$ rpki-client -vvf repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.mft File: A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.mft (raw, json) Hash identifier: O+DqWdOifPfb3HwS7KFMUbknE6kt0NRzCwSmS1YGSmM= Subject key identifier: 42:8F:33:3C:F7:44:33:22:17:79:43:E5:12:88:D2:07:A7:24:A3:FD Authority key identifier: A6:01:5E:5E:26:05:D4:FD:F6:8E:B9:6F:96:A9:89:4C:EA:EC:DF:BF Certificate issuer: /CN=A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF Certificate serial: 4CBFC9BB44DF639C9B71FBA45A882B00A41197DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.mft Manifest number: 01FE Signing time: Tue 21 Oct 2025 09:11:45 +0000 Manifest this update: Tue 21 Oct 2025 09:06:45 +0000 Manifest next update: Fri 24 Oct 2025 17:21:45 +0000 Files and hashes: 1: A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.crl (hash: rI2UwuvBjBCtgcxrz2JcSowEzjrBFRgsVNoHD3892Lk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.crl rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 08:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:bf:c9:bb:44:df:63:9c:9b:71:fb:a4:5a:88:2b:00:a4:11:97:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF Validity Not Before: Oct 21 09:06:45 2025 GMT Not After : Oct 24 17:21:45 2025 GMT Subject: CN=428F333CF7443322177943E51288D207A724A3FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e8:e7:8d:77:aa:fc:ac:0a:ac:44:93:57:ab: 47:2c:5d:3b:f1:eb:21:64:44:6c:bf:8f:e4:52:a9: c3:81:2a:2f:96:51:7d:90:ff:d8:65:fc:7c:13:3f: 29:9d:5a:90:d4:ad:62:fe:e1:ff:25:c9:43:95:ad: fe:ef:32:5a:d5:13:af:39:f0:6f:01:ee:19:52:1a: 37:10:da:a6:7e:86:36:5f:66:ca:e4:55:34:b3:20: 08:07:ef:0b:e2:b1:55:4b:1b:d3:c2:6f:d2:a5:a7: d2:54:5e:df:dd:94:99:d0:03:12:01:6d:98:d4:33: 21:69:0a:10:75:d5:8b:00:4e:16:06:27:cf:cc:a9: 3b:99:62:36:aa:3f:a3:94:a8:05:9a:54:3f:2c:a3: 45:60:08:c4:48:87:8e:02:27:a2:6e:ad:b4:7e:4a: c1:81:ee:68:af:5e:a8:b9:62:fb:f9:4e:7c:98:38: 31:1e:60:c6:eb:3b:35:e8:ac:f7:f9:17:75:76:14: bb:96:c6:dd:d2:52:51:43:f2:3c:6d:5d:e2:bb:ee: eb:ef:03:de:67:18:3e:72:f1:8c:2e:3a:ab:23:1d: 27:97:20:2e:a6:64:e7:69:3d:7f:51:fe:34:0e:31: 2f:60:4e:91:a2:6f:5f:83:b2:a1:e7:43:0e:a3:ce: ee:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8F:33:3C:F7:44:33:22:17:79:43:E5:12:88:D2:07:A7:24:A3:FD X509v3 Authority Key Identifier: keyid:A6:01:5E:5E:26:05:D4:FD:F6:8E:B9:6F:96:A9:89:4C:EA:EC:DF:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:bf:84:f6:75:bf:b1:ea:61:cf:4a:c4:41:74:e0:96:99:66: 