$ rpki-client -vvf repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft File: F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft (raw, json) Hash identifier: lzxttxur3dZpBKGDpSPn5nwmya5UT2k+izliyG1j3/4= Subject key identifier: A4:99:8B:9B:63:59:4A:4E:68:85:CE:3E:0D:65:FE:4B:2F:A6:27:8E Authority key identifier: F6:C8:A7:13:C4:45:14:84:D1:D6:7F:4E:E6:F7:7B:46:AE:E4:17:A9 Certificate issuer: /CN=F6C8A713C4451484D1D67F4EE6F77B46AEE417A9 Certificate serial: 160BE4296D3EC6848A36C871BA779B81050FB2BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft Manifest number: 0184 Signing time: Thu 05 Jun 2025 07:30:36 +0000 Manifest this update: Thu 05 Jun 2025 07:25:36 +0000 Manifest next update: Sun 08 Jun 2025 18:38:36 +0000 Files and hashes: 1: F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl (hash: OkOW7tQxWThHH0PW+YTtHnnKrUi7Oy55wZnu+oDO19w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 18:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:0b:e4:29:6d:3e:c6:84:8a:36:c8:71:ba:77:9b:81:05:0f:b2:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6C8A713C4451484D1D67F4EE6F77B46AEE417A9 Validity Not Before: Jun 5 07:25:36 2025 GMT Not After : Jun 8 18:38:36 2025 GMT Subject: CN=A4998B9B63594A4E6885CE3E0D65FE4B2FA6278E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ae:00:be:b4:d3:03:fc:db:a3:f6:e8:8c:ec: ab:a1:66:51:a0:32:ea:47:1a:41:66:a1:f7:09:a1: ea:75:d4:d6:33:0e:9c:bd:6e:93:80:b0:20:45:96: bc:f9:d4:93:fd:2f:0c:62:12:ba:e7:e7:c8:1d:2f: 11:92:68:ba:7f:55:29:a3:70:e4:c8:d6:ad:c8:27: 73:ab:c4:13:fa:cc:65:03:56:c2:fd:c3:2b:97:5b: 0b:24:ad:43:07:68:ba:1b:44:a2:1f:ad:14:e4:b4: 1a:c5:fd:bb:61:6f:60:5a:f1:05:f4:b5:dd:d5:b9: 71:fe:78:45:b5:5d:0d:ce:f2:5b:6e:91:43:a8:2d: 2b:0b:1d:8a:a8:6b:d5:f9:fa:10:3a:25:cd:6b:f8: a5:f0:e0:13:04:97:9b:3b:99:9d:b7:33:cc:b7:d8: 38:43:0e:51:04:73:57:91:f3:46:e8:bc:53:9d:f4: e7:9f:08:3b:9a:ad:80:19:20:42:31:12:e5:c0:0a: 4a:30:0c:c1:e5:3d:9b:1e:9c:a3:9d:f7:70:fd:f3: e8:63:5e:f7:8c:12:e3:2d:af:2f:44:0a:cc:8d:75: b3:aa:10:e3:fb:6e:d6:f3:f1:af:f8:41:7f:48:76: 68:0c:7a:e8:30:07:40:65:53:44:b5:47:a6:99:e9: d6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:99:8B:9B:63:59:4A:4E:68:85:CE:3E:0D:65:FE:4B:2F:A6:27:8E X509v3 Authority Key Identifier: keyid:F6:C8:A7:13:C4:45:14:84:D1:D6:7F:4E:E6:F7:7B:46:AE:E4:17:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:27:bc:ef:ac:87:6a:f3:a5:33:4f:e9:50:a8:a2:dd:eb:47: 