$ rpki-client -vvf repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft File: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft (raw, json) Hash identifier: DaSTJSJFT0kgbK9R9Iw+Klh/ACoj4Uj/uosGiVu0gMc= Subject key identifier: 1A:69:AC:E9:D6:DC:96:44:86:66:77:81:DA:B3:D5:B8:50:49:FC:56 Authority key identifier: 65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC Certificate issuer: /CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Certificate serial: 117881AB4DAF06DA8BE25E27DC30E3125F38ADEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft Manifest number: 0457 Signing time: Mon 20 Oct 2025 17:31:53 +0000 Manifest this update: Mon 20 Oct 2025 17:26:53 +0000 Manifest next update: Fri 24 Oct 2025 04:30:53 +0000 Files and hashes: 1: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl (hash: 20ObLjFG1KUfm1eLcMuzCfa1QOYQ0PTNrxyZTWeQT9E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:78:81:ab:4d:af:06:da:8b:e2:5e:27:dc:30:e3:12:5f:38:ad:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Validity Not Before: Oct 20 17:26:53 2025 GMT Not After : Oct 24 04:30:53 2025 GMT Subject: CN=1A69ACE9D6DC964486667781DAB3D5B85049FC56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:af:f4:2d:cf:0b:7b:c2:34:14:52:00:c6:a3: 56:c0:8d:33:e2:33:87:84:dc:c4:db:f6:c9:2f:cf: 14:d3:87:c1:98:a0:d9:6c:a8:0a:88:66:54:4a:c0: 6c:9e:dd:b3:7b:12:49:c4:eb:17:65:8b:fe:7d:fe: 91:9d:c4:c8:19:98:c1:1f:18:00:f0:17:ed:2f:39: 99:53:ca:97:cc:97:2c:e6:e7:78:c0:49:a9:6c:65: 2a:46:83:ea:db:b3:6b:16:f2:99:c3:ca:48:8e:d6: b5:97:a5:dc:fa:5a:3d:86:61:c9:56:93:93:8c:19: 36:7d:d7:a4:97:a6:d4:f5:99:db:75:17:d9:1e:7a: 1b:c8:cf:ca:f4:03:52:e5:7a:5d:80:01:3a:68:69: 66:f2:65:98:68:e0:76:dc:ec:1f:d8:ef:ec:85:4a: be:e3:48:39:f0:06:25:1f:6e:f6:0e:26:d7:83:85: ce:2b:72:a5:c7:33:0c:8c:b1:86:e7:7d:84:d2:94: 2e:d9:65:fc:d7:66:5c:28:82:99:f2:01:e9:b6:3b: 23:2c:dd:7a:88:59:29:41:9f:43:02:63:62:f2:aa: cc:03:1d:db:91:57:29:42:b1:c9:af:b7:20:7c:88: df:39:3b:4e:d5:3a:e6:42:56:02:6f:95:74:2d:56: e9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:69:AC:E9:D6:DC:96:44:86:66:77:81:DA:B3:D5:B8:50:49:FC:56 X509v3 Authority Key Identifier: keyid:65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:19:48:05:66:e0:7b:ba:4e:0c:10:f6:33:17:2d:87:7d:6b: ce:dd:93:07:e9:6e:3c:12:d1:63:8b:05:a1:0f:9e:43:b2:a1: b4:b4:7d:a9:84:61:64:9a:aa:ce:c2:48:be:e5:e7:3a:a8:fb: 7d:39:69:1f:b0:51:79:c6:8c:de:a7:b4:16:00:ba:c4:e2:15: 85:41:47:98:a9:cf:c0:81:83:77:8d:22:08:ba:0f:ad:c7:6b: c0:55:77:fa:4b:ab:6c:bf:17:64:09:c2:8e:57:2a:80:c1:2d: c4:f4:42:4a:d6:61:58:2a:74:0f:32:d2:e5:55:85:a4:a3:36: 86:53:6f:9c:cb:3a:58:67:d9:ed:3a:22:39:06:34:21:db:93: a4:58:77:63:6e:8a:c6:0b:a0:ee:51:f8:46:96:fd:ba:31:c8: 1c:f5:b4:57:83:e8:8b:e4:12:a0:f3:6d:2a:4c:73:c3:36:3a: af:da:78:a5:d3:76:e3:43:87:2b:eb:fd:56:f2:b5:af:36:cd: 34:aa:39:9d:99:cb:35:7b:e7:05:31:c5:a7:2b:b4:05:b6:55: a1:6c:b4:5c:59:06:e2:6f:7a:f8:d0:d7:3e:d6:f0:bd:db:5b: 99:7b:43:64:7c:b9:c9:3f:22:90:68:87:f3:0d:55:0b:b4:bb: 55:f8:86:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEXiBq02vBtqL4l4n3DDjEl84re8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURD QTZGOThCQzAeFw0yNTEwMjAxNzI2NTNaFw0yNTEwMjQwNDMwNTNaMDMxMTAvBgNV BAMTKDFBNjlBQ0U5RDZEQzk2NDQ4NjY2Nzc4MURBQjNENUI4NTA0OUZDNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNr/Qtzwt7wjQUUgDGo1bAjTPi M4eE3MTb9skvzxTTh8GYoNlsqAqIZlRKwGye3bN7EknE6xdli/59/pGdxMgZmMEf GADwF+0vOZlTypfMlyzm53jASalsZSpGg+rbs2sW8pnDykiO1rWXpdz6Wj2GYclW k5OMGTZ916SXptT1mdt1F9keehvIz8r0A1Llel2AATpoaWbyZZho4Hbc7B/Y7+yF Sr7jSDnwBiUfbvYOJteDhc4rcqXHMwyMsYbnfYTSlC7ZZfzXZlwogpnyAem2OyMs 3XqIWSlBn0MCY2LyqswDHduRVylCscmvtyB8iN85O07VOuZCVgJvlXQtVukfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGmms6dbclkSGZneB2rPVuFBJ/FYwHwYDVR0j BBgwFoAUZYezJUoHRupu/60dwvKdXcpvmLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjcxNjBkZC1mZjgwLTRlZmEtYmNmMS1iYjc1ZDZkNGYwOGEvMC82NTg3QjMyNTRB MDc0NkVBNkVGRkFEMURDMkYyOUQ1RENBNkY5OEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURDQTZG OThCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWY3MTYwZGQtZmY4MC00ZWZhLWJj ZjEtYmI3NWQ2ZDRmMDhhLzAvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlE NURDQTZGOThCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACsZSAVm4Hu6TgwQ9jMXLYd9a87dkwfpbjwS 0WOLBaEPnkOyobS0famEYWSaqs7CSL7l5zqo+305aR+wUXnGjN6ntBYAusTiFYVB R5ipz8CBg3eNIgi6D63Ha8BVd/pLq2y/F2QJwo5XKoDBLcT0QkrWYVgqdA8y0uVV haSjNoZTb5zLOlhn2e06IjkGNCHbk6RYd2NuisYLoO5R+EaW/boxyBz1tFeD6Ivk EqDzbSpMc8M2Oq/aeKXTduNDhyvr/Vbyta82zTSqOZ2ZyzV75wUxxacrtAW2VaFs tFxZBuJvevjQ1z7W8L3bW5l7Q2R8uck/IpBoh/MNVQu0u1X4hn0= -----END CERTIFICATE-----Generated at Tue Oct 21 02:31:06 2025 by rpki-client