$ rpki-client -vvf repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft File: C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft (raw, json) Hash identifier: 2M6q0bmOSP+tflD5hfh9P4xcBPEal3L0rWYa66NR5rI= Subject key identifier: DA:C8:4F:B1:C9:D6:A8:59:60:63:0A:B3:F0:0E:AD:97:EE:A9:BF:3D Authority key identifier: C6:95:0F:BC:93:F3:09:E8:39:CF:C5:E1:A2:EF:0F:6C:91:BF:09:C7 Certificate issuer: /CN=C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7 Certificate serial: 4500E7204E8DCE8BB115E4155E3BD397F5EB4BC1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft Manifest number: 0122 Signing time: Sun 02 Nov 2025 15:41:02 +0000 Manifest this update: Sun 02 Nov 2025 15:36:02 +0000 Manifest next update: Wed 05 Nov 2025 17:39:02 +0000 Files and hashes: 1: C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl (hash: 7dBPrTXcZsDwXcQHHSBZMWdOZy41HL3wuSH87HfTuCo=) 2: 3130332e37382e35312e302f32342d3234203d3e20313530323536.roa (hash: IGaUhhhYSDgHiHBNKXPmkyIkbMtz8KycOxh90/k+Fes=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 17:39:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:00:e7:20:4e:8d:ce:8b:b1:15:e4:15:5e:3b:d3:97:f5:eb:4b:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7 Validity Not Before: Nov 2 15:36:02 2025 GMT Not After : Nov 5 17:39:02 2025 GMT Subject: CN=DAC84FB1C9D6A85960630AB3F00EAD97EEA9BF3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:05:e0:99:1d:e6:24:b7:6a:c2:73:61:4f:6f: 82:d4:60:57:25:7d:2e:56:f4:0c:1d:c6:36:f6:50: 23:74:8d:e2:b0:55:02:45:05:f3:b7:f0:e8:5a:bd: a1:9e:f5:98:ba:de:87:63:61:93:b0:7d:82:d1:f9: 48:42:eb:7f:f7:c8:6c:8a:d0:1d:fb:03:13:2d:3d: d2:fa:b7:9f:40:d0:d7:f4:63:2b:ba:67:7f:55:e9: 83:a1:bb:02:7e:8a:00:3c:37:cf:22:b7:a5:6e:da: a5:90:06:15:d8:f3:64:0b:06:2b:54:15:fa:10:c4: 40:4b:dd:68:09:82:fa:25:34:11:89:20:a3:75:b4: 0f:17:e0:b4:cb:0b:dd:de:19:5e:ff:c7:26:11:76: 5e:2f:a0:c3:fc:21:9a:8c:1a:75:4e:75:5b:f9:10: 0a:e6:15:a5:33:2d:41:5a:94:7f:f1:c5:0b:19:85: 3c:25:26:56:77:d4:b0:5e:e3:86:81:df:6f:e3:0d: 1d:9a:99:b1:81:1f:8f:02:0d:6e:b4:80:44:99:55: e9:6c:8e:1f:49:0f:72:65:09:03:7b:ea:b7:37:e8: fe:b1:18:b1:81:ee:d2:36:a5:f7:a5:62:aa:31:8b: 0e:0c:75:c1:d9:2c:11:9a:e0:48:fd:26:57:60:96: a9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C8:4F:B1:C9:D6:A8:59:60:63:0A:B3:F0:0E:AD:97:EE:A9:BF:3D X509v3 Authority Key Identifier: keyid:C6:95:0F:BC:93:F3:09:E8:39:CF:C5:E1:A2:EF:0F:6C:91:BF:09:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:25:e8:c2:e1:83:51:eb:d1:6b:2c:30:e5:ae:17:74:61:2b: 