$ rpki-client -vvf repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft File: 6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft (raw, json) Hash identifier: MJe9T+WqXV7Q7GpgVOw0+J1WoKWpaBfLPzAYPxQ4el8= Subject key identifier: 70:0F:14:00:69:F3:0E:71:22:01:AE:DB:75:E1:C6:99:D8:BA:09:20 Authority key identifier: 6B:5E:67:7E:9A:47:13:3A:B5:F3:7B:3E:2C:11:19:3B:CF:66:B8:01 Certificate issuer: /CN=6B5E677E9A47133AB5F37B3E2C11193BCF66B801 Certificate serial: 09CC8236EFE4834C8681719954ECC6E16B67D247 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft Manifest number: 01BC Signing time: Sun 02 Nov 2025 07:21:11 +0000 Manifest this update: Sun 02 Nov 2025 07:16:11 +0000 Manifest next update: Wed 05 Nov 2025 13:27:11 +0000 Files and hashes: 1: 3130332e3235352e31352e302f32342d3234203d3e203539313531.roa (hash: clujjP0gMVXTK896cZFjDD0rWMqaqVNL/f+1BiuQ3UY=) 2: 3130332e3231302e33352e302f32342d3234203d3e203539313531.roa (hash: AiL+g1EooKWTtHWBu9kN++0bhh/1b9qWboQYM9JSjI0=) 3: 323430303a653332303a3a2f33322d3438203d3e203539313531.roa (hash: 6P8mTgYGo32WPKmNCbLwXvT8t2XWCE8fFh2BcSizJBo=) 4: 6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl (hash: grkhOrCuRkAC3extkZL2o1hgE/ijNdrLGiDvi4YDkw4=) 5: 3130332e3133312e3130342e302f32332d3234203d3e203539313531.roa (hash: B82wfhLkFG26Wgxhbhj75gasKnE7y0LTbhfYXiDw4Lc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 13:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:cc:82:36:ef:e4:83:4c:86:81:71:99:54:ec:c6:e1:6b:67:d2:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B5E677E9A47133AB5F37B3E2C11193BCF66B801 Validity Not Before: Nov 2 07:16:11 2025 GMT Not After : Nov 5 13:27:11 2025 GMT Subject: CN=700F140069F30E712201AEDB75E1C699D8BA0920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:52:24:ea:94:85:08:30:e3:13:55:27:0d:af: 61:38:b8:4d:80:65:86:7d:65:52:20:a2:1a:1f:42: 58:7c:f7:e3:20:c2:80:f3:f8:cd:ba:00:7a:b2:83: f2:34:8a:ba:1d:ea:ac:df:df:cf:ef:a3:1d:a8:18: 2f:91:58:e2:21:0c:da:52:5c:1d:46:0e:e4:09:a1: 49:30:30:c3:d3:eb:1b:9d:d7:e3:b6:67:de:66:46: 63:36:93:db:fb:49:24:d6:ac:ed:77:62:13:37:d5: 86:3e:b9:19:9f:64:cd:1b:9b:c6:44:63:87:59:c5: ac:48:42:e0:99:53:2b:99:c6:2c:74:c6:73:93:ee: 22:b2:1e:a9:9f:83:91:ec:11:f0:97:94:95:cd:72: 61:57:40:31:7a:9d:26:4e:88:cd:45:84:ff:db:54: ab:45:c1:63:d2:c7:9e:32:22:91:8d:93:d4:ab:35: 99:ba:d8:59:ef:82:a8:e7:9e:8f:15:3b:39:fa:97: 14:27:a2:1d:01:3f:93:61:a5:7e:e4:4d:e4:16:ac: 70:4b:a6:2d:aa:9f:2c:a7:64:25:24:5d:90:d3:e2: 31:45:35:9b:c8:b6:11:c7:05:1c:42:49:3c:04:b9: e8:1d:43:58:1a:c3:df:42:cb:07:06:60:c3:dc:8e: de:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0F:14:00:69:F3:0E:71:22:01:AE:DB:75:E1:C6:99:D8:BA:09:20 