$ rpki-client -vvf repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft File: DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft (raw, json) Hash identifier: 4LnWawZRoIgUnhGDNGf61EPLIBU7j/khqo29+9mcc5Y= Subject key identifier: 3D:08:BF:3B:10:FC:FA:A8:3E:31:D1:F4:B0:DA:A4:1F:C9:C7:C7:FE Authority key identifier: DB:6A:89:80:C5:0F:21:0C:80:41:A2:10:10:E6:DB:F1:0F:C7:C0:DF Certificate issuer: /CN=DB6A8980C50F210C8041A21010E6DBF10FC7C0DF Certificate serial: 14FFEB5AD03D480BD62AD6711634AC5BEF893EE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft Manifest number: C6 Signing time: Mon 03 Nov 2025 02:41:53 +0000 Manifest this update: Mon 03 Nov 2025 02:36:53 +0000 Manifest next update: Thu 06 Nov 2025 10:21:53 +0000 Files and hashes: 1: 3136302e32352e35332e302f32342d3234203d3e20313533303738.roa (hash: idjxpfeAxHssuGIMoqlSNQnvrimnNEAu/Mw7vVOi7mA=) 2: 3136302e32352e35322e302f32342d3234203d3e20313533303738.roa (hash: ZYpQlmxLS5aJFefjxbbBQvH2zXoYQl6ndeOBHWuaRz8=) 3: DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl (hash: x9xu5+ZnQon9myhM3aINKFeX1V9182LX3Jmx7QUGO9c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:21:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ff:eb:5a:d0:3d:48:0b:d6:2a:d6:71:16:34:ac:5b:ef:89:3e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6A8980C50F210C8041A21010E6DBF10FC7C0DF Validity Not Before: Nov 3 02:36:53 2025 GMT Not After : Nov 6 10:21:53 2025 GMT Subject: CN=3D08BF3B10FCFAA83E31D1F4B0DAA41FC9C7C7FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:07:58:60:ef:15:bf:d7:20:fe:59:6c:c3:50: 04:32:b7:b0:5e:9d:da:57:71:0f:f2:99:e8:65:52: 83:ca:fe:a8:cc:1e:63:1f:fe:ee:59:56:fb:bb:e6: b8:e5:14:c8:28:3d:8f:57:7f:e4:e4:87:8c:f8:77: d8:56:7c:e7:45:3b:03:ca:45:22:42:44:ea:8f:ff: 0b:b2:90:93:1b:6e:da:f0:d2:71:36:fb:1b:79:35: 13:91:b7:08:e3:0c:dd:f7:d5:34:e8:e8:cf:69:9e: ba:a6:db:29:24:9c:9e:a9:11:1d:51:4f:d4:91:32: fd:16:1a:2f:ff:6d:2c:a0:41:de:e3:b0:ff:83:2f: a7:d8:4b:c3:68:89:77:2e:57:1d:1f:c9:33:ee:92: bb:46:ec:5c:da:b0:9b:d3:ee:05:7b:8f:c9:30:db: 6b:fd:06:e3:8f:4f:73:59:75:61:58:b8:2b:7d:e3: e1:fd:5c:fa:2e:71:d4:ff:60:76:8e:9e:00:d2:d9: 51:7f:f1:78:cd:f0:8e:7e:bc:80:2f:eb:37:6d:9e: ec:89:c3:f6:01:c2:4c:11:6c:c5:8c:6a:7b:66:a5: 28:1e:a2:ce:30:96:d5:aa:a4:0d:3a:33:6a:cf:b8: 45:08:35:4c:e0:28:30:14:6b:2b:50:91:69:f7:79: f8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:08:BF:3B:10:FC:FA:A8:3E:31:D1:F4:B0:DA:A4:1F:C9:C7:C7:FE X509v3 Authority Key Identifier: