$ rpki-client -vvf repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft File: D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft (raw, json) Hash identifier: M3/of88ziPppB+6o3lKPBlbSXrfF82Sqqk/wbH1/2C0= Subject key identifier: B4:08:A2:0D:E3:C1:3C:5C:A2:D2:DC:57:6A:BA:8A:6A:01:FE:30:80 Authority key identifier: D0:C6:D7:5C:3C:34:7D:5B:27:C7:89:11:F6:2C:5F:AB:8B:A7:BE:40 Certificate issuer: /CN=D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40 Certificate serial: 44501C4BF3558132321CFD59153BD768B48F08E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft Manifest number: 96 Signing time: Mon 03 Nov 2025 11:30:50 +0000 Manifest this update: Mon 03 Nov 2025 11:25:50 +0000 Manifest next update: Thu 06 Nov 2025 13:33:50 +0000 Files and hashes: 1: 3230322e3133332e332e302f32342d3234203d3e203234323030.roa (hash: KBjjsWsKQFuN1REWppuBIRLZLM4xHEbHMPv7NBToWH4=) 2: D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.crl (hash: lk8R60hCrXqq3Iy8FdU4itR9hcLIVcRPLJAquqnmg+s=) 3: 3230322e3133332e362e302f32342d3234203d3e203234323030.roa (hash: PwrwjwU7TfjmAzlVIhNNq7JmiMiE2zPrnJS6Vjw4fpA=) 4: 3230322e3133332e372e302f32342d3234203d3e203234323030.roa (hash: sHrERPT1Gki4rCwtxWJOl3kaPuH5N8410kKwTEyBzNs=) 5: 3230322e3133332e302e302f32342d3234203d3e203234323030.roa (hash: Pppa12U1FBCWUbrjFLtimpCCb2f/w2y+Q5IjM+b5DpI=) 6: 3230322e3133332e342e302f32342d3234203d3e203234323030.roa (hash: aPtODejZ83CWdVDiKww6DVNDrHJed0ktroNcqSgEID0=) 7: 3230322e3133332e352e302f32342d3234203d3e203234323030.roa (hash: fpRL8Fma9ykhIZFDzSC08kbZM+itPsUgTlUHNfip6cw=) 8: 3230322e3133332e312e302f32342d3234203d3e203234323030.roa (hash: +WQDDpOr7BIkoO1ou9EO6AdPk7I9sWGQQ0uBCTy/cyM=) 9: 3230322e3133332e322e302f32342d3234203d3e203234323030.roa (hash: bz45Mn7ZgKZreN1WmgS7I4+teMbA4Do/dtC0u8jELGY=) 10: 3230322e3133332e302e302f32312d3231203d3e203234323030.roa (hash: TfiqH+4JRlzCqMd+ohke3uaa5qrL5wiizfc5eyZU4Bw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.crl rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 13:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:50:1c:4b:f3:55:81:32:32:1c:fd:59:15:3b:d7:68:b4:8f:08:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40 Validity Not Before: Nov 3 11:25:50 2025 GMT Not After : Nov 6 13:33:50 2025 GMT Subject: CN=B408A20DE3C13C5CA2D2DC576ABA8A6A01FE3080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b3:a2:9f:70:5a:4e:80:4a:a3:ef:88:72:96: 08:ef:7c:71:81:bc:e4:ff:85:91:39:15:7f:a7:e4: 26:35:ce:cf:d7:49:14:aa:92:b4:31:6e:eb:64:d5: 08:9a:de:0d:43:0c:ff:77:94:f8:1c:da:92:6e:85: 31:15:2d:0c:23:72:12:e1:fa:7e:09:61:e4:08:42: 35:8d:18:eb:6e:be:a1:b7:ec:e3:c3:5d:5e:f6:d9: 82:bd:39:1a:99:51:c2:4c:12:f6:d5:13:86:86:12: 49:5f:c8:ca:fd:f2:4a:3f:8a:17:a5:54:0e:50:7e: 0e:ae:5a:df:5a:68:b5:33:7a:53:d5:ae:2e:f2:a9: 5c:b5:55:48:40:d7:c4:c4:bf:10:3f:e7:1a:e5:f7: c5:06:2b:71:2e:fe:78:70:2d:1d:54:7b:70:19:da: 8e:4a:dd:5f:69:62:40:50:7d:5a:88:ef:56:f7:de: 42:04:c7:5b:ea:6d:b9:87:2d:5b:36:d6:3d:44:c4: 