$ rpki-client -vvf repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft File: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft (raw, json) Hash identifier: KKgQz13S6U5P4LE0X8wfnDgTIbZQt9jTUjZNkJlpK1A= Subject key identifier: 1E:02:C2:FC:43:59:62:77:F3:C7:F3:08:AA:C7:82:77:77:57:4F:EB Authority key identifier: 6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA Certificate issuer: /CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Certificate serial: 5D1A875F1D226548AD4504261EA1B29550B2BB6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft Manifest number: 0221 Signing time: Sun 02 Nov 2025 12:20:02 +0000 Manifest this update: Sun 02 Nov 2025 12:15:02 +0000 Manifest next update: Wed 05 Nov 2025 14:17:02 +0000 Files and hashes: 1: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl (hash: Idayf7DCu75eZ79Jxpz1UBg2UXO5arlmEDfcDDeZM5E=) 2: 3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa (hash: jcYNuwq5tBbtUM+5LFf+gih2lHYu/silWmdWErgVy5M=) 3: 3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa (hash: XLXbrSM75a4OOhdIFSVSWGya3QA7TZER3P7tGhI+wW0=) 4: 3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa (hash: R1C6O4ul1Ppozfaiesg+Uhn8MwDAOfzdAmq+sSEet2w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 14:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:1a:87:5f:1d:22:65:48:ad:45:04:26:1e:a1:b2:95:50:b2:bb:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Validity Not Before: Nov 2 12:15:02 2025 GMT Not After : Nov 5 14:17:02 2025 GMT Subject: CN=1E02C2FC43596277F3C7F308AAC7827777574FEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:be:09:f6:32:83:15:36:01:f0:2a:e1:b3:39: d1:03:52:a2:ba:07:a5:9f:6a:35:f9:9a:fc:96:ec: 14:29:20:cd:43:17:eb:89:fd:68:96:75:18:a3:15: d3:e1:f9:63:79:ac:86:d1:76:07:f9:84:07:a2:b2: 30:e7:eb:35:10:1f:52:74:81:63:c4:f5:0e:ea:ff: 89:2a:61:08:71:ed:26:35:08:1a:6e:ac:1c:6e:87: 0f:bb:cf:fc:ea:ac:f9:9e:f0:30:e7:36:e8:ce:2b: f8:6e:f4:a4:9e:20:81:e9:4e:61:e9:af:a1:0c:3e: 49:99:ac:a9:ae:96:b9:9d:b7:ca:35:c2:21:02:1c: ea:82:84:49:76:31:7c:ab:d3:55:70:54:39:f5:ca: 0e:a8:cc:a7:b7:9c:81:f8:cc:0a:65:7b:e6:fc:38: 06:ba:bd:ce:53:bf:1b:56:42:d8:15:b9:e8:60:65: 27:ac:d1:3f:93:40:de:0b:df:c9:86:63:95:c0:e9: 43:ab:31:d5:af:29:41:3a:ef:21:af:de:e6:14:da: 08:22:32:1c:a0:c7:22:cd:03:7f:4d:9a:8b:86:8a: 6f:39:5c:84:79:70:d8:48:19:92:ba:9b:c6:ee:51: d9:10:91:77:79:42:c6:9e:9e:a2:66:e3:1a:c9:10: 2b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:02:C2:FC:43:59:62:77:F3:C7:F3:08:AA:C7:82:77:77:57:4F:EB X509v3 