMSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJBODVE NkVGNkQxNzAeFw0yNTA2MDcxMjQ1NTlaFw0yNTA2MTAxODM2NTlaMDMxMTAvBgNV BAMTKDVCMDdDN0RFNDUxNEQwQTA0RDQyNUVBQkMwQkRDRUEzQTQ1NTYzQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf7Slsw7mIKmtHwQm9jIlLwYnb CSpGH0j+ZxmdTzOb7NbU3vU9Z7ZNyxGugouYPPxb3nlQ7q0t48oXdsohKkKGJYnn 4frj2y4ndGNSMBbdcWdCgx+jyIXszxlYc9+OnFxQV3o8OZFW/A7LDANOG4mQhVsD B/o4f0Za1UKIwR3WIJpVGVTEV3OtkewwijEDJNfKEtq49ynQy5huRvhcfvs1Arp9 XckfACgS0YZk90cgjPPD6lM8vPGNk/Oe4qDUoehGV2y1pwFjEfWwmQTaj56M18q0 romQFVCvLQFhwr1u8FsVcP0B4U+pEhCZJFPpKif2GtRUH0DQaLIQBG7NelmNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWwfH3kUU0KBNQl6rwL3Oo6RVY7cwHwYDVR0j BBgwFoAU9tGt74vxNEovXL2hiCK6hdbvbRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTEzZTdjNC03NzNmLTQ3NGMtYjA2ZC02MjYwYTMwNmEwY2EvMC9GNkQxQURFRjhC RjEzNDRBMkY1Q0JEQTE4ODIyQkE4NUQ2RUY2RDE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJBODVENkVG NkQxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTExM2U3YzQtNzczZi00NzRjLWIw NmQtNjI2MGEzMDZhMGNhLzAvRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJB ODVENkVGNkQxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/34PHf/SpnqiKBPh9sDD8nqZ6ncwwMIVtt +KsDarsZJTdEe0ToCvbxYZ6KsjugcFhgwr0KNlDH2B8FdyFijx/MySK+k0kPwJPr BHCpqFG7nvs4jGjxkXeNDtFhKfdqP4I7NUYujSPmM2FNA60UsMrBb74C5irnT+fG XD6HWDHZegjFZDVdO3YXRY9bgilBnji70OHfgvAp/lArjItqjO+f4CVjzYYutDyR F5ZPj4+YWCI9ZvaWoFQ9/bLrwRg7ZWP6Enay7xnBlZt2Mp8QKOVbg1D8nbDXzFjl 0qNMNcxDBx+g/tw2gfx8bAKsqvVFwmydz51CN/3ogeERd7kZ38c= -----END CERTIFICATE-----Generated at Sun Jun 8 03:49:57 2025 by rpki-client