94:c0:32:b0:93:3c:49:41:13:c6:c1:0f:23:66:05:f0:8b:86: a3:da:75:a9:a7:ae:b8:05:07:50:62:ec:38:46:7e:aa:2d:3b: 69:03:8f:12:9c:13:a2:ff:f2:7c:a7:8f:2d:1d:b1:3b:0c:b4: f3:43:07:12:57:d1:5d:28:68:9b:03:0a:87:37:8d:0a:8b:36: ee:92:0c:ee:5d:cf:58:3a:f1:a8:da:e3:1e:4f:b7:17:6c:33: 3d:cc:6c:97:86:65:24:f4:dc:05:5f:ce:da:d2:97:86:bb:05: 16:d8:41:71:ff:92:0c:0d:28:f4:98:40:b1:ef:9c:e7:9b:77: 3b:53:db:d1:a0:c3:4a:4d:a6:24:8b:cb:f3:83:11:98:39:ff: 84:f2:37:29:c2:de:2c:02:da:85:f6:c2:9a:a6:12:10:6f:ea: 97:69:60:e1:c3:df:db:1d:4b:23:fe:52:a2:84:6f:3a:66:28: f4:81:0c:34:fa:9f:7a:3d:67:dd:f8:c9:49:b3:97:da:1c:ba: 0c:fa:73:b0:f4:62:cf:bf:7e:36:cb:1c:58:d8:01:48:99:0b: f5:b8:d4:4d:8c:36:82:1c:ba:04:01:fd:8d:d9:33:71:75:54: b7:4a:30:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTL/Ju0TfY5ybcfukWogrAKQRl9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwMTVFNUUyNjA1RDRGREY2OEVCOTZGOTZBOTg5NENF QUVDREZCRjAeFw0yNTEwMjEwOTA2NDVaFw0yNTEwMjQxNzIxNDVaMDMxMTAvBgNV BAMTKDQyOEYzMzNDRjc0NDMzMjIxNzc5NDNFNTEyODhEMjA3QTcyNEEzRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc6OeNd6r8rAqsRJNXq0csXTvx 6yFkRGy/j+RSqcOBKi+WUX2Q/9hl/HwTPymdWpDUrWL+4f8lyUOVrf7vMlrVE685 8G8B7hlSGjcQ2qZ+hjZfZsrkVTSzIAgH7wvisVVLG9PCb9Klp9JUXt/dlJnQAxIB bZjUMyFpChB11YsAThYGJ8/MqTuZYjaqP6OUqAWaVD8so0VgCMRIh44CJ6JurbR+ SsGB7mivXqi5Yvv5TnyYODEeYMbrOzXorPf5F3V2FLuWxt3SUlFD8jxtXeK77uvv A95nGD5y8YwuOqsjHSeXIC6mZOdpPX9R/jQOMS9gTpGib1+DsqHnQw6jzu6RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQo8zPPdEMyIXeUPlEojSB6cko/0wHwYDVR0j BBgwFoAUpgFeXiYF1P32jrlvlqmJTOrs378wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGQzZWYyYy03ODFkLTRkMGMtYTY4Mi05MWFjMDExZWY2YjcvMC9BNjAxNUU1RTI2 MDVENEZERjY4RUI5NkY5NkE5ODk0Q0VBRUNERkJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYwMTVFNUUyNjA1RDRGREY2OEVCOTZGOTZBOTg5NENFQUVD REZCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRkM2VmMmMtNzgxZC00ZDBjLWE2 ODItOTFhYzAxMWVmNmI3LzAvQTYwMTVFNUUyNjA1RDRGREY2OEVCOTZGOTZBOTg5 NENFQUVDREZCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKm/hPZ1v7HqYc9KxEF04JaZZpTAMrCTPElB E8bBDyNmBfCLhqPadamnrrgFB1Bi7DhGfqotO2kDjxKcE6L/8nynjy0dsTsMtPND BxJX0V0oaJsDCoc3jQqLNu6SDO5dz1g68aja4x5PtxdsMz3MbJeGZST03AVfztrS l4a7BRbYQXH/kgwNKPSYQLHvnOebdztT29Ggw0pNpiSLy/ODEZg5/4TyNynC3iwC 2oX2wpqmEhBv6pdpYOHD39sdSyP+UqKEbzpmKPSBDDT6n3o9Z934yUmzl9ocugz6 c7D0Ys+/fjbLHFjYAUiZC/W41E2MNoIcugQB/Y3ZM3F1VLdKMCQ= -----END CERTIFICATE-----Generated at Tue Oct 21 13:47:50 2025 by rpki-client