$ rpki-client -vvf repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft File: A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft (raw, json) Hash identifier: Bxbx5g1HbiPloxieYbaxiAiV7+p4kRUVBfh6Es88/GM= Subject key identifier: 71:23:CB:2A:22:36:04:44:A1:FA:E8:4F:34:40:30:C2:6E:26:ED:CF Authority key identifier: A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D Certificate issuer: /CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D Certificate serial: 3758E8004E43A8F31405B3B1581C670D2C13649B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft Manifest number: 04FD Signing time: Mon 03 Nov 2025 22:32:13 +0000 Manifest this update: Mon 03 Nov 2025 22:27:13 +0000 Manifest next update: Thu 06 Nov 2025 23:43:13 +0000 Files and hashes: 1: 323430353a633563303a666630303a3a2f34302d3438203d3e20313334363534.roa (hash: Q46pxbm+TVjkz99t2lUyFhkKtMbUjt5MtTd3GxK/1m0=) 2: A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl (hash: qABkEf9H8oi9uCGwFGtYMsB37NMS+Js2g+QElHM9NK0=) 3: 3130332e3134372e3235342e302f32342d3234203d3e20313334363534.roa (hash: SREiQzAjfVMpOJnEfnQMUDFShy+UOiOi5qWZd3X3Wts=) 4: 323430353a633563303a3a2f33322d3438203d3e20313339393736.roa (hash: 1oSAlGyCAQ5BsCDikGrzZ8Xay1TMu0rXb0E3UWwkSO0=) 5: 3130332e3134372e3235352e302f32342d3234203d3e20313334363534.roa (hash: XIQ/lQWer2x/1W1XBHKNLMW19qN6bWGcY/8CJlO5tmY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 23:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:58:e8:00:4e:43:a8:f3:14:05:b3:b1:58:1c:67:0d:2c:13:64:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D Validity Not Before: Nov 3 22:27:13 2025 GMT Not After : Nov 6 23:43:13 2025 GMT Subject: CN=7123CB2A22360444A1FAE84F344030C26E26EDCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:04:da:88:71:13:17:0b:37:6b:2b:8e:a7:e4: 5f:91:99:eb:76:5c:03:ac:0d:86:bd:2b:66:f7:65: f4:74:3a:1b:58:51:20:f6:21:1f:9b:b0:d7:7c:69: 81:0f:2c:52:21:6e:dd:d9:60:98:b9:e7:06:4a:4a: 6b:1b:43:4a:ce:4d:62:7d:89:47:49:97:d7:4f:91: 04:18:5f:a8:74:7e:13:f8:c9:42:8b:3d:aa:49:5c: 81:98:59:a4:e8:7c:a4:1c:00:20:71:a6:65:92:fa: 6e:c0:6c:ee:d5:75:ff:b7:5a:8b:bc:ce:c2:99:12: 54:4f:c0:1b:5b:f8:29:95:30:2e:b6:78:c3:f0:63: f0:a3:14:1a:ba:4d:43:0c:cc:d4:91:8e:bb:35:39: db:ef:a2:50:94:22:32:16:01:7e:df:99:b1:a5:40: 2a:64:80:ab:7c:f9:95:bf:f3:47:47:1b:e8:57:69: 0e:12:5e:0c:58:f9:d8:b9:9b:bf:df:2d:aa:01:59: 1a:0b:e5:fc:7e:ee:d1:06:49:9b:70:6e:ed:04:a1: 13:e1:80:12:6e:5d:f6:d2:50:e5:b6:ee:94:0b:a0: 2f:63:21:9b:7e:75:dd:6d:92:e4:af:e1:5c:cc:49: 3c:2b:c5:53:7b:d9:8d:f6:20:a9:63:80:8f:fa:c9: 