$ rpki-client -vvf repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.mft File: C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.mft (raw, json) Hash identifier: JcZFmJS0zgosEFV04N1U419jS/m5n41IUD/PMXsxaxo= Subject key identifier: 72:B1:FC:A8:83:F0:56:90:9F:31:0D:22:3E:1C:60:2C:67:F6:7A:99 Authority key identifier: C6:E9:3E:AA:6C:14:3C:47:BB:6C:1F:02:2B:52:4F:9C:08:9D:B6:F0 Certificate issuer: /CN=C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0 Certificate serial: 726559389173C37BD853478654A9FF7D459F9665 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.mft Manifest number: 045D Signing time: Sun 07 Sep 2025 05:12:10 +0000 Manifest this update: Sun 07 Sep 2025 05:07:10 +0000 Manifest next update: Wed 10 Sep 2025 12:00:10 +0000 Files and hashes: 1: C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.crl (hash: 54jFakJ0mBziaUeGIhIztJUgUo7KKKt2MoOsbNWZZX0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.crl rsync://repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:65:59:38:91:73:c3:7b:d8:53:47:86:54:a9:ff:7d:45:9f:96:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0 Validity Not Before: Sep 7 05:07:10 2025 GMT Not After : Sep 10 12:00:10 2025 GMT Subject: CN=72B1FCA883F056909F310D223E1C602C67F67A99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a1:93:6d:d3:cf:c0:9c:7f:ea:a8:cf:a1:eb: 80:91:01:34:6d:14:85:65:aa:3e:92:cf:da:51:49: 09:89:28:f2:1b:4b:4a:79:2e:8f:ab:91:df:9c:f7: 7e:64:f3:af:d6:24:cf:04:e3:96:61:19:1b:0a:a5: 5b:ee:64:55:96:07:04:45:43:71:82:f0:38:e6:26: ed:a1:f6:ef:9e:dd:ad:0e:cb:19:6b:36:f1:8d:a2: 4a:73:fe:09:61:46:96:e4:e9:c8:5f:8c:e6:4d:2c: 91:99:e8:23:3b:59:af:01:a7:32:de:66:f5:b4:00: 6b:6b:53:65:81:f2:b5:3f:f3:e3:ca:bf:b5:8e:ca: 56:1e:19:a6:ab:88:20:e0:bb:9d:12:ef:74:f1:2e: c9:21:1e:68:0a:8a:79:28:03:e5:d4:e4:6d:4d:da: f6:59:a8:e2:c2:f2:31:cc:23:41:75:93:8f:e0:e2: f6:3d:6c:96:c7:dd:d6:97:91:e1:ab:3a:40:d0:25: 69:2e:e2:79:73:3b:41:2f:45:b2:f0:87:74:ec:0c: 3d:1a:f0:1e:0c:e4:36:70:a1:cb:ed:5a:70:7a:65: f1:5f:7b:4c:54:41:80:e8:f0:c4:0f:79:bd:10:34: ce:3a:93:0b:92:47:84:d3:07:3f:e5:ab:30:9d:42: 89:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B1:FC:A8:83:F0:56:90:9F:31:0D:22:3E:1C:60:2C:67:F6:7A:99 X509v3 Authority Key Identifier: keyid:C6:E9:3E:AA:6C:14:3C:47:BB:6C:1F:02:2B:52:4F:9C:08:9D:B6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:ee:51:4a:3e:8d:0c:86:e2:a0:45:b8:55:e2:47:e5:29:2a: