$ rpki-client -vvf repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft File: 6D2120D281865021E16D49A2451DC53A851B5BBD.mft (raw, json) Hash identifier: XLZHvnvXmH1+YFgoSMnahk+4JLPqEdjsto96tuLL6BM= Subject key identifier: C5:E1:BF:AD:6B:FD:28:59:7E:8D:E0:FF:B4:59:F6:A6:D1:78:19:D4 Authority key identifier: 6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD Certificate issuer: /CN=6D2120D281865021E16D49A2451DC53A851B5BBD Certificate serial: 4231C74AD66C2D63F53233C755BD196D655EE8A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft Manifest number: A5 Signing time: Mon 03 Nov 2025 02:21:37 +0000 Manifest this update: Mon 03 Nov 2025 02:16:37 +0000 Manifest next update: Thu 06 Nov 2025 13:52:37 +0000 Files and hashes: 1: 3130332e3234352e31382e302f32342d3234203d3e203436303233.roa (hash: Fc0MX+JArFKhMRFuhW8MKgfQ8zyeDdlWFyn08XsgRD0=) 2: 3130332e3234352e31382e302f32332d3234203d3e203436303233.roa (hash: td0OSINBGBuv5HEsFIZ58nSKSttNzeWBzHe87KLyw90=) 3: 6D2120D281865021E16D49A2451DC53A851B5BBD.crl (hash: 6q3eW6tdPXgjqD8sjIQCTiZ0QaVjKP8kvd75E5Bui0Q=) 4: 3130332e3234352e31362e302f32322d3234203d3e203436303233.roa (hash: MByiWqioSG0bs5FrR2S5ZWO/VS/KpKaL9p/BlUB5wIY=) 5: 3130332e3234352e31392e302f32342d3234203d3e203436303233.roa (hash: OP9t4BATr719tJwNacPpBjZgjvtQIUgiKYybPvtxo7U=) 6: 3130332e3234352e31362e302f32342d3234203d3e203436303233.roa (hash: BohmVCdqXlKZG+sKe25j9jAyDRmpT+hYiOTt1ls3vLA=) 7: 3130332e3234352e31362e302f32332d3234203d3e203436303233.roa (hash: 0APaiG4EPBJHGaX3y0J+GecXQsnJ2nU7GWM7XyiSeBU=) 8: 3130332e3234352e31372e302f32342d3234203d3e203436303233.roa (hash: SznPKhQPKlumNSdukCt0jZbfcUX8DE7OHpbeCdn75DM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 13:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:31:c7:4a:d6:6c:2d:63:f5:32:33:c7:55:bd:19:6d:65:5e:e8:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D2120D281865021E16D49A2451DC53A851B5BBD Validity Not Before: Nov 3 02:16:37 2025 GMT Not After : Nov 6 13:52:37 2025 GMT Subject: CN=C5E1BFAD6BFD28597E8DE0FFB459F6A6D17819D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2e:b9:19:cc:3a:46:2d:59:d7:ed:4e:a9:25: 3e:01:d4:e3:95:bb:d6:57:93:37:f3:b3:32:64:a1: 56:ad:86:c0:27:ab:81:58:8c:2c:60:be:7a:3a:17: 41:e8:40:72:20:8e:17:dc:14:94:48:ff:bc:9d:e9: e4:89:5c:96:d3:33:9c:3d:40:9a:9d:74:b5:1a:87: c4:3a:bf:8a:73:d1:67:7d:af:59:fe:f8:2f:59:c1: 86:de:3d:e8:e3:8e:45:d2:e8:65:2c:7b:3d:4a:44: 9d:17:e8:fe:02:aa:af:e9:63:e4:0a:43:cc:3d:b9: c3:a0:df:da:b4:fc:04:ba:6c:8d:54:60:bb:ff:19: 05:8c:c4:da:49:fd:8e:fa:50:3e:3e:f4:2a:b9:6f: 9c:fd:45:08:77:db:62:43:c8:9c:6f:50:53:96:65: 99:c2:40:e6:8a:dd:90:45:bb:72:f9:e4:92:11:f3: 12:87:12:3b:6f:ee:fb:96:14:82:9a:33:0a:ad:93: 33:70:0e:d6:28:b4:95:96:51:d5:54:f1:b9:48:24: f6:ea:3e:73:94:a3:87:1b:23:44:d2:59:df:07:df: 