$ rpki-client -vvf repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.mft File: A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.mft (raw, json) Hash identifier: StODPV6nkIDinZJVuSzwuZY4Nz+7lHv1EF64DvoCdF8= Subject key identifier: 0D:B5:FD:60:75:DE:11:97:DE:80:AC:C1:CD:B8:CD:ED:77:5A:32:05 Authority key identifier: A6:01:5E:5E:26:05:D4:FD:F6:8E:B9:6F:96:A9:89:4C:EA:EC:DF:BF Certificate issuer: /CN=A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF Certificate serial: 129DBF6A0528B9B99BFA3ED0FCE3B1ABC875ACFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.mft Manifest number: 01C2 Signing time: Fri 06 Jun 2025 05:51:46 +0000 Manifest this update: Fri 06 Jun 2025 05:46:46 +0000 Manifest next update: Mon 09 Jun 2025 16:27:46 +0000 Files and hashes: 1: A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.crl (hash: DWy/J3zevO16mytuVxrP0YqGa5EHKJ10DgL6tKdft1U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.crl rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 16:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:9d:bf:6a:05:28:b9:b9:9b:fa:3e:d0:fc:e3:b1:ab:c8:75:ac:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF Validity Not Before: Jun 6 05:46:46 2025 GMT Not After : Jun 9 16:27:46 2025 GMT Subject: CN=0DB5FD6075DE1197DE80ACC1CDB8CDED775A3205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c0:1a:d6:72:88:c0:03:6a:12:fb:82:a8:cd: 87:bd:ab:54:ab:be:4c:b4:0b:b3:f4:b0:d3:2c:c1: 51:04:ac:80:16:30:20:26:fe:10:9e:d7:24:76:c5: c6:5a:97:2f:ea:1c:ff:ec:59:6d:47:ef:93:b0:5f: e8:e5:1a:c3:8f:f6:3b:9f:fc:f1:78:9d:3c:b9:72: 8b:68:0d:23:1a:97:97:15:16:15:99:50:87:0f:29: 39:0d:27:86:eb:3d:00:0d:21:3f:78:02:71:ca:1b: 5d:f7:80:ae:b4:03:aa:d5:6d:be:bd:3c:85:f5:b6: 76:19:9f:66:7d:96:63:0b:39:ba:c6:85:a9:2a:87: f8:46:b9:88:8a:72:eb:04:4f:a5:ac:84:4a:10:40: ae:98:d6:83:cb:d8:5b:4b:93:03:fa:c1:df:4e:b8: 3d:e0:9f:cf:fd:79:a9:97:2d:96:ec:63:98:3e:f5: 1f:5e:fb:96:a4:c7:f1:d1:55:c1:a5:3b:c9:84:30: 64:f8:0e:11:9d:6c:9d:3a:51:64:85:52:17:ea:2d: 07:46:3d:be:87:37:2d:83:c0:86:40:91:f9:32:ae: d1:9b:f9:bc:2b:92:82:10:01:d3:c4:88:32:18:43: 85:2f:7d:2b:53:7c:7b:60:ca:1a:89:76:0d:6c:64: 2d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B5:FD:60:75:DE:11:97:DE:80:AC:C1:CD:B8:CD:ED:77:5A:32:05 X509v3 Authority Key Identifier: keyid:A6:01:5E:5E:26:05:D4:FD:F6:8E:B9:6F:96:A9:89:4C:EA:EC:DF:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:af:8c:b0:cf:7f:88:1b:c0:f6:31:0b:88:0f:af:f9:39:57: da:92:2a:87:ef:46:cb:99:e4:c5:34:b5:d7:df:78:f6:d6:43: 07:6c:b8:18:fe:b4:7e:a4:01:fe:a9:10:d7:c9:b5:f6:ef:06: be:23:f2:26:ee:fc:94:72:38:c4:d8:bf:be:33:15:de:f3:40: 8a:71:12:75:26:02:07:77:41:d3:da:a5:08:56:c2:cc:f1:7c: 59:65:29:aa:8d:09:42:96:cd:7a:90:c0:d1:6e:3e:86:f9:6f: 9f:f3:aa:b2:27:bc:b2:76:fd:75:3a:26:d6:b1:5c:e3:17:8e: f9:83:d9:09:26:af:1c:61:2a:7c:69:67:a3:bc:37:55:55:14: 60:4e:02:0e:8e:3c:28:f5:bf:f0:66:a6:0d:01:21:04:19:9b: e4:90:0a:fa:e1:24:6e:8a:81:0c:b9:06:ac:01:2e:f2:9e:3b: 4d:71:13:8d:db:ac:10:1e:84:e2:58:60:b7:7f:b5:cb:51:5d: b7:51:91:8a:ab:37:c7:cd:4b:9f:e9:40:f8:96:bc:70:d5:2f: c4:98:92:3a:e6:1e:a1:ee:00:9d:64:fd:d3:93:6b:1f:e7:fb: d5:c1:8e:d2:3c:c4:7a:9b:e1:1f:bb:7e:87:41:b0:d1:1c:53: 4d:9e:b9:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEp2/agUoubmb+j7Q/OOxq8h1rP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwMTVFNUUyNjA1RDRGREY2OEVCOTZGOTZBOTg5NENF QUVDREZCRjAeFw0yNTA2MDYwNTQ2NDZaFw0yNTA2MDkxNjI3NDZaMDMxMTAvBgNV BAMTKDBEQjVGRDYwNzVERTExOTdERTgwQUNDMUNEQjhDREVENzc1QTMyMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYwBrWcojAA2oS+4KozYe9q1Sr vky0C7P0sNMswVEErIAWMCAm/hCe1yR2xcZaly/qHP/sWW1H75OwX+jlGsOP9juf /PF4nTy5cotoDSMal5cVFhWZUIcPKTkNJ4brPQANIT94AnHKG133gK60A6rVbb69 PIX1tnYZn2Z9lmMLObrGhakqh/hGuYiKcusET6WshEoQQK6Y1oPL2FtLkwP6wd9O uD3gn8/9eamXLZbsY5g+9R9e+5akx/HRVcGlO8mEMGT4DhGdbJ06UWSFUhfqLQdG Pb6HNy2DwIZAkfkyrtGb+bwrkoIQAdPEiDIYQ4UvfStTfHtgyhqJdg1sZC3fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDbX9YHXeEZfegKzBzbjN7XdaMgUwHwYDVR0j BBgwFoAUpgFeXiYF1P32jrlvlqmJTOrs378wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGQzZWYyYy03ODFkLTRkMGMtYTY4Mi05MWFjMDExZWY2YjcvMC9BNjAxNUU1RTI2 MDVENEZERjY4RUI5NkY5NkE5ODk0Q0VBRUNERkJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYwMTVFNUUyNjA1RDRGREY2OEVCOTZGOTZBOTg5NENFQUVD REZCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRkM2VmMmMtNzgxZC00ZDBjLWE2 ODItOTFhYzAxMWVmNmI3LzAvQTYwMTVFNUUyNjA1RDRGREY2OEVCOTZGOTZBOTg5 NENFQUVDREZCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALSvjLDPf4gbwPYxC4gPr/k5V9qSKofvRsuZ 5MU0tdffePbWQwdsuBj+tH6kAf6pENfJtfbvBr4j8ibu/JRyOMTYv74zFd7zQIpx EnUmAgd3QdPapQhWwszxfFllKaqNCUKWzXqQwNFuPob5b5/zqrInvLJ2/XU6Jtax XOMXjvmD2QkmrxxhKnxpZ6O8N1VVFGBOAg6OPCj1v/Bmpg0BIQQZm+SQCvrhJG6K gQy5BqwBLvKeO01xE43brBAehOJYYLd/tctRXbdRkYqrN8fNS5/pQPiWvHDVL8SY kjrmHqHuAJ1k/dOTax/n+9XBjtI8xHqb4R+7fodBsNEcU02eueM= -----END CERTIFICATE-----Generated at Sun Jun 8 01:27:26 2025 by rpki-client