fc:d0:a4:85:a0:e9:b9:3e:67:c2:60:83:7d:66:13:ef:92:bb: f8:9b:12:0e:2b:f2:3d:69:1a:69:04:de:95:40:47:16:0f:f6: 69:46:15:db:f0:d0:4f:73:b2:45:3e:6f:8e:80:4a:aa:40:20: 0b:56:1a:55:7d:15:67:0b:a0:94:ac:a3:56:6c:d3:ac:9b:d8: ba:4c:09:30:d3:c0:40:79:11:91:d9:53:80:19:ec:68:c4:3a: e5:e8:cb:e6:b8:f9:38:1b:87:90:d8:38:b4:48:21:71:82:7b: b5:01:dd:65:4e:ab:de:0a:e5:6c:ca:ac:c1:68:e3:b5:6f:d4: 2e:95:d6:33:89:b6:71:93:d6:cf:8e:37:24:39:9d:f6:76:5e: fa:72:f8:d9:ed:69:31:82:74:4a:a4:89:7b:a4:d3:06:10:f8: 00:74:54:cb:ba:3e:4d:09:73:51:85:38:7f:9b:f7:1f:ac:8d: 81:4b:4a:81:4e:85:34:45:80:7e:6f:0d:92:69:a7:83:9c:b2: 22:3b:98:c1:c8:7d:e8:67:01:53:b7:49:4b:07:35:b5:6c:b4: 6e:15:52:54:55:9e:f0:b8:af:d3:a9:8a:93:cf:eb:da:b8:03: b9:28:eb:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcmVZOJFzw3vYU0eGVKn/fUWflmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZFOTNFQUE2QzE0M0M0N0JCNkMxRjAyMkI1MjRGOUMw ODlEQjZGMDAeFw0yNTA5MDcwNTA3MTBaFw0yNTA5MTAxMjAwMTBaMDMxMTAvBgNV BAMTKDcyQjFGQ0E4ODNGMDU2OTA5RjMxMEQyMjNFMUM2MDJDNjdGNjdBOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJoZNt08/AnH/qqM+h64CRATRt FIVlqj6Sz9pRSQmJKPIbS0p5Lo+rkd+c935k86/WJM8E45ZhGRsKpVvuZFWWBwRF Q3GC8DjmJu2h9u+e3a0OyxlrNvGNokpz/glhRpbk6chfjOZNLJGZ6CM7Wa8BpzLe ZvW0AGtrU2WB8rU/8+PKv7WOylYeGaariCDgu50S73TxLskhHmgKinkoA+XU5G1N 2vZZqOLC8jHMI0F1k4/g4vY9bJbH3daXkeGrOkDQJWku4nlzO0EvRbLwh3TsDD0a 8B4M5DZwocvtWnB6ZfFfe0xUQYDo8MQPeb0QNM46kwuSR4TTBz/lqzCdQonfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcrH8qIPwVpCfMQ0iPhxgLGf2epkwHwYDVR0j BBgwFoAUxuk+qmwUPEe7bB8CK1JPnAidtvAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmE2YmNhOC0zNzQxLTQ0ZWYtOGE1Zi0wZTc2YjgwZDQxNDYvMC9DNkU5M0VBQTZD MTQzQzQ3QkI2QzFGMDIyQjUyNEY5QzA4OURCNkYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzZFOTNFQUE2QzE0M0M0N0JCNkMxRjAyMkI1MjRGOUMwODlE QjZGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZhNmJjYTgtMzc0MS00NGVmLThh NWYtMGU3NmI4MGQ0MTQ2LzAvQzZFOTNFQUE2QzE0M0M0N0JCNkMxRjAyMkI1MjRG OUMwODlEQjZGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDuUUo+jQyG4qBFuFXiR+UpKvzQpIWg6bk+ Z8Jgg31mE++Su/ibEg4r8j1pGmkE3pVARxYP9mlGFdvw0E9zskU+b46ASqpAIAtW GlV9FWcLoJSso1Zs06yb2LpMCTDTwEB5EZHZU4AZ7GjEOuXoy+a4+Tgbh5DYOLRI IXGCe7UB3WVOq94K5WzKrMFo47Vv1C6V1jOJtnGT1s+ONyQ5nfZ2Xvpy+NntaTGC dEqkiXuk0wYQ+AB0VMu6Pk0Jc1GFOH+b9x+sjYFLSoFOhTRFgH5vDZJpp4OcsiI7 mMHIfehnAVO3SUsHNbVstG4VUlRVnvC4r9OpipPP69q4A7ko6wE= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:50 2025 by rpki-client