$ rpki-client -vvf repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft File: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft (raw, json) Hash identifier: DgJmuaodukzq2yLcPxfba8sY09uqv8qR8xZaHifmD30= Subject key identifier: C0:9A:A2:FB:44:19:96:FE:65:B9:5D:91:63:F8:2A:13:D9:46:46:01 Authority key identifier: 65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC Certificate issuer: /CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Certificate serial: 79633512C286C05ADFC18735C207F5DAEB9DC93B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft Manifest number: 0419 Signing time: Tue 03 Jun 2025 08:45:04 +0000 Manifest this update: Tue 03 Jun 2025 08:40:04 +0000 Manifest next update: Fri 06 Jun 2025 18:18:04 +0000 Files and hashes: 1: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl (hash: VPznVJ8GZ2Eu/H+nOQLrVW+lzQEWjjBvvdnBeon/LPs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:18:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:63:35:12:c2:86:c0:5a:df:c1:87:35:c2:07:f5:da:eb:9d:c9:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Validity Not Before: Jun 3 08:40:04 2025 GMT Not After : Jun 6 18:18:04 2025 GMT Subject: CN=C09AA2FB441996FE65B95D9163F82A13D9464601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:aa:35:6b:0a:dc:1d:57:1b:b6:b1:05:9b:1c: f4:f5:43:96:0c:98:5f:9a:77:3d:e6:8a:96:ff:05: 01:10:13:ab:4d:59:19:ad:9e:30:b5:92:23:62:33: 46:2e:5e:72:fb:25:45:d1:da:aa:0a:50:ae:4e:d9: 16:e9:49:8d:e5:41:ac:d4:4a:b3:4e:1c:cd:a5:58: b6:0e:c9:5f:71:50:7a:10:c7:ae:67:b2:05:6c:5a: 3c:db:f6:aa:6f:ca:59:b8:96:69:90:2f:1b:8f:3c: 96:ff:b8:2b:e3:eb:b4:c0:e0:5e:2b:ce:d3:a2:0b: f4:66:fd:f4:3f:8a:c8:3f:61:a4:3b:c1:cf:49:22: 0a:b8:9f:22:90:86:28:20:9a:99:c1:b0:74:70:92: 64:91:52:18:ef:6f:5c:f0:06:07:63:32:36:cb:84: 7b:e6:4a:45:4a:4f:01:26:83:66:4f:7b:42:ed:c3: 5f:dd:70:93:91:13:7a:8b:7d:2b:85:97:8d:8a:f5: 58:90:85:55:f7:23:e6:86:3a:5c:b5:03:62:32:41: 54:87:1f:10:e8:a0:48:68:40:2c:ab:a0:a9:44:8b: 6c:fd:72:43:b3:d4:c9:ad:30:45:d8:ff:71:4e:e4: 98:66:83:fd:c9:07:b8:21:cd:bc:44:99:cf:e6:7c: ac:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9A:A2:FB:44:19:96:FE:65:B9:5D:91:63:F8:2A:13:D9:46:46:01 X509v3 Authority Key Identifier: keyid:65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:10:7c:d8:8f:4a:03:66:de:98:42:f3:bc:a3:1f:1d:6d:38: 0f:f0:a3:f2:f2:86:51:28:e5:41:d1:4c:a6:0b:7b:33:14:43: 52:d5:5f:5a:74:9d:46:e2:d6:cd:b1:4c:9e:de:3f:1f:8e:f8: a9:0d:c2:ef:02:89:4c:e8:cf:24:bf:4b:9c:25:5d:63:56:a0: fe:50:a8:00:d1:8d:23:2a:db:08:d1:12:8e:6f:57:b6:70:23: de:cc:a9:45:98:34:78:77:23:67:cc:92:26:c0:8d:5b:00:4e: d1:e6:32:cc:4e:61:8c:93:a4:e5:63:01:fc:84:67:3f:56:4d: 4a:2a:74:d3:3e:76:d6:60:e1:24:88:c4:5b:8f:74:35:5c:40: 16:a8:2d:b2:79:3e:05:58:5c:41:51:9a:df:44:d3:58:47:96: c2:9c:e2:3c:f4:9c:8f:a6:6b:b1:8a:fa:86:15:49:dc:96:20: bb:ff:64:2a:7c:20:d2:5e:02:2d:8d:30:b8:bd:02:59:56:4c: d4:aa:2f:c6:75:c0:82:6f:41:14:51:5f:68:c2:4f:43:5c:26: 98:28:76:8c:3c:4a:cd:d1:ff:81:2a:44:b8:41:d2:8a:67:39: 0e:01:7a:4d:16:12:9d:64:e5:c9:85:5b:e7:73:c1:46:f2:64: 8e:07:80:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeWM1EsKGwFrfwYc1wgf12uudyTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURD QTZGOThCQzAeFw0yNTA2MDMwODQwMDRaFw0yNTA2MDYxODE4MDRaMDMxMTAvBgNV BAMTKEMwOUFBMkZCNDQxOTk2RkU2NUI5NUQ5MTYzRjgyQTEzRDk0NjQ2MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyqjVrCtwdVxu2sQWbHPT1Q5YM mF+adz3mipb/BQEQE6tNWRmtnjC1kiNiM0YuXnL7JUXR2qoKUK5O2RbpSY3lQazU SrNOHM2lWLYOyV9xUHoQx65nsgVsWjzb9qpvylm4lmmQLxuPPJb/uCvj67TA4F4r ztOiC/Rm/fQ/isg/YaQ7wc9JIgq4nyKQhiggmpnBsHRwkmSRUhjvb1zwBgdjMjbL hHvmSkVKTwEmg2ZPe0Ltw1/dcJORE3qLfSuFl42K9ViQhVX3I+aGOly1A2IyQVSH HxDooEhoQCyroKlEi2z9ckOz1MmtMEXY/3FO5Jhmg/3JB7ghzbxEmc/mfKyJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwJqi+0QZlv5luV2RY/gqE9lGRgEwHwYDVR0j BBgwFoAUZYezJUoHRupu/60dwvKdXcpvmLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjcxNjBkZC1mZjgwLTRlZmEtYmNmMS1iYjc1ZDZkNGYwOGEvMC82NTg3QjMyNTRB MDc0NkVBNkVGRkFEMURDMkYyOUQ1RENBNkY5OEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURDQTZG OThCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWY3MTYwZGQtZmY4MC00ZWZhLWJj ZjEtYmI3NWQ2ZDRmMDhhLzAvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlE NURDQTZGOThCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0QfNiPSgNm3phC87yjHx1tOA/wo/LyhlEo 5UHRTKYLezMUQ1LVX1p0nUbi1s2xTJ7ePx+O+KkNwu8CiUzozyS/S5wlXWNWoP5Q qADRjSMq2wjREo5vV7ZwI97MqUWYNHh3I2fMkibAjVsATtHmMsxOYYyTpOVjAfyE Zz9WTUoqdNM+dtZg4SSIxFuPdDVcQBaoLbJ5PgVYXEFRmt9E01hHlsKc4jz0nI+m a7GK+oYVSdyWILv/ZCp8INJeAi2NMLi9AllWTNSqL8Z1wIJvQRRRX2jCT0NcJpgo dow8Ss3R/4EqRLhB0opnOQ4Bek0WEp1k5cmFW+dzwUbyZI4HgO0= -----END CERTIFICATE-----Generated at Tue Jun 3 23:30:43 2025 by rpki-client