$ rpki-client -vvf repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft File: 8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft (raw, json) Hash identifier: spNKYD3xnwr3+NjECu5JZ2ZJpWl3rOLoBN2qi2p3dbQ= Subject key identifier: E6:C1:BF:9F:AF:CC:01:71:E5:2B:1E:3F:17:C9:ED:53:12:1E:32:84 Authority key identifier: 86:94:CD:BB:52:F4:AE:A8:9A:F4:6C:A5:BF:A5:A6:39:97:3D:73:02 Certificate issuer: /CN=8694CDBB52F4AEA89AF46CA5BFA5A639973D7302 Certificate serial: 188FBA039C136045E9EFCA75684B1B24EAA3DCD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft Manifest number: 63 Signing time: Sun 02 Nov 2025 17:51:38 +0000 Manifest this update: Sun 02 Nov 2025 17:46:38 +0000 Manifest next update: Thu 06 Nov 2025 01:14:38 +0000 Files and hashes: 1: 8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl (hash: e8wo0Decga8VAITNTbDIO7qDz+s+GbPt+jecZZqxteE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:14:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:8f:ba:03:9c:13:60:45:e9:ef:ca:75:68:4b:1b:24:ea:a3:dc:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8694CDBB52F4AEA89AF46CA5BFA5A639973D7302 Validity Not Before: Nov 2 17:46:38 2025 GMT Not After : Nov 6 01:14:38 2025 GMT Subject: CN=E6C1BF9FAFCC0171E52B1E3F17C9ED53121E3284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5c:1c:f9:6d:8d:9c:5d:7a:79:db:2b:ed:2c: 9d:db:10:91:09:f2:3e:12:bb:0c:90:c3:26:83:e7: 64:f2:90:b4:23:3c:f3:9b:22:4d:e6:b8:2d:f9:81: d6:83:f6:d0:5e:24:6c:c8:89:a2:9f:1f:83:c8:dd: a7:0b:06:5f:53:71:48:48:d0:c5:9b:09:70:a5:47: 53:a2:92:43:2f:3a:ec:cb:da:19:e9:b1:44:09:2b: ed:a0:da:dc:34:e5:56:33:94:61:4e:3c:1d:49:f3: 24:d3:2c:4b:8d:50:7a:71:13:47:28:98:b5:2d:1b: 7d:28:2c:ad:27:52:c7:8d:96:55:e7:8f:94:25:e8: dc:16:e2:90:40:6a:3c:1b:8c:fc:e8:cd:fd:42:7a: 67:67:ac:ab:e9:5f:f4:7c:da:2c:a2:25:2e:af:e8: 0d:a3:a3:c5:3c:2a:57:35:5d:e5:96:f9:ad:74:cc: 35:4a:f2:8b:ca:b2:33:6f:14:55:66:6c:ac:55:29: 31:b2:b7:9e:a3:cf:dd:2d:b5:cd:2c:16:aa:81:61: 5f:a8:76:c6:d6:71:b1:1c:a6:9c:ac:ba:0f:99:50: e6:49:cf:75:46:fe:b5:ca:56:d1:35:b6:50:aa:61: aa:4d:74:fe:e7:74:bb:b0:a2:08:54:75:00:6c:09: 44:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C1:BF:9F:AF:CC:01:71:E5:2B:1E:3F:17:C9:ED:53:12:1E:32:84 X509v3 Authority Key Identifier: keyid:86:94:CD:BB:52:F4:AE:A8:9A:F4:6C:A5:BF:A5:A6:39:97:3D:73:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:90:9f:dd:0b:c7:93:56:85:b0:42:f0:ec:32:1f:4d:f1:2b: a1:9f:5c:6b:f5:79:ff:b5:fa:2b:ae:f8:5f:af:46:7f:b4:b0: 5f:5e:ec:2d:ce:3f:b2:24:8f:68:37:8f:fd:7b:41:e8:53:7b: f6:89:c3:0f:3d:a6:4a:0a:0e:75:2e:18:72:42:c0:91:b4:5c: 82:9e:45:05:1a:ee:6a:d4:d8:b1:99:86:15:54:ad:61:87:1b: 6f:b0:41:56:4a:33:e4:ef:c2:cf:09:16:d7:2e:e5:e7:87:a5: 8c:bc:83:21:44:c2:52:c3:d6:44:a1:3c:20:f9:56:df:93:74: 8a:5a:9b:86:4b:bc:1f:6e:ea:54:1d:35:a6:bb:3d:a5:e5:69: 4a:9d:3e:86:2d:08:f5:2a:86:cf:91:97:80:d7:f2:30:3f:d2: b7:a4:93:60:78:36:62:2b:7b:66:7d:12:3d:7b:2e:c8:49:53: 7e:2e:f5:70:e1:1d:50:e5:03:e9:77:56:55:e6:3a:35:64:ec: fc:57:1a:c7:43:ee:37:1c:42:75:a0:1b:bf:7a:6d:85:94:f1: 41:16:94:41:91:11:2b:3a:bd:0f:7a:fe:53:81:44:9e:0a:08: e8:78:bc:6f:bf:56:cd:7b:6d:bc:b2:32:b7:da:af:c7:76:d4: a1:18:c7:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGI+6A5wTYEXp78p1aEsbJOqj3NYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2Mzk5 NzNENzMwMjAeFw0yNTExMDIxNzQ2MzhaFw0yNTExMDYwMTE0MzhaMDMxMTAvBgNV BAMTKEU2QzFCRjlGQUZDQzAxNzFFNTJCMUUzRjE3QzlFRDUzMTIxRTMyODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmXBz5bY2cXXp52yvtLJ3bEJEJ 8j4SuwyQwyaD52TykLQjPPObIk3muC35gdaD9tBeJGzIiaKfH4PI3acLBl9TcUhI 0MWbCXClR1OikkMvOuzL2hnpsUQJK+2g2tw05VYzlGFOPB1J8yTTLEuNUHpxE0co mLUtG30oLK0nUseNllXnj5Ql6NwW4pBAajwbjPzozf1CemdnrKvpX/R82iyiJS6v 6A2jo8U8Klc1XeWW+a10zDVK8ovKsjNvFFVmbKxVKTGyt56jz90ttc0sFqqBYV+o dsbWcbEcppysug+ZUOZJz3VG/rXKVtE1tlCqYapNdP7ndLuwoghUdQBsCUR5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5sG/n6/MAXHlKx4/F8ntUxIeMoQwHwYDVR0j BBgwFoAUhpTNu1L0rqia9Gylv6WmOZc9cwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Y2YwMGY4YS01Y2JkLTQ2MGYtYmZjNi1iZDg5NDJiNjUzN2MvMC84Njk0Q0RCQjUy RjRBRUE4OUFGNDZDQTVCRkE1QTYzOTk3M0Q3MzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2Mzk5NzNE NzMwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGNmMDBmOGEtNWNiZC00NjBmLWJm YzYtYmQ4OTQyYjY1MzdjLzAvODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2 Mzk5NzNENzMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKQn90Lx5NWhbBC8OwyH03xK6GfXGv1ef+1 +iuu+F+vRn+0sF9e7C3OP7Ikj2g3j/17QehTe/aJww89pkoKDnUuGHJCwJG0XIKe RQUa7mrU2LGZhhVUrWGHG2+wQVZKM+Tvws8JFtcu5eeHpYy8gyFEwlLD1kShPCD5 Vt+TdIpam4ZLvB9u6lQdNaa7PaXlaUqdPoYtCPUqhs+Rl4DX8jA/0rekk2B4NmIr e2Z9Ej17LshJU34u9XDhHVDlA+l3VlXmOjVk7PxXGsdD7jccQnWgG796bYWU8UEW lEGRESs6vQ96/lOBRJ4KCOh4vG+/Vs17bbyyMrfar8d21KEYx1Q= -----END CERTIFICATE-----Generated at Tue Nov 4 12:38:05 2025 by rpki-client