$ rpki-client -vvf repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft File: F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft (raw, json) Hash identifier: 8GYITybw4WoPLGwzQI//WdRO27KXacHz907lWBEJiQg= Subject key identifier: 05:B7:19:89:FE:25:DF:EB:D4:4E:B4:27:8E:F7:6D:8E:50:A8:84:1A Authority key identifier: F6:D1:AD:EF:8B:F1:34:4A:2F:5C:BD:A1:88:22:BA:85:D6:EF:6D:17 Certificate issuer: /CN=F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17 Certificate serial: 044CB0BFDC04DB80AAB5AF151AC1D92311CA8B6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft Manifest number: 02A9 Signing time: Sun 19 Oct 2025 08:31:00 +0000 Manifest this update: Sun 19 Oct 2025 08:26:00 +0000 Manifest next update: Wed 22 Oct 2025 10:02:00 +0000 Files and hashes: 1: F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl (hash: 3B9GLH0JISGlrl1Us5wIXyaNiBF1sqlqtJgNsj+j/dE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 10:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:4c:b0:bf:dc:04:db:80:aa:b5:af:15:1a:c1:d9:23:11:ca:8b:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17 Validity Not Before: Oct 19 08:26:00 2025 GMT Not After : Oct 22 10:02:00 2025 GMT Subject: CN=05B71989FE25DFEBD44EB4278EF76D8E50A8841A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:10:b2:d3:55:19:da:f8:25:a4:69:72:85:1c: 04:82:44:95:d5:e7:7a:95:ce:f6:a0:a6:1e:b7:91: 11:8e:bd:84:02:b0:7b:88:79:c6:f8:40:77:dc:f9: 6e:41:f3:a4:b3:bc:5a:4f:69:d5:88:11:dd:c9:aa: c9:18:73:91:6a:0b:44:97:b0:2d:2c:21:8e:5d:0b: f1:32:c4:d6:7c:ce:e1:fc:0f:80:1b:13:ba:43:46: dc:68:bd:b2:29:9e:86:59:f2:0f:85:52:40:d3:f1: f3:fb:c9:b3:1f:86:7c:11:3e:4f:40:c7:d7:d8:df: aa:76:72:7d:a0:b5:b3:0a:32:90:08:8e:0d:b5:a2: f1:27:f0:99:fe:ed:e7:ab:59:50:b5:c7:c2:b0:f5: d7:d4:56:a3:f0:8f:76:ff:6b:d2:dc:de:d4:90:b2: 16:3f:91:2b:39:f3:dd:14:e0:c5:1f:3d:51:fb:bb: 0c:30:30:03:c1:f2:a0:2f:6b:d8:ff:23:df:df:98: 45:9f:68:5f:f9:c4:51:cf:4d:93:41:c6:57:47:cc: 45:1b:88:f0:f7:bb:ee:a0:49:f6:8e:60:22:d1:a3: bb:7b:dd:8c:bb:51:87:b4:76:7a:d1:42:21:99:92: 55:66:1d:e9:90:25:63:d7:ce:5b:8f:c7:5b:4a:83: 71:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B7:19:89:FE:25:DF:EB:D4:4E:B4:27:8E:F7:6D:8E:50:A8:84:1A X509v3 Authority Key Identifier: keyid:F6:D1:AD:EF:8B:F1:34:4A:2F:5C:BD:A1:88:22:BA:85:D6:EF:6D:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c2:18:e7:6e:b4:9f:36:d3:64:5d:56:24:3e:d7:71:a9:a2: 