$ rpki-client -vvf repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.mft File: C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.mft (raw, json) Hash identifier: VrYHB3Bc3K+I7qoHRJJnexD+xiWO7AbIpHvVOElp8IY= Subject key identifier: 72:89:0D:7E:93:50:D5:DA:CD:2D:3D:B0:B6:99:D1:AD:AF:6E:6F:B7 Authority key identifier: C6:E9:3E:AA:6C:14:3C:47:BB:6C:1F:02:2B:52:4F:9C:08:9D:B6:F0 Certificate issuer: /CN=C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0 Certificate serial: 38FF1AC0896F21022C55488DC423534DDFACC5E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.mft Manifest number: 046F Signing time: Sat 18 Oct 2025 06:22:12 +0000 Manifest this update: Sat 18 Oct 2025 06:17:12 +0000 Manifest next update: Tue 21 Oct 2025 10:00:12 +0000 Files and hashes: 1: C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.crl (hash: 4tXO7NIRt/pw4RU1gZbgwpi/BLPvzUpWioWLsxfzJLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.crl rsync://repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 10:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ff:1a:c0:89:6f:21:02:2c:55:48:8d:c4:23:53:4d:df:ac:c5:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0 Validity Not Before: Oct 18 06:17:12 2025 GMT Not After : Oct 21 10:00:12 2025 GMT Subject: CN=72890D7E9350D5DACD2D3DB0B699D1ADAF6E6FB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:99:69:80:95:77:d7:d6:7a:a2:02:59:1c:de: fc:fe:e8:39:b4:35:d2:4c:7c:09:82:2a:d8:c2:ba: e8:e0:ed:9c:de:32:9a:a0:ed:aa:9c:d2:59:9b:27: ca:35:6c:42:07:3b:fd:3c:b6:67:6c:83:65:2c:7e: ab:c0:f6:26:d5:fd:66:93:11:ed:6c:e6:79:b7:0b: 15:1e:62:ed:b2:ee:95:33:9c:46:7e:9b:63:1a:c9: 2b:5d:fd:6b:96:df:2c:93:1d:2c:f9:fd:96:d3:b2: e7:22:6e:7a:f5:d2:6c:ae:5a:a8:2f:f4:ae:3d:7d: e8:61:73:f9:23:76:5d:1e:a7:ae:09:2a:a2:d5:a1: 69:3d:5f:6d:1b:90:f8:d2:77:bd:02:69:26:fc:b1: 35:b4:5e:e3:dd:a9:be:59:51:23:c1:af:c2:14:86: 19:19:a9:40:21:3e:8f:92:f7:57:ac:fb:bd:d2:af: 08:18:29:2e:69:60:3d:f2:1f:1b:78:54:09:9f:6c: 42:2e:a9:fa:3b:ab:e2:4b:cb:4c:a1:24:6b:5b:e1: cf:26:e4:ef:05:10:f3:6f:3b:33:fd:cb:f0:58:b5: ce:d4:f6:35:48:2b:27:d1:8d:ee:75:bc:19:bc:bf: 58:8d:d5:cd:99:a7:0d:ee:ec:48:af:86:58:1a:83: 1a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:89:0D:7E:93:50:D5:DA:CD:2D:3D:B0:B6:99:D1:AD:AF:6E:6F:B7 X509v3 Authority Key Identifier: keyid:C6:E9:3E:AA:6C:14:3C:47:BB:6C:1F:02:2B:52:4F:9C:08:9D:B6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66a6bca8-3741-44ef-8a5f-0e76b80d4146/0/C6E93EAA6C143C47BB6C1F022B524F9C089DB6F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:82:df:ba:a5:5c:f1:4a:bc:f7:aa:a5:77:c1:4d:2d:61:1e: 