$ rpki-client -vvf repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft File: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft (raw, json) Hash identifier: DwPj7nF9Tbxx2DpbbgrSEabp3HxVqwiEyxAWbKfG/xs= Subject key identifier: CE:E1:DB:44:E6:C6:AC:9E:77:05:D7:ED:C8:DD:0F:B9:21:77:CA:D8 Authority key identifier: 0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB Certificate issuer: /CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB Certificate serial: 75BC6EEB2FF98EB8688F5321F1C0CAD7DEAE9679 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft Manifest number: A6 Signing time: Sat 18 Oct 2025 16:51:03 +0000 Manifest this update: Sat 18 Oct 2025 16:46:03 +0000 Manifest next update: Tue 21 Oct 2025 19:41:03 +0000 Files and hashes: 1: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl (hash: KJqUulhZKp3GW/ceDAaP4w95hd5rboNa9GrJPH4Y2dY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 19:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:bc:6e:eb:2f:f9:8e:b8:68:8f:53:21:f1:c0:ca:d7:de:ae:96:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB Validity Not Before: Oct 18 16:46:03 2025 GMT Not After : Oct 21 19:41:03 2025 GMT Subject: CN=CEE1DB44E6C6AC9E7705D7EDC8DD0FB92177CAD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:19:99:e2:ce:ac:57:0d:ba:59:41:8d:5d:84: 17:cc:57:c5:c4:a5:c2:ce:d6:c8:2d:f0:2d:6d:e6: 37:77:d1:1b:28:d8:28:41:25:1f:91:af:3b:73:14: a7:c3:a6:03:0f:e0:48:8b:cb:f6:78:6a:81:01:f6: fa:9b:84:d4:8c:fa:a6:38:e0:08:07:71:ef:de:f5: 3a:41:a2:5c:e9:29:04:5b:3c:c3:68:6f:59:2d:46: 31:2d:b0:ec:71:3c:e5:47:f1:9e:86:b1:8d:a9:4b: 31:ad:f4:d6:21:71:88:29:07:7c:ca:5b:02:2f:ef: f0:92:98:70:ba:00:83:2f:89:fd:31:74:66:44:33: 43:7e:43:dd:fe:eb:33:b9:4d:7c:3d:54:8d:26:0b: f9:d1:fd:aa:e9:64:37:e4:52:eb:a7:60:dd:02:0d: 9d:75:ec:e8:a3:13:9f:7e:f0:50:60:af:7b:80:45: 0c:f0:01:c3:95:b2:63:72:53:01:43:9f:4d:c2:f2: c3:de:f7:96:94:b3:16:1f:a3:a0:38:6a:b5:63:c4: db:a8:a5:cf:42:e0:79:eb:c1:47:bd:46:6b:3e:f1: 57:e6:52:e0:fe:13:4f:5a:9b:4e:a2:ba:fe:51:41: 35:a2:76:aa:4e:15:9a:ac:a2:66:54:1a:34:77:2a: 24:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E1:DB:44:E6:C6:AC:9E:77:05:D7:ED:C8:DD:0F:B9:21:77:CA:D8 X509v3 Authority Key Identifier: keyid:0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:c4:ef:05:c4:a3:93:66:21:e9:df:a8:a3:1d:7c:8c:c3:7c: 93:ca:93:48:22:64:4c:dc:24:ce:03:15:3b:60:00:33:08:db: e4:a3:f4:18:0a:ef:13:6f:65:3e:b5:60:87:07:67:56:2e:ca: d1:b5:13:30:84:9a:70:3f:cc:39:ae:05:b4:f0:8f:98:30:21: 23:7e:bb:b6:7b:81:dc:da:3d:cd:a2:56:7b:9d:36:53:fe:8a: fa:69:2c:11:03:b9:de:06:53:23:71:cd:fd:17:8e:e1:05:89: 0c:02:b9:24:cb:ae:f8:2b:74:37:c9:6b:59:43:9d:fb:4f:4c: e8:2a:bc:c3:d9:a8:47:8d:f6:47:1e:5f:91:b2:ab:b2:63:d4: 1f:be:1d:15:77:f6:2f:fb:1f:ea:b6:fc:ba:22:91:3f:13:df: 57:ce:0a:81:83:11:84:a4:78:71:61:0b:cc:40:e9:0f:4a:a8: e7:a8:e2:47:aa:3b:3a:3f:f2:78:2f:3f:b5:62:a6:c8:78:d6: 8f:3d:72:1a:ea:e4:13:45:80:de:76:b9:81:f8:9b:45:f3:9b: f6:d9:0d:3b:bb:3f:cb:39:ba:82:aa:7a:ec:80:41:ee:73:af: f3:a6:01:34:bc:ee:e1:03:f6:ca:ef:12:ac:60:d0:4a:fd:12: 08:e5:a0:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdbxu6y/5jrhoj1Mh8cDK196ulnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUyNzdG RTkzQThFQjAeFw0yNTEwMTgxNjQ2MDNaFw0yNTEwMjExOTQxMDNaMDMxMTAvBgNV BAMTKENFRTFEQjQ0RTZDNkFDOUU3NzA1RDdFREM4REQwRkI5MjE3N0NBRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7GZnizqxXDbpZQY1dhBfMV8XE pcLO1sgt8C1t5jd30Rso2ChBJR+RrztzFKfDpgMP4EiLy/Z4aoEB9vqbhNSM+qY4 4AgHce/e9TpBolzpKQRbPMNob1ktRjEtsOxxPOVH8Z6GsY2pSzGt9NYhcYgpB3zK WwIv7/CSmHC6AIMvif0xdGZEM0N+Q93+6zO5TXw9VI0mC/nR/arpZDfkUuunYN0C DZ117OijE59+8FBgr3uARQzwAcOVsmNyUwFDn03C8sPe95aUsxYfo6A4arVjxNuo pc9C4HnrwUe9Rms+8VfmUuD+E09am06iuv5RQTWidqpOFZqsomZUGjR3KiRDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzuHbRObGrJ53BdftyN0PuSF3ytgwHwYDVR0j BBgwFoAUD7rZL0jfFUd+Tdk83HpSd/6TqOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODFhZjAyMS0xYzAxLTRhMmUtYjVkMy1jMWJiYjE2NTBjNDMvMC8wRkJBRDkyRjQ4 REYxNTQ3N0U0REQ5M0NEQzdBNTI3N0ZFOTNBOEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUyNzdGRTkz QThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgxYWYwMjEtMWMwMS00YTJlLWI1 ZDMtYzFiYmIxNjUwYzQzLzAvMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUy NzdGRTkzQThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDE7wXEo5NmIenfqKMdfIzDfJPKk0giZEzc JM4DFTtgADMI2+Sj9BgK7xNvZT61YIcHZ1YuytG1EzCEmnA/zDmuBbTwj5gwISN+ u7Z7gdzaPc2iVnudNlP+ivppLBEDud4GUyNxzf0XjuEFiQwCuSTLrvgrdDfJa1lD nftPTOgqvMPZqEeN9kceX5Gyq7Jj1B++HRV39i/7H+q2/LoikT8T31fOCoGDEYSk eHFhC8xA6Q9KqOeo4keqOzo/8ngvP7Vipsh41o89chrq5BNFgN52uYH4m0Xzm/bZ DTu7P8s5uoKqeuyAQe5zr/OmATS87uED9srvEqxg0Er9EgjloIk= -----END CERTIFICATE-----Generated at Mon Oct 20 12:26:20 2025 by rpki-client