$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft File: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft (raw, json) Hash identifier: 6k2O17uG1VtlT/UEVwyMQWMt7mtccRMUj2hmYBKoEn8= Subject key identifier: 3C:19:84:7E:30:D6:D6:5C:A2:1E:CB:7E:56:63:E2:90:F0:16:D7:45 Authority key identifier: 6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 Certificate issuer: /CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Certificate serial: 681AD1B19EB42CEA08101BD663C9C83970A19121 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft Manifest number: 0318 Signing time: Tue 04 Nov 2025 06:21:31 +0000 Manifest this update: Tue 04 Nov 2025 06:16:31 +0000 Manifest next update: Fri 07 Nov 2025 12:24:31 +0000 Files and hashes: 1: 6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl (hash: 3vXMvdnAJ4zbovtne+nlpvQVcZd/dxtnIueLhhSGF8E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 12:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:1a:d1:b1:9e:b4:2c:ea:08:10:1b:d6:63:c9:c8:39:70:a1:91:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DEA9B275ECCFB920E0A84D0D158C6000F2561F7 Validity Not Before: Nov 4 06:16:31 2025 GMT Not After : Nov 7 12:24:31 2025 GMT Subject: CN=3C19847E30D6D65CA21ECB7E5663E290F016D745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0d:91:10:18:e2:e7:95:68:fe:3f:cd:f2:a8: 37:58:7c:1e:4a:c6:c8:1c:63:11:b3:50:56:cd:11: a6:fa:f8:69:3c:d7:dd:4d:af:d1:48:b4:ba:83:6c: c7:fb:bb:4e:20:0b:42:c3:ec:1a:d3:1c:e6:0e:97: 6e:4a:57:05:83:dd:d6:23:fb:4a:e2:0d:c8:9d:07: aa:ec:79:72:e0:41:66:a7:8a:70:3d:5a:de:b8:20: f4:f6:a7:38:27:c2:5c:09:df:da:88:ef:78:0f:f0: 62:2c:02:b6:f8:fa:d2:d7:e5:07:75:57:14:22:ea: 0b:77:a9:7b:f3:91:ff:4a:22:90:b4:db:7c:af:a2: b3:dc:48:7e:15:2e:53:f0:69:b3:94:2c:42:32:48: d1:16:c4:86:26:82:c0:9c:b8:a7:95:d6:de:03:94: 55:ba:ef:d0:da:16:cc:ee:8a:4e:28:e8:bd:cb:3f: 05:4e:76:19:51:d3:32:9b:5c:a5:b9:6d:24:f7:a1: bb:8f:15:70:f7:e4:5d:67:f3:b1:b7:07:b4:17:1e: 4b:17:59:d6:06:c9:16:be:ce:70:af:a6:78:07:7b: fb:38:2f:6f:eb:88:e1:09:d5:7d:eb:c6:71:de:e3: aa:5a:33:b4:f8:74:f4:be:ae:d9:55:44:0b:00:80: 57:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:19:84:7E:30:D6:D6:5C:A2:1E:CB:7E:56:63:E2:90:F0:16:D7:45 X509v3 Authority Key Identifier: keyid:6D:EA:9B:27:5E:CC:FB:92:0E:0A:84:D0:D1:58:C6:00:0F:25:61:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b77d1e-1585-4604-b6b1-071f0a2940c4/0/6DEA9B275ECCFB920E0A84D0D158C6000F2561F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:a1:7f:8b:0f:73:28:9f:2a:30:af:40:ef:50:c8:65:3e:96: 