39:91:ab:a0:c9:57:73:bf:bb:9b:19:c2:af:40:bd:a5:4a:4f: 3b:ce:85:13:f7:03:21:e6:9f:bf:f4:4b:1f:7a:9d:87:e2:ff: f6:ff:3e:4b:27:fa:b0:4a:c3:b4:8b:8f:88:03:03:b9:43:0c: bf:4e:68:25:40:17:97:1c:2a:bc:86:09:c2:2c:ac:42:53:4f: d8:50:c8:b3:41:92:4a:9c:c8:4a:7f:6a:77:95:08:5b:6f:c5: 00:ec:2f:00:01:82:fa:24:8b:90:95:33:99:cd:74:68:2b:b3: 4e:0f:2e:6b:6d:f1:9f:70:2d:36:48:6c:6c:59:00:34:ef:05: 72:63:a4:9a:2b:fb:09:26:18:d6:a5:9f:d1:6e:88:ad:aa:6f: c4:45:87:5e:56:5a:ef:fb:5f:25:29:42:f8:a2:b6:4a:d7:b7: 8a:70:6d:4b:7e:e1:5c:26:d2:6d:cb:6c:e0:c1:5b:d8:47:11: 25:8a:88:5e:de:cf:3c:6f:30:f1:25:6b:5d:bb:dd:48:cb:c2: 47:9b:ea:d3:08:a6:c3:b5:a9:54:9d:13:4d:4f:22:57:ce:da: dc:fc:79:a0:d5:ef:02:54:4b:b0:16:79:54:53:99:9d:b5:e7: 31:56:c3:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFgvkKW0+xoSKNshxunebgQUPsr4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdCNDZB RUU0MTdBOTAeFw0yNTA2MDUwNzI1MzZaFw0yNTA2MDgxODM4MzZaMDMxMTAvBgNV BAMTKEE0OTk4QjlCNjM1OTRBNEU2ODg1Q0UzRTBENjVGRTRCMkZBNjI3OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5rgC+tNMD/Nuj9uiM7KuhZlGg MupHGkFmofcJoep11NYzDpy9bpOAsCBFlrz51JP9LwxiErrn58gdLxGSaLp/VSmj cOTI1q3IJ3OrxBP6zGUDVsL9wyuXWwskrUMHaLobRKIfrRTktBrF/bthb2Ba8QX0 td3VuXH+eEW1XQ3O8ltukUOoLSsLHYqoa9X5+hA6Jc1r+KXw4BMEl5s7mZ23M8y3 2DhDDlEEc1eR80bovFOd9OefCDuarYAZIEIxEuXACkowDMHlPZsenKOd93D98+hj XveMEuMtry9ECsyNdbOqEOP7btbz8a/4QX9IdmgMeugwB0BlU0S1R6aZ6dY3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpJmLm2NZSk5ohc4+DWX+Sy+mJ44wHwYDVR0j BBgwFoAU9sinE8RFFITR1n9O5vd7Rq7kF6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmM3ZTViMS01MTlkLTQ1NmMtYjNiNi03NTU3OTQ3MDI2NjQvMC9GNkM4QTcxM0M0 NDUxNDg0RDFENjdGNEVFNkY3N0I0NkFFRTQxN0E5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdCNDZBRUU0 MTdBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZjN2U1YjEtNTE5ZC00NTZjLWIz YjYtNzU1Nzk0NzAyNjY0LzAvRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdC NDZBRUU0MTdBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIonvO+sh2rzpTNP6VCoot3rRzmRq6DJV3O/ u5sZwq9AvaVKTzvOhRP3AyHmn7/0Sx96nYfi//b/Pksn+rBKw7SLj4gDA7lDDL9O aCVAF5ccKryGCcIsrEJTT9hQyLNBkkqcyEp/aneVCFtvxQDsLwABgvoki5CVM5nN dGgrs04PLmtt8Z9wLTZIbGxZADTvBXJjpJor+wkmGNaln9FuiK2qb8RFh15WWu/7 XyUpQviitkrXt4pwbUt+4Vwm0m3LbODBW9hHESWKiF7ezzxvMPEla1273UjLwkeb 6tMIpsO1qVSdE01PIlfO2tz8eaDV7wJUS7AWeVRTmZ215zFWw2o= -----END CERTIFICATE-----Generated at Thu Jun 5 19:50:21 2025 by rpki-client