$ rpki-client -vvf repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft File: 6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft (raw, json) Hash identifier: mzwghJnYorSwgHByz2wUiq3bHez94hhOmopfNeq/DKk= Subject key identifier: F9:1A:97:20:80:02:72:43:4E:CC:49:1D:DE:FF:F8:9A:3C:30:A8:03 Authority key identifier: 6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB Certificate issuer: /CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB Certificate serial: 5D5038E789109A105A275490BFD688CA1257D640 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft Manifest number: 03ED Signing time: Mon 03 Nov 2025 10:41:43 +0000 Manifest this update: Mon 03 Nov 2025 10:36:43 +0000 Manifest next update: Thu 06 Nov 2025 18:11:43 +0000 Files and hashes: 1: 3130332e3131362e3130382e302f32342d3234203d3e20313331373835.roa (hash: LY7WT+w7FguQLmfrSOP0mKv6BUNq2KCw3SGoAGK1WaA=) 2: 3130332e31362e37392e302f32342d3234203d3e20313331373835.roa (hash: dq2C0qn2bszea5JrNdqQBrs3uxaP2+6us75MTw8i5Kc=) 3: 3130332e3232362e35352e302f32342d3234203d3e20313331373835.roa (hash: w25Hdja8cVcMSMfXbCo6MIHOJSikdvlBUIB8EBkQuqs=) 4: 6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl (hash: LurRcSt8hNAawQ4L5PW8o7SMLt+CY+lq1Ljbo0xHII0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 18:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:50:38:e7:89:10:9a:10:5a:27:54:90:bf:d6:88:ca:12:57:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB Validity Not Before: Nov 3 10:36:43 2025 GMT Not After : Nov 6 18:11:43 2025 GMT Subject: CN=F91A9720800272434ECC491DDEFFF89A3C30A803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ac:21:76:d3:ed:3d:ad:73:2f:ff:b9:1b:12: 32:ec:ed:59:aa:f3:2d:dd:1b:f3:33:bc:ed:7b:79: 28:fa:b1:72:19:be:3a:8c:72:13:48:e9:64:bf:fa: fc:18:c4:aa:87:b4:8a:e9:e0:07:39:f5:f0:9e:b7: 60:ad:bb:97:9e:a7:3b:cc:0e:d1:46:e1:a8:1d:6f: ec:df:00:88:b7:d1:3e:dc:a8:c8:e0:5a:6c:85:c3: 7e:3d:a5:61:71:92:b3:6b:be:a1:14:77:52:05:66: a8:e4:86:35:79:cb:69:dc:da:e8:88:17:d4:8c:a0: 0e:e2:7e:5f:47:47:67:01:e9:c2:d6:b5:fd:ff:f0: a3:1a:77:d7:1f:ab:f1:54:66:bf:90:44:8c:b8:21: a1:f6:a3:14:63:61:b9:76:00:47:40:b0:45:68:81: e6:0b:c7:b3:58:67:f4:58:0f:9e:06:02:73:70:c4: a8:b0:57:4f:ce:7c:c3:77:ce:13:e0:0a:28:03:58: 12:ac:b5:eb:0d:78:66:be:82:c4:f2:c6:59:c1:27: 07:06:30:ed:f9:5f:ff:d3:7a:81:c6:45:54:1b:07: c3:1f:27:26:9f:3c:d4:68:20:56:23:50:86:f6:0f: 46:9d:97:9d:b0:55:25:d3:0d:68:11:41:c2:f9:e0: 65:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1A:97:20:80:02:72:43:4E:CC:49:1D:DE:FF:F8:9A:3C:30:A8:03 X509v3 