$ rpki-client -vvf repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft File: F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft (raw, json) Hash identifier: eNW6mupQy96C6WvPdubyGNuO6b1KnivKhkzDeiClwTw= Subject key identifier: A7:03:00:7B:D6:B9:AD:19:55:CE:70:1E:0E:29:CA:33:77:E5:2F:FB Authority key identifier: F6:C8:A7:13:C4:45:14:84:D1:D6:7F:4E:E6:F7:7B:46:AE:E4:17:A9 Certificate issuer: /CN=F6C8A713C4451484D1D67F4EE6F77B46AEE417A9 Certificate serial: 68D829788FA1D85623AAB2C1CF82360C40BFAFE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft Manifest number: 016A Signing time: Tue 08 Apr 2025 10:20:35 +0000 Manifest this update: Tue 08 Apr 2025 10:15:35 +0000 Manifest next update: Fri 11 Apr 2025 21:50:35 +0000 Files and hashes: 1: F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl (hash: /nk/E0MR1YH3gB1cdel5PH9qgZWACa4RmYFIlSxDHCU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:d8:29:78:8f:a1:d8:56:23:aa:b2:c1:cf:82:36:0c:40:bf:af:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6C8A713C4451484D1D67F4EE6F77B46AEE417A9 Validity Not Before: Apr 8 10:15:35 2025 GMT Not After : Apr 11 21:50:35 2025 GMT Subject: CN=A703007BD6B9AD1955CE701E0E29CA3377E52FFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:38:e4:10:b5:7b:68:18:1e:ff:2a:c2:e2:25: 44:01:a5:21:0c:ae:ae:bc:ac:86:fe:b4:db:d7:cc: d5:0a:13:2f:8f:95:6a:c0:62:83:4f:07:8c:4f:d7: 88:fe:71:46:4e:32:67:e8:4d:a7:b4:fe:15:54:df: de:e0:4b:f7:e5:5d:68:6b:2a:07:e7:13:62:9b:78: 25:19:3e:d1:c3:ea:92:b5:73:e7:66:90:9e:fd:50: ec:1a:45:d3:0f:6a:87:6b:38:e5:0b:03:91:e2:eb: 1a:78:f6:ab:27:07:87:4d:ac:3e:59:5a:8a:34:76: 9a:83:45:e0:4f:fd:97:78:b5:e0:20:09:51:86:5a: 6e:f8:c0:8b:54:ac:b8:3d:8b:7e:00:ed:6c:0d:9f: ee:c3:63:57:99:7f:03:29:53:29:84:ce:43:dc:39: f7:e5:e2:a6:cd:d2:31:7c:ba:eb:20:c6:6f:6a:6a: 00:20:63:fc:95:2b:f0:f6:87:69:8b:43:81:95:1c: bb:94:d4:93:de:fe:ee:04:94:3f:90:f4:94:c4:b5: 3d:e2:f8:ae:55:61:19:e8:1c:71:50:82:e0:d1:a0: 02:07:e1:54:8b:01:94:e3:25:00:38:8b:ed:90:05: 7e:da:d1:e1:d3:67:29:9d:5a:7f:3d:a0:eb:b0:12: a5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:03:00:7B:D6:B9:AD:19:55:CE:70:1E:0E:29:CA:33:77:E5:2F:FB X509v3 Authority Key Identifier: keyid:F6:C8:A7:13:C4:45:14:84:D1:D6:7F:4E:E6:F7:7B:46:AE:E4:17:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:97:3c:94:0a:e7:75:0d:13:6c:30:2f:bc:f9:c0:2f:46:69: 