$ rpki-client -vvf repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft File: B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft (raw, json) Hash identifier: 3onldf2M7H+rSQrbCizWxxniQDEGGbxFkfaTfz7NM2U= Subject key identifier: 16:E9:1F:93:74:0C:67:0B:CF:6A:A2:03:47:A3:64:16:A2:F4:D9:56 Authority key identifier: B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 Certificate issuer: /CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Certificate serial: 3E40B23904346E1203324AA966D0B123F07C9776 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft Manifest number: 0520 Signing time: Tue 04 Nov 2025 00:01:25 +0000 Manifest this update: Mon 03 Nov 2025 23:56:25 +0000 Manifest next update: Fri 07 Nov 2025 10:39:25 +0000 Files and hashes: 1: 323030313a6466363a343530303a3a2f34382d3438203d3e20313338303539.roa (hash: IoCq5Fr7ucJSiJXgyl0hLajgLtZdo657+jXfL09lCzQ=) 2: B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl (hash: /Rqk5I0ddnt9VaXVwTpdXmS3GTKLiuvjWNORtbqg9/A=) 3: 3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (hash: Zl03XVx57nbxitWYw7MeSszUElsg5oZ5jVn5EskWk+g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:40:b2:39:04:34:6e:12:03:32:4a:a9:66:d0:b1:23:f0:7c:97:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Validity Not Before: Nov 3 23:56:25 2025 GMT Not After : Nov 7 10:39:25 2025 GMT Subject: CN=16E91F93740C670BCF6AA20347A36416A2F4D956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:90:11:ff:e4:f5:8e:93:44:a1:ea:8b:03:1e: eb:99:7f:91:17:b9:95:6a:98:00:75:5a:a3:77:09: 1b:d9:be:6f:99:bd:67:1f:a7:29:31:b6:e8:75:ef: b2:c1:61:d5:22:fe:a0:df:7d:80:44:77:0c:65:3e: 5d:fd:1b:72:db:1d:04:ca:0e:bd:9f:b5:58:ca:15: 82:bd:93:7a:9e:13:74:79:bd:54:0a:2c:c4:64:a7: 7c:c9:bc:3d:65:cf:82:1f:5d:0c:91:21:4e:9f:cc: f5:af:37:3e:61:f8:e3:e2:ae:9f:d8:4d:e3:4f:b4: 37:32:5c:01:a3:2c:3b:3c:75:0a:76:07:88:59:84: ca:34:17:d6:b0:0c:04:9a:03:f8:ea:a4:18:e9:e2: 92:be:89:ea:a6:d0:7d:76:20:06:0e:a9:33:b5:ac: d2:f5:57:01:e9:58:f6:32:0c:60:8d:96:43:bf:8b: 09:9d:31:57:87:ac:bb:86:d0:d4:4b:12:ff:b7:bf: a8:eb:93:86:ff:56:8a:55:aa:41:3a:38:dd:14:89: 52:84:4a:7c:fa:77:f3:94:9e:cc:60:68:03:34:d1: 88:ab:ab:d4:4b:d7:08:e9:20:23:67:a2:87:43:93: 47:ce:6e:d6:fb:68:42:c2:10:45:d4:7c:f4:38:87: 67:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E9:1F:93:74:0C:67:0B:CF:6A:A2:03:47:A3:64:16:A2:F4:D9:56 X509v3 Authority Key Identifier: keyid:B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:e9:47:e9:28:ff:55:f4:5e:2a:6d:40:31:57:6c:eb:5a:29: c8:13:c2:b4:05:0e:15:26:66:e1:56:83:ae:c4:80:60:ea:e3: 29:d2:a9:64:5d:48:25:a2:43:86:95:3d:4b:b3:9b:98:3f:7e: 90:c2:d9:dc:a4:a5:47:3d:0b:41:87:1c:34:55:a4:12:23:3f: 7c:c3:94:68:d3:44:0b:8d:9b:7a:3c:1f:c9:a5:ee:d6:30:ed: 74:be:f6:af:43:4c:f8:29:83:e1:ae:de:e5:ca:65:dd:37:c0: 78:e0:8e:51:cc:bc:54:9b:2a:7d:c4:b5:ad:06:80:3b:00:b3: 6d:b2:1b:2b:54:c4:80:06:1b:d8:07:6c:14:75:fe:97:61:67: 73:57:53:b9:51:3e:d5:d1:de:0e:98:9e:c1:a7:ee:15:89:d6: a0:f4:57:d0:77:7e:2b:26:06:85:c8:45:74:57:a5:63:30:33: 35:e4:aa:08:64:ed:ad:e7:52:a6:1b:29:3e:e2:38:e3:7d:d0: fc:5b:11:b5:dd:6d:c1:79:da:fa:ee:ea:fd:c3:08:91:f6:18: 71:08:8a:63:56:5d:c8:b7:a1:af:ad:17:5f:9d:d4:3c:0d:9f: c8:21:05:39:47:be:f5:e1:9e:bb:6d:1f:28:73:dd:46:02:78: 63:be:04:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPkCyOQQ0bhIDMkqpZtCxI/B8l3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZG NERFQzhBNTAeFw0yNTExMDMyMzU2MjVaFw0yNTExMDcxMDM5MjVaMDMxMTAvBgNV BAMTKDE2RTkxRjkzNzQwQzY3MEJDRjZBQTIwMzQ3QTM2NDE2QTJGNEQ5NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2kBH/5PWOk0Sh6osDHuuZf5EX uZVqmAB1WqN3CRvZvm+ZvWcfpykxtuh177LBYdUi/qDffYBEdwxlPl39G3LbHQTK Dr2ftVjKFYK9k3qeE3R5vVQKLMRkp3zJvD1lz4IfXQyRIU6fzPWvNz5h+OPirp/Y TeNPtDcyXAGjLDs8dQp2B4hZhMo0F9awDASaA/jqpBjp4pK+ieqm0H12IAYOqTO1 rNL1VwHpWPYyDGCNlkO/iwmdMVeHrLuG0NRLEv+3v6jrk4b/VopVqkE6ON0UiVKE Snz6d/OUnsxgaAM00Yirq9RL1wjpICNnoodDk0fObtb7aELCEEXUfPQ4h2f/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFukfk3QMZwvPaqIDR6NkFqL02VYwHwYDVR0j BBgwFoAUtoR7kowwgAKC17qOM3SC3/TeyKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2RlZGVkMS1kMTRlLTQxMjMtYjVjOS1jOTNhNTk5N2ZjMzAvMC9CNjg0N0I5MjhD MzA4MDAyODJEN0JBOEUzMzc0ODJERkY0REVDOEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZGNERF QzhBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdkZWRlZDEtZDE0ZS00MTIzLWI1 YzktYzkzYTU5OTdmYzMwLzAvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgy REZGNERFQzhBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnpR+ko/1X0XiptQDFXbOtaKcgTwrQFDhUm ZuFWg67EgGDq4ynSqWRdSCWiQ4aVPUuzm5g/fpDC2dykpUc9C0GHHDRVpBIjP3zD lGjTRAuNm3o8H8ml7tYw7XS+9q9DTPgpg+Gu3uXKZd03wHjgjlHMvFSbKn3Eta0G gDsAs22yGytUxIAGG9gHbBR1/pdhZ3NXU7lRPtXR3g6YnsGn7hWJ1qD0V9B3fism BoXIRXRXpWMwMzXkqghk7a3nUqYbKT7iOON90PxbEbXdbcF52vru6v3DCJH2GHEI imNWXci3oa+tF1+d1DwNn8ghBTlHvvXhnrttHyhz3UYCeGO+BNc= -----END CERTIFICATE-----Generated at Tue Nov 4 12:54:25 2025 by rpki-client