$ rpki-client -vvf repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft File: 6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft (raw, json) Hash identifier: I43JAsrQfT4mye7RiJjRkf0dzKRM6nMsx7Kob9IVkhY= Subject key identifier: FD:1A:95:49:A0:32:AC:35:B3:DC:E4:9E:7A:4A:F3:95:3C:20:56:89 Authority key identifier: 6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 Certificate issuer: /CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Certificate serial: 53E1A1456DE4E1854EFD3CE6C5492EACEA082880 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft Manifest number: 0375 Signing time: Sun 02 Nov 2025 21:01:31 +0000 Manifest this update: Sun 02 Nov 2025 20:56:31 +0000 Manifest next update: Wed 05 Nov 2025 22:17:31 +0000 Files and hashes: 1: 3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa (hash: QReThr3L/8y8L/3AEdob8H7epOdOKEjss3T3HzyvfMI=) 2: 6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl (hash: njC+2QZJOduIwfSYxcLLFqog8CRbNvPqhX7xIuqa2hw=) 3: 3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa (hash: G1U9gODI47ty2yrLIvmBDS+xG1WkgDbqidFt5qR0lew=) 4: 3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa (hash: lkrHej4FZPJ4f2E40DosArf8hhkwpkjiPyYFXEzD3uU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 22:17:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:e1:a1:45:6d:e4:e1:85:4e:fd:3c:e6:c5:49:2e:ac:ea:08:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Validity Not Before: Nov 2 20:56:31 2025 GMT Not After : Nov 5 22:17:31 2025 GMT Subject: CN=FD1A9549A032AC35B3DCE49E7A4AF3953C205689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c7:42:61:41:51:ea:41:56:27:84:bb:47:7c: d3:7c:b2:bb:28:7d:d1:dd:ef:1a:0b:0b:a8:8e:65: 6b:06:8a:54:79:30:1e:a7:1c:6a:2d:3f:db:be:81: 22:b2:20:70:f3:cf:26:2d:9b:2e:0f:c8:1d:00:0e: f7:16:44:06:45:26:39:a1:fc:ef:f6:0b:8b:ab:38: 12:28:56:8f:b8:c6:95:3a:f3:a9:f5:48:66:64:fe: 94:26:93:99:ae:f7:e5:d5:52:06:fb:91:41:c2:86: 7e:52:44:e1:dc:cd:35:06:51:43:29:a1:0b:32:ae: 8f:f8:48:31:22:e1:c5:b0:3d:d3:1b:c7:eb:db:65: 46:5a:79:a6:d6:b1:f7:a8:e5:57:76:70:d0:67:7f: 92:08:63:0e:4f:84:f6:ab:64:41:4b:21:c9:a5:51: fb:1c:a0:db:41:02:ec:fd:3e:1d:82:53:49:29:92: d5:a6:78:ef:5d:78:91:3f:77:b6:ed:ba:be:3d:3c: 5f:05:f9:e6:91:59:b3:31:54:13:68:aa:b6:aa:29: ba:ec:5e:e2:6e:fe:0b:94:66:9c:c4:15:a8:2c:63: 64:3a:a9:fe:0c:a0:a7:c1:4e:99:df:76:cf:9d:9f: 13:07:99:3c:b8:c0:c5:29:ad:d9:21:1d:df:08:f2: c0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:1A:95:49:A0:32:AC:35:B3:DC:E4:9E:7A:4A:F3:95:3C:20:56:89 X509v3 