38:af:fa:14:7f:7c:77:ea:4b:c5:5a:fb:9a:12:3b:ae:c0:d2: 62:32:00:3c:55:b5:ed:45:5e:a7:5e:e3:25:04:fd:47:75:4e: c3:39:f5:ef:56:44:95:8a:a9:6c:c1:03:f8:4f:ac:52:88:53: 89:f3:04:31:8e:7a:b8:ff:7a:00:c8:75:f6:ac:95:e4:6e:0a: e6:a9:b6:9d:9e:61:f7:24:cb:73:be:95:d1:a4:1c:a8:25:b8: 47:c9:b8:08:b3:ed:fa:29:43:28:d4:34:b5:33:fb:39:a4:3c: a2:74:79:4e:bb:1a:a9:59:cf:d6:ed:fd:0c:98:b4:12:b2:02: af:8e:a9:cf:ad:41:67:e9:09:59:f2:06:8e:ed:24:5f:b4:ec: b1:ed:f0:59:83:cf:fd:cf:a9:dc:ec:7a:e3:2e:54:cc:a7:a1: 3a:88:ef:3b:de:bc:d9:02:0e:6c:e9:d7:dd:64:41:55:51:3b: 40:68:6a:40:c0:d8:d5:81:a0:63:e9:df:e6:f1:3e:28:5f:c3: 48:bb:3c:52:da:45:5c:ab:3f:b6:fd:75:24:98:9d:2b:02:7c: c3:eb:e0:eb:ad:9f:c1:ac:fb:de:50:01:cc:37:a7:6a:93:e8: e2:cb:ad:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBEywv9wE24Cqta8VGsHZIxHKi20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJBODVE NkVGNkQxNzAeFw0yNTEwMTkwODI2MDBaFw0yNTEwMjIxMDAyMDBaMDMxMTAvBgNV BAMTKDA1QjcxOTg5RkUyNURGRUJENDRFQjQyNzhFRjc2RDhFNTBBODg0MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPELLTVRna+CWkaXKFHASCRJXV 53qVzvagph63kRGOvYQCsHuIecb4QHfc+W5B86SzvFpPadWIEd3JqskYc5FqC0SX sC0sIY5dC/EyxNZ8zuH8D4AbE7pDRtxovbIpnoZZ8g+FUkDT8fP7ybMfhnwRPk9A x9fY36p2cn2gtbMKMpAIjg21ovEn8Jn+7eerWVC1x8Kw9dfUVqPwj3b/a9Lc3tSQ shY/kSs5890U4MUfPVH7uwwwMAPB8qAva9j/I9/fmEWfaF/5xFHPTZNBxldHzEUb iPD3u+6gSfaOYCLRo7t73Yy7UYe0dnrRQiGZklVmHemQJWPXzluPx1tKg3FzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBbcZif4l3+vUTrQnjvdtjlCohBowHwYDVR0j BBgwFoAU9tGt74vxNEovXL2hiCK6hdbvbRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTEzZTdjNC03NzNmLTQ3NGMtYjA2ZC02MjYwYTMwNmEwY2EvMC9GNkQxQURFRjhC RjEzNDRBMkY1Q0JEQTE4ODIyQkE4NUQ2RUY2RDE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJBODVENkVG NkQxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTExM2U3YzQtNzczZi00NzRjLWIw NmQtNjI2MGEzMDZhMGNhLzAvRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJB ODVENkVGNkQxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3CGOdutJ8202RdViQ+13Gpojiv+hR/fHfq S8Va+5oSO67A0mIyADxVte1FXqde4yUE/Ud1TsM59e9WRJWKqWzBA/hPrFKIU4nz BDGOerj/egDIdfasleRuCuaptp2eYfcky3O+ldGkHKgluEfJuAiz7fopQyjUNLUz +zmkPKJ0eU67GqlZz9bt/QyYtBKyAq+Oqc+tQWfpCVnyBo7tJF+07LHt8FmDz/3P qdzseuMuVMynoTqI7zvevNkCDmzp191kQVVRO0BoakDA2NWBoGPp3+bxPihfw0i7 PFLaRVyrP7b9dSSYnSsCfMPr4Outn8Gs+95QAcw3p2qT6OLLrRo= -----END CERTIFICATE-----Generated at Mon Oct 20 12:01:53 2025 by rpki-client