12:37:71:f2:9e:3a:eb:7c:d4:03:d0:24:a7:e8:68:2a:f4:b9: 04:64:2b:0c:3c:d8:19:2a:02:38:3f:15:37:c0:47:d2:96:c3: a5:dd:87:47:5f:39:4d:d4:9c:44:25:25:e7:51:19:e5:17:e1: 0b:09:2c:79:8e:92:d4:be:ec:b3:fc:54:07:b1:87:eb:ca:82: aa:b6:db:7e:e3:21:d1:e2:af:77:aa:a3:a7:97:13:f2:1d:30: 6d:9e:c1:ad:77:e6:30:7b:20:50:ae:0e:19:d8:e4:e1:07:1c: b5:52:c3:ea:79:54:d6:d3:ff:a6:6c:34:b0:3a:72:4f:93:33: bd:a0:a2:78:ba:6c:03:39:5d:1f:fa:72:53:6d:f8:42:bb:8e: 6e:4f:28:10:ae:a3:3f:b1:28:56:e8:6e:66:13:2e:a4:58:0b: 44:e8:a9:6f:36:51:31:cb:cd:25:4d:ff:49:59:01:f7:78:32: 77:51:e2:ae:cb:99:eb:1c:9b:45:b7:48:47:77:f2:1e:78:62: 3a:31:16:42:c0:74:97:99:0d:9c:c9:5d:1d:48:37:d6:59:dc: ef:4e:75:6f:2f:d2:9e:15:0d:8a:5f:6f:03:f2:bf:1c:1d:56: 28:dc:6b:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURQDnIE6NzouxFeQVXjvTl/XrS8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5NTBGQkM5M0YzMDlFODM5Q0ZDNUUxQTJFRjBGNkM5 MUJGMDlDNzAeFw0yNTExMDIxNTM2MDJaFw0yNTExMDUxNzM5MDJaMDMxMTAvBgNV BAMTKERBQzg0RkIxQzlENkE4NTk2MDYzMEFCM0YwMEVBRDk3RUVBOUJGM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvBeCZHeYkt2rCc2FPb4LUYFcl fS5W9Awdxjb2UCN0jeKwVQJFBfO38OhavaGe9Zi63odjYZOwfYLR+UhC63/3yGyK 0B37AxMtPdL6t59A0Nf0Yyu6Z39V6YOhuwJ+igA8N88it6Vu2qWQBhXY82QLBitU FfoQxEBL3WgJgvolNBGJIKN1tA8X4LTLC93eGV7/xyYRdl4voMP8IZqMGnVOdVv5 EArmFaUzLUFalH/xxQsZhTwlJlZ31LBe44aB32/jDR2ambGBH48CDW60gESZVels jh9JD3JlCQN76rc36P6xGLGB7tI2pfelYqoxiw4MdcHZLBGa4Ej9JldglqnZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2shPscnWqFlgYwqz8A6tl+6pvz0wHwYDVR0j BBgwFoAUxpUPvJPzCeg5z8Xhou8PbJG/CccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjUyMWJkMS0xZGEyLTRiODAtODQxNi1mMDVkZTI5MjIxNmUvMC9DNjk1MEZCQzkz RjMwOUU4MzlDRkM1RTFBMkVGMEY2QzkxQkYwOUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzY5NTBGQkM5M0YzMDlFODM5Q0ZDNUUxQTJFRjBGNkM5MUJG MDlDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI1MjFiZDEtMWRhMi00YjgwLTg0 MTYtZjA1ZGUyOTIyMTZlLzAvQzY5NTBGQkM5M0YzMDlFODM5Q0ZDNUUxQTJFRjBG NkM5MUJGMDlDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgl6MLhg1Hr0WssMOWuF3RhKxI3cfKeOut8 1APQJKfoaCr0uQRkKww82BkqAjg/FTfAR9KWw6Xdh0dfOU3UnEQlJedRGeUX4QsJ LHmOktS+7LP8VAexh+vKgqq2237jIdHir3eqo6eXE/IdMG2ewa135jB7IFCuDhnY 5OEHHLVSw+p5VNbT/6ZsNLA6ck+TM72goni6bAM5XR/6clNt+EK7jm5PKBCuoz+x KFbobmYTLqRYC0ToqW82UTHLzSVN/0lZAfd4MndR4q7Lmescm0W3SEd38h54Yjox FkLAdJeZDZzJXR1IN9ZZ3O9OdW8v0p4VDYpfbwPyvxwdVijca9E= -----END CERTIFICATE-----Generated at Tue Nov 4 16:42:52 2025 by rpki-client