$ rpki-client -vvf repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.mft File: A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.mft (raw, json) Hash identifier: irIrX8z9Pjbl79KbXMhoOrH/0tXL0z34CeJ9BHmLZXU= Subject key identifier: 1D:30:6D:81:68:CE:B6:EA:2B:C0:CE:EA:AB:C1:96:DF:53:E4:C2:00 Authority key identifier: A6:01:5E:5E:26:05:D4:FD:F6:8E:B9:6F:96:A9:89:4C:EA:EC:DF:BF Certificate issuer: /CN=A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF Certificate serial: 05A9AE3FE0158E549DFC638FF08B851BDF46F844 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.mft Manifest number: 01EA Signing time: Sat 06 Sep 2025 00:51:44 +0000 Manifest this update: Sat 06 Sep 2025 00:46:44 +0000 Manifest next update: Tue 09 Sep 2025 08:13:44 +0000 Files and hashes: 1: A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.crl (hash: rv6UMMHnJNCvsBITMaygweRtUNQOWLWNvR0QRosNsfE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.crl rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 08:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:a9:ae:3f:e0:15:8e:54:9d:fc:63:8f:f0:8b:85:1b:df:46:f8:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF Validity Not Before: Sep 6 00:46:44 2025 GMT Not After : Sep 9 08:13:44 2025 GMT Subject: CN=1D306D8168CEB6EA2BC0CEEAABC196DF53E4C200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1b:57:15:c3:76:64:75:27:18:83:b9:5e:01: 30:15:65:8a:9c:89:a5:e3:03:c5:3c:13:7a:31:40: 4b:fe:db:1a:87:e0:d2:23:aa:02:4c:bc:79:65:b2: cc:05:1b:4c:75:87:43:bb:e3:7c:4e:a7:f7:7e:c1: 88:9f:bb:28:11:04:02:b4:43:16:4c:2f:9a:60:d5: 9d:e3:49:c1:e9:37:7f:f6:36:a3:30:b7:9b:7e:f3: f0:2c:31:0c:68:5b:23:12:0f:5e:a9:b8:3c:c1:8c: 84:5a:ef:cb:40:63:b8:bf:93:e6:83:4e:41:ea:3a: 19:6d:aa:74:20:6b:28:d7:3f:20:f3:7b:2c:d4:ae: c7:f2:ae:0c:8e:8b:ff:42:21:1c:c2:5d:19:94:d8: 00:5f:86:79:27:b4:7d:1c:f2:c1:b3:f5:94:7d:2b: 1b:f2:6c:c1:55:86:bb:dc:6a:92:c4:4e:91:24:c8: 14:89:48:e6:95:88:40:27:73:62:0f:73:e8:40:1a: 62:ec:e4:2a:6a:39:a5:80:05:3b:f6:aa:af:b7:9a: b6:db:52:38:60:3e:8c:7d:23:b1:45:78:16:a2:73: 7e:6b:8a:cd:5d:da:dd:15:b7:af:e7:ae:dd:8b:31: 82:0e:b4:ab:bc:83:fb:a7:74:1b:79:50:25:0d:87: 61:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:30:6D:81:68:CE:B6:EA:2B:C0:CE:EA:AB:C1:96:DF:53:E4:C2:00 X509v3 Authority Key Identifier: keyid:A6:01:5E:5E:26:05:D4:FD:F6:8E:B9:6F:96:A9:89:4C:EA:EC:DF:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:c7:4d:a9:f0:7f:97:50:58:ff:ff:ad:d8:76:47:7e:18:4c: 97:28:ea:05:19:f9:24:e2:be:97:02:86:83:ec:e3:59:25:0e: 6f:80:b4:6e:0f:0d:f6:3a:ce:78:fd:44:02:9a:08:77:25:cb: 6d:bd:87:8a:f2:bb:93:94:a1:37:06:eb:d5:f2:09:b6:2e:01: 95:e0:76:81:3e:da:03:5a:d5:a3:3d:3f:58:4b:07:cd:28:d4: 7a:c1:9a:39:26:d5:bb:e8:31:04:47:19:92:cf:94:8b:e8:16: 86:71:b0:84:1a:e6:00:86:1c:6a:20:73:37:04:dd:5e:3e:9f: e5:fc:36:14:11:7d:6b:67:84:0d:ee:ec:f4:9a:58:6b:02:94: 66:c5:e4:7b:e0:7f:c5:8c:a0:59:3b:0c:7f:c6:47:ba:6c:af: 3d:b3:62:51:d7:77:42:ed:32:7d:86:e4:29:4d:07:c8:a3:82: 63:a7:8a:23:2c:a5:37:6f:88:34:19:fb:1a:ce:e9:b6:c5:15: 32:36:5f:2d:5f:62:19:a9:18:1c:d7:b7:b3:9a:96:2b:10:4c: b5:90:3e:45:3c:38:dc:fc:2d:c1:a6:e2:8f:0e:1b:6e:5d:ac: 93:ac:8f:7f:68:41:1a:65:f6:a5:65:4f:9d:99:22:e8:7b:aa: 6c:0c:49:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBamuP+AVjlSd/GOP8IuFG99G+EQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwMTVFNUUyNjA1RDRGREY2OEVCOTZGOTZBOTg5NENF QUVDREZCRjAeFw0yNTA5MDYwMDQ2NDRaFw0yNTA5MDkwODEzNDRaMDMxMTAvBgNV BAMTKDFEMzA2RDgxNjhDRUI2RUEyQkMwQ0VFQUFCQzE5NkRGNTNFNEMyMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdG1cVw3ZkdScYg7leATAVZYqc iaXjA8U8E3oxQEv+2xqH4NIjqgJMvHllsswFG0x1h0O743xOp/d+wYifuygRBAK0 QxZML5pg1Z3jScHpN3/2NqMwt5t+8/AsMQxoWyMSD16puDzBjIRa78tAY7i/k+aD TkHqOhltqnQgayjXPyDzeyzUrsfyrgyOi/9CIRzCXRmU2ABfhnkntH0c8sGz9ZR9 KxvybMFVhrvcapLETpEkyBSJSOaViEAnc2IPc+hAGmLs5CpqOaWABTv2qq+3mrbb UjhgPox9I7FFeBaic35ris1d2t0Vt6/nrt2LMYIOtKu8g/undBt5UCUNh2GlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHTBtgWjOtuorwM7qq8GW31PkwgAwHwYDVR0j BBgwFoAUpgFeXiYF1P32jrlvlqmJTOrs378wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGQzZWYyYy03ODFkLTRkMGMtYTY4Mi05MWFjMDExZWY2YjcvMC9BNjAxNUU1RTI2 MDVENEZERjY4RUI5NkY5NkE5ODk0Q0VBRUNERkJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYwMTVFNUUyNjA1RDRGREY2OEVCOTZGOTZBOTg5NENFQUVD REZCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRkM2VmMmMtNzgxZC00ZDBjLWE2 ODItOTFhYzAxMWVmNmI3LzAvQTYwMTVFNUUyNjA1RDRGREY2OEVCOTZGOTZBOTg5 NENFQUVDREZCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHHTanwf5dQWP//rdh2R34YTJco6gUZ+STi vpcChoPs41klDm+AtG4PDfY6znj9RAKaCHcly229h4ryu5OUoTcG69XyCbYuAZXg doE+2gNa1aM9P1hLB80o1HrBmjkm1bvoMQRHGZLPlIvoFoZxsIQa5gCGHGogczcE 3V4+n+X8NhQRfWtnhA3u7PSaWGsClGbF5Hvgf8WMoFk7DH/GR7psrz2zYlHXd0Lt Mn2G5ClNB8ijgmOniiMspTdviDQZ+xrO6bbFFTI2Xy1fYhmpGBzXt7OalisQTLWQ PkU8ONz8LcGm4o8OG25drJOsj39oQRpl9qVlT52ZIuh7qmwMSeU= -----END CERTIFICATE-----Generated at Sun Sep 7 13:55:58 2025 by rpki-client