4d:0b:ec:47:30:3e:d6:ab:49:1b:20:87:14:7f:02:a3:32:22: 2c:a8:f5:16:c0:4d:ee:89:8e:09:a5:5e:e1:02:9b:03:a0:f0: c5:98:06:4c:70:ce:a2:ed:3a:eb:94:e1:0b:d5:34:75:5b:48: 4c:b1:a4:4e:87:48:19:4a:7a:50:48:ed:c4:88:0e:c2:c5:d8: 70:60:84:29:73:1d:83:7f:7f:21:22:17:84:dd:e7:21:7c:1d: 25:09:9e:21:b9:16:2c:71:e4:f1:f7:59:55:36:cc:ae:25:04: 55:39:1f:18:c2:81:82:f7:9c:aa:12:ad:97:7a:91:8b:61:a2: 45:ce:de:8e:c6:f0:01:0f:c3:bc:40:fe:ef:99:ea:f8:6c:fd: 32:7a:11:c7:1e:5b:aa:8e:6e:7a:15:09:7c:dc:ce:b3:b9:40: e2:eb:f8:7e:ed:8a:37:7f:ba:bf:50:69:2f:90:e1:b8:b3:96: b9:0b:72:2f:92:27:96:de:36:c0:35:6f:50:ba:a8:a6:c6:ad: 4b:d8:b8:b6:9d:f9:03:cd:e5:fd:1a:b6:e2:05:6a:3e:b5:a9: f4:b9:16:9c:04:24:8e:d8:33:b7:5b:2f:ad:ca:c2:8c:b1:28: dc:d4:12:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOP8awIlvIQIsVUiNxCNTTd+sxeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZFOTNFQUE2QzE0M0M0N0JCNkMxRjAyMkI1MjRGOUMw ODlEQjZGMDAeFw0yNTEwMTgwNjE3MTJaFw0yNTEwMjExMDAwMTJaMDMxMTAvBgNV BAMTKDcyODkwRDdFOTM1MEQ1REFDRDJEM0RCMEI2OTlEMUFEQUY2RTZGQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnmWmAlXfX1nqiAlkc3vz+6Dm0 NdJMfAmCKtjCuujg7ZzeMpqg7aqc0lmbJ8o1bEIHO/08tmdsg2UsfqvA9ibV/WaT Ee1s5nm3CxUeYu2y7pUznEZ+m2MayStd/WuW3yyTHSz5/ZbTsucibnr10myuWqgv 9K49fehhc/kjdl0ep64JKqLVoWk9X20bkPjSd70CaSb8sTW0XuPdqb5ZUSPBr8IU hhkZqUAhPo+S91es+73SrwgYKS5pYD3yHxt4VAmfbEIuqfo7q+JLy0yhJGtb4c8m 5O8FEPNvOzP9y/BYtc7U9jVIKyfRje51vBm8v1iN1c2Zpw3u7EivhlgagxqTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcokNfpNQ1drNLT2wtpnRra9ub7cwHwYDVR0j BBgwFoAUxuk+qmwUPEe7bB8CK1JPnAidtvAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmE2YmNhOC0zNzQxLTQ0ZWYtOGE1Zi0wZTc2YjgwZDQxNDYvMC9DNkU5M0VBQTZD MTQzQzQ3QkI2QzFGMDIyQjUyNEY5QzA4OURCNkYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzZFOTNFQUE2QzE0M0M0N0JCNkMxRjAyMkI1MjRGOUMwODlE QjZGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZhNmJjYTgtMzc0MS00NGVmLThh NWYtMGU3NmI4MGQ0MTQ2LzAvQzZFOTNFQUE2QzE0M0M0N0JCNkMxRjAyMkI1MjRG OUMwODlEQjZGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+C37qlXPFKvPeqpXfBTS1hHk0L7EcwPtar SRsghxR/AqMyIiyo9RbATe6JjgmlXuECmwOg8MWYBkxwzqLtOuuU4QvVNHVbSEyx pE6HSBlKelBI7cSIDsLF2HBghClzHYN/fyEiF4Td5yF8HSUJniG5Fixx5PH3WVU2 zK4lBFU5HxjCgYL3nKoSrZd6kYthokXO3o7G8AEPw7xA/u+Z6vhs/TJ6EcceW6qO bnoVCXzczrO5QOLr+H7tijd/ur9QaS+Q4bizlrkLci+SJ5beNsA1b1C6qKbGrUvY uLad+QPN5f0atuIFaj61qfS5FpwEJI7YM7dbL63KwoyxKNzUEnM= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:22 2025 by rpki-client