$ rpki-client -vvf repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft File: D6FA07102C8726922074D42DFF59946144A13506.mft (raw, json) Hash identifier: ZPD7lI2aPP820EFj4IilTefO2AfJpKwhJf6pIDoJmBo= Subject key identifier: 69:F9:68:F6:B3:1B:1F:29:57:17:16:3D:2C:A2:2C:56:A4:CB:9C:DE Authority key identifier: D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06 Certificate issuer: /CN=D6FA07102C8726922074D42DFF59946144A13506 Certificate serial: 6572DECBAE4C1807817951D41D4AF4597E3712D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft Manifest number: 90 Signing time: Mon 20 Oct 2025 07:02:18 +0000 Manifest this update: Mon 20 Oct 2025 06:57:18 +0000 Manifest next update: Thu 23 Oct 2025 07:46:18 +0000 Files and hashes: 1: D6FA07102C8726922074D42DFF59946144A13506.crl (hash: ovXTGnDfjP1DqnqLz8jOkIIyaG+5PjmVHE10/sfxXvQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:72:de:cb:ae:4c:18:07:81:79:51:d4:1d:4a:f4:59:7e:37:12:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6FA07102C8726922074D42DFF59946144A13506 Validity Not Before: Oct 20 06:57:18 2025 GMT Not After : Oct 23 07:46:18 2025 GMT Subject: CN=69F968F6B31B1F295717163D2CA22C56A4CB9CDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:52:24:f6:31:2b:ad:81:53:43:7d:40:e4:70: 02:8b:ed:3c:35:c4:cf:f0:c1:08:5e:7f:36:06:3e: 0b:8b:e6:a1:34:25:90:2f:59:40:c0:97:8a:41:3f: 13:9f:bd:15:d8:f8:3d:2a:11:c0:4d:c1:6a:56:05: ae:4f:c9:5d:59:1c:33:bc:5a:aa:16:92:48:28:b2: 58:ba:7f:66:ea:91:2a:c1:30:b6:21:f9:68:d6:c6: 45:74:de:66:2a:85:eb:fe:9d:85:dd:5e:03:a6:81: f8:a7:6f:6d:f0:26:57:a9:2f:01:2d:06:f9:c1:e0: e0:f7:41:5a:82:be:ae:16:41:cf:a7:e4:2f:20:30: 7f:8b:5b:2f:ed:13:9d:13:07:91:87:b4:cc:32:69: 9f:5f:b6:dd:b0:5d:6e:81:75:c8:e5:91:2c:f1:ab: c2:ec:7b:cd:af:06:f0:63:10:5b:67:f7:db:57:bf: 79:43:ba:40:af:16:19:8a:8b:27:4b:18:b8:d5:a6: de:ed:12:3f:84:eb:f4:8b:d3:66:e3:42:07:97:ed: e9:78:d6:ea:82:27:87:a3:f8:a8:84:96:85:a2:52: 1c:d1:32:8c:18:19:3a:f8:90:80:9d:de:ca:20:ee: 72:50:b4:74:5c:c3:fa:85:a4:17:8b:e1:f9:4f:48: 92:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F9:68:F6:B3:1B:1F:29:57:17:16:3D:2C:A2:2C:56:A4:CB:9C:DE X509v3 Authority Key Identifier: keyid:D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:1b:e9:1c:e8:f5:83:ab:d2:e7:33:0f:b7:4c:2a:00:91:3f: c4:d2:22:3c:5a:92:f3:4f:56:5b:ad:b9:b8:65:85:05:4d:a6: 0f:f8:a5:c8:7f:ef:ac:e7:bf:1d:7b:93:87:bf:2b:bd:ef:5d: 