$ rpki-client -vvf repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft File: 6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft (raw, json) Hash identifier: QuunRtZnUayoWjjSiw4PzT+bCTcT/bJrj+BoCTyscBw= Subject key identifier: C2:30:14:C7:E4:E5:23:7C:5A:FF:AB:84:6E:30:05:60:2C:FB:36:15 Authority key identifier: 6A:AF:6E:8D:1C:9A:80:94:46:CB:C0:76:FE:39:08:3A:F9:54:70:8E Certificate issuer: /CN=6AAF6E8D1C9A809446CBC076FE39083AF954708E Certificate serial: 1489CE7DBD76875F7C0DD29550917F79663C0AFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft Manifest number: 01D7 Signing time: Tue 04 Nov 2025 11:11:26 +0000 Manifest this update: Tue 04 Nov 2025 11:06:25 +0000 Manifest next update: Fri 07 Nov 2025 22:40:25 +0000 Files and hashes: 1: 6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl (hash: t+n0wgWGNH+UfZBlm2wEEluyBpKt1eHU9arC46IpKFk=) 2: 3130332e33392e37342e302f32332d3234203d3e20313530323732.roa (hash: pekVrjodYi69uEjwrgeD1ua34vzyep4R8BPpULwsQiM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:89:ce:7d:bd:76:87:5f:7c:0d:d2:95:50:91:7f:79:66:3c:0a:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AAF6E8D1C9A809446CBC076FE39083AF954708E Validity Not Before: Nov 4 11:06:25 2025 GMT Not After : Nov 7 22:40:25 2025 GMT Subject: CN=C23014C7E4E5237C5AFFAB846E3005602CFB3615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d4:e8:a6:26:d4:4b:82:af:2b:32:08:93:cd: d2:38:29:70:52:48:46:8d:95:45:4e:01:5a:12:62: d3:5f:44:77:71:60:c5:4c:13:b4:91:dd:58:9a:a4: 35:a0:58:71:de:c0:aa:ac:cb:14:0b:54:63:a5:71: 01:30:ea:f4:74:eb:83:10:e0:a1:c1:e5:d1:8c:53: cc:a4:fa:2e:6b:c8:c5:37:0f:df:ff:39:57:15:78: 3e:ef:8a:2b:14:2f:49:5d:e3:c1:60:23:e0:e5:9f: f8:81:8b:a6:f6:2d:c3:65:da:a3:54:69:07:e2:3e: d3:58:c9:0a:ce:d8:82:f9:1b:de:39:02:41:3e:2a: e7:a3:a8:ff:2e:5d:62:e9:15:0b:ce:9f:1d:cd:c6: 8f:ae:ee:bc:2f:54:b0:e1:b9:6a:e3:65:af:fe:33: 90:0e:aa:e5:36:f3:8e:6b:51:b3:e8:b6:ef:d8:8c: 29:f5:83:54:93:5b:6b:44:b1:a4:ca:53:b2:00:34: ad:f1:89:da:da:79:0e:88:cf:57:98:a1:66:84:6c: c9:17:37:f4:fe:36:c4:54:d8:36:5a:8d:89:41:5a: b2:9c:20:a7:c1:ea:db:83:ac:e7:bf:16:4c:76:5f: 98:ee:b9:24:d5:a9:3d:0a:f9:1f:a8:ce:d1:cc:22: f9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:30:14:C7:E4:E5:23:7C:5A:FF:AB:84:6E:30:05:60:2C:FB:36:15 X509v3 Authority Key Identifier: keyid:6A:AF:6E:8D:1C:9A:80:94:46:CB:C0:76:FE:39:08:3A:F9:54:70:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:8a:7c:38:9b:6f:ed:14:00:bc:1e:75:bd:40:71:9e:84:72: e1:94:49:5e:c5:a7:95:2b:ad:aa:23:c8:4b:1b:a1:10:1d:47: 42:4d:d9:3e:1b:e1:b1:ed:11:17:80:4b:7f:69:fd:c6:31:a1: e5:52:b4:7e:71:40:0d:0b:d8:b5:29:e3:3b:fb:5d:ed:d3:45: 44:db:12:f5:04:76:39:56:9b:04:0a:5e:ea:6c:4e:97:2e:b8: 0d:71:5f:7c:7e:7d:be:ee:82:3b:82:d6:16:14:57:05:87:2f: 12:b2:65:d0:8d:94:47:44:75:a5:7c:81:aa:0e:cf:e4:ab:9e: 72:8e:2f:cd:a3:21:6d:46:d8:25:86:c6:5e:17:89:cc:40:f1: 0c:c0:8c:f9:f6:5b:37:1b:5d:7c:aa:0a:37:8e:a9:f5:99:f4: 33:66:f4:28:4b:3c:05:e2:f3:f2:5b:22:7f:fd:b2:ab:76:5e: 75:47:9b:2a:af:27:4a:2b:03:73:82:5b:33:87:7c:9c:d0:ba: 7c:5e:a4:eb:0f:ac:55:13:fb:ee:50:4d:d1:47:d8:ae:cf:87: 13:a0:cc:58:17:0f:dc:fe:cc:4e:00:18:ae:3d:5c:96:97:aa: 12:6f:cc:4a:cd:a2:02:35:c6:18:95:e3:19:cd:ab:39:16:f8: dc:9c:97:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFInOfb12h198DdKVUJF/eWY8CvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4M0FG OTU0NzA4RTAeFw0yNTExMDQxMTA2MjVaFw0yNTExMDcyMjQwMjVaMDMxMTAvBgNV BAMTKEMyMzAxNEM3RTRFNTIzN0M1QUZGQUI4NDZFMzAwNTYwMkNGQjM2MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl1OimJtRLgq8rMgiTzdI4KXBS SEaNlUVOAVoSYtNfRHdxYMVME7SR3ViapDWgWHHewKqsyxQLVGOlcQEw6vR064MQ 4KHB5dGMU8yk+i5ryMU3D9//OVcVeD7viisUL0ld48FgI+Dln/iBi6b2LcNl2qNU aQfiPtNYyQrO2IL5G945AkE+KuejqP8uXWLpFQvOnx3Nxo+u7rwvVLDhuWrjZa/+ M5AOquU2845rUbPotu/YjCn1g1STW2tEsaTKU7IANK3xidraeQ6Iz1eYoWaEbMkX N/T+NsRU2DZajYlBWrKcIKfB6tuDrOe/Fkx2X5juuSTVqT0K+R+oztHMIvmfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwjAUx+TlI3xa/6uEbjAFYCz7NhUwHwYDVR0j BBgwFoAUaq9ujRyagJRGy8B2/jkIOvlUcI4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTE5YWJjOC04NTA3LTQxZWQtODI4OS03ZTNhYzdiMjQ5MzUvMC82QUFGNkU4RDFD OUE4MDk0NDZDQkMwNzZGRTM5MDgzQUY5NTQ3MDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4M0FGOTU0 NzA4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2UxOWFiYzgtODUwNy00MWVkLTgy ODktN2UzYWM3YjI0OTM1LzAvNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4 M0FGOTU0NzA4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMqKfDibb+0UALwedb1AcZ6EcuGUSV7Fp5Ur raojyEsboRAdR0JN2T4b4bHtEReAS39p/cYxoeVStH5xQA0L2LUp4zv7Xe3TRUTb EvUEdjlWmwQKXupsTpcuuA1xX3x+fb7ugjuC1hYUVwWHLxKyZdCNlEdEdaV8gaoO z+SrnnKOL82jIW1G2CWGxl4XicxA8QzAjPn2WzcbXXyqCjeOqfWZ9DNm9ChLPAXi 8/JbIn/9sqt2XnVHmyqvJ0orA3OCWzOHfJzQunxepOsPrFUT++5QTdFH2K7PhxOg zFgXD9z+zE4AGK49XJaXqhJvzErNogI1xhiV4xnNqzkW+Nycl5I= -----END CERTIFICATE-----Generated at Tue Nov 4 12:44:46 2025 by rpki-client