$ rpki-client -vvf repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft File: 6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft (raw, json) Hash identifier: Cwg7tG1yzUy/tKwTou657C+AQyDmomjwOpuQivxnMDI= Subject key identifier: 41:AF:CE:C4:18:27:80:5F:68:57:7C:B0:E7:16:6E:30:8B:78:84:47 Authority key identifier: 6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67 Certificate issuer: /CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567 Certificate serial: 247EC0762F9E662A278CDFA647DAEB6CA27EC0CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft Manifest number: 95 Signing time: Sun 02 Nov 2025 21:21:25 +0000 Manifest this update: Sun 02 Nov 2025 21:16:25 +0000 Manifest next update: Wed 05 Nov 2025 21:38:25 +0000 Files and hashes: 1: 3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa (hash: TQYvew4a918dkXbQmghAnG3D/BGB9JTVAzjo9Xx8OFQ=) 2: 6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl (hash: jswfXEkxokNgJtfvVuNdKDxuNCki4jdXW59eiWkOYVo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 21:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:7e:c0:76:2f:9e:66:2a:27:8c:df:a6:47:da:eb:6c:a2:7e:c0:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567 Validity Not Before: Nov 2 21:16:25 2025 GMT Not After : Nov 5 21:38:25 2025 GMT Subject: CN=41AFCEC41827805F68577CB0E7166E308B788447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b7:87:78:0c:b7:9b:c8:38:2a:68:74:be:db: 95:27:1b:8b:47:ea:51:95:ee:f2:b3:04:f8:6f:5e: 29:ce:9c:36:42:bb:4c:71:15:75:d7:ef:0e:ff:61: e4:8f:9e:1a:1b:12:49:91:61:2a:c7:01:0d:9a:75: 9f:ff:ea:1b:0f:a9:d2:5c:23:3e:ec:47:31:ed:ff: 02:fc:e9:64:59:49:d2:91:90:df:9c:d6:4a:cf:af: 5c:82:39:7e:0f:be:1b:eb:65:fd:3f:51:d9:6a:66: a7:79:f9:1c:1c:3b:e4:4f:f7:ff:9d:48:f0:59:8d: 8b:84:61:b3:77:54:f4:10:e6:79:ac:eb:3f:f2:5e: 8c:e2:2d:3c:be:83:30:d1:4d:ea:69:39:e7:26:4f: b7:39:ac:08:e2:db:6c:77:0b:3e:08:68:63:0d:67: 3a:b6:d4:89:1d:11:9e:14:69:5d:89:5a:d8:6c:f8: f9:12:5a:4c:6c:af:ab:e5:8d:c8:88:28:a4:c8:74: 9b:31:b8:81:55:1f:d3:83:f9:2c:50:e6:c2:48:df: 4d:0c:64:78:ed:2e:e7:fd:e7:18:45:2f:77:92:1b: 5a:14:39:f7:8f:cc:68:02:0e:5d:09:58:42:74:a8: 93:8c:04:22:c4:8e:8d:4e:ff:00:fb:71:56:88:2d: b5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AF:CE:C4:18:27:80:5F:68:57:7C:B0:E7:16:6E:30:8B:78:84:47 X509v3 Authority Key Identifier: keyid:6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:12:3b:bf:1e:f3:b9:53:78:e1:20:ea:b2:d9:66:6a:53:48: 26:5c:8b:82:0b:1e:80:08:7e:9e:f1:2d:55:51:2e:94:93:7d: 73:05:df:ba:c1:c6:9a:db:5e:ef:e8:3a:59:58:d0:d1:cc:d9: 62:6c:51:8b:cb:dc:42:d8:f5:8e:78:f1:a3:10:0f:cb:b7:90: 11:58:0e:31:08:c3:ed:cb:4b:69:7d:89:f0:ac:37:b8:90:d9: 0c:0a:b3:68:a1:fb:44:06:78:0e:6d:ad:38:68:00:61:ce:15: 8e:96:e1:80:e6:66:56:ea:f5:0e:8e:d0:bc:73:14:ae:e8:74: d9:35:db:1e:20:c3:ae:03:ed:89:18:02:57:f1:06:d9:ed:42: cf:55:5f:64:6e:72:82:68:db:2f:47:aa:b5:de:c1:72:b6:7e: bf:d4:6c:0c:ba:99:8f:3d:cf:77:76:94:7c:b3:a4:b8:61:ce: 7d:39:60:32:b5:f8:92:f8:70:87:2b:a7:19:65:57:d6:81:42: 97:25:48:a5:2f:d0:04:7c:58:84:a3:92:57:ef:5c:dd:44:6e: 69:73:dd:42:73:f1:4b:90:59:9e:ab:8a:30:59:13:41:0f:85: c4:f1:a0:37:24:f7:49:17:65:fb:68:c8:78:98:a6:c5:89:50: a7:53:19:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJH7Adi+eZionjN+mR9rrbKJ+wMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIzOUNB MkJENDU2NzAeFw0yNTExMDIyMTE2MjVaFw0yNTExMDUyMTM4MjVaMDMxMTAvBgNV BAMTKDQxQUZDRUM0MTgyNzgwNUY2ODU3N0NCMEU3MTY2RTMwOEI3ODg0NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyt4d4DLebyDgqaHS+25UnG4tH 6lGV7vKzBPhvXinOnDZCu0xxFXXX7w7/YeSPnhobEkmRYSrHAQ2adZ//6hsPqdJc Iz7sRzHt/wL86WRZSdKRkN+c1krPr1yCOX4PvhvrZf0/UdlqZqd5+RwcO+RP9/+d SPBZjYuEYbN3VPQQ5nms6z/yXoziLTy+gzDRTeppOecmT7c5rAji22x3Cz4IaGMN Zzq21IkdEZ4UaV2JWths+PkSWkxsr6vljciIKKTIdJsxuIFVH9OD+SxQ5sJI300M ZHjtLuf95xhFL3eSG1oUOfePzGgCDl0JWEJ0qJOMBCLEjo1O/wD7cVaILbVFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQa/OxBgngF9oV3yw5xZuMIt4hEcwHwYDVR0j BBgwFoAUa9Rc2RLUGSvN659rc7AjnKK9RWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzU4ZmI3Yy02N2I4LTRiY2UtOTZkOS1iZTkxMmUzZjczZGQvMC82QkQ0NUNEOTEy RDQxOTJCQ0RFQjlGNkI3M0IwMjM5Q0EyQkQ0NTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIzOUNBMkJE NDU2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzAvNkJENDVDRDkxMkQ0MTkyQkNERUI5RjZCNzNCMDIz OUNBMkJENDU2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJsSO78e87lTeOEg6rLZZmpTSCZci4ILHoAI fp7xLVVRLpSTfXMF37rBxprbXu/oOllY0NHM2WJsUYvL3ELY9Y548aMQD8u3kBFY DjEIw+3LS2l9ifCsN7iQ2QwKs2ih+0QGeA5trThoAGHOFY6W4YDmZlbq9Q6O0Lxz FK7odNk12x4gw64D7YkYAlfxBtntQs9VX2RucoJo2y9HqrXewXK2fr/UbAy6mY89 z3d2lHyzpLhhzn05YDK1+JL4cIcrpxllV9aBQpclSKUv0AR8WISjklfvXN1Ebmlz 3UJz8UuQWZ6rijBZE0EPhcTxoDck90kXZftoyHiYpsWJUKdTGVY= -----END CERTIFICATE-----Generated at Tue Nov 4 21:12:51 2025 by rpki-client