Authority Key Identifier: keyid:6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:23:a5:f1:3a:16:b4:da:e3:64:21:86:02:c3:3d:d4:f6:3e: 7d:7e:b5:35:46:6d:9e:d0:8a:d1:dd:45:f1:01:e3:8f:ef:d5: 3b:cb:1c:1c:95:3f:58:d7:78:a5:a6:30:98:5b:fd:38:80:5e: e0:1b:79:fa:13:71:5d:b3:44:1a:46:ca:9c:b0:31:27:ab:5f: c1:cc:93:36:a4:6d:50:7e:75:ef:2f:43:e4:58:c0:ab:84:0b: 88:e4:62:d0:59:ac:1e:d5:d1:52:4a:60:56:a6:f3:dd:55:e8: 61:60:a8:26:00:b1:b6:93:a7:85:e1:9a:0d:69:2b:17:31:43: 9d:02:25:dd:d0:75:21:28:64:63:d7:83:fa:7f:25:53:f7:f9: f9:32:7e:fb:1d:0a:ca:e9:1e:ff:24:4d:24:a8:21:70:c1:e8: 72:59:ee:26:56:d2:14:fe:ad:01:66:92:bf:7e:36:39:14:9a: a7:cc:dd:94:94:d2:f3:24:b1:d0:02:41:9a:61:49:6a:e3:31: 16:59:88:97:72:2f:4d:e2:8b:0b:06:00:ef:ac:8f:dc:90:3b: 36:82:36:73:f1:ab:d7:45:8a:70:16:14:58:72:0d:c6:14:6e: 70:29:aa:d4:d0:40:f6:37:c9:34:83:a9:f3:b3:53:73:a7:7f: 63:a6:d1:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXVA454kQmhBaJ1SQv9aIyhJX1kAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhGN0M1 OEFDQThBQjAeFw0yNTExMDMxMDM2NDNaFw0yNTExMDYxODExNDNaMDMxMTAvBgNV BAMTKEY5MUE5NzIwODAwMjcyNDM0RUNDNDkxRERFRkZGODlBM0MzMEE4MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdrCF20+09rXMv/7kbEjLs7Vmq 8y3dG/MzvO17eSj6sXIZvjqMchNI6WS/+vwYxKqHtIrp4Ac59fCet2Ctu5eepzvM DtFG4agdb+zfAIi30T7cqMjgWmyFw349pWFxkrNrvqEUd1IFZqjkhjV5y2nc2uiI F9SMoA7ifl9HR2cB6cLWtf3/8KMad9cfq/FUZr+QRIy4IaH2oxRjYbl2AEdAsEVo geYLx7NYZ/RYD54GAnNwxKiwV0/OfMN3zhPgCigDWBKstesNeGa+gsTyxlnBJwcG MO35X//TeoHGRVQbB8MfJyafPNRoIFYjUIb2D0adl52wVSXTDWgRQcL54GWpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+RqXIIACckNOzEkd3v/4mjwwqAMwHwYDVR0j BBgwFoAUbUsXSN5S3OOXuGh3LhKPfFisqKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDIwNzUyMy1kNWY1LTRhY2MtYjBhYy1iZmIwOTU0ZmE0ZTAvMC82RDRCMTc0OERF NTJEQ0UzOTdCODY4NzcyRTEyOEY3QzU4QUNBOEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhGN0M1OEFD QThBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQyMDc1MjMtZDVmNS00YWNjLWIw YWMtYmZiMDk1NGZhNGUwLzAvNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhG N0M1OEFDQThBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8jpfE6FrTa42QhhgLDPdT2Pn1+tTVGbZ7Q itHdRfEB44/v1TvLHByVP1jXeKWmMJhb/TiAXuAbefoTcV2zRBpGypywMSerX8HM kzakbVB+de8vQ+RYwKuEC4jkYtBZrB7V0VJKYFam891V6GFgqCYAsbaTp4Xhmg1p KxcxQ50CJd3QdSEoZGPXg/p/JVP3+fkyfvsdCsrpHv8kTSSoIXDB6HJZ7iZW0hT+ rQFmkr9+NjkUmqfM3ZSU0vMksdACQZphSWrjMRZZiJdyL03iiwsGAO+sj9yQOzaC NnPxq9dFinAWFFhyDcYUbnApqtTQQPY3yTSDqfOzU3Onf2Om0bs= -----END CERTIFICATE-----Generated at Tue Nov 4 02:14:50 2025 by rpki-client