$ rpki-client -vvf repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft File: 6886844AB176920850E0984917E9713667D0A025.mft (raw, json) Hash identifier: vHhfJZNlD2DS+sR+iztGV48tcFN734buFqEJlcWzBYs= Subject key identifier: A7:F1:D2:9D:F1:C1:36:C8:AD:0C:73:AF:A4:31:DF:14:62:9F:DF:C2 Authority key identifier: 68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25 Certificate issuer: /CN=6886844AB176920850E0984917E9713667D0A025 Certificate serial: 7AAB283449064BDFB07CABEA48971B4334456849 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft Manifest number: 01CB Signing time: Sun 19 Oct 2025 02:02:16 +0000 Manifest this update: Sun 19 Oct 2025 01:57:16 +0000 Manifest next update: Wed 22 Oct 2025 07:56:16 +0000 Files and hashes: 1: 6886844AB176920850E0984917E9713667D0A025.crl (hash: zGK0e58Cb/tj+0UZ3rckTZtdA7vHWZtZi/wv5jr5rPE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 07:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:ab:28:34:49:06:4b:df:b0:7c:ab:ea:48:97:1b:43:34:45:68:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6886844AB176920850E0984917E9713667D0A025 Validity Not Before: Oct 19 01:57:16 2025 GMT Not After : Oct 22 07:56:16 2025 GMT Subject: CN=A7F1D29DF1C136C8AD0C73AFA431DF14629FDFC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7e:2b:32:ee:3a:ec:94:9c:c2:55:f8:7b:0f: 18:d2:93:17:f8:11:e1:3b:03:a4:c5:48:13:11:fe: 3f:98:a2:c7:01:76:5d:8e:9f:4f:82:83:f2:b6:be: e8:ef:4a:53:28:a0:5d:82:6d:26:30:ee:59:7a:cf: a8:0f:ee:13:2d:a8:cc:b9:dd:de:ea:88:e7:a7:75: 43:f2:20:c5:0e:96:4e:78:c3:90:23:40:d8:47:93: 14:e7:41:c0:d7:0a:08:3d:eb:ee:c3:af:d9:b9:fa: 08:e0:2f:79:53:49:bc:bf:75:df:d5:e6:d2:2f:8a: 98:aa:cd:51:77:28:80:a0:68:54:79:d5:e4:8d:8b: ed:fc:28:04:d1:4f:80:6e:e7:b5:de:1d:29:66:aa: 2e:87:02:c6:42:b8:b9:92:cf:c5:7e:ef:47:ba:a4: af:d1:68:ec:1f:e6:76:8a:43:83:1e:5d:f3:80:64: 6e:c1:c7:a3:2c:89:76:36:14:17:e9:a6:ab:d0:bd: 70:04:37:20:87:72:6b:49:f9:c3:34:15:03:37:fc: 21:e9:8b:cd:92:ff:9e:d7:6a:33:55:6a:54:b4:fc: 59:fa:74:c9:ee:3d:a7:c7:ce:03:bf:ed:e4:ab:18: 6d:1a:9f:30:9b:80:62:98:5b:06:bb:e8:d3:5f:79: 47:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F1:D2:9D:F1:C1:36:C8:AD:0C:73:AF:A4:31:DF:14:62:9F:DF:C2 X509v3 Authority Key Identifier: keyid:68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:42:66:63:1f:08:42:4c:65:55:16:54:0b:0e:33:70:86:ca: 84:0d:cc:8c:b7:90:85:e4:08:7a:48:53:ce:d3:a0:4a:ab:33: 