$ rpki-client -vvf repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft File: 94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft (raw, json) Hash identifier: u9nWr0+LgXL8CcMT1u9TQkFj1rKd2gaLEOKkSupocII= Subject key identifier: 6A:4C:C9:DA:EB:B7:9B:4D:CD:F2:3D:23:F6:66:16:DE:2B:71:E7:4E Authority key identifier: 94:A6:23:5D:B0:3E:F9:CA:77:38:7E:4A:3F:13:88:5A:6F:A1:DD:07 Certificate issuer: /CN=94A6235DB03EF9CA77387E4A3F13885A6FA1DD07 Certificate serial: 1B999D5C96590BBC166859E5163CAAE814E9F58F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.cer Subject info access: rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft Manifest number: 0A Signing time: Mon 20 Oct 2025 18:01:09 +0000 Manifest this update: Mon 20 Oct 2025 17:56:09 +0000 Manifest next update: Fri 24 Oct 2025 03:48:09 +0000 Files and hashes: 1: 94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.crl (hash: UoLLCJS/KL38EU9DKpq9z4dtwZ5/jGO5l+BB5nQAcsA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.crl rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:99:9d:5c:96:59:0b:bc:16:68:59:e5:16:3c:aa:e8:14:e9:f5:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94A6235DB03EF9CA77387E4A3F13885A6FA1DD07 Validity Not Before: Oct 20 17:56:09 2025 GMT Not After : Oct 24 03:48:09 2025 GMT Subject: CN=6A4CC9DAEBB79B4DCDF23D23F66616DE2B71E74E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:72:c1:0a:0a:dd:36:a9:a3:41:dd:90:f3:d3: 7d:c4:5c:5a:8b:e4:c4:c4:c9:54:3c:8c:ee:30:87: d5:05:25:ba:61:73:ed:ee:dd:00:70:10:a6:6e:8f: 5c:19:d1:e1:40:de:63:11:94:eb:be:08:76:f4:ec: fe:53:17:d4:eb:76:30:39:2c:b9:9e:b2:57:15:c0: 4e:49:30:40:2e:f9:1d:39:2e:c9:f9:36:0b:05:f9: 63:4f:97:f4:4d:d2:90:0e:b1:27:c5:e1:6b:68:9b: b1:33:28:30:fc:4e:3d:de:dd:c3:73:51:b2:08:a4: f3:a1:38:6f:57:83:bb:d4:f1:62:5d:58:2d:5f:2f: c2:1c:a3:d5:58:53:48:60:36:6b:b1:61:32:54:8b: 1f:ba:25:79:3d:29:b9:f7:e9:c0:4d:f2:0d:98:6c: 70:f8:ff:d3:30:59:90:61:c0:90:0b:09:8b:8c:c3: 23:21:a6:ec:72:24:5a:b3:6c:f8:37:60:d9:4d:ea: bb:b4:7d:ad:4b:ba:b9:be:25:dc:c3:02:d4:d6:49: 00:f9:03:57:58:08:6c:16:36:e6:88:97:bf:da:f5: f5:e6:55:3c:b9:08:5a:63:98:36:00:35:9c:58:98: 4e:d0:31:82:48:ea:be:d0:08:11:ca:33:92:cd:64: 89:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4C:C9:DA:EB:B7:9B:4D:CD:F2:3D:23:F6:66:16:DE:2B:71:E7:4E X509v3 Authority Key Identifier: keyid:94:A6:23:5D:B0:3E:F9:CA:77:38:7E:4A:3F:13:88:5A:6F:A1:DD:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:bf:88:47:93:10:55:03:09:a1:ea:f2:34:76:ec:82:b7:0b: c7:8b:64:4d:12:b3:ab:36:b4:a2:df:d4:ae:39:d7:ac:a9:0c: b9:f9:36:c2:81:1d:1c:b1:40:c4:dd:78:4e:35:bc:e9:48:83: 5d:2d:2a:2a:80:c1:9c:3c:09:85:ac:6a:a6:fb:ea:2b:f8:5b: 3e:dd:22:04:c7:60:54:0e:b8:e1:9b:61:e9:1c:a4:88:d6:47: c2:fc:46:75:38:8e:22:5f:54:0e:6b:ac:d3:bc:84:89:aa:0c: d5:7e:b1:ab:58:8f:47:21:11:1f:b7:71:43:b5:32:80:e4:23: 29:c9:78:a1:b8:09:ce:3c:e2:a3:a7:af:fc:cd:69:c8:5e:60: 49:8a:b6:10:1d:3f:73:f2:2d:db:fc:24:3a:93:93:6b:45:46: 24:5c:46:1d:07:6d:dc:1a:6e:9f:78:00:d0:cc:1c:4f:a2:c6: 16:eb:f2:10:b6:2f:37:b9:b8:53:90:80:e7:74:6d:51:6d:df: 44:dc:33:1c:70:8f:4e:ab:48:30:fe:76:bc:bc:67:9f:e1:63: 28:91:67:ee:06:b9:e1:46:ff:45:9b:10:29:71:09:3b:63:11: 98:d6:b4:82:4b:21:e0:83:00:c6:8e:68:26:24:07:31:8e:63: 80:b8:80:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG5mdXJZZC7wWaFnlFjyq6BTp9Y8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRBNjIzNURCMDNFRjlDQTc3Mzg3RTRBM0YxMzg4NUE2 RkExREQwNzAeFw0yNTEwMjAxNzU2MDlaFw0yNTEwMjQwMzQ4MDlaMDMxMTAvBgNV BAMTKDZBNENDOURBRUJCNzlCNERDREYyM0QyM0Y2NjYxNkRFMkI3MUU3NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwcsEKCt02qaNB3ZDz033EXFqL 5MTEyVQ8jO4wh9UFJbphc+3u3QBwEKZuj1wZ0eFA3mMRlOu+CHb07P5TF9TrdjA5 LLmeslcVwE5JMEAu+R05Lsn5NgsF+WNPl/RN0pAOsSfF4Wtom7EzKDD8Tj3e3cNz UbIIpPOhOG9Xg7vU8WJdWC1fL8Ico9VYU0hgNmuxYTJUix+6JXk9Kbn36cBN8g2Y bHD4/9MwWZBhwJALCYuMwyMhpuxyJFqzbPg3YNlN6ru0fa1Lurm+JdzDAtTWSQD5 A1dYCGwWNuaIl7/a9fXmVTy5CFpjmDYANZxYmE7QMYJI6r7QCBHKM5LNZIlRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUakzJ2uu3m03N8j0j9mYW3itx504wHwYDVR0j BBgwFoAUlKYjXbA++cp3OH5KPxOIWm+h3QcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTM4OTVlMi00MDIwLTRjM2YtOTg3Zi1kYWNkZjhlOGVhMjkvMS85NEE2MjM1REIw M0VGOUNBNzczODdFNEEzRjEzODg1QTZGQTFERDA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTRBNjIzNURCMDNFRjlDQTc3Mzg3RTRBM0YxMzg4NUE2RkEx REQwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzEvOTRBNjIzNURCMDNFRjlDQTc3Mzg3RTRBM0YxMzg4 NUE2RkExREQwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL2/iEeTEFUDCaHq8jR27IK3C8eLZE0Ss6s2 tKLf1K4516ypDLn5NsKBHRyxQMTdeE41vOlIg10tKiqAwZw8CYWsaqb76iv4Wz7d IgTHYFQOuOGbYekcpIjWR8L8RnU4jiJfVA5rrNO8hImqDNV+satYj0chER+3cUO1 MoDkIynJeKG4Cc484qOnr/zNacheYEmKthAdP3PyLdv8JDqTk2tFRiRcRh0Hbdwa bp94ANDMHE+ixhbr8hC2Lze5uFOQgOd0bVFt30TcMxxwj06rSDD+dry8Z5/hYyiR Z+4GueFG/0WbEClxCTtjEZjWtIJLIeCDAMaOaCYkBzGOY4C4gMs= -----END CERTIFICATE-----Generated at Mon Oct 20 20:50:03 2025 by rpki-client