$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft File: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft (raw, json) Hash identifier: rDssAebGBK5oRjpYkcl5h7VCrpuZc85WBWwy6HOuYxk= Subject key identifier: 6A:62:72:F9:B1:B2:B5:AC:65:E2:93:41:FD:BD:18:55:95:8B:9F:A8 Authority key identifier: 6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 Certificate issuer: /CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Certificate serial: 575FC74984DB990E3DB0A8FD98C94DC83662A242 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft Manifest number: 02FD Signing time: Fri 05 Sep 2025 02:11:28 +0000 Manifest this update: Fri 05 Sep 2025 02:06:28 +0000 Manifest next update: Mon 08 Sep 2025 02:52:28 +0000 Files and hashes: 1: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl (hash: 6twTWHFTAUUcPnZAi+n9+zr2KQUZMDHPntTg+RaG/rg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 02:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:5f:c7:49:84:db:99:0e:3d:b0:a8:fd:98:c9:4d:c8:36:62:a2:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Validity Not Before: Sep 5 02:06:28 2025 GMT Not After : Sep 8 02:52:28 2025 GMT Subject: CN=6A6272F9B1B2B5AC65E29341FDBD1855958B9FA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1b:3a:42:1b:c4:1c:f6:35:fd:01:09:84:50: 26:42:c4:ae:c4:3f:bb:94:c3:da:2f:f4:85:30:57: 7a:fd:4b:76:4e:d4:21:ad:85:5d:08:12:1d:e8:10: fd:49:1a:3b:79:bf:35:d0:c7:6e:5e:e0:93:95:a7: 5b:71:3a:a6:a8:f5:94:2a:8c:bd:f0:25:0d:86:22: cb:d5:40:1c:35:82:2d:93:fe:9f:96:66:db:3a:db: ca:30:6a:03:b3:d0:9c:d7:54:57:e8:dd:5f:3b:36: 21:df:51:1b:14:aa:c2:78:61:04:f0:e3:f8:b7:27: 54:d4:b2:b9:eb:f6:00:04:d8:f4:50:a8:8e:80:32: 31:6f:44:16:a0:24:7e:50:ca:c3:07:7e:90:d1:b8: ff:f6:33:6c:6d:1c:59:02:9c:8d:76:e5:8b:00:53: 0e:dd:87:2e:ad:db:ec:20:93:83:db:d3:e6:a6:48: 2a:d6:97:16:9f:e5:d2:11:4f:02:46:89:cf:95:f3: 45:45:c1:57:dd:c3:4e:88:c9:23:d9:62:77:a3:11: 9b:3e:4d:0f:59:02:23:33:b3:44:47:b6:c8:37:de: 5f:f6:48:57:7d:f1:a7:bd:9a:8c:04:77:10:e1:3f: 9d:b7:f4:57:50:fd:52:1f:66:c8:56:72:2e:29:83: c7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:62:72:F9:B1:B2:B5:AC:65:E2:93:41:FD:BD:18:55:95:8B:9F:A8 X509v3 Authority Key Identifier: keyid:6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:83:fd:e6:eb:0b:09:76:72:f7:08:49:a6:1e:8e:2a:e5:d3: e1:cc:72:8b:6f:c1:b7:46:58:29:36:f4:4d:91:66:2d:64:93: d8:a8:ac:47:14:7a:8c:9a:0c:3b:8f:74:99:a5:5c:f5:05:0f: f6:eb:20:b8:4b:7b:c5:d4:eb:0e:a4:67:bd:81:9b:7f:83:9b: 34:fb:e5:61:f0:63:a3:95:fe:84:e5:b1:a7:6b:a9:90:09:1f: ab:0b:1e:59:c3:7d:27:2c:f4:77:8a:06:fd:f9:4b:14:16:f0: c1:e1:bb:fd:00:35:2c:27:cb:2f:33:81:8b:b0:6e:f4:0c:e9: f4:59:33:da:e4:7a:fa:84:f5:f8:a5:64:50:6c:2e:e5:bd:c2: af:b9:38:37:ed:5e:b9:3f:83:e6:ea:8b:4d:55:c2:2b:a5:68: 4e:be:01:cf:2a:18:53:ce:b7:ae:7c:a6:d5:5c:52:4d:e8:29: 71:3e:b1:77:c7:3e:da:91:72:38:c0:80:bf:fe:7a:a5:1b:32: 80:7f:4e:64:4b:28:cf:27:5d:1c:09:5b:87:ba:8c:30:a1:c8: ab:76:70:3d:af:a1:f8:81:3b:78:cc:70:ac:5a:ed:9d:35:7d: 28:d9:14:41:82:be:ec:57:83:35:9c:ac:7b:a8:64:f6:17:b1: f7:ea:47:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV1/HSYTbmQ49sKj9mMlNyDZiokIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2MDAw RjI1NjFGNzAeFw0yNTA5MDUwMjA2MjhaFw0yNTA5MDgwMjUyMjhaMDMxMTAvBgNV BAMTKDZBNjI3MkY5QjFCMkI1QUM2NUUyOTM0MUZEQkQxODU1OTU4QjlGQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLGzpCG8Qc9jX9AQmEUCZCxK7E P7uUw9ov9IUwV3r9S3ZO1CGthV0IEh3oEP1JGjt5vzXQx25e4JOVp1txOqao9ZQq jL3wJQ2GIsvVQBw1gi2T/p+WZts628owagOz0JzXVFfo3V87NiHfURsUqsJ4YQTw 4/i3J1TUsrnr9gAE2PRQqI6AMjFvRBagJH5QysMHfpDRuP/2M2xtHFkCnI125YsA Uw7dhy6t2+wgk4Pb0+amSCrWlxaf5dIRTwJGic+V80VFwVfdw06IySPZYnejEZs+ TQ9ZAiMzs0RHtsg33l/2SFd98ae9mowEdxDhP5239FdQ/VIfZshWci4pg8crAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUamJy+bGytaxl4pNB/b0YVZWLn6gwHwYDVR0j BBgwFoAUbeqbJ17M+5IOCoTQ0VjGAA8lYfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWI3N2QxZS0xNTg1LTQ2MDQtYjZiMS0wNzFmMGEyOTQwYzQvMC82REVBOUIyNzVF Q0NGQjkyMEUwQTg0RDBEMTU4QzYwMDBGMjU2MUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2MDAwRjI1 NjFGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiNzdkMWUtMTU4NS00NjA0LWI2 YjEtMDcxZjBhMjk0MGM0LzAvNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2 MDAwRjI1NjFGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGD/ebrCwl2cvcISaYejirl0+HMcotvwbdG WCk29E2RZi1kk9iorEcUeoyaDDuPdJmlXPUFD/brILhLe8XU6w6kZ72Bm3+DmzT7 5WHwY6OV/oTlsadrqZAJH6sLHlnDfScs9HeKBv35SxQW8MHhu/0ANSwnyy8zgYuw bvQM6fRZM9rkevqE9filZFBsLuW9wq+5ODftXrk/g+bqi01VwiulaE6+Ac8qGFPO t658ptVcUk3oKXE+sXfHPtqRcjjAgL/+eqUbMoB/TmRLKM8nXRwJW4e6jDChyKt2 cD2vofiBO3jMcKxa7Z01fSjZFEGCvuxXgzWcrHuoZPYXsffqR94= -----END CERTIFICATE-----Generated at Fri Sep 5 10:39:39 2025 by rpki-client