X509v3 Authority Key Identifier: keyid:6B:5E:67:7E:9A:47:13:3A:B5:F3:7B:3E:2C:11:19:3B:CF:66:B8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:6e:4c:5d:a7:c6:a1:e9:d2:35:6a:3f:f1:53:47:b3:21:ae: 21:2f:0a:3d:7e:2a:71:33:8e:f8:59:02:75:87:f6:cb:d4:8b: 53:40:8f:63:e7:39:22:b4:84:60:b0:23:f8:cb:45:53:96:f4: 98:da:3e:12:5a:a6:e0:08:c0:92:6f:9b:9f:98:0d:31:cd:75: 42:ad:4a:9b:7f:43:da:c9:70:13:c7:ad:6c:a3:e3:2d:0e:b7: 3a:ed:1d:1c:b1:8b:b8:69:bc:6e:94:57:d4:50:e8:60:61:f2: 5e:d4:f0:a2:80:ec:d6:12:8e:70:9d:81:32:09:1e:38:4c:96: 6b:97:58:25:6e:6f:99:b9:eb:31:53:4b:07:c5:1d:8f:fb:0e: 62:f0:ea:87:40:63:a9:64:12:19:48:76:8d:31:69:24:21:be: 46:18:be:d9:70:43:c9:4a:f2:36:d0:89:d3:dd:3b:a1:8a:e9: b6:ae:6d:49:75:65:3b:84:46:3d:a8:09:11:e2:24:1b:72:fb: 76:e7:e8:b5:20:bc:e5:97:37:7f:17:04:8e:16:57:c4:bc:d9: 31:56:50:81:2f:41:9b:97:b9:45:63:58:0e:30:ae:2e:a6:5a: 3b:e0:13:cb:c6:67:3c:34:f1:34:b2:0a:cd:f3:59:3b:f7:00: 37:f0:9f:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCcyCNu/kg0yGgXGZVOzG4Wtn0kcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI1RTY3N0U5QTQ3MTMzQUI1RjM3QjNFMkMxMTE5M0JD RjY2QjgwMTAeFw0yNTExMDIwNzE2MTFaFw0yNTExMDUxMzI3MTFaMDMxMTAvBgNV BAMTKDcwMEYxNDAwNjlGMzBFNzEyMjAxQUVEQjc1RTFDNjk5RDhCQTA5MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuUiTqlIUIMOMTVScNr2E4uE2A ZYZ9ZVIgohofQlh89+MgwoDz+M26AHqyg/I0irod6qzf38/vox2oGC+RWOIhDNpS XB1GDuQJoUkwMMPT6xud1+O2Z95mRmM2k9v7SSTWrO13YhM31YY+uRmfZM0bm8ZE Y4dZxaxIQuCZUyuZxix0xnOT7iKyHqmfg5HsEfCXlJXNcmFXQDF6nSZOiM1FhP/b VKtFwWPSx54yIpGNk9SrNZm62Fnvgqjnno8VOzn6lxQnoh0BP5NhpX7kTeQWrHBL pi2qnyynZCUkXZDT4jFFNZvIthHHBRxCSTwEuegdQ1gaw99CywcGYMPcjt77AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcA8UAGnzDnEiAa7bdeHGmdi6CSAwHwYDVR0j BBgwFoAUa15nfppHEzq183s+LBEZO89muAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODc2NmQ2Ni0yOTIzLTRjZTAtYWE4NS05YzQ5ODhjYzhiYTEvMC82QjVFNjc3RTlB NDcxMzNBQjVGMzdCM0UyQzExMTkzQkNGNjZCODAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkI1RTY3N0U5QTQ3MTMzQUI1RjM3QjNFMkMxMTE5M0JDRjY2 QjgwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDg3NjZkNjYtMjkyMy00Y2UwLWFh ODUtOWM0OTg4Y2M4YmExLzAvNkI1RTY3N0U5QTQ3MTMzQUI1RjM3QjNFMkMxMTE5 M0JDRjY2QjgwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE5uTF2nxqHp0jVqP/FTR7MhriEvCj1+KnEz jvhZAnWH9svUi1NAj2PnOSK0hGCwI/jLRVOW9JjaPhJapuAIwJJvm5+YDTHNdUKt Spt/Q9rJcBPHrWyj4y0OtzrtHRyxi7hpvG6UV9RQ6GBh8l7U8KKA7NYSjnCdgTIJ HjhMlmuXWCVub5m56zFTSwfFHY/7DmLw6odAY6lkEhlIdo0xaSQhvkYYvtlwQ8lK 8jbQidPdO6GK6baubUl1ZTuERj2oCRHiJBty+3bn6LUgvOWXN38XBI4WV8S82TFW UIEvQZuXuUVjWA4wri6mWjvgE8vGZzw08TSyCs3zWTv3ADfwn/o= -----END CERTIFICATE-----Generated at Tue Nov 4 12:53:11 2025 by rpki-client