$ rpki-client -vvf repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft File: 2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft (raw, json) Hash identifier: iYA/eMffr1m/9Zi1T4cFuazB6wjUhoTKBuSSxpvuRlc= Subject key identifier: EB:48:55:A2:F0:8F:BD:7B:8C:B8:8B:97:38:DB:6D:F4:FC:61:61:BC Authority key identifier: 25:66:F4:DF:5C:09:FF:A8:E4:F4:D6:99:99:41:B9:AB:A2:B7:22:8B Certificate issuer: /CN=2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B Certificate serial: 50846F88758B91761043FE5044038A6A0058D863 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft Manifest number: 011D Signing time: Sun 19 Oct 2025 09:12:01 +0000 Manifest this update: Sun 19 Oct 2025 09:07:01 +0000 Manifest next update: Wed 22 Oct 2025 12:31:01 +0000 Files and hashes: 1: 2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl (hash: GlcUs0prAolGrYdozgK+Sry3bOxKaJ15iH1EIERwffo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 12:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:84:6f:88:75:8b:91:76:10:43:fe:50:44:03:8a:6a:00:58:d8:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B Validity Not Before: Oct 19 09:07:01 2025 GMT Not After : Oct 22 12:31:01 2025 GMT Subject: CN=EB4855A2F08FBD7B8CB88B9738DB6DF4FC6161BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:08:5d:81:48:ca:2f:bd:03:e6:46:bf:84:bf: 1d:97:c5:fd:22:e8:13:9d:52:2e:dc:a5:67:4a:f2: 52:c1:87:0f:1f:ec:5a:ee:eb:4d:d9:60:3a:25:ed: 2c:ba:38:71:e6:40:8b:70:75:58:17:a1:c2:d7:9b: b8:7f:93:c4:46:66:a0:3d:7c:95:39:0c:9e:c8:28: e4:87:b9:30:ec:c2:00:28:2f:eb:ed:14:4e:86:e9: 89:55:23:1e:ee:6a:d3:bd:01:39:22:4d:3e:fe:6a: 17:a1:7a:2e:c9:26:4b:97:b0:82:44:bf:ca:6a:ea: 0c:b4:35:7e:0c:71:61:9d:19:30:99:76:57:fe:45: 2d:aa:6c:36:84:9c:fe:c1:4e:8a:75:6a:16:b0:dd: 8c:62:ba:15:4e:ed:12:15:dc:89:89:d9:61:ed:aa: 7a:e6:55:c8:44:80:70:2b:0d:ad:e3:dd:1b:ba:2e: c8:01:7a:f8:9c:68:58:d1:16:df:eb:3f:07:79:2a: ba:6f:78:bf:4c:11:2c:63:cd:f9:a7:a8:9b:cb:de: 21:c5:7e:b8:2e:0c:7c:01:81:33:e7:cc:cb:68:be: 8f:0e:1e:3d:bb:52:16:a4:2f:af:90:ba:35:4f:1a: 37:4f:fd:da:10:e4:a6:36:5a:4d:6d:f8:43:cf:a6: 1e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:48:55:A2:F0:8F:BD:7B:8C:B8:8B:97:38:DB:6D:F4:FC:61:61:BC X509v3 Authority Key Identifier: keyid:25:66:F4:DF:5C:09:FF:A8:E4:F4:D6:99:99:41:B9:AB:A2:B7:22:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:6e:6e:cc:de:9a:54:81:68:b8:bd:ac:60:6b:b9:ad:34:1e: 37:31:9d:53:76:de:84:21:51:86:82:50:4c:76:5c:2d:fe:a5: