$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft File: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft (raw, json) Hash identifier: UyJiwLewte6ycw+hmI4DnubUXAul4wYt+oEsjJYBHyo= Subject key identifier: 15:10:70:1B:81:AC:31:BB:D0:33:EA:17:88:D2:37:CF:FC:E0:63:EF Authority key identifier: 6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 Certificate issuer: /CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Certificate serial: 68AE1C193D2250A322360C28BCEC6DB3A48B47C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft Manifest number: 0311 Signing time: Sun 19 Oct 2025 15:51:28 +0000 Manifest this update: Sun 19 Oct 2025 15:46:28 +0000 Manifest next update: Thu 23 Oct 2025 03:34:28 +0000 Files and hashes: 1: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl (hash: Jl/B98RLDd5wfATz0HA99EOS2ZI7MAUn/uhSHJyG66o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ae:1c:19:3d:22:50:a3:22:36:0c:28:bc:ec:6d:b3:a4:8b:47:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Validity Not Before: Oct 19 15:46:28 2025 GMT Not After : Oct 23 03:34:28 2025 GMT Subject: CN=1510701B81AC31BBD033EA1788D237CFFCE063EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:31:b0:ba:17:ea:ae:a4:42:7d:ff:83:de:ae: 71:fa:15:26:96:3b:99:79:40:94:db:ff:83:8d:b5: a7:91:06:c8:ff:65:da:f4:a4:34:ba:6c:25:81:eb: 20:f2:e2:ba:c4:a2:71:57:63:44:a1:f2:44:0d:9c: d5:0d:9d:7f:e0:4c:20:09:c5:fc:9d:08:6d:2f:e5: ce:4b:5d:04:94:5e:92:d1:bd:fc:01:9a:66:1b:43: 8b:b9:84:67:6a:54:2f:68:fc:0b:5f:d0:8b:4b:72: 3d:bb:24:bf:80:ea:c2:67:82:ed:ea:d6:c4:71:ae: ab:6f:c1:82:a4:f4:67:2d:f1:2b:3b:fb:f3:2a:ad: 3f:e4:37:ae:83:c7:50:f3:7c:aa:89:d9:22:ff:bd: 15:98:ac:3f:0a:f8:af:02:86:5c:d1:be:59:26:b3: b5:96:2c:96:ae:ac:05:5a:21:34:98:b8:2e:2f:aa: 13:cf:71:39:cc:87:be:fc:4f:dd:c6:b6:0a:5e:3f: 1c:d6:5a:2e:35:0c:e7:b3:ee:e9:fc:54:26:98:04: f9:ad:c4:a9:43:29:58:02:1d:57:c4:15:e6:f8:f7: 4e:b2:cb:89:ed:05:c6:df:db:ff:89:43:26:fd:c2: a8:c9:af:0e:66:ef:d3:b5:16:84:68:fa:4b:04:de: e1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:10:70:1B:81:AC:31:BB:D0:33:EA:17:88:D2:37:CF:FC:E0:63:EF X509v3 Authority Key Identifier: keyid:6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:a1:8a:dc:22:c3:83:26:c1:e3:6e:b7:7a:99:49:bb:27:9b: 77:b1:a9:7a:ce:89:d2:67:54:33:aa:50:d3:84:83:49:99:37: c2:4d:2f:e3:40:7f:9f:9d:c5:f4:8b:97:fd:5f:eb:9e:e2:40: 83:49:9c:de:a0:6a:cf:99:80:d3:21:f7:7a:13:6a:b3:10:aa: 2d:38:b3:a7:bc:7d:f3:92:81:16:8b:fc:33:53:c5:12:97:91: ce:ef:3e:55:61:2f:81:97:e8:0a:64:39:a3:85:9e:6d:27:53: 16:5c:59:23:36:50:0d:21:67:bd:fa:c0:08:19:8e:9d:5d:69: 9e:52:de:35:15:2f:e5:b3:16:71:df:08:cc:1a:2d:e9:bf:8f: 2d:23:14:4e:61:ee:33:9c:fc:57:21:79:03:f9:d2:b8:e0:07: b4:f6:5a:b5:4e:f8:7c:6a:68:74:2b:52:7c:b0:ff:b1:b1:78: 3a:ea:3b:28:8b:04:e4:fa:3f:af:4a:84:db:11:31:49:dc:e2: 88:43:99:17:7e:f4:08:b6:66:9c:a6:28:02:23:4c:c9:7f:c7: 61:2a:20:e9:1b:84:63:bf:cd:83:6e:b4:71:6d:8f:94:ff:b7: 1f:ed:17:41:45:44:f4:df:9f:d4:89:de:6c:cd:d2:a0:80:1b: 18:c2:27:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaK4cGT0iUKMiNgwovOxts6SLR8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2MDAw RjI1NjFGNzAeFw0yNTEwMTkxNTQ2MjhaFw0yNTEwMjMwMzM0MjhaMDMxMTAvBgNV BAMTKDE1MTA3MDFCODFBQzMxQkJEMDMzRUExNzg4RDIzN0NGRkNFMDYzRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+MbC6F+qupEJ9/4PernH6FSaW O5l5QJTb/4ONtaeRBsj/Zdr0pDS6bCWB6yDy4rrEonFXY0Sh8kQNnNUNnX/gTCAJ xfydCG0v5c5LXQSUXpLRvfwBmmYbQ4u5hGdqVC9o/Atf0ItLcj27JL+A6sJngu3q 1sRxrqtvwYKk9Gct8Ss7+/MqrT/kN66Dx1DzfKqJ2SL/vRWYrD8K+K8ChlzRvlkm s7WWLJaurAVaITSYuC4vqhPPcTnMh778T93GtgpePxzWWi41DOez7un8VCaYBPmt xKlDKVgCHVfEFeb4906yy4ntBcbf2/+JQyb9wqjJrw5m79O1FoRo+ksE3uHLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFRBwG4GsMbvQM+oXiNI3z/zgY+8wHwYDVR0j BBgwFoAUbeqbJ17M+5IOCoTQ0VjGAA8lYfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWI3N2QxZS0xNTg1LTQ2MDQtYjZiMS0wNzFmMGEyOTQwYzQvMC82REVBOUIyNzVF Q0NGQjkyMEUwQTg0RDBEMTU4QzYwMDBGMjU2MUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2MDAwRjI1 NjFGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiNzdkMWUtMTU4NS00NjA0LWI2 YjEtMDcxZjBhMjk0MGM0LzAvNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2 MDAwRjI1NjFGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACihitwiw4MmweNut3qZSbsnm3exqXrOidJn VDOqUNOEg0mZN8JNL+NAf5+dxfSLl/1f657iQINJnN6gas+ZgNMh93oTarMQqi04 s6e8ffOSgRaL/DNTxRKXkc7vPlVhL4GX6ApkOaOFnm0nUxZcWSM2UA0hZ736wAgZ jp1daZ5S3jUVL+WzFnHfCMwaLem/jy0jFE5h7jOc/FcheQP50rjgB7T2WrVO+Hxq aHQrUnyw/7GxeDrqOyiLBOT6P69KhNsRMUnc4ohDmRd+9Ai2ZpymKAIjTMl/x2Eq IOkbhGO/zYNutHFtj5T/tx/tF0FFRPTfn9SJ3mzN0qCAGxjCJ00= -----END CERTIFICATE-----Generated at Mon Oct 20 19:49:39 2025 by rpki-client