$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft File: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft (raw, json) Hash identifier: 8QyP5dB6TtBS5rQxra+FQGIKrI+QUvjoSLxQY44KoF8= Subject key identifier: 4F:49:5E:0A:DF:44:DA:9F:7A:8A:4D:15:E2:8F:AA:A8:C4:E0:5A:D3 Authority key identifier: 6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 Certificate issuer: /CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Certificate serial: 08FF8B51D289E0B57E4FDDBEA9C4EE537A8F28EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft Manifest number: 02D3 Signing time: Tue 03 Jun 2025 12:31:50 +0000 Manifest this update: Tue 03 Jun 2025 12:26:50 +0000 Manifest next update: Fri 06 Jun 2025 21:48:50 +0000 Files and hashes: 1: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl (hash: ZAE+QQQfXUsraaYIRvqrobVxld+m0ZBBuXfcu8MuWTE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ff:8b:51:d2:89:e0:b5:7e:4f:dd:be:a9:c4:ee:53:7a:8f:28:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Validity Not Before: Jun 3 12:26:50 2025 GMT Not After : Jun 6 21:48:50 2025 GMT Subject: CN=4F495E0ADF44DA9F7A8A4D15E28FAAA8C4E05AD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ad:cc:df:bb:6f:80:aa:dc:3a:38:76:d3:8d: 07:2e:4b:9d:f3:84:76:28:0e:54:42:6d:b8:e0:cc: 7a:91:21:dc:0b:8e:be:19:d8:b9:2b:2f:5e:c3:5f: 98:f5:91:ca:87:b3:5d:01:86:ab:9b:9d:d5:96:0e: 4d:df:07:f4:69:cc:d2:51:0c:92:9d:95:4c:1c:74: 1c:24:62:b3:59:8d:f0:51:3a:bd:43:3b:74:62:6b: c9:70:d9:ab:6f:84:a7:86:88:50:30:2c:b7:1e:9e: ef:d4:ce:bb:91:fc:8f:74:31:ee:80:39:dd:46:1e: bb:ba:f2:bc:44:b3:b8:bd:1d:2e:31:f9:3f:d5:9b: 3a:42:01:f7:be:b8:13:a5:a4:ec:fb:72:c9:e1:e4: 52:cb:62:36:39:8a:f2:9d:1d:be:c7:9b:de:0e:26: 3c:36:95:0a:b9:07:af:5f:25:a4:be:4c:f0:94:17: 24:d9:87:d9:2c:f9:4b:3e:97:ea:80:84:5a:b1:99: 23:ea:1f:12:c8:43:36:69:64:ff:31:2d:7f:eb:8d: c1:b3:1f:59:90:10:c6:78:64:9e:e4:38:ce:1d:6b: 96:eb:1f:7a:ff:2f:e4:68:e9:97:94:ca:4d:02:d9: f3:77:59:b0:f8:ba:f1:01:e8:69:f2:05:24:a1:a9: 0b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:49:5E:0A:DF:44:DA:9F:7A:8A:4D:15:E2:8F:AA:A8:C4:E0:5A:D3 X509v3 Authority Key Identifier: keyid:6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:fa:b6:25:29:44:3a:fd:84:50:2f:7c:07:d6:79:de:04:81: a8:eb:48:da:49:9b:82:b1:42:33:a3:a3:60:87:c7:74:7a:c7: b8:1e:66:6b:99:56:79:f4:aa:20:3b:95:04:75:63:3d:af:37: 56:be:dc:bf:0a:e6:58:61:5b:1e:74:f1:bb:ff:7f:67:57:4f: d5:36:0e:e5:8c:72:27:e4:1b:75:41:cb:2d:97:a4:2c:c5:81: 7b:1b:53:87:13:9f:cc:8b:51:db:1f:5a:e1:49:aa:2c:6e:e9: 0b:f9:78:46:21:0f:bf:15:c1:d5:c4:1e:e5:39:39:bb:c5:3d: b6:0c:f1:9b:93:4b:d6:14:28:e2:53:35:1f:7e:42:5c:36:75: 56:34:96:b8:f1:74:95:b9:e3:71:a0:ca:ac:24:ec:3c:92:27: ef:90:9e:c7:78:ec:de:a2:25:cc:61:90:66:0a:6e:ec:ba:52: b0:8a:b5:70:0b:94:fe:91:b1:5f:11:88:01:4d:e5:9c:51:cd: 8c:7f:4b:58:a0:5c:ca:d2:c1:c4:c4:42:6c:95:cb:75:b1:07: 22:f3:9d:db:26:03:b3:b9:38:b8:c5:99:36:42:97:c8:c5:cf: 4a:2e:82:ae:b4:d1:3b:a5:66:01:51:e1:58:da:ee:4f:53:85: 12:ca:ab:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCP+LUdKJ4LV+T92+qcTuU3qPKOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2MDAw RjI1NjFGNzAeFw0yNTA2MDMxMjI2NTBaFw0yNTA2MDYyMTQ4NTBaMDMxMTAvBgNV BAMTKDRGNDk1RTBBREY0NERBOUY3QThBNEQxNUUyOEZBQUE4QzRFMDVBRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1rczfu2+Aqtw6OHbTjQcuS53z hHYoDlRCbbjgzHqRIdwLjr4Z2LkrL17DX5j1kcqHs10BhqubndWWDk3fB/RpzNJR DJKdlUwcdBwkYrNZjfBROr1DO3Ria8lw2atvhKeGiFAwLLcenu/UzruR/I90Me6A Od1GHru68rxEs7i9HS4x+T/VmzpCAfe+uBOlpOz7csnh5FLLYjY5ivKdHb7Hm94O Jjw2lQq5B69fJaS+TPCUFyTZh9ks+Us+l+qAhFqxmSPqHxLIQzZpZP8xLX/rjcGz H1mQEMZ4ZJ7kOM4da5brH3r/L+Ro6ZeUyk0C2fN3WbD4uvEB6GnyBSShqQubAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT0leCt9E2p96ik0V4o+qqMTgWtMwHwYDVR0j BBgwFoAUbeqbJ17M+5IOCoTQ0VjGAA8lYfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWI3N2QxZS0xNTg1LTQ2MDQtYjZiMS0wNzFmMGEyOTQwYzQvMC82REVBOUIyNzVF Q0NGQjkyMEUwQTg0RDBEMTU4QzYwMDBGMjU2MUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2MDAwRjI1 NjFGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiNzdkMWUtMTU4NS00NjA0LWI2 YjEtMDcxZjBhMjk0MGM0LzAvNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2 MDAwRjI1NjFGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/6tiUpRDr9hFAvfAfWed4EgajrSNpJm4Kx QjOjo2CHx3R6x7geZmuZVnn0qiA7lQR1Yz2vN1a+3L8K5lhhWx508bv/f2dXT9U2 DuWMcifkG3VByy2XpCzFgXsbU4cTn8yLUdsfWuFJqixu6Qv5eEYhD78VwdXEHuU5 ObvFPbYM8ZuTS9YUKOJTNR9+Qlw2dVY0lrjxdJW543Ggyqwk7DySJ++Qnsd47N6i JcxhkGYKbuy6UrCKtXALlP6RsV8RiAFN5ZxRzYx/S1igXMrSwcTEQmyVy3WxByLz ndsmA7O5OLjFmTZCl8jFz0ougq600TulZgFR4Vja7k9ThRLKq5A= -----END CERTIFICATE-----Generated at Tue Jun 3 23:51:47 2025 by rpki-client