keyid:DB:6A:89:80:C5:0F:21:0C:80:41:A2:10:10:E6:DB:F1:0F:C7:C0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:6d:ba:11:95:ae:14:03:20:e7:c7:e8:83:55:72:80:10:3e: a4:d0:b8:fa:72:01:ca:be:d9:3b:66:f2:39:3a:77:9f:0e:65: d3:4e:fc:a8:4d:97:22:f3:19:0d:81:35:50:22:35:5a:89:4b: c8:38:7c:13:4b:74:75:c0:a8:44:63:12:9b:5b:fc:67:8e:44: e6:40:c9:1f:a5:70:45:ff:20:d7:64:70:4f:aa:30:87:d4:03: 47:05:ae:67:0f:b0:5b:19:c1:ce:5c:78:ef:71:90:d4:33:23: 97:c3:78:48:21:22:00:50:86:b5:c7:f0:77:8d:40:ba:0b:36: 6e:53:4c:cb:fd:0a:01:70:4b:4f:37:96:13:8b:b7:2d:04:76: 41:cf:75:ab:31:3a:3c:66:c3:f8:e5:62:09:16:e1:32:f6:dd: e8:28:2e:90:15:1e:42:a3:1d:d0:d8:79:4f:6b:e2:17:00:4d: a6:53:d1:60:29:d9:36:fe:f2:e3:79:ce:5a:75:09:58:6f:44: 64:47:76:b1:19:f2:2b:28:3f:d8:a5:bd:f7:d9:2e:da:00:20: 6d:ec:cc:e9:be:19:c2:65:d9:06:3f:91:5f:de:3d:8a:6e:f6: 3f:06:a5:1f:6b:20:9b:25:35:3c:1c:67:79:77:04:dc:7e:01: 31:5e:f6:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFP/rWtA9SAvWKtZxFjSsW++JPuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2QTg5ODBDNTBGMjEwQzgwNDFBMjEwMTBFNkRCRjEw RkM3QzBERjAeFw0yNTExMDMwMjM2NTNaFw0yNTExMDYxMDIxNTNaMDMxMTAvBgNV BAMTKDNEMDhCRjNCMTBGQ0ZBQTgzRTMxRDFGNEIwREFBNDFGQzlDN0M3RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHB1hg7xW/1yD+WWzDUAQyt7Be ndpXcQ/ymehlUoPK/qjMHmMf/u5ZVvu75rjlFMgoPY9Xf+Tkh4z4d9hWfOdFOwPK RSJCROqP/wuykJMbbtrw0nE2+xt5NRORtwjjDN331TTo6M9pnrqm2ykknJ6pER1R T9SRMv0WGi//bSygQd7jsP+DL6fYS8NoiXcuVx0fyTPukrtG7FzasJvT7gV7j8kw 22v9BuOPT3NZdWFYuCt94+H9XPoucdT/YHaOngDS2VF/8XjN8I5+vIAv6zdtnuyJ w/YBwkwRbMWMantmpSgeos4wltWqpA06M2rPuEUINUzgKDAUaytQkWn3efjVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPQi/OxD8+qg+MdH0sNqkH8nHx/4wHwYDVR0j BBgwFoAU22qJgMUPIQyAQaIQEObb8Q/HwN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 M2IxNzg1Ny1iZTNkLTQxMzItOGYxOS0xMDgzNmY0MDg1NDYvMC9EQjZBODk4MEM1 MEYyMTBDODA0MUEyMTAxMEU2REJGMTBGQzdDMERGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREI2QTg5ODBDNTBGMjEwQzgwNDFBMjEwMTBFNkRCRjEwRkM3 QzBERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjNiMTc4NTctYmUzZC00MTMyLThm MTktMTA4MzZmNDA4NTQ2LzAvREI2QTg5ODBDNTBGMjEwQzgwNDFBMjEwMTBFNkRC RjEwRkM3QzBERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFtuhGVrhQDIOfH6INVcoAQPqTQuPpyAcq+ 2Ttm8jk6d58OZdNO/KhNlyLzGQ2BNVAiNVqJS8g4fBNLdHXAqERjEptb/GeOROZA yR+lcEX/INdkcE+qMIfUA0cFrmcPsFsZwc5ceO9xkNQzI5fDeEghIgBQhrXH8HeN QLoLNm5TTMv9CgFwS083lhOLty0EdkHPdasxOjxmw/jlYgkW4TL23egoLpAVHkKj HdDYeU9r4hcATaZT0WAp2Tb+8uN5zlp1CVhvRGRHdrEZ8isoP9ilvffZLtoAIG3s zOm+GcJl2QY/kV/ePYpu9j8GpR9rIJslNTwcZ3l3BNx+ATFe9tM= -----END CERTIFICATE-----Generated at Wed Nov 5 06:45:27 2025 by rpki-client