$ rpki-client -vvf repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft File: 6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft (raw, json) Hash identifier: 6f30149zd827x2ZVKHANIKoEuRczwj1nlTG54U6jqZo= Subject key identifier: 6D:EA:9F:69:9F:D2:27:4D:FD:DB:CE:54:68:21:1D:C0:07:3E:9D:8A Authority key identifier: 6A:9D:C5:66:C8:CB:F1:D7:CE:B1:7F:C9:91:7A:CD:58:2E:5C:0A:95 Certificate issuer: /CN=6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95 Certificate serial: 301FF5F244A0D0078B6EB189F9460ED07AF42CB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft Manifest number: 0520 Signing time: Mon 03 Nov 2025 21:12:08 +0000 Manifest this update: Mon 03 Nov 2025 21:07:08 +0000 Manifest next update: Fri 07 Nov 2025 07:57:08 +0000 Files and hashes: 1: 3130332e3130352e3235322e302f32322d3234203d3e20313336383835.roa (hash: 78aRtA03tdL6oV14dW3aN00qRLjvVDFQ6jhLRcjVdxc=) 2: 6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl (hash: hXadGQaILQ2jfV+KE6qJl3yQXAhsUt+exSFiTuoAoi4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:1f:f5:f2:44:a0:d0:07:8b:6e:b1:89:f9:46:0e:d0:7a:f4:2c:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95 Validity Not Before: Nov 3 21:07:08 2025 GMT Not After : Nov 7 07:57:08 2025 GMT Subject: CN=6DEA9F699FD2274DFDDBCE5468211DC0073E9D8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:97:a0:71:07:2c:9e:f5:00:37:f3:4f:cf:23: 00:8f:5a:92:06:6d:ce:55:de:bd:4f:13:2b:bb:62: f6:23:26:5a:cd:b4:3f:a8:65:aa:40:37:d8:e1:a8: ce:fa:a4:45:c8:83:73:79:2a:13:63:88:b7:5d:81: 61:7f:df:7d:78:92:4e:00:56:1e:c9:ea:e3:aa:65: 04:f5:99:ed:8d:25:24:a4:9b:31:43:29:ce:0a:3e: ae:72:ba:84:86:ae:3a:ea:c1:42:af:92:b8:d9:af: ee:35:04:ef:25:42:d5:86:fd:ee:96:9e:49:3e:fe: 0b:e7:ec:a3:f6:8b:ee:7d:99:44:58:5b:85:de:5e: 22:bb:53:1d:a7:67:e0:aa:64:72:64:56:6d:0f:5c: cf:14:ac:5a:39:1c:5e:aa:98:89:c0:49:81:5a:09: e6:71:32:5c:7a:c6:60:00:ac:be:9a:67:1b:08:b2: 66:18:ce:3a:45:e1:ab:88:1a:ed:02:82:3c:d0:43: d3:8b:47:96:21:df:07:5c:d2:df:66:0c:a1:e8:35: 5b:d5:33:57:c5:07:b1:64:c1:b0:f6:fc:3b:d2:d2: e4:2d:f5:5c:5a:60:3d:22:1b:c0:a3:50:4a:8b:15: 70:27:63:a0:70:b2:09:41:35:17:64:5e:4b:e7:6e: 2e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:EA:9F:69:9F:D2:27:4D:FD:DB:CE:54:68:21:1D:C0:07:3E:9D:8A X509v3 Authority Key Identifier: keyid:6A:9D:C5:66:C8:CB:F1:D7:CE:B1:7F:C9:91:7A:CD:58:2E:5C:0A:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:5c:27:aa:89:44:dc:33:96:aa:17:7a:ce:76:80:94:92:2e: e7:4b:37:ff:ef:c8:a5:35:65:0c:d4:4c:b9:6e:38:a7:5f:1c: 60:a6:7a:36:a7:9b:49:43:42:9f:65:5b:a5:b3:8c:73:25:01: 5d:03:02:b5:71:56:93:c8:6a:b0:8f:e9:8d:1e:cd:21:4e:fe: bf:f8:91:19:90:69:4a:10:c0:8f:dc:01:73:03:a0:98:5b:9c: d8:83:92:93:f6:9f:e0:56:59:71:41:d3:ee:a4:6b:9f:0f:e7: 5c:29:2d:89:71:e6:12:7c:99:56:e9:a2:93:25:5d:fd:6f:50: 40:c6:aa:11:86:3a:c6:4c:29:dd:d5:9d:a8:3a:96:f1:ea:9d: 74:2c:97:98:d2:30:57:84:7e:20:72:5c:1e:5b:58:cb:3f:5a: c8:e9:3d:87:17:55:32:f5:ea:d7:29:ef:d3:ed:34:eb:4b:46: a2:62:43:53:b1:46:ba:50:d7:e5:90:5a:3b:20:58:92:f8:dd: 50:89:52:ff:d4:a7:aa:ae:e8:50:07:13:43:82:1d:4e:83:46: 6b:c7:a9:18:a3:e9:00:7f:a7:15:57:04:e3:49:0b:1b:0a:b5: b0:4e:dc:94:65:12:c9:f2:11:99:35:bf:12:83:76:74:98:b5: 54:ab:cb:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMB/18kSg0AeLbrGJ+UYO0Hr0LLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE5REM1NjZDOENCRjFEN0NFQjE3RkM5OTE3QUNENTgy RTVDMEE5NTAeFw0yNTExMDMyMTA3MDhaFw0yNTExMDcwNzU3MDhaMDMxMTAvBgNV BAMTKDZERUE5RjY5OUZEMjI3NERGRERCQ0U1NDY4MjExREMwMDczRTlEOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdl6BxByye9QA380/PIwCPWpIG bc5V3r1PEyu7YvYjJlrNtD+oZapAN9jhqM76pEXIg3N5KhNjiLddgWF/3314kk4A Vh7J6uOqZQT1me2NJSSkmzFDKc4KPq5yuoSGrjrqwUKvkrjZr+41BO8lQtWG/e6W nkk+/gvn7KP2i+59mURYW4XeXiK7Ux2nZ+CqZHJkVm0PXM8UrFo5HF6qmInASYFa CeZxMlx6xmAArL6aZxsIsmYYzjpF4auIGu0CgjzQQ9OLR5Yh3wdc0t9mDKHoNVvV M1fFB7FkwbD2/DvS0uQt9VxaYD0iG8CjUEqLFXAnY6BwsglBNRdkXkvnbi7NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbeqfaZ/SJ039285UaCEdwAc+nYowHwYDVR0j BBgwFoAUap3FZsjL8dfOsX/JkXrNWC5cCpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTZhYTU0Zi03MTU4LTQzYWYtYjMzNi1iZTQ3MTQ4MTZmYWQvMC82QTlEQzU2NkM4 Q0JGMUQ3Q0VCMTdGQzk5MTdBQ0Q1ODJFNUMwQTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE5REM1NjZDOENCRjFEN0NFQjE3RkM5OTE3QUNENTgyRTVD MEE5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE2YWE1NGYtNzE1OC00M2FmLWIz MzYtYmU0NzE0ODE2ZmFkLzAvNkE5REM1NjZDOENCRjFEN0NFQjE3RkM5OTE3QUNE NTgyRTVDMEE5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRcJ6qJRNwzlqoXes52gJSSLudLN//vyKU1 ZQzUTLluOKdfHGCmejanm0lDQp9lW6WzjHMlAV0DArVxVpPIarCP6Y0ezSFO/r/4 kRmQaUoQwI/cAXMDoJhbnNiDkpP2n+BWWXFB0+6ka58P51wpLYlx5hJ8mVbpopMl Xf1vUEDGqhGGOsZMKd3Vnag6lvHqnXQsl5jSMFeEfiByXB5bWMs/WsjpPYcXVTL1 6tcp79PtNOtLRqJiQ1OxRrpQ1+WQWjsgWJL43VCJUv/Up6qu6FAHE0OCHU6DRmvH qRij6QB/pxVXBONJCxsKtbBO3JRlEsnyEZk1vxKDdnSYtVSry0s= -----END CERTIFICATE-----Generated at Tue Nov 4 02:17:06 2025 by rpki-client