2e:ba:e1:89:77:84:f7:dd:0b:d0:9f:04:08:c6:d2:22:fb:0e: eb:47:51:69:35:34:8c:0d:42:3b:9b:33:06:5d:e6:62:db:ec: 3d:fa:e9:ae:61:79:96:5f:a0:54:dc:1f:26:7d:bf:b5:93:b0: 15:9a:50:b5:a6:41:c2:e4:7d:62:92:74:9f:22:ec:1b:1f:78: 72:6a:a4:a9:5b:54:d1:04:d4:bf:c8:8b:34:9d:e2:73:9f:58: b9:d1:22:73:8f:de:0d:88:ae:7c:50:bb:1c:81:78:ec:88:c4: a8:5b:ec:5e:37:09:6f:c3:92:af:31:de:03:02:7e:9b:fa:50: 8e:0b:26:e0:8b:d6:b5:7f:30:8f:cb:fe:e4:3f:75:36:55:a2: 3f:6e:d3:4d:26:15:33:b5:d8:bf:3f:d3:7b:e4:af:2f:c6:e5: cf:8f:06:34:d4:63:d6:3e:e8:38:0b:73:a2:f7:9d:6d:91:6a: 57:88:84:4b:c2:c6:9b:6c:4a:68:db:a8:79:d0:d8:3d:19:97: 33:f0:5d:8d:c1:a1:6d:39:f0:9c:4e:e7:6a:72:3e:92:b2:c6: 9c:2b:45:f6:a9:e2:26:7f:d6:18:1d:40:b8:41:61:f7:f6:21: d3:8a:2c:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaNgpeI+h2FYjqrLBz4I2DEC/r+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdCNDZB RUU0MTdBOTAeFw0yNTA0MDgxMDE1MzVaFw0yNTA0MTEyMTUwMzVaMDMxMTAvBgNV BAMTKEE3MDMwMDdCRDZCOUFEMTk1NUNFNzAxRTBFMjlDQTMzNzdFNTJGRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmOOQQtXtoGB7/KsLiJUQBpSEM rq68rIb+tNvXzNUKEy+PlWrAYoNPB4xP14j+cUZOMmfoTae0/hVU397gS/flXWhr KgfnE2KbeCUZPtHD6pK1c+dmkJ79UOwaRdMPaodrOOULA5Hi6xp49qsnB4dNrD5Z Woo0dpqDReBP/Zd4teAgCVGGWm74wItUrLg9i34A7WwNn+7DY1eZfwMpUymEzkPc Offl4qbN0jF8uusgxm9qagAgY/yVK/D2h2mLQ4GVHLuU1JPe/u4ElD+Q9JTEtT3i +K5VYRnoHHFQguDRoAIH4VSLAZTjJQA4i+2QBX7a0eHTZymdWn89oOuwEqWvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpwMAe9a5rRlVznAeDinKM3flL/swHwYDVR0j BBgwFoAU9sinE8RFFITR1n9O5vd7Rq7kF6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmM3ZTViMS01MTlkLTQ1NmMtYjNiNi03NTU3OTQ3MDI2NjQvMC9GNkM4QTcxM0M0 NDUxNDg0RDFENjdGNEVFNkY3N0I0NkFFRTQxN0E5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdCNDZBRUU0 MTdBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZjN2U1YjEtNTE5ZC00NTZjLWIz YjYtNzU1Nzk0NzAyNjY0LzAvRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdC NDZBRUU0MTdBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOXPJQK53UNE2wwL7z5wC9GaS664Yl3hPfd C9CfBAjG0iL7DutHUWk1NIwNQjubMwZd5mLb7D366a5heZZfoFTcHyZ9v7WTsBWa ULWmQcLkfWKSdJ8i7BsfeHJqpKlbVNEE1L/IizSd4nOfWLnRInOP3g2IrnxQuxyB eOyIxKhb7F43CW/Dkq8x3gMCfpv6UI4LJuCL1rV/MI/L/uQ/dTZVoj9u000mFTO1 2L8/03vkry/G5c+PBjTUY9Y+6DgLc6L3nW2RaleIhEvCxptsSmjbqHnQ2D0ZlzPw XY3BoW058JxO52pyPpKyxpwrRfap4iZ/1hgdQLhBYff2IdOKLKw= -----END CERTIFICATE-----Generated at Fri Apr 11 00:19:32 2025 by rpki-client