Authority Key Identifier: keyid:6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:24:9f:aa:63:e7:28:a5:9f:fc:a7:c9:f6:af:04:c3:b5:4c: 34:2a:16:d9:02:8d:8f:95:13:d8:84:f8:20:bf:23:0c:8d:b4: ee:d6:8d:c7:8d:0c:3f:31:7e:a9:f7:6f:ea:d5:88:7e:73:f0: b1:1e:6d:d4:84:2f:6f:68:ea:de:e0:5c:4b:cd:79:6f:86:1f: e4:92:c0:fd:37:3e:ac:c9:ab:51:53:ed:13:35:64:98:26:2a: 2b:7f:ff:a4:d1:2b:f9:c9:c8:47:45:1a:7e:1c:0b:63:66:6a: b9:62:1b:69:a7:74:51:d7:20:3c:0e:0c:fe:73:39:36:39:03: 43:b1:3a:5a:1d:0d:e5:43:0a:63:b7:5c:4f:6e:71:bc:9a:8c: cf:71:98:3f:35:e5:bb:43:ba:33:b0:3c:0a:ba:f4:9a:49:e3: 5f:2f:3f:06:2f:7d:44:39:ba:d8:6b:49:81:fd:43:ba:30:e2: cd:61:ee:2a:cd:13:5a:ef:a5:8c:e4:45:8e:6b:f2:1f:aa:cd: a3:f9:aa:18:57:c7:85:80:94:17:1b:89:ea:62:4f:33:87:d4: 85:5d:02:9e:cb:c6:a2:69:a7:73:d4:69:84:9c:dd:e7:e3:6b: ca:97:8d:91:c8:23:c9:9a:20:b3:77:19:c5:e7:b8:20:25:15: c9:e6:26:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU+GhRW3k4YVO/TzmxUkurOoIKIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlD MEYyRTNGNzAeFw0yNTExMDIyMDU2MzFaFw0yNTExMDUyMjE3MzFaMDMxMTAvBgNV BAMTKEZEMUE5NTQ5QTAzMkFDMzVCM0RDRTQ5RTdBNEFGMzk1M0MyMDU2ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEx0JhQVHqQVYnhLtHfNN8srso fdHd7xoLC6iOZWsGilR5MB6nHGotP9u+gSKyIHDzzyYtmy4PyB0ADvcWRAZFJjmh /O/2C4urOBIoVo+4xpU686n1SGZk/pQmk5mu9+XVUgb7kUHChn5SROHczTUGUUMp oQsyro/4SDEi4cWwPdMbx+vbZUZaeabWsfeo5Vd2cNBnf5IIYw5PhParZEFLIcml UfscoNtBAuz9Ph2CU0kpktWmeO9deJE/d7btur49PF8F+eaRWbMxVBNoqraqKbrs XuJu/guUZpzEFagsY2Q6qf4MoKfBTpnfds+dnxMHmTy4wMUprdkhHd8I8sBpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/RqVSaAyrDWz3OSeekrzlTwgVokwHwYDVR0j BBgwFoAUagLcEPQfzg60l5jdvPMfycDy4/cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTQ2YmRhZC1mMTMwLTQ4YTktODUzNC01NGJhM2U4ZWQ2MWYvMC82QTAyREMxMEY0 MUZDRTBFQjQ5Nzk4RERCQ0YzMUZDOUMwRjJFM0Y3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlDMEYy RTNGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE0NmJkYWQtZjEzMC00OGE5LTg1 MzQtNTRiYTNlOGVkNjFmLzAvNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFG QzlDMEYyRTNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8kn6pj5yiln/ynyfavBMO1TDQqFtkCjY+V E9iE+CC/IwyNtO7WjceNDD8xfqn3b+rViH5z8LEebdSEL29o6t7gXEvNeW+GH+SS wP03PqzJq1FT7RM1ZJgmKit//6TRK/nJyEdFGn4cC2NmarliG2mndFHXIDwODP5z OTY5A0OxOlodDeVDCmO3XE9ucbyajM9xmD815btDujOwPAq69JpJ418vPwYvfUQ5 uthrSYH9Q7ow4s1h7irNE1rvpYzkRY5r8h+qzaP5qhhXx4WAlBcbiepiTzOH1IVd Ap7LxqJpp3PUaYSc3efja8qXjZHII8maILN3GcXnuCAlFcnmJig= -----END CERTIFICATE-----Generated at Tue Nov 4 08:03:23 2025 by rpki-client