7e:a2:20:75:76:73:f7:41:3c:bc:cd:40:a6:d8:d6: d5:37:df:11:22:3c:ba:01:00:d8:d4:5e:64:94:ac: 1a:60:ed:11:0c:2c:83:b7:e1:9f:bd:1d:6f:01:bc: fa:89:2c:bc:4d:3c:3a:ed:f1:54:0c:09:77:32:2b: c6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:08:A2:0D:E3:C1:3C:5C:A2:D2:DC:57:6A:BA:8A:6A:01:FE:30:80 X509v3 Authority Key Identifier: keyid:D0:C6:D7:5C:3C:34:7D:5B:27:C7:89:11:F6:2C:5F:AB:8B:A7:BE:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:5f:a8:a8:d9:e1:2f:51:5c:0a:8b:a3:37:ed:d8:0c:70:ee: 39:7a:0a:77:d1:6c:cc:dd:ad:cb:61:2f:e1:e3:c4:00:72:d2: d8:0e:00:a0:aa:c2:5c:a9:07:e3:b4:0f:56:98:ff:52:cb:3c: ac:43:b0:d6:9b:5f:e2:ff:e1:40:e0:d8:e0:a4:49:f3:e3:be: 1d:cd:90:3a:15:ed:a7:a5:a0:fb:bb:40:2f:61:ab:9e:90:50: b4:a5:fc:0f:3e:e2:b7:de:85:7d:3b:27:e0:94:ec:bc:19:7f: 9e:22:1f:5c:19:c0:f9:81:69:1b:3c:16:b6:2a:d9:76:39:43: fd:91:a2:7f:0e:c4:3a:59:e8:37:7e:54:97:67:aa:98:65:ec: 12:bb:ef:e8:5a:b4:bb:87:3a:07:36:0c:06:d9:33:7d:cc:6e: 18:7d:a1:b2:19:49:fa:4e:29:e3:b4:ab:eb:1e:59:95:9e:3f: f1:1e:4b:32:6e:fe:4b:be:c9:75:30:99:10:90:37:8e:46:92: 30:ac:d8:c1:d6:73:fa:6c:75:12:35:e7:de:26:9e:94:ca:be: 96:35:c0:61:6b:93:ac:e2:a8:8c:6d:8f:97:c0:ba:15:dc:a7: 54:7e:42:fe:e6:91:bb:40:fc:93:8a:5f:44:d2:ae:83:dc:a6: 2f:fa:e2:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURFAcS/NVgTIyHP1ZFTvXaLSPCOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDNkQ3NUMzQzM0N0Q1QjI3Qzc4OTExRjYyQzVGQUI4 QkE3QkU0MDAeFw0yNTExMDMxMTI1NTBaFw0yNTExMDYxMzMzNTBaMDMxMTAvBgNV BAMTKEI0MDhBMjBERTNDMTNDNUNBMkQyREM1NzZBQkE4QTZBMDFGRTMwODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCws6KfcFpOgEqj74hylgjvfHGB vOT/hZE5FX+n5CY1zs/XSRSqkrQxbutk1Qia3g1DDP93lPgc2pJuhTEVLQwjchLh +n4JYeQIQjWNGOtuvqG37OPDXV722YK9ORqZUcJMEvbVE4aGEklfyMr98ko/ihel VA5Qfg6uWt9aaLUzelPVri7yqVy1VUhA18TEvxA/5xrl98UGK3Eu/nhwLR1Ue3AZ 2o5K3V9pYkBQfVqI71b33kIEx1vqbbmHLVs21j1ExH6iIHV2c/dBPLzNQKbY1tU3 3xEiPLoBANjUXmSUrBpg7REMLIO34Z+9HW8BvPqJLLxNPDrt8VQMCXcyK8YvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtAiiDePBPFyi0txXarqKagH+MIAwHwYDVR0j BBgwFoAU0MbXXDw0fVsnx4kR9ixfq4unvkAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzY2OWVhNC1lODJmLTQ2YzMtOGRkMy0yZTk4ODE1OWIyMDIvMC9EMEM2RDc1QzND MzQ3RDVCMjdDNzg5MTFGNjJDNUZBQjhCQTdCRTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDNkQ3NUMzQzM0N0Q1QjI3Qzc4OTExRjYyQzVGQUI4QkE3 QkU0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjM2NjllYTQtZTgyZi00NmMzLThk ZDMtMmU5ODgxNTliMjAyLzAvRDBDNkQ3NUMzQzM0N0Q1QjI3Qzc4OTExRjYyQzVG QUI4QkE3QkU0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtfqKjZ4S9RXAqLozft2Axw7jl6CnfRbMzd rcthL+HjxABy0tgOAKCqwlypB+O0D1aY/1LLPKxDsNabX+L/4UDg2OCkSfPjvh3N kDoV7aeloPu7QC9hq56QULSl/A8+4rfehX07J+CU7LwZf54iH1wZwPmBaRs8FrYq 2XY5Q/2Ron8OxDpZ6Dd+VJdnqphl7BK77+hatLuHOgc2DAbZM33Mbhh9obIZSfpO KeO0q+seWZWeP/EeSzJu/ku+yXUwmRCQN45GkjCs2MHWc/psdRI1594mnpTKvpY1 wGFrk6ziqIxtj5fAuhXcp1R+Qv7mkbtA/JOKX0TSroPcpi/64nY= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:41 2025 by rpki-client