59:c3:30:80:f8:34:eb:6f:eb:9d:99:ae:ac:0c:fa:8d:9f:a7: 8a:b4:7e:78:cb:1b:66:39:5b:98:82:f3:87:30:f6:25:13:da: 25:3c:54:ab:4a:b6:bd:f1:b8:91:b2:ba:27:6d:81:2e:cd:c4: 1c:23:72:49:34:24:05:2d:ba:32:f5:d8:45:4f:27:18:f4:aa: 03:6f:4e:0c:71:75:7c:d9:25:17:49:cf:97:25:ab:27:02:d6: 21:0a:5d:d9:51:1f:75:fe:f5:43:50:65:fa:98:1e:53:a2:ed: 57:a6:ee:6f:43:a1:ac:cd:f8:d1:7b:42:cf:91:10:26:76:76: ae:08:28:42:73:b8:30:3c:17:1b:7c:cb:3f:89:0c:2a:dc:50: a5:2a:cc:c9:51:f0:43:96:18:6a:7d:0f:f8:c3:05:62:1f:65: 6c:b4:39:fd:a5:02:f3:d0:3e:e9:3b:e0:e0:67:c8:e5:60:f7: 46:5d:1a:20:40:e9:ea:5c:3c:e9:fe:9d:c6:e3:43:5a:f3:b0: a8:db:22:1f:45:a0:7e:59:e3:7d:e0:78:bb:0e:fd:b2:eb:7b: 81:26:42:c5:5e:c7:06:de:8b:db:52:24:4b:1f:47:8e:43:74: 36:3c:f1:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaBrRsZ60LOoIEBvWY8nIOXChkSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2MDAw RjI1NjFGNzAeFw0yNTExMDQwNjE2MzFaFw0yNTExMDcxMjI0MzFaMDMxMTAvBgNV BAMTKDNDMTk4NDdFMzBENkQ2NUNBMjFFQ0I3RTU2NjNFMjkwRjAxNkQ3NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtDZEQGOLnlWj+P83yqDdYfB5K xsgcYxGzUFbNEab6+Gk8191Nr9FItLqDbMf7u04gC0LD7BrTHOYOl25KVwWD3dYj +0riDcidB6rseXLgQWaninA9Wt64IPT2pzgnwlwJ39qI73gP8GIsArb4+tLX5Qd1 VxQi6gt3qXvzkf9KIpC023yvorPcSH4VLlPwabOULEIySNEWxIYmgsCcuKeV1t4D lFW679DaFszuik4o6L3LPwVOdhlR0zKbXKW5bST3obuPFXD35F1n87G3B7QXHksX WdYGyRa+znCvpngHe/s4L2/riOEJ1X3rxnHe46paM7T4dPS+rtlVRAsAgFcvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPBmEfjDW1lyiHst+VmPikPAW10UwHwYDVR0j BBgwFoAUbeqbJ17M+5IOCoTQ0VjGAA8lYfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWI3N2QxZS0xNTg1LTQ2MDQtYjZiMS0wNzFmMGEyOTQwYzQvMC82REVBOUIyNzVF Q0NGQjkyMEUwQTg0RDBEMTU4QzYwMDBGMjU2MUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2MDAwRjI1 NjFGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiNzdkMWUtMTU4NS00NjA0LWI2 YjEtMDcxZjBhMjk0MGM0LzAvNkRFQTlCMjc1RUNDRkI5MjBFMEE4NEQwRDE1OEM2 MDAwRjI1NjFGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKhf4sPcyifKjCvQO9QyGU+llnDMID4NOtv 652ZrqwM+o2fp4q0fnjLG2Y5W5iC84cw9iUT2iU8VKtKtr3xuJGyuidtgS7NxBwj ckk0JAUtujL12EVPJxj0qgNvTgxxdXzZJRdJz5clqycC1iEKXdlRH3X+9UNQZfqY HlOi7Vem7m9DoazN+NF7Qs+RECZ2dq4IKEJzuDA8Fxt8yz+JDCrcUKUqzMlR8EOW GGp9D/jDBWIfZWy0Of2lAvPQPuk74OBnyOVg90ZdGiBA6epcPOn+ncbjQ1rzsKjb Ih9FoH5Z433geLsO/bLre4EmQsVexwbei9tSJEsfR45DdDY88Zg= -----END CERTIFICATE-----Generated at Wed Nov 5 10:06:46 2025 by rpki-client