a0:a8:68:22:83:0f:73:a0:1c:0d:64:bf:3c:ec:77:0a:10:2a: b2:7e:68:0c:f9:44:89:e5:89:c0:69:b3:52:5c:9b:31:c3:7d: e1:25:75:4c:f8:79:c7:0b:99:1f:68:6c:b1:ad:ab:e2:1b:b7: 0d:14:e3:a4:29:5a:a6:89:fc:43:a8:b9:9a:7c:40:c1:92:f7: f4:c1:2b:77:ff:14:c0:76:ae:4a:c9:5c:09:6a:2c:cd:36:53: 3a:43:78:12:61:29:23:f2:ca:87:dc:c7:ed:86:68:b6:fc:63: b6:4b:4c:f3:5e:54:9c:c3:a2:36:87:77:34:f9:6c:b1:b0:a3: a8:13:50:ea:c0:1a:e9:e4:f0:91:0e:ec:9b:71:e0:e6:74:1a: b8:2e:dc:4d:73:24:8c:34:b0:64:83:50:23:8b:d4:06:9d:31: 45:68:55:e4:99:5f:7d:88:4d:68:38:cc:fa:d5:e8:8b:b8:06: 90:2a:aa:fa:d0:77:3d:a9:6f:f3:a6:cf:13:b8:2d:c8:a5:1e: 9d:1e:b2:13:d3:b2:fd:6f:1f:6e:98:ba:2b:a5:ee:49:3c:6a: c3:3b:62:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUIRviHWLkXYQQ/5QRAOKagBY2GMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2NkY0REY1QzA5RkZBOEU0RjRENjk5OTk0MUI5QUJB MkI3MjI4QjAeFw0yNTEwMTkwOTA3MDFaFw0yNTEwMjIxMjMxMDFaMDMxMTAvBgNV BAMTKEVCNDg1NUEyRjA4RkJEN0I4Q0I4OEI5NzM4REI2REY0RkM2MTYxQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJCF2BSMovvQPmRr+Evx2Xxf0i 6BOdUi7cpWdK8lLBhw8f7Fru603ZYDol7Sy6OHHmQItwdVgXocLXm7h/k8RGZqA9 fJU5DJ7IKOSHuTDswgAoL+vtFE6G6YlVIx7uatO9ATkiTT7+ahehei7JJkuXsIJE v8pq6gy0NX4McWGdGTCZdlf+RS2qbDaEnP7BTop1ahaw3YxiuhVO7RIV3ImJ2WHt qnrmVchEgHArDa3j3Ru6LsgBevicaFjRFt/rPwd5KrpveL9MESxjzfmnqJvL3iHF frguDHwBgTPnzMtovo8OHj27UhakL6+QujVPGjdP/doQ5KY2Wk1t+EPPph7VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU60hVovCPvXuMuIuXONtt9PxhYbwwHwYDVR0j BBgwFoAUJWb031wJ/6jk9NaZmUG5q6K3IoswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTE2NDExZi03OGNhLTQ5MTYtODkxOS0zN2MxZDk5ZWZiZDgvMC8yNTY2RjRERjVD MDlGRkE4RTRGNEQ2OTk5OTQxQjlBQkEyQjcyMjhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU2NkY0REY1QzA5RkZBOEU0RjRENjk5OTk0MUI5QUJBMkI3 MjI4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkxNjQxMWYtNzhjYS00OTE2LTg5 MTktMzdjMWQ5OWVmYmQ4LzAvMjU2NkY0REY1QzA5RkZBOEU0RjRENjk5OTk0MUI5 QUJBMkI3MjI4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZubszemlSBaLi9rGBrua00HjcxnVN23oQh UYaCUEx2XC3+paCoaCKDD3OgHA1kvzzsdwoQKrJ+aAz5RInlicBps1JcmzHDfeEl dUz4eccLmR9obLGtq+Ibtw0U46QpWqaJ/EOouZp8QMGS9/TBK3f/FMB2rkrJXAlq LM02UzpDeBJhKSPyyofcx+2GaLb8Y7ZLTPNeVJzDojaHdzT5bLGwo6gTUOrAGunk 8JEO7Jtx4OZ0Grgu3E1zJIw0sGSDUCOL1AadMUVoVeSZX32ITWg4zPrV6Iu4BpAq qvrQdz2pb/OmzxO4LcilHp0eshPTsv1vH26Yuiul7kk8asM7YtE= -----END CERTIFICATE-----Generated at Mon Oct 20 09:41:18 2025 by rpki-client