$ rpki-client -vvf repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft File: 6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft (raw, json) Hash identifier: 7DmeGYTSLpG5U3748To77Tqr9ifszmTsGn4qpwfXBbA= Subject key identifier: 5E:B3:B2:4B:6C:1C:85:0C:0A:06:9E:76:07:AF:C8:99:66:CD:10:48 Authority key identifier: 6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 Certificate issuer: /CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53 Certificate serial: 7CB1E1B794F246DE27D50FE3F776708F3488406D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer Subject info access: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft Manifest number: 91 Signing time: Tue 04 Nov 2025 02:22:18 +0000 Manifest this update: Tue 04 Nov 2025 02:17:18 +0000 Manifest next update: Fri 07 Nov 2025 06:58:18 +0000 Files and hashes: 1: 3130332e3133362e31322e302f32342d3234203d3e20313338383231.roa (hash: Lk7MgzxdNvFWTQC60iPK0vpuf42JvMwfykIHdcb6dFo=) 2: 3130332e3133362e31322e302f32322d3234203d3e20313338383231.roa (hash: Cb5AEtlH1NnuqmCvEw1t1v8nRYfGeJ7DwpY/kiNXrBE=) 3: 3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa (hash: R+IkOnhEEkrZOxf8Y3xufcx4Q4z9+2sI/l2mQF5vKrU=) 4: 6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl (hash: lpGX+Wl1YdZvuTR8tvoqb+GheF1gh6TWlUAqAckcGKA=) 5: 3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa (hash: 4xFtj009j2KyXApXnh4MToBnYNS6TXxPJe0g07ZPzfw=) 6: 3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa (hash: b3FwlMsLVeDm7arhAC1MOxAg/+Ixy8Gs1MmwDRmmqco=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 06:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:b1:e1:b7:94:f2:46:de:27:d5:0f:e3:f7:76:70:8f:34:88:40:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53 Validity Not Before: Nov 4 02:17:18 2025 GMT Not After : Nov 7 06:58:18 2025 GMT Subject: CN=5EB3B24B6C1C850C0A069E7607AFC89966CD1048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0a:94:86:a4:f3:1c:e7:49:16:fd:6c:a0:8a: ba:cf:fe:1c:ef:ae:f6:48:b4:a9:4f:0a:4e:4f:b9: fe:6c:73:8f:6a:aa:d1:03:c2:3d:7e:76:25:27:65: 23:08:e4:b2:78:5f:5f:d5:df:7b:6a:e0:bf:72:5c: 43:e4:6e:bb:40:28:cd:6f:03:b7:c4:c4:5b:b8:e2: b7:6b:24:74:92:9c:53:93:92:13:df:19:bc:ba:38: 0b:db:4a:a4:01:5d:09:49:1f:73:22:b4:7c:cd:eb: b5:2b:e0:56:68:12:d6:bd:a4:31:b9:ba:62:67:65: 3d:e2:a1:23:40:8f:88:1d:53:ed:fc:f8:57:c4:dd: 38:8c:5b:7c:ba:55:39:af:6e:9a:e9:2b:b4:45:77: 2b:07:b9:bc:ab:97:c7:84:6b:4a:6f:95:1d:80:70: d9:6c:d5:1b:ee:89:3a:75:cd:72:a6:e6:1f:58:8e: e3:e3:40:14:f0:b8:38:24:f6:0c:a7:1f:57:2a:54: fc:76:ac:c3:0d:32:c5:c7:99:db:64:48:fd:a8:b6: 23:a3:10:77:70:24:3a:55:78:2e:89:a1:ac:db:34: a8:80:52:a8:5b:97:44:5c:1b:8f:a0:51:66:40:26: 