Authority Key Identifier: keyid:6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:42:7e:90:40:dc:f9:0c:d5:0a:c3:c3:dc:76:33:e7:d4:af: 7e:87:25:da:20:e8:b4:bc:6e:6f:44:e4:d6:79:bf:46:f6:f2: 6b:74:12:e7:a7:0e:32:85:c5:f3:de:83:ce:c4:4e:11:c6:c8: 87:a0:79:14:d6:a1:40:27:50:eb:28:d3:4c:a9:6c:31:4d:49: be:de:57:12:f7:53:d5:46:4a:1e:f6:c9:7d:0b:31:8d:39:9a: 3b:51:7c:77:64:fe:2b:84:d9:34:8f:60:1d:35:38:b9:4e:69: 8a:d3:30:34:3d:46:c0:79:2a:64:74:28:98:7c:24:ad:12:f1: 60:16:68:24:6f:27:c8:e6:83:9e:a4:55:0d:b3:e2:16:ff:86: 28:92:b0:4e:29:e9:ae:79:83:3f:94:4c:bc:89:14:b0:3e:56: 7e:39:96:53:54:2a:f3:bf:a9:89:65:eb:43:05:49:3a:23:58: e3:41:8e:5a:4f:ba:3d:2d:5f:98:f6:95:4c:8a:ae:19:18:4a: b7:8d:59:7d:a3:31:1a:15:60:a1:59:0a:6e:9e:10:21:07:08: ff:55:9f:88:6e:0c:49:ee:59:f3:54:db:5c:8b:50:47:80:e0: 4b:e9:06:46:3a:46:d9:1e:ad:c8:3c:77:b9:1e:7c:1c:3f:a3: fc:b2:36:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXRqHXx0iZUitRQQmHqGylVCyu2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMx REIwOEZEQTAeFw0yNTExMDIxMjE1MDJaFw0yNTExMDUxNDE3MDJaMDMxMTAvBgNV BAMTKDFFMDJDMkZDNDM1OTYyNzdGM0M3RjMwOEFBQzc4Mjc3Nzc1NzRGRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJvgn2MoMVNgHwKuGzOdEDUqK6 B6WfajX5mvyW7BQpIM1DF+uJ/WiWdRijFdPh+WN5rIbRdgf5hAeisjDn6zUQH1J0 gWPE9Q7q/4kqYQhx7SY1CBpurBxuhw+7z/zqrPme8DDnNujOK/hu9KSeIIHpTmHp r6EMPkmZrKmulrmdt8o1wiECHOqChEl2MXyr01VwVDn1yg6ozKe3nIH4zAple+b8 OAa6vc5TvxtWQtgVuehgZSes0T+TQN4L38mGY5XA6UOrMdWvKUE67yGv3uYU2ggi MhygxyLNA39NmouGim85XIR5cNhIGZK6m8buUdkQkXd5QsaenqJm4xrJECs1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHgLC/ENZYnfzx/MIqseCd3dXT+swHwYDVR0j BBgwFoAUb8DJM0D/c1k0NMjv/O2Osx2wj9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjY1OTkwNC0zNzAyLTQ3OTctYmQxYi00NDdhYjhjOTRlMGMvMC82RkMwQzkzMzQw RkY3MzU5MzQzNEM4RUZGQ0VEOEVCMzFEQjA4RkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMxREIw OEZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY2NTk5MDQtMzcwMi00Nzk3LWJk MWItNDQ3YWI4Yzk0ZTBjLzAvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhF QjMxREIwOEZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALxCfpBA3PkM1QrDw9x2M+fUr36HJdog6LS8 bm9E5NZ5v0b28mt0EuenDjKFxfPeg87EThHGyIegeRTWoUAnUOso00ypbDFNSb7e VxL3U9VGSh72yX0LMY05mjtRfHdk/iuE2TSPYB01OLlOaYrTMDQ9RsB5KmR0KJh8 JK0S8WAWaCRvJ8jmg56kVQ2z4hb/hiiSsE4p6a55gz+UTLyJFLA+Vn45llNUKvO/ qYll60MFSTojWONBjlpPuj0tX5j2lUyKrhkYSreNWX2jMRoVYKFZCm6eECEHCP9V n4huDEnuWfNU21yLUEeA4EvpBkY6Rtkercg8d7kefBw/o/yyNuM= -----END CERTIFICATE-----Generated at Tue Nov 4 12:53:17 2025 by rpki-client