$ rpki-client -vvf repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft File: 6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft (raw, json) Hash identifier: nOuz8YEQlmA2MwtcKyLPIvogeSF0qa1vejeDGrprq3o= Subject key identifier: FA:FA:65:86:70:FC:F5:62:37:F4:5F:F0:A8:CA:8A:D2:C9:D2:DB:19 Authority key identifier: 6A:2F:66:2B:6D:6A:DE:8B:FC:30:D2:CD:E4:9E:36:01:52:FD:38:BF Certificate issuer: /CN=6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF Certificate serial: 035D004A2B7A87FC2BBE4558E91EBEA4DD9B9D22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft Manifest number: 021D Signing time: Mon 03 Nov 2025 23:32:09 +0000 Manifest this update: Mon 03 Nov 2025 23:27:09 +0000 Manifest next update: Fri 07 Nov 2025 04:15:09 +0000 Files and hashes: 1: 6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.crl (hash: ZkipdKOEaMtPbWl6ZhEwAvyPTbCGlKAoLr2h7EYh0oI=) 2: 3130332e3135382e3132382e302f32332d3234203d3e203338333230.roa (hash: k8S4ytxUaj76beyPRcDHD1fQEEQNVlrOr14776a6SbE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.crl rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 04:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:5d:00:4a:2b:7a:87:fc:2b:be:45:58:e9:1e:be:a4:dd:9b:9d:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF Validity Not Before: Nov 3 23:27:09 2025 GMT Not After : Nov 7 04:15:09 2025 GMT Subject: CN=FAFA658670FCF56237F45FF0A8CA8AD2C9D2DB19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a5:a0:50:7f:6e:c1:76:c7:d6:8d:92:bd:62: fc:e8:c1:3a:87:ce:ff:d1:db:30:2d:81:8a:e5:59: 0a:ad:7f:a5:22:5f:c4:4b:89:a6:11:49:c7:0a:08: 96:26:30:e2:e3:df:1b:00:32:9e:69:93:76:76:f1: d8:f8:93:f1:75:38:03:47:c5:0d:b4:c7:f0:db:75: b9:d5:3b:1e:16:82:46:1e:6a:bb:85:9d:de:de:45: 9a:af:f3:38:54:d5:2c:8b:cf:12:c5:7c:50:55:57: 71:a0:1c:48:6d:da:0a:3d:9b:29:d4:39:ee:54:26: a1:45:9e:46:bc:02:79:a2:49:c9:8b:9a:6d:7c:ef: 16:c8:f1:33:2b:fa:34:01:b2:2f:20:d1:fd:58:f1: cf:4a:9e:2b:7b:54:2c:4a:1f:6d:a0:85:ea:eb:d8: b8:38:f1:01:ae:07:24:51:f4:24:b0:cc:bd:92:f0: 25:8c:40:39:d1:3e:8a:ba:a9:e4:cc:ad:79:4f:1c: 91:a3:ea:ab:07:d8:41:9f:a2:c3:95:aa:fe:54:95: c1:02:3b:c9:ce:bd:2e:f6:14:f8:65:52:19:ea:54: 16:29:c6:0d:ed:47:64:d9:56:1e:9a:d8:9d:d3:4f: 31:4a:0f:02:a6:57:4e:6e:4a:df:2d:26:39:f0:79: 60:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:FA:65:86:70:FC:F5:62:37:F4:5F:F0:A8:CA:8A:D2:C9:D2:DB:19 X509v3 Authority Key Identifier: keyid:6A:2F:66:2B:6D:6A:DE:8B:FC:30:D2:CD:E4:9E:36:01:52:FD:38:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:d2:6a:60:b7:a5:dd:38:fa:5f:8e:86:c2:f3:4a:c8:7d:c8: