$ rpki-client -vvf repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft File: 6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft (raw, json) Hash identifier: 8ybdgqY/8VQx13qy2dC9YsvylJ0Qb6ABoQmWFi4QYeU= Subject key identifier: FF:D5:13:36:C6:A1:DB:79:7D:E4:19:46:7E:FE:60:0A:70:C7:4F:B3 Authority key identifier: 6E:87:49:98:2F:80:EA:7E:AC:3A:4C:80:01:6F:AC:EC:04:9A:89:FB Certificate issuer: /CN=6E8749982F80EA7EAC3A4C80016FACEC049A89FB Certificate serial: 6816D1A4643800205FBCF8630922514AE5F7AB0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft Manifest number: 019E Signing time: Mon 20 Oct 2025 01:41:37 +0000 Manifest this update: Mon 20 Oct 2025 01:36:37 +0000 Manifest next update: Thu 23 Oct 2025 10:04:37 +0000 Files and hashes: 1: 6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl (hash: fvmnSCyssqI73xOpGKsmQ1sRcyqCDP2e38s2NWp7fqo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:16:d1:a4:64:38:00:20:5f:bc:f8:63:09:22:51:4a:e5:f7:ab:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E8749982F80EA7EAC3A4C80016FACEC049A89FB Validity Not Before: Oct 20 01:36:37 2025 GMT Not After : Oct 23 10:04:37 2025 GMT Subject: CN=FFD51336C6A1DB797DE419467EFE600A70C74FB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:41:dd:2e:13:11:32:8b:da:1a:b1:51:e4:ab: 53:78:c0:22:97:15:c7:b6:b2:e0:5c:e2:c4:67:d9: 59:f9:6a:77:3e:38:7f:88:33:cf:a9:c5:cd:61:97: d9:5b:25:eb:12:8f:ae:4a:17:c2:53:a6:25:76:96: f9:d0:8a:9f:59:73:bb:74:f4:84:f3:cb:48:29:e7: eb:6b:ee:af:75:27:ef:8f:cf:90:22:4b:f6:17:da: 9a:b9:c8:2c:6c:ac:22:fb:29:32:94:e3:b5:59:9f: 7b:be:b7:f1:d9:11:e0:36:69:3e:53:27:66:4d:b0: 82:fc:59:71:f4:ae:58:3f:4a:0f:fc:58:b5:44:e6: 5a:d8:73:c6:6b:ad:20:d7:d3:d0:e5:87:af:c2:0c: 6e:14:68:f9:27:87:8b:51:37:25:56:83:55:df:21: 97:7f:59:80:20:0b:ab:2d:44:53:04:5f:59:a8:40: 73:f2:d4:a3:81:52:4d:f8:9a:2f:0d:a5:62:ed:dc: 17:3c:b1:e2:2f:3f:d1:94:31:d6:48:b3:ef:35:11: 84:02:43:00:5f:71:4a:d6:cd:bb:12:16:79:5d:eb: 7f:02:2d:40:cb:bc:b5:24:5f:c7:aa:d3:ce:e0:ff: a1:7e:0c:2c:36:c4:ec:fe:6a:dd:ff:21:ce:89:3f: 31:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D5:13:36:C6:A1:DB:79:7D:E4:19:46:7E:FE:60:0A:70:C7:4F:B3 X509v3 Authority Key Identifier: keyid:6E:87:49:98:2F:80:EA:7E:AC:3A:4C:80:01:6F:AC:EC:04:9A:89:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:5c:90:7f:a9:2e:5c:e0:3c:5b:5e:10:d4:3b:79:43:85:95: f5:23:2f:c2:b1:de:21:25:ad:c1:ba:50:7c:2e:d0:fc:86:f8: e3:99:3e:91:b0:72:60:15:3f:dd:27:58:50:ec:12:4a:fd:69: 19:e8:25:f7:ea:0c:d1:a8:0e:b0:3a:01:61:a3:de:3e:56:6b: fa:a0:6b:e3:52:06:50:67:27:6c:80:30:99:02:94:c7:e5:46: 06:32:18:e4:2c:d5:20:fe:0b:61:1f:1e:d3:cb:f1:11:fb:56: 08:aa:bf:af:d7:a3:2f:bd:52:4b:9f:36:e6:00:5c:86:c5:96: 05:1f:2d:82:fa:b6:61:00:15:16:ec:a0:2b:29:02:2e:c2:95: 3f:32:49:e9:4e:2f:6c:d5:e3:15:6a:80:3d:cc:69:0f:e1:61: 24:c7:60:04:79:ec:95:47:bc:54:7d:b3:25:bc:b4:63:25:2c: 3c:ab:2a:4a:f2:85:ad:a5:de:1a:10:81:2e:7a:62:b5:d3:3d: 82:bd:0c:6b:ca:03:6a:c4:66:bd:a7:02:4d:84:89:b3:93:e4: c1:17:90:6d:ea:c9:65:bd:cc:a0:2c:11:5f:14:e5:8b:2d:5c: 7a:a1:9b:11:62:2a:ff:70:cc:72:a8:7e:ab:9b:98:4a:93:43: 11:80:b6:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaBbRpGQ4ACBfvPhjCSJRSuX3qw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFDRUMw NDlBODlGQjAeFw0yNTEwMjAwMTM2MzdaFw0yNTEwMjMxMDA0MzdaMDMxMTAvBgNV BAMTKEZGRDUxMzM2QzZBMURCNzk3REU0MTk0NjdFRkU2MDBBNzBDNzRGQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgQd0uExEyi9oasVHkq1N4wCKX Fce2suBc4sRn2Vn5anc+OH+IM8+pxc1hl9lbJesSj65KF8JTpiV2lvnQip9Zc7t0 9ITzy0gp5+tr7q91J++Pz5AiS/YX2pq5yCxsrCL7KTKU47VZn3u+t/HZEeA2aT5T J2ZNsIL8WXH0rlg/Sg/8WLVE5lrYc8ZrrSDX09Dlh6/CDG4UaPknh4tRNyVWg1Xf IZd/WYAgC6stRFMEX1moQHPy1KOBUk34mi8NpWLt3Bc8seIvP9GUMdZIs+81EYQC QwBfcUrWzbsSFnld638CLUDLvLUkX8eq087g/6F+DCw2xOz+at3/Ic6JPzH5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/9UTNsah23l95BlGfv5gCnDHT7MwHwYDVR0j BBgwFoAUbodJmC+A6n6sOkyAAW+s7ASaifswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmU3ZGU5Zi1iZmQyLTQ4NWMtOGJhMi05MjRlZWQ1MmEzMDUvMC82RTg3NDk5ODJG ODBFQTdFQUMzQTRDODAwMTZGQUNFQzA0OUE4OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFDRUMwNDlB ODlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlN2RlOWYtYmZkMi00ODVjLThi YTItOTI0ZWVkNTJhMzA1LzAvNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFD RUMwNDlBODlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZckH+pLlzgPFteENQ7eUOFlfUjL8Kx3iEl rcG6UHwu0PyG+OOZPpGwcmAVP90nWFDsEkr9aRnoJffqDNGoDrA6AWGj3j5Wa/qg a+NSBlBnJ2yAMJkClMflRgYyGOQs1SD+C2EfHtPL8RH7Vgiqv6/Xoy+9UkufNuYA XIbFlgUfLYL6tmEAFRbsoCspAi7ClT8ySelOL2zV4xVqgD3MaQ/hYSTHYAR57JVH vFR9syW8tGMlLDyrKkryha2l3hoQgS56YrXTPYK9DGvKA2rEZr2nAk2EibOT5MEX kG3qyWW9zKAsEV8U5YstXHqhmxFiKv9wzHKofqubmEqTQxGAtn8= -----END CERTIFICATE-----Generated at Mon Oct 20 18:02:33 2025 by rpki-client