37:68:70:b9:07:76:57:41:5e:90:c8:ea:47:f2:8a:0a:83:9b: 95:12:3d:aa:a8:bf:97:b6:1e:92:da:a6:ff:aa:d8:9f:9f:44: 8c:b9:41:15:00:a1:91:1a:09:df:ba:df:0d:a4:94:af:a3:58: f0:28:31:86:fe:69:59:6f:f9:15:7e:b9:0f:8c:09:6c:9f:f6: c2:9c:f7:1d:6a:e1:9e:bd:36:9d:ae:d9:9c:21:50:98:a5:c5: af:e7:11:8a:e1:29:88:08:bc:c5:0e:8d:a8:11:f6:3f:1c:b4: 33:e5:74:c2:7a:9f:25:fb:13:5f:f5:f8:be:78:e2:11:8c:08: 02:5d:f9:34:1e:8d:24:6e:5a:2d:09:f9:5b:6c:11:59:95:9d: 05:6a:28:70:8c:d5:29:80:71:1c:93:cf:3c:67:1d:4f:32:18: ac:d9:51:ac:3a:22:76:f3:ca:f3:94:d5:c7:87:ba:cf:af:b7: d7:82:85:36:7d:57:50:d8:b0:31:b1:6f:1b:14:32:7e:46:4a: de:b0:c7:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZXLey65MGAeBeVHUHUr0WX43EtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZGQTA3MTAyQzg3MjY5MjIwNzRENDJERkY1OTk0NjE0 NEExMzUwNjAeFw0yNTEwMjAwNjU3MThaFw0yNTEwMjMwNzQ2MThaMDMxMTAvBgNV BAMTKDY5Rjk2OEY2QjMxQjFGMjk1NzE3MTYzRDJDQTIyQzU2QTRDQjlDREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChUiT2MSutgVNDfUDkcAKL7Tw1 xM/wwQhefzYGPguL5qE0JZAvWUDAl4pBPxOfvRXY+D0qEcBNwWpWBa5PyV1ZHDO8 WqoWkkgosli6f2bqkSrBMLYh+WjWxkV03mYqhev+nYXdXgOmgfinb23wJlepLwEt BvnB4OD3QVqCvq4WQc+n5C8gMH+LWy/tE50TB5GHtMwyaZ9ftt2wXW6BdcjlkSzx q8Lse82vBvBjEFtn99tXv3lDukCvFhmKiydLGLjVpt7tEj+E6/SL02bjQgeX7el4 1uqCJ4ej+KiEloWiUhzRMowYGTr4kICd3sog7nJQtHRcw/qFpBeL4flPSJKBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaflo9rMbHylXFxY9LKIsVqTLnN4wHwYDVR0j BBgwFoAU1voHECyHJpIgdNQt/1mUYUShNQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDYzYTZlNi1jYWIzLTRmMGMtODVjNy1lMDJiZDY0MWUzY2UvMC9ENkZBMDcxMDJD ODcyNjkyMjA3NEQ0MkRGRjU5OTQ2MTQ0QTEzNTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDZGQTA3MTAyQzg3MjY5MjIwNzRENDJERkY1OTk0NjE0NEEx MzUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2M2E2ZTYtY2FiMy00ZjBjLTg1 YzctZTAyYmQ2NDFlM2NlLzAvRDZGQTA3MTAyQzg3MjY5MjIwNzRENDJERkY1OTk0 NjE0NEExMzUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUb6Rzo9YOr0uczD7dMKgCRP8TSIjxakvNP VlutubhlhQVNpg/4pch/76znvx17k4e/K73vXTdocLkHdldBXpDI6kfyigqDm5US Paqov5e2HpLapv+q2J+fRIy5QRUAoZEaCd+63w2klK+jWPAoMYb+aVlv+RV+uQ+M CWyf9sKc9x1q4Z69Np2u2ZwhUJilxa/nEYrhKYgIvMUOjagR9j8ctDPldMJ6nyX7 E1/1+L544hGMCAJd+TQejSRuWi0J+VtsEVmVnQVqKHCM1SmAcRyTzzxnHU8yGKzZ Uaw6InbzyvOU1ceHus+vt9eChTZ9V1DYsDGxbxsUMn5GSt6wx5o= -----END CERTIFICATE-----Generated at Mon Oct 20 16:49:27 2025 by rpki-client