9e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:23:CB:2A:22:36:04:44:A1:FA:E8:4F:34:40:30:C2:6E:26:ED:CF X509v3 Authority Key Identifier: keyid:A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:b6:c3:41:2c:eb:df:74:50:25:43:ad:67:7a:30:1e:a6:82: 9c:83:04:28:1e:14:34:96:d0:58:ed:66:53:d9:47:1f:25:a1: 48:bd:cb:1c:cb:d7:21:92:ed:ba:ff:4d:5e:d2:e4:7d:34:07: 22:b3:f6:39:55:8b:20:e0:71:99:1d:7b:a2:bf:37:73:28:09: f0:df:c1:d6:96:1a:58:6b:c7:c9:b1:b5:08:5d:27:a1:a8:15: be:f1:c3:3a:e3:3b:ee:47:47:2a:28:52:1b:d7:ea:fc:75:36: c1:3f:e7:96:f9:a7:a0:b6:b9:0d:0b:8c:9e:47:04:fc:e8:ab: 69:8e:db:0f:71:7b:7d:46:35:cd:1a:74:a6:06:26:d3:5a:eb: e3:07:cd:9d:d0:da:f9:c4:97:00:ef:4d:ac:52:65:2d:9c:63: e8:ce:a6:45:1d:fa:c7:6d:48:85:ee:26:41:eb:55:7a:0c:0b: 22:4a:7d:dc:6e:bc:59:15:db:3e:e5:28:1b:0b:5d:31:35:b6: 11:14:0b:3a:94:21:8e:d1:3b:7b:b1:31:89:32:1a:89:64:99: 4d:70:f6:28:1f:79:b7:35:ea:02:b5:76:36:00:0f:41:d9:a6: 5d:0a:b0:bb:75:f3:8f:5c:25:c5:bb:e9:59:f7:20:80:13:a1: a7:85:ee:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN1joAE5DqPMUBbOxWBxnDSwTZJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1QjU3 QzRDOEUwRDAeFw0yNTExMDMyMjI3MTNaFw0yNTExMDYyMzQzMTNaMDMxMTAvBgNV BAMTKDcxMjNDQjJBMjIzNjA0NDRBMUZBRTg0RjM0NDAzMEMyNkUyNkVEQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1BNqIcRMXCzdrK46n5F+Rmet2 XAOsDYa9K2b3ZfR0OhtYUSD2IR+bsNd8aYEPLFIhbt3ZYJi55wZKSmsbQ0rOTWJ9 iUdJl9dPkQQYX6h0fhP4yUKLPapJXIGYWaTofKQcACBxpmWS+m7AbO7Vdf+3Wou8 zsKZElRPwBtb+CmVMC62eMPwY/CjFBq6TUMMzNSRjrs1OdvvolCUIjIWAX7fmbGl QCpkgKt8+ZW/80dHG+hXaQ4SXgxY+di5m7/fLaoBWRoL5fx+7tEGSZtwbu0EoRPh gBJuXfbSUOW27pQLoC9jIZt+dd1tkuSv4VzMSTwrxVN72Y32IKljgI/6yZ4JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcSPLKiI2BESh+uhPNEAwwm4m7c8wHwYDVR0j BBgwFoAUpsexyguQiFXuWPGZHMyVtXxMjg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGU0NzUwZS00MzkzLTQzZWMtOWFiNS1kMjQ3YmJjMDdkODYvMC9BNkM3QjFDQTBC OTA4ODU1RUU1OEYxOTkxQ0NDOTVCNTdDNEM4RTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1QjU3QzRD OEUwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBlNDc1MGUtNDM5My00M2VjLTlh YjUtZDI0N2JiYzA3ZDg2LzAvQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1 QjU3QzRDOEUwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADC2w0Es6990UCVDrWd6MB6mgpyDBCgeFDSW 0FjtZlPZRx8loUi9yxzL1yGS7br/TV7S5H00ByKz9jlViyDgcZkde6K/N3MoCfDf wdaWGlhrx8mxtQhdJ6GoFb7xwzrjO+5HRyooUhvX6vx1NsE/55b5p6C2uQ0LjJ5H BPzoq2mO2w9xe31GNc0adKYGJtNa6+MHzZ3Q2vnElwDvTaxSZS2cY+jOpkUd+sdt SIXuJkHrVXoMCyJKfdxuvFkV2z7lKBsLXTE1thEUCzqUIY7RO3uxMYkyGolkmU1w 9igfebc16gK1djYAD0HZpl0KsLt1849cJcW76Vn3IIAToaeF7gw= -----END CERTIFICATE-----Generated at Wed Nov 5 06:30:12 2025 by rpki-client