3d:05:b5:bc:83:ae:64:08:75:1d:c7:71:f0:0b:ac: 8f:c2:8e:a3:e4:c6:e5:ae:4c:cb:0f:92:ea:98:8e: d6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E1:BF:AD:6B:FD:28:59:7E:8D:E0:FF:B4:59:F6:A6:D1:78:19:D4 X509v3 Authority Key Identifier: keyid:6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:0b:9d:f3:a4:6c:1a:6d:9d:04:41:c8:ea:7e:b5:04:d6:10: c2:7a:f2:ca:f4:d1:38:44:f6:cd:7c:fe:ae:6a:07:4e:c3:b8: f7:50:3e:cc:da:c1:4c:b6:5b:a2:de:c8:bd:79:cc:fd:3b:c8: 49:b3:2e:51:82:8d:2f:4f:ee:4f:69:c3:45:29:ba:ae:29:d0: a6:cd:4d:cb:aa:d6:47:3d:7c:94:7e:ca:20:58:53:fc:c7:fd: 49:3b:c3:37:f3:08:4b:eb:0b:25:45:8c:a2:dd:7b:1a:00:4d: c5:34:38:7e:91:e6:11:9e:0e:f1:ea:3a:c4:ec:b1:28:c0:a2: f5:cb:f0:d6:11:1e:bd:39:51:95:e8:e2:c9:4e:e5:37:45:1d: 18:2c:35:27:20:d1:61:27:5d:19:a5:65:67:b1:38:05:87:4f: df:0a:c6:eb:ef:f7:4c:04:a6:35:db:25:cc:08:18:f3:05:96: ab:42:23:e0:a4:51:f1:08:9d:71:4d:b9:b5:89:4c:44:dc:f2: f2:1c:d4:8b:1b:65:a9:42:60:c8:19:0e:ff:2a:c0:d2:4f:4e: e9:f5:cd:76:78:68:75:0d:18:07:15:b2:00:74:ba:26:c7:0d: 78:fe:76:6e:ed:f2:f7:ed:91:f5:42:ae:56:43:99:7e:15:8c: 6d:ff:bb:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQjHHStZsLWP1MjPHVb0ZbWVe6KcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4 NTFCNUJCRDAeFw0yNTExMDMwMjE2MzdaFw0yNTExMDYxMzUyMzdaMDMxMTAvBgNV BAMTKEM1RTFCRkFENkJGRDI4NTk3RThERTBGRkI0NTlGNkE2RDE3ODE5RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHLrkZzDpGLVnX7U6pJT4B1OOV u9ZXkzfzszJkoVathsAnq4FYjCxgvno6F0HoQHIgjhfcFJRI/7yd6eSJXJbTM5w9 QJqddLUah8Q6v4pz0Wd9r1n++C9ZwYbePejjjkXS6GUsez1KRJ0X6P4Cqq/pY+QK Q8w9ucOg39q0/AS6bI1UYLv/GQWMxNpJ/Y76UD4+9Cq5b5z9RQh322JDyJxvUFOW ZZnCQOaK3ZBFu3L55JIR8xKHEjtv7vuWFIKaMwqtkzNwDtYotJWWUdVU8blIJPbq PnOUo4cbI0TSWd8H3z0FtbyDrmQIdR3HcfALrI/CjqPkxuWuTMsPkuqYjtZ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxeG/rWv9KFl+jeD/tFn2ptF4GdQwHwYDVR0j BBgwFoAUbSEg0oGGUCHhbUmiRR3FOoUbW70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTI3MmY3Yi1kNjU2LTQwNTgtYTdiNi1mMjVhZGYzZWQxYmUvMC82RDIxMjBEMjgx ODY1MDIxRTE2RDQ5QTI0NTFEQzUzQTg1MUI1QkJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4NTFC NUJCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTUyNzJmN2ItZDY1Ni00MDU4LWE3 YjYtZjI1YWRmM2VkMWJlLzAvNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1 M0E4NTFCNUJCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAoLnfOkbBptnQRByOp+tQTWEMJ68sr00ThE 9s18/q5qB07DuPdQPszawUy2W6LeyL15zP07yEmzLlGCjS9P7k9pw0Upuq4p0KbN Tcuq1kc9fJR+yiBYU/zH/Uk7wzfzCEvrCyVFjKLdexoATcU0OH6R5hGeDvHqOsTs sSjAovXL8NYRHr05UZXo4slO5TdFHRgsNScg0WEnXRmlZWexOAWHT98Kxuvv90wE pjXbJcwIGPMFlqtCI+CkUfEInXFNubWJTETc8vIc1IsbZalCYMgZDv8qwNJPTun1 zXZ4aHUNGAcVsgB0uibHDXj+dm7t8vftkfVCrlZDmX4VjG3/u8E= -----END CERTIFICATE-----Generated at Tue Nov 4 19:58:39 2025 by rpki-client