$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft File: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft (raw, json) Hash identifier: n/rwRtBFWi8p5gf5elA96rpTXt5+M+uvm92PqRKHhzE= Subject key identifier: 8D:47:CF:C5:82:0D:D9:BA:B0:94:DB:A6:BF:BE:04:BD:E1:E3:60:C6 Authority key identifier: 6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 Certificate issuer: /CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Certificate serial: 4DA3868C1C90D483E1458E81008DD20077F75957 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft Manifest number: 031C Signing time: Thu 13 Nov 2025 01:11:33 +0000 Manifest this update: Thu 13 Nov 2025 01:06:33 +0000 Manifest next update: Sun 16 Nov 2025 09:51:33 +0000 Files and hashes: 1: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl (hash: d8iCF4lgce2LNDvl6CP4GWg0WEePG/abtQy/ICvA+ng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Nov 2025 09:51:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:a3:86:8c:1c:90:d4:83:e1:45:8e:81:00:8d:d2:00:77:f7:59:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Validity Not Before: Nov 13 01:06:33 2025 GMT Not After : Nov 16 09:51:33 2025 GMT Subject: CN=8D47CFC5820DD9BAB094DBA6BFBE04BDE1E360C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:83:f5:59:ff:bd:30:53:21:8d:1d:43:c4:98: f0:d0:f3:ef:bd:69:de:98:29:f6:21:05:fd:95:c9: bc:fe:a5:8b:e8:ce:37:b8:a5:cd:8d:04:e2:50:f3: 1f:d9:02:72:4f:14:b3:0f:20:f8:2a:75:43:a7:79: 5c:6b:6e:97:24:1b:13:c4:84:7d:51:cb:24:cf:13: 63:51:37:67:88:4c:1c:4f:44:8d:6c:93:ee:e8:d0: 98:96:9e:fd:7c:7f:5f:64:c2:90:ae:5a:82:0f:81: c5:99:f6:78:38:6d:5c:c8:ee:44:8a:db:d2:6d:52: 24:43:a6:df:8e:2d:5f:41:f1:39:83:57:c9:b7:15: d0:23:4f:50:13:58:3c:4f:74:f5:a9:e2:bd:77:0d: b3:55:74:6f:0e:e1:52:9b:9a:17:b4:0c:d9:a5:68: b9:c2:88:12:6a:84:77:1f:b1:41:9b:44:7f:24:7a: b1:99:42:c9:d2:eb:72:24:f5:52:29:32:30:3f:98: 44:bf:e3:22:a9:88:55:71:0d:4e:34:67:a7:3e:f9: 21:5b:68:4f:03:89:aa:d6:ad:6b:78:36:b2:03:64: f1:9e:59:bd:4c:59:67:d7:ca:1d:c9:76:01:53:05: 79:64:5f:0e:a0:2c:a3:d5:39:29:0b:92:8f:cc:e5: d5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:47:CF:C5:82:0D:D9:BA:B0:94:DB:A6:BF:BE:04:BD:E1:E3:60:C6 X509v3 Authority Key Identifier: keyid:6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:30:0a:d4:24:84:2b:13:8a:10:6f:6c:fc:e0:98:cb:05:04: 92:01:97:f9:68:e2:11:29:07:ef:b2:d3:6b:a6:f5:dc:6c:36: 1a:3e:d2:cc:69:b9:e9:98:98:d4:d0:ca:a5:ea:54:0f:54:0b: ad:85:b3:e4:44:18:b2:98:d2:9b:a8:ab:36:42:5a:36:75:70: ef:5e:38:da:cd:ae:20:f7:8a:51:79:92:b0:67:17:65:d1:76: 85:9b:1d:31:7b:21:bb:c4:52:15:bc:8d:dc:d9:df:b8:06:67: 73:21:15:98:b5:52:b5:45:63:cf:8e:b3:5f:fd:bb:d8:5f:f3: d6:7e:e6:d5:41:04:b7:76:fd:f1:b3:d5:e5:57:3f:73:13:a4: 38:5b:f9:02:ed:5a:d6:f5:76:bd:09:02:cd:eb:a4:29:3d:79: 29:d8:f2:37:6f:4b:02:f0:e0:01:b3:8b:95:25:97:ac:2e:7a: 07:8d:10:e4:99:94:e8:67:cf:1f:20:df:bd:57:00:a4:a8:11: 72:55:ce:a9:cd:8a:c3:9a:13:61:33:c5:79:c2:f2:ec:0c:df: 38:e1:ff:80:2b:85:91:b8:55:34:19:c5:9c:09:d1:55:38:c3: db:ee:2a:9c:0d:3f:70:29:90:11:9c:f4:22:f6:44:0c:a9:06: 81:78:60:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTaOGjByQ1IPhRY6BAI3SAHf3WVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2MDAw RjI1NjFGNzAeFw0yNTExMTMwMTA2MzNaFw0yNTExMTYwOTUxMzNaMDMxMTAvBgNV BAMTKDhENDdDRkM1ODIwREQ5QkFCMDk0REJBNkJGQkUwNEJERTFFMzYwQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDog/VZ/70wUyGNHUPEmPDQ8++9 ad6YKfYhBf2Vybz+pYvozje4pc2NBOJQ8x/ZAnJPFLMPIPgqdUOneVxrbpckGxPE hH1RyyTPE2NRN2eITBxPRI1sk+7o0JiWnv18f19kwpCuWoIPgcWZ9ng4bVzI7kSK 29JtUiRDpt+OLV9B8TmDV8m3FdAjT1ATWDxPdPWp4r13DbNVdG8O4VKbmhe0DNml aLnCiBJqhHcfsUGbRH8kerGZQsnS63Ik9VIpMjA/mES/4yKpiFVxDU40Z6c++SFb aE8DiarWrWt4NrIDZPGeWb1MWWfXyh3JdgFTBXlkXw6gLKPVOSkLko/M5dV9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjUfPxYIN2bqwlNumv74EveHjYMYwHwYDVR0j BBgwFoAUbeqbJ17M+5IOCoTQ0VjGAA8lYfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWI3N2QxZS0xNTg1LTQ2MDQtYjZiMS0wNzFmMGEyOTQwYzQvMC82REVBOUIyNzVF Q0NGQjkyMEUwQTg0RDBEMTU4QzYwMDBGMjU2MUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2MDAwRjI1 NjFGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiNzdkMWUtMTU4NS00NjA0LWI2 YjEtMDcxZjBhMjk0MGM0LzAvNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2 MDAwRjI1NjFGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMwCtQkhCsTihBvbPzgmMsFBJIBl/lo4hEp B++y02um9dxsNho+0sxpuemYmNTQyqXqVA9UC62Fs+REGLKY0puoqzZCWjZ1cO9e ONrNriD3ilF5krBnF2XRdoWbHTF7IbvEUhW8jdzZ37gGZ3MhFZi1UrVFY8+Os1/9 u9hf89Z+5tVBBLd2/fGz1eVXP3MTpDhb+QLtWtb1dr0JAs3rpCk9eSnY8jdvSwLw 4AGzi5Ull6wuegeNEOSZlOhnzx8g371XAKSoEXJVzqnNisOaE2EzxXnC8uwM3zjh /4ArhZG4VTQZxZwJ0VU4w9vuKpwNP3ApkBGc9CL2RAypBoF4YEI= -----END CERTIFICATE-----Generated at Thu Nov 13 17:04:59 2025 by rpki-client