f5:53:c7:ce:ae:84:25:d1:74:65:72:fe:af:d5:ce:31:08:85: bb:94:69:7a:14:66:fe:1e:17:d0:14:75:4a:83:64:5b:73:58: 21:ab:78:90:67:b2:bc:1f:28:42:0d:63:97:02:98:4e:60:14: 05:57:fe:cc:c5:76:85:33:23:be:b3:2d:ca:aa:ef:55:5d:4c: fd:b2:85:64:a1:10:b5:1c:a0:f8:6d:7c:f1:d3:cb:14:fa:84: 6d:59:f9:9f:80:65:fb:e0:3d:a6:bc:14:ad:47:85:ee:53:fe: bd:a3:80:7f:fe:fc:3a:5f:90:28:56:39:da:14:de:bd:36:61: ab:9c:89:9a:ac:fa:ae:f7:8d:7c:c8:23:cd:22:4f:f8:3a:ff: 9e:9f:08:92:ea:87:37:a1:bf:ff:21:f1:c2:34:15:df:73:0e: 36:1d:08:49:d9:db:9f:bc:c5:69:f0:bd:2b:93:10:7b:34:1a: b6:85:7f:02:5a:37:e8:ff:bd:91:f3:33:93:e4:bb:8f:94:64: 06:ae:1c:41:48:66:e9:43:97:8b:3f:7b:3c:00:3c:cf:04:06: 43:38:e7:76:41:dc:74:6f:24:24:e1:56:05:d0:a0:f3:f1:e9: cc:14:7b:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA10ASit6h/wrvkVY6R6+pN2bnSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEyRjY2MkI2RDZBREU4QkZDMzBEMkNERTQ5RTM2MDE1 MkZEMzhCRjAeFw0yNTExMDMyMzI3MDlaFw0yNTExMDcwNDE1MDlaMDMxMTAvBgNV BAMTKEZBRkE2NTg2NzBGQ0Y1NjIzN0Y0NUZGMEE4Q0E4QUQyQzlEMkRCMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCspaBQf27BdsfWjZK9YvzowTqH zv/R2zAtgYrlWQqtf6UiX8RLiaYRSccKCJYmMOLj3xsAMp5pk3Z28dj4k/F1OANH xQ20x/DbdbnVOx4WgkYearuFnd7eRZqv8zhU1SyLzxLFfFBVV3GgHEht2go9mynU Oe5UJqFFnka8AnmiScmLmm187xbI8TMr+jQBsi8g0f1Y8c9Knit7VCxKH22gherr 2Lg48QGuByRR9CSwzL2S8CWMQDnRPoq6qeTMrXlPHJGj6qsH2EGfosOVqv5UlcEC O8nOvS72FPhlUhnqVBYpxg3tR2TZVh6a2J3TTzFKDwKmV05uSt8tJjnweWA9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+vplhnD89WI39F/wqMqK0snS2xkwHwYDVR0j BBgwFoAUai9mK21q3ov8MNLN5J42AVL9OL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x M2YwYTgzYy0yYmMwLTQyYTUtYTRhZS0xMWE1Mzg4MmRmMTAvMC82QTJGNjYyQjZE NkFERThCRkMzMEQyQ0RFNDlFMzYwMTUyRkQzOEJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEyRjY2MkI2RDZBREU4QkZDMzBEMkNERTQ5RTM2MDE1MkZE MzhCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTNmMGE4M2MtMmJjMC00MmE1LWE0 YWUtMTFhNTM4ODJkZjEwLzAvNkEyRjY2MkI2RDZBREU4QkZDMzBEMkNERTQ5RTM2 MDE1MkZEMzhCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTSamC3pd04+l+OhsLzSsh9yPVTx86uhCXR dGVy/q/VzjEIhbuUaXoUZv4eF9AUdUqDZFtzWCGreJBnsrwfKEINY5cCmE5gFAVX /szFdoUzI76zLcqq71VdTP2yhWShELUcoPhtfPHTyxT6hG1Z+Z+AZfvgPaa8FK1H he5T/r2jgH/+/DpfkChWOdoU3r02YauciZqs+q73jXzII80iT/g6/56fCJLqhzeh v/8h8cI0Fd9zDjYdCEnZ25+8xWnwvSuTEHs0GraFfwJaN+j/vZHzM5Pku4+UZAau HEFIZulDl4s/ezwAPM8EBkM453ZB3HRvJCThVgXQoPPx6cwUexA= -----END CERTIFICATE-----Generated at Tue Nov 4 21:12:57 2025 by rpki-client