0a:48:72:3d:b2:f6:f4:b3:d2:37:ea:20:f7:a5:d7:15:25:03: 8c:e5:4f:b5:89:d2:b1:1a:cb:c9:6e:8f:d6:74:22:b1:04:90: c6:5e:40:ed:d0:87:78:52:b1:a7:93:6e:9f:8e:de:27:2f:40: 0b:89:11:5a:c7:3d:91:2c:43:46:be:f3:3c:55:fd:a0:a6:a2: d6:80:42:92:28:0c:11:b4:9e:29:17:35:ba:ea:6a:a8:55:5c: 57:15:95:26:a1:97:04:ee:28:7f:53:44:63:55:a3:49:f6:85: a1:f1:0e:7b:b2:d7:64:02:f0:10:6e:e3:0a:2e:6b:66:1c:ef: cb:96:9d:1a:4c:ed:42:23:bb:a0:df:e6:71:bc:8d:6a:37:b6: 66:89:8f:03:c4:d1:f2:a8:1f:c4:07:2b:73:8e:0b:a1:6a:c8: 7c:2e:6f:f0:a5:9b:fb:75:93:92:59:d5:17:80:ff:31:c2:ea: 64:29:37:24:0b:ae:b2:31:77:70:30:7f:77:07:51:f9:9a:4e: 06:ea:08:ce:fd:ce:61:48:71:35:7b:c4:ef:ab:ec:92:ea:01: 45:fd:27:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeqsoNEkGS9+wfKvqSJcbQzRFaEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcxMzY2 N0QwQTAyNTAeFw0yNTEwMTkwMTU3MTZaFw0yNTEwMjIwNzU2MTZaMDMxMTAvBgNV BAMTKEE3RjFEMjlERjFDMTM2QzhBRDBDNzNBRkE0MzFERjE0NjI5RkRGQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFfisy7jrslJzCVfh7DxjSkxf4 EeE7A6TFSBMR/j+YoscBdl2On0+Cg/K2vujvSlMooF2CbSYw7ll6z6gP7hMtqMy5 3d7qiOendUPyIMUOlk54w5AjQNhHkxTnQcDXCgg96+7Dr9m5+gjgL3lTSby/dd/V 5tIvipiqzVF3KICgaFR51eSNi+38KATRT4Bu57XeHSlmqi6HAsZCuLmSz8V+70e6 pK/RaOwf5naKQ4MeXfOAZG7Bx6MsiXY2FBfppqvQvXAENyCHcmtJ+cM0FQM3/CHp i82S/57XajNValS0/Fn6dMnuPafHzgO/7eSrGG0anzCbgGKYWwa76NNfeUfXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp/HSnfHBNsitDHOvpDHfFGKf38IwHwYDVR0j BBgwFoAUaIaESrF2kghQ4JhJF+lxNmfQoCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDU1Y2IyOS01Mjc2LTRhNzktYjMzYS1jYzUxNTE3YmRkMTgvMC82ODg2ODQ0QUIx NzY5MjA4NTBFMDk4NDkxN0U5NzEzNjY3RDBBMDI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcxMzY2N0Qw QTAyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ1NWNiMjktNTI3Ni00YTc5LWIz M2EtY2M1MTUxN2JkZDE4LzAvNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcx MzY2N0QwQTAyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBCZmMfCEJMZVUWVAsOM3CGyoQNzIy3kIXk CHpIU87ToEqrMwpIcj2y9vSz0jfqIPel1xUlA4zlT7WJ0rEay8luj9Z0IrEEkMZe QO3Qh3hSsaeTbp+O3icvQAuJEVrHPZEsQ0a+8zxV/aCmotaAQpIoDBG0nikXNbrq aqhVXFcVlSahlwTuKH9TRGNVo0n2haHxDnuy12QC8BBu4woua2Yc78uWnRpM7UIj u6Df5nG8jWo3tmaJjwPE0fKoH8QHK3OOC6FqyHwub/Clm/t1k5JZ1ReA/zHC6mQp NyQLrrIxd3Awf3cHUfmaTgbqCM79zmFIcTV7xO+r7JLqAUX9J1Y= -----END CERTIFICATE-----Generated at Mon Oct 20 13:58:26 2025 by rpki-client