45:7d:d6:8c:c7:d6:64:7b:26:7e:24:ea:d2:a5:fd: b1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B3:B2:4B:6C:1C:85:0C:0A:06:9E:76:07:AF:C8:99:66:CD:10:48 X509v3 Authority Key Identifier: keyid:6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:b7:a9:e1:f1:af:6a:5b:1b:d4:0b:7a:bf:d3:b4:79:d4:21: d2:05:1b:05:8f:f8:13:18:92:0c:84:ec:57:b1:17:c4:b8:68: b3:ab:ea:7b:15:1e:40:1d:56:c3:c7:da:72:6e:05:04:aa:f9: 0d:0f:04:d2:79:35:7f:91:06:bd:f1:be:f5:e0:5e:2f:03:37: cc:53:41:dc:48:8c:7b:66:15:32:67:5d:ac:e5:da:4d:c7:ee: 01:26:fb:e5:3e:c7:5c:14:ff:e1:f3:20:44:2e:c3:9b:2d:2b: 5f:2c:50:91:54:76:66:d4:38:85:5b:7f:9a:8d:70:5f:b9:07: f5:96:be:d1:c1:18:49:05:93:7a:f4:96:c4:1e:4e:e2:55:0e: 4c:70:b2:7d:64:8c:9f:18:70:e6:99:25:51:dd:55:56:a5:5d: bd:fd:cf:1b:db:9d:d5:e2:7b:17:74:3a:41:3f:fb:b4:c6:54: f5:24:44:cd:b7:05:7c:25:dc:75:60:27:c6:fc:24:95:b5:41: 22:5a:46:8d:77:8b:ce:95:df:b1:80:8e:41:8b:23:a6:fb:11: 19:9b:05:d9:f8:fa:c5:c5:b1:79:e1:3c:e7:6a:dd:56:10:87: 9a:18:39:bb:54:a2:40:87:e8:33:99:3e:d4:fe:a1:3f:47:30: 39:51:7e:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfLHht5TyRt4n1Q/j93ZwjzSIQG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNC RkIzN0I1MzAeFw0yNTExMDQwMjE3MThaFw0yNTExMDcwNjU4MThaMDMxMTAvBgNV BAMTKDVFQjNCMjRCNkMxQzg1MEMwQTA2OUU3NjA3QUZDODk5NjZDRDEwNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6CpSGpPMc50kW/WygirrP/hzv rvZItKlPCk5Puf5sc49qqtEDwj1+diUnZSMI5LJ4X1/V33tq4L9yXEPkbrtAKM1v A7fExFu44rdrJHSSnFOTkhPfGby6OAvbSqQBXQlJH3MitHzN67Ur4FZoEta9pDG5 umJnZT3ioSNAj4gdU+38+FfE3TiMW3y6VTmvbprpK7RFdysHubyrl8eEa0pvlR2A cNls1RvuiTp1zXKm5h9YjuPjQBTwuDgk9gynH1cqVPx2rMMNMsXHmdtkSP2otiOj EHdwJDpVeC6JoazbNKiAUqhbl0RcG4+gUWZAJkV91ozH1mR7Jn4k6tKl/bE7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXrOyS2wchQwKBp52B6/ImWbNEEgwHwYDVR0j BBgwFoAUamnvxciXkHx0yKHr3Z03/L+ze1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDFiMWMxYi02NTZjLTQ4OWQtOWVkMy1jY2M3N2M4MzAxOGQvMC82QTY5RUZDNUM4 OTc5MDdDNzRDOEExRUJERDlEMzdGQ0JGQjM3QjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNCRkIz N0I1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAxYjFjMWItNjU2Yy00ODlkLTll ZDMtY2NjNzdjODMwMThkLzAvNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3 RkNCRkIzN0I1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIW3qeHxr2pbG9QLer/TtHnUIdIFGwWP+BMY kgyE7FexF8S4aLOr6nsVHkAdVsPH2nJuBQSq+Q0PBNJ5NX+RBr3xvvXgXi8DN8xT QdxIjHtmFTJnXazl2k3H7gEm++U+x1wU/+HzIEQuw5stK18sUJFUdmbUOIVbf5qN cF+5B/WWvtHBGEkFk3r0lsQeTuJVDkxwsn1kjJ8YcOaZJVHdVValXb39zxvbndXi exd0OkE/+7TGVPUkRM23BXwl3HVgJ8b8JJW1QSJaRo13i86V37GAjkGLI6b7ERmb Bdn4+sXFsXnhPOdq3VYQh5oYObtUokCH6DOZPtT+oT9HMDlRflw= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:40 2025 by rpki-client