$ rpki-client -vvf repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft File: C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft (raw, json) Hash identifier: lU16rqgt2jQPKrOJFqY1Ec9Gg78xoCUargmE+cHl8rk= Subject key identifier: C0:FC:15:86:14:02:54:75:32:0B:E9:F2:25:67:34:0D:80:E7:92:CB Authority key identifier: C6:E3:A2:28:17:CE:6E:09:8D:FC:67:4B:26:28:8C:83:D6:C3:F1:CE Certificate issuer: /CN=C6E3A22817CE6E098DFC674B26288C83D6C3F1CE Certificate serial: 4C96D3658B0F52977CB7FB7566EE38D26CF59F9C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft Manifest number: 04AD Signing time: Sun 02 Nov 2025 19:40:58 +0000 Manifest this update: Sun 02 Nov 2025 19:35:58 +0000 Manifest next update: Wed 05 Nov 2025 23:46:58 +0000 Files and hashes: 1: 3130332e3136302e3231322e302f32332d3233203d3e20313430333839.roa (hash: u5WfQAzN1c26Bk/yoWUZSKe+Zg3RVzlzDJ1SjGA5ptQ=) 2: 3130332e3136302e3231332e302f32342d3234203d3e20313430333839.roa (hash: sD1D71HTJcX0Tgc5u0wKCnB+drLmqPRrwWzHCdL5tpk=) 3: C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl (hash: iq4hylrGIKJYX+JSw8+VLCf5/+eUphIagflAq/J9ml0=) 4: 3130332e3136302e3231322e302f32342d3234203d3e20313430333839.roa (hash: b/xbORHT+fQcjRsUPACV/EddNJE5h6xg8w5gIZewjWA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:96:d3:65:8b:0f:52:97:7c:b7:fb:75:66:ee:38:d2:6c:f5:9f:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6E3A22817CE6E098DFC674B26288C83D6C3F1CE Validity Not Before: Nov 2 19:35:58 2025 GMT Not After : Nov 5 23:46:58 2025 GMT Subject: CN=C0FC158614025475320BE9F22567340D80E792CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dd:55:15:43:25:25:8b:c5:b9:43:29:aa:ee: 75:58:92:b7:0a:50:3d:f7:ef:68:e2:32:52:e2:de: 6c:9c:e7:d3:1f:9b:29:76:db:60:59:5f:68:32:e6: d4:07:35:fb:14:e4:62:33:b5:78:31:73:ab:f2:85: 3e:f9:dd:a5:21:9a:38:ca:5d:17:a0:db:95:37:b3: 1f:8c:4c:2f:19:82:05:6c:86:0e:fc:eb:e9:7d:c7: 05:22:48:b0:39:5a:0c:41:7e:a2:35:77:18:72:47: bf:74:55:a2:ca:44:c6:8f:9a:54:fa:b3:92:89:e8: 6f:96:4a:ab:95:25:f2:3f:bd:21:27:ef:ff:87:4e: a1:79:8a:a5:7b:70:96:92:18:17:21:a7:0c:28:7a: 1a:99:dc:9f:4b:79:57:e7:52:19:a9:9c:66:5e:dd: 95:ba:02:02:0e:85:5f:d5:c1:96:0d:41:ae:84:0f: 0e:ff:c9:2d:fc:26:b7:d1:a5:45:ca:b7:64:50:07: 17:be:55:51:63:37:b8:92:85:33:9e:50:85:43:f8: 32:5a:0c:b2:c9:27:3f:89:1b:38:1d:29:cf:a8:79: aa:f9:1f:f0:4f:6d:c7:c9:2e:a2:09:e8:d8:03:05: dc:12:8b:4e:26:8d:82:b7:a9:75:1d:f2:9b:bc:d9: dd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FC:15:86:14:02:54:75:32:0B:E9:F2:25:67:34:0D:80:E7:92:CB X509v3 Authority Key Identifier: keyid:C6:E3:A2:28:17:CE:6E:09:8D:FC:67:4B:26:28:8C:83:D6:C3:F1:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:e0:8a:19:87:58:2b:f2:46:2b:e2:31:35:9d:89:48:39:4b: c5:3d:e7:fd:21:5c:25:cf:89:f8:44:66:fd:ae:ad:64:55:77: 0b:33:04:f1:36:ba:5b:14:95:aa:7c:b4:d3:be:62:40:02:0b: 0c:53:93:58:23:6a:b9:09:25:c1:5f:04:6c:2d:74:c1:70:d3: c1:d9:c8:f6:c9:b1:df:5d:00:dd:88:f4:89:e8:97:f7:cd:1d: 96:e2:74:11:4f:de:f4:a6:9d:cb:dd:04:4d:2e:ac:c9:44:cc: fc:c8:21:ad:96:0e:a2:31:3e:ab:c3:08:44:ad:ca:3b:e6:6e: fc:a1:e3:09:65:5a:8b:72:66:5d:24:a5:4b:f1:1f:7c:aa:45: f3:e8:3e:5d:2d:59:2a:d6:84:80:3e:35:43:89:1c:f3:b2:14: b6:29:29:df:99:d0:18:36:c0:3e:90:ed:8a:84:9d:cc:44:40: 26:73:e1:ef:d4:50:1b:a5:21:b5:03:9f:51:e4:99:b4:e5:2d: ae:35:74:df:d1:44:2f:e2:fc:2b:3f:ff:27:da:9c:60:8a:7f: fb:60:73:bb:a8:d1:b9:48:ee:d7:4f:c8:c9:b6:20:b7:70:af: 2c:5e:f3:40:69:2d:d3:f4:3f:08