$ rpki-client -vvf repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft File: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft (raw, json) Hash identifier: eKGi71Q50jyRS/N0FYWOfE3bJx3qcDTGtE0zvJl8i2s= Subject key identifier: 07:44:50:D3:BF:40:1E:E1:30:A8:91:77:34:83:F8:D8:95:B9:BE:46 Authority key identifier: 65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC Certificate issuer: /CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Certificate serial: 0360259C8E6AA4395C41EC5A7C0B10826A01594C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft Manifest number: 0443 Signing time: Fri 05 Sep 2025 03:01:52 +0000 Manifest this update: Fri 05 Sep 2025 02:56:52 +0000 Manifest next update: Mon 08 Sep 2025 14:00:52 +0000 Files and hashes: 1: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl (hash: tqhsQOsixrPvNE69nxssD0mytip8pl/QV/CAs1FdQf4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:60:25:9c:8e:6a:a4:39:5c:41:ec:5a:7c:0b:10:82:6a:01:59:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Validity Not Before: Sep 5 02:56:52 2025 GMT Not After : Sep 8 14:00:52 2025 GMT Subject: CN=074450D3BF401EE130A891773483F8D895B9BE46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:20:8f:37:48:f5:9b:84:12:5f:5e:4d:3f:ae: 9d:4f:46:f4:bd:2e:5c:c3:17:ed:b3:af:6e:1f:0a: 95:9b:24:5a:fc:05:58:2c:c4:d4:4d:a3:8d:14:ab: 8e:97:1a:83:f5:93:6d:fb:ef:93:c2:3d:2e:43:60: 4b:b6:1c:58:2a:ab:60:09:0b:64:a5:c1:ec:b2:87: 58:93:0d:bd:62:81:ba:d2:31:4b:43:ae:72:e3:70: 0b:69:72:bc:67:2c:cf:c1:fc:66:9a:22:fb:11:6b: 85:41:d9:1f:38:08:eb:db:f7:dd:22:81:90:60:77: 62:4a:0c:ee:2d:da:50:bf:a7:5f:c7:6d:de:39:c3: 84:e1:e2:ad:31:2f:61:2b:4a:c9:96:f4:0c:b5:3f: 48:8a:4e:2f:fa:f1:33:ce:00:47:5f:42:14:bf:85: 2f:3d:fb:3c:81:c2:e6:19:8d:05:28:06:ca:fa:99: 7d:41:43:73:6a:ac:19:2b:3d:3b:c4:ae:4a:9e:35: 9b:14:99:c7:fb:ff:d6:d4:56:f7:a3:ac:b0:c5:70: 15:70:f8:61:4c:ad:09:c0:d0:58:e4:02:cc:9f:11: 0a:6e:14:28:f8:b5:f5:57:88:e2:e4:bc:ec:4c:c5: 72:0c:e8:7a:f0:ff:39:08:64:c4:d6:fb:99:64:80: 2f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:44:50:D3:BF:40:1E:E1:30:A8:91:77:34:83:F8:D8:95:B9:BE:46 X509v3 Authority Key Identifier: keyid:65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:e0:b2:c1:db:ee:e4:d8:20:5b:b4:f2:9a:db:08:08:9c:43: e0:2f:43:b4:1b:f9:d2:0b:c1:16:01:59:1e:05:40:39:6d:e4: f0:a4:1c:7b:43:43:0b:12:14:91:86:38:14:8f:e7:9d:34:cd: 43:3b:94:99:94:41:e1:c5:11:80:83:bd:d1:8c:69:49:cd:95: f4:58:fa:63:cc:45:51:b6:69:e3:83:65:d8:37:46:01:bf:e4: 57:7d:d8:a7:e6:ed:46:5c:bb:a9:32:c9:39:c7:b5:fc:fa:04: db:0c:6c:ce:e5:52:9a:de:c0:7a:32:7e:b0:84:b7:e6:11:1d: 79:13:49:ef:b3:96:46:7a:6d:40:b0:1d:c5:cf:5c:82:ae:76: fa:85:d7:95:ad:35:67:50:f8:af:59:26:b9:dd:63:05:60:83: bd:df:5c:4b:33:ea:9c:6b:e1:77:46:2f:a0:d7:fc:ad:d7:13: 0b:9b:84:f1:42:5e:d7:59:1e:47:91:23:ad:38:81:7c:df:e8: 59:a8:43:50:f2:e6:86:8a:aa:af:2b:b2:09:b1:83:9c:97:a9: 75:70:8c:33:e8:c6:05:c1:1e:0c:82:d2:f2:a0:7c:b7:8c:02: a3:21:c2:1a:8f:16:6e:84:11:00:14:59:19:80:7b:ab:3e:ff: 7b:c8:59:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA2AlnI5qpDlcQexafAsQgmoBWUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURD QTZGOThCQzAeFw0yNTA5MDUwMjU2NTJaFw0yNTA5MDgxNDAwNTJaMDMxMTAvBgNV BAMTKDA3NDQ1MEQzQkY0MDFFRTEzMEE4OTE3NzM0ODNGOEQ4OTVCOUJFNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYII83SPWbhBJfXk0/rp1PRvS9 LlzDF+2zr24fCpWbJFr8BVgsxNRNo40Uq46XGoP1k23775PCPS5DYEu2HFgqq2AJ C2Slweyyh1iTDb1igbrSMUtDrnLjcAtpcrxnLM/B/GaaIvsRa4VB2R84COvb990i gZBgd2JKDO4t2lC/p1/Hbd45w4Th4q0xL2ErSsmW9Ay1P0iKTi/68TPOAEdfQhS/ hS89+zyBwuYZjQUoBsr6mX1BQ3NqrBkrPTvErkqeNZsUmcf7/9bUVvejrLDFcBVw +GFMrQnA0FjkAsyfEQpuFCj4tfVXiOLkvOxMxXIM6Hrw/zkIZMTW+5lkgC/jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB0RQ079AHuEwqJF3NIP42JW5vkYwHwYDVR0j BBgwFoAUZYezJUoHRupu/60dwvKdXcpvmLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjcxNjBkZC1mZjgwLTRlZmEtYmNmMS1iYjc1ZDZkNGYwOGEvMC82NTg3QjMyNTRB MDc0NkVBNkVGRkFEMURDMkYyOUQ1RENBNkY5OEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURDQTZG OThCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWY3MTYwZGQtZmY4MC00ZWZhLWJj ZjEtYmI3NWQ2ZDRmMDhhLzAvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlE NURDQTZGOThCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTgssHb7uTYIFu08prbCAicQ+AvQ7Qb+dIL wRYBWR4FQDlt5PCkHHtDQwsSFJGGOBSP5500zUM7lJmUQeHFEYCDvdGMaUnNlfRY +mPMRVG2aeODZdg3RgG/5Fd92Kfm7UZcu6kyyTnHtfz6BNsMbM7lUprewHoyfrCE t+YRHXkTSe+zlkZ6bUCwHcXPXIKudvqF15WtNWdQ+K9ZJrndYwVgg73fXEsz6pxr 4XdGL6DX/K3XEwubhPFCXtdZHkeRI604gXzf6FmoQ1Dy5oaKqq8rsgmxg5yXqXVw jDPoxgXBHgyC0vKgfLeMAqMhwhqPFm6EEQAUWRmAe6s+/3vIWdg= -----END CERTIFICATE-----Generated at Fri Sep 5 10:29:32 2025 by rpki-client