$ rpki-client -vvf repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft File: C00606846C7D0E540F5703EC90A0C331460D7ECA.mft (raw, json) Hash identifier: hISl5HXDMKuZAOmpcFm0yevYybw7uvJEQ5S0l6Jvmd8= Subject key identifier: 63:9C:76:4C:08:F9:70:8F:66:BA:80:29:E0:F1:6C:96:C0:05:9E:94 Authority key identifier: C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA Certificate issuer: /CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Certificate serial: 65A4741AC518CC914E8AECB2B7AB74685BC9F438 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft Manifest number: D8 Signing time: Sun 02 Nov 2025 08:41:20 +0000 Manifest this update: Sun 02 Nov 2025 08:36:20 +0000 Manifest next update: Wed 05 Nov 2025 19:55:20 +0000 Files and hashes: 1: C00606846C7D0E540F5703EC90A0C331460D7ECA.crl (hash: GSqp3yxqzk/Kw98cfWXDvYtyKsTM98NS3AcKSO6sCUg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 19:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:a4:74:1a:c5:18:cc:91:4e:8a:ec:b2:b7:ab:74:68:5b:c9:f4:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Validity Not Before: Nov 2 08:36:20 2025 GMT Not After : Nov 5 19:55:20 2025 GMT Subject: CN=639C764C08F9708F66BA8029E0F16C96C0059E94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b4:40:5b:1c:f9:64:f7:a2:19:e5:fb:0b:c0: b9:ce:bb:a9:2b:6f:1f:2a:5d:86:7b:7a:a7:9b:c7: 7c:e0:be:60:0b:38:2e:a7:08:67:5c:ae:78:e2:e4: 2b:d0:1f:9a:6b:ef:33:ca:6a:80:c2:2c:e9:66:24: da:98:cf:1b:2f:d7:56:74:8b:f7:b7:85:43:9e:01: 9b:2f:c3:fb:5b:56:8b:f9:13:d1:31:3e:9c:29:2e: c8:33:49:03:73:7a:61:96:33:2b:2c:34:37:69:48: 95:6d:ef:ba:54:44:ef:29:cc:c6:e3:c7:6b:f0:37: 7c:6d:bb:42:11:8d:d5:26:7a:d8:4e:ba:96:e3:40: b0:6e:08:6d:73:25:07:82:17:a6:aa:08:2e:e6:0f: c9:6b:b9:a4:43:0f:e5:96:55:f5:80:02:60:ac:9b: 28:d8:26:5a:85:b1:35:d0:a1:4d:17:44:16:83:4c: ee:89:75:e5:48:b0:8a:a8:42:fb:c3:10:7f:a0:d1: 81:23:14:ad:e6:ac:2f:14:42:81:18:50:11:83:a7: d7:af:bc:99:cd:be:d6:64:ad:62:0d:37:f0:fc:9a: 6c:1f:78:25:16:a0:0f:6e:19:9b:d9:f0:e7:20:02: 00:d6:22:98:a5:25:4f:39:24:9b:bb:5d:78:c9:40: 7f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:9C:76:4C:08:F9:70:8F:66:BA:80:29:E0:F1:6C:96:C0:05:9E:94 X509v3 Authority Key Identifier: keyid:C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:cd:21:33:98:cc:9c:97:dd:de:70:af:95:c3:b2:fb:ef:5c: ab:5a:0a:56:56:85:27:7e:78:20:42:cf:a0:69:3a:e0:76:85: 3f:a2:37:59:61:df:2a:17:a8:48:78:af:bb:48:a6:b0:32:46: e5:3d:a9:28:c7:e1:78:0c:ce:ae:04:d7:ec:91:39:f5:ed:cc: e4:26:5a:96:1d:d9:37:e0:49:ed:2a:ff:84:f2:1c:94:d4:7e: 9c:84:23:af:ca:db:82:05:b7:3e:d0:0a:93:7b:5f:03:26:9c: b9:55:62:b3:ec:1c:5f:67:89:52:b8:ec:c6:81:ca:5f:ab:6f: af:d6:50:be:d5:90:09:c3:79:d4:f9:e4:50:79:86:d0:d1:1e: 03:e9:24:0b:47:3e:61:95:d2:a7:c2:58:38:c4:24:3e:3d:8d: 61:54:cc:da:66:a3:f4:a8:6b:4a:6b:d1:0b:9b:b2:50:de:52: b6:30:ee:29:5a:b3:af:06:8a:8b:94:a3:b4:c0:42:00:74:08: 75:77:6a:c9:38:1e:67:fc:2f:f4:93:05:3c:8c:0e:49:bc:0e: 1d:e1:a6:a3:91:c2:df:02:14:da:06:b7:de:56:21:aa:1e:68: f7:99:8c:df:f0:0f:2f:f6:7d:45:98:ba:f6:d2:22:97:a3:5b: 91:79:6d:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZaR0GsUYzJFOiuyyt6t0aFvJ9DgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0 NjBEN0VDQTAeFw0yNTExMDIwODM2MjBaFw0yNTExMDUxOTU1MjBaMDMxMTAvBgNV BAMTKDYzOUM3NjRDMDhGOTcwOEY2NkJBODAyOUUwRjE2Qzk2QzAwNTlFOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjtEBbHPlk96IZ5fsLwLnOu6kr bx8qXYZ7eqebx3zgvmALOC6nCGdcrnji5CvQH5pr7zPKaoDCLOlmJNqYzxsv11Z0 i/e3hUOeAZsvw/tbVov5E9ExPpwpLsgzSQNzemGWMyssNDdpSJVt77pURO8pzMbj x2vwN3xtu0IRjdUmethOupbjQLBuCG1zJQeCF6aqCC7mD8lruaRDD+WWVfWAAmCs myjYJlqFsTXQoU0XRBaDTO6JdeVIsIqoQvvDEH+g0YEjFK3mrC8UQoEYUBGDp9ev vJnNvtZkrWINN/D8mmwfeCUWoA9uGZvZ8OcgAgDWIpilJU85JJu7XXjJQH8NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY5x2TAj5cI9muoAp4PFslsAFnpQwHwYDVR0j BBgwFoAUwAYGhGx9DlQPVwPskKDDMUYNfsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTMzNGQwMy1lYWU0LTRkMjAtYmE1NC1iMTg4OWQ5MjQ3YWMvMC9DMDA2MDY4NDZD N0QwRTU0MEY1NzAzRUM5MEEwQzMzMTQ2MEQ3RUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0NjBE N0VDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjEzMzRkMDMtZWFlNC00ZDIwLWJh NTQtYjE4ODlkOTI0N2FjLzAvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMz MzE0NjBEN0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/NITOYzJyX3d5wr5XDsvvvXKtaClZWhSd+ eCBCz6BpOuB2hT+iN1lh3yoXqEh4r7tIprAyRuU9qSjH4XgMzq4E1+yROfXtzOQm WpYd2TfgSe0q/4TyHJTUfpyEI6/K24IFtz7QCpN7XwMmnLlVYrPsHF9niVK47MaB yl+rb6/WUL7VkAnDedT55FB5htDRHgPpJAtHPmGV0qfCWDjEJD49jWFUzNpmo/So a0pr0QubslDeUrYw7ilas68GiouUo7TAQgB0CHV3ask4Hmf8L/STBTyMDkm8Dh3h pqORwt8CFNoGt95WIaoeaPeZjN/wDy/2fUWYuvbSIpejW5F5baU= -----END CERTIFICATE-----Generated at Tue Nov 4 16:06:55 2025 by rpki-client