$ rpki-client -vvf repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft File: C00606846C7D0E540F5703EC90A0C331460D7ECA.mft (raw, json) Hash identifier: eA3fLqzjY9c0BxCsMplaPEkM5+Mwt6iYpQytDfz8ZvM= Subject key identifier: 55:0D:92:FC:E9:4B:C0:44:5F:AF:42:7B:AD:4B:91:3F:19:C3:D7:AF Authority key identifier: C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA Certificate issuer: /CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Certificate serial: 339BFDD26E7F4556D24659F55C29EEB478E0631E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft Manifest number: D2 Signing time: Sun 19 Oct 2025 17:11:20 +0000 Manifest this update: Sun 19 Oct 2025 17:06:20 +0000 Manifest next update: Wed 22 Oct 2025 22:52:20 +0000 Files and hashes: 1: C00606846C7D0E540F5703EC90A0C331460D7ECA.crl (hash: NbIez/vZC4HD+9v7KIbXJ4uHuk2/wchwTZ0LIOKEOrk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 22:52:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:9b:fd:d2:6e:7f:45:56:d2:46:59:f5:5c:29:ee:b4:78:e0:63:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Validity Not Before: Oct 19 17:06:20 2025 GMT Not After : Oct 22 22:52:20 2025 GMT Subject: CN=550D92FCE94BC0445FAF427BAD4B913F19C3D7AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:13:57:f7:c7:d3:24:2d:9b:05:71:18:d9:b5: c1:2d:5e:a5:7b:ca:cf:76:01:86:80:5c:08:18:f0: 87:92:e4:38:45:3b:41:30:19:bc:a6:ab:6d:8f:80: 71:84:19:4b:93:0c:98:dd:8b:ca:98:03:da:58:9c: 92:ea:55:1f:4a:f3:e8:e5:b9:3d:bb:fb:a1:5e:b3: 4a:72:7b:4d:bd:79:e0:d5:7e:89:46:b8:5a:e3:d3: 98:ab:4f:6b:70:e7:77:4e:77:15:c3:1c:1f:a5:d3: 1c:d4:23:6a:3e:49:9e:32:1d:f4:be:f9:55:a9:18: a9:35:c4:28:3b:e9:68:a9:13:36:ad:d7:13:9a:fb: 40:55:8f:74:36:36:07:13:33:23:9a:e8:c9:e7:ed: 2c:0e:d0:fa:30:49:34:c0:93:74:08:18:a4:38:b8: 54:3a:dc:5f:57:a8:7f:60:a9:45:9d:b1:62:6a:1b: 32:ff:42:a7:a9:46:ae:1f:d9:c2:a9:2c:ad:37:b6: dc:9a:3c:4a:e1:1a:4f:03:b1:9e:c8:aa:fd:ea:75: ae:c6:8a:a2:bd:04:e6:81:01:d5:4f:82:6f:f0:c4: 48:3b:8c:70:2c:82:b1:16:f0:ce:ed:22:c3:22:31: b8:8c:19:5e:a7:20:ff:1c:48:4e:f0:55:74:fe:31: 95:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:0D:92:FC:E9:4B:C0:44:5F:AF:42:7B:AD:4B:91:3F:19:C3:D7:AF X509v3 Authority Key Identifier: keyid:C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:df:97:ea:cd:f7:eb:99:8f:5b:e0:18:87:93:78:b6:6b:2d: 60:f8:06:7a:ef:6b:8c:fe:3d:b5:6d:04:19:20:0c:22:68:57: fc:ea:c6:20:9f:6c:c7:97:1a:af:de:0d:08:bf:e2:f0:1f:86: 56:7c:87:6c:9f:6d:fd:47:ea:29:bc:62:88:5c:c5:35:ae:e4: f9:a8:10:bd:0b:34:f0:cb:1f:5f:cd:9c:9b:1f:0e:c3:59:8f: 1b:8b:94:f4:38:0e:c6:fe:c3:4d:c0:05:38:e8:4f:15:6a:b0: 19:41:57:10:35:49:e1:2e:e1:bb:dc:7d:87:24:48:03:1c:74: 67:47:88:5e:55:f7:ac:7f:6d:9c:c4:82:42:7b:0f:32:f6:22: 39:41:6d:be:4f:7c:3b:bb:95:3b:20:af:ca:25:1a:cb:35:23: e6:50:fd:0b:f2:2e:8b:fd:37:24:7c:0a:35:4a:bc:52:cb:12: c2:ba:ba:62:bd:b3:68:87:be:2e:a3:0c:f7:eb:81:fa:fb:a1: 3f:65:0e:e0:3b:18:07:1a:09:8e:3a:83:09:9d:8c:d4:4b:2f: 18:38:fa:00:f8:f6:4b:86:67:a8:d9:a4:c8:55:f4:a3:cd:b4: 9f:76:0e:f8:b9:37:82:3c:ce:32:3b:71:ab:3b:13:67:0a:d2: 94:13:91:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM5v90m5/RVbSRln1XCnutHjgYx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0 NjBEN0VDQTAeFw0yNTEwMTkxNzA2MjBaFw0yNTEwMjIyMjUyMjBaMDMxMTAvBgNV BAMTKDU1MEQ5MkZDRTk0QkMwNDQ1RkFGNDI3QkFENEI5MTNGMTlDM0Q3QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEE1f3x9MkLZsFcRjZtcEtXqV7 ys92AYaAXAgY8IeS5DhFO0EwGbymq22PgHGEGUuTDJjdi8qYA9pYnJLqVR9K8+jl uT27+6Fes0pye029eeDVfolGuFrj05irT2tw53dOdxXDHB+l0xzUI2o+SZ4yHfS+ +VWpGKk1xCg76WipEzat1xOa+0BVj3Q2NgcTMyOa6Mnn7SwO0PowSTTAk3QIGKQ4 uFQ63F9XqH9gqUWdsWJqGzL/QqepRq4f2cKpLK03ttyaPErhGk8DsZ7Iqv3qda7G iqK9BOaBAdVPgm/wxEg7jHAsgrEW8M7tIsMiMbiMGV6nIP8cSE7wVXT+MZXnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVQ2S/OlLwERfr0J7rUuRPxnD168wHwYDVR0j BBgwFoAUwAYGhGx9DlQPVwPskKDDMUYNfsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTMzNGQwMy1lYWU0LTRkMjAtYmE1NC1iMTg4OWQ5MjQ3YWMvMC9DMDA2MDY4NDZD N0QwRTU0MEY1NzAzRUM5MEEwQzMzMTQ2MEQ3RUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0NjBE N0VDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjEzMzRkMDMtZWFlNC00ZDIwLWJh NTQtYjE4ODlkOTI0N2FjLzAvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMz MzE0NjBEN0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXfl+rN9+uZj1vgGIeTeLZrLWD4Bnrva4z+ PbVtBBkgDCJoV/zqxiCfbMeXGq/eDQi/4vAfhlZ8h2yfbf1H6im8YohcxTWu5Pmo EL0LNPDLH1/NnJsfDsNZjxuLlPQ4Dsb+w03ABTjoTxVqsBlBVxA1SeEu4bvcfYck SAMcdGdHiF5V96x/bZzEgkJ7DzL2IjlBbb5PfDu7lTsgr8olGss1I+ZQ/QvyLov9 NyR8CjVKvFLLEsK6umK9s2iHvi6jDPfrgfr7oT9lDuA7GAcaCY46gwmdjNRLLxg4 +gD49kuGZ6jZpMhV9KPNtJ92Dvi5N4I8zjI7cas7E2cK0pQTkTs= -----END CERTIFICATE-----Generated at Mon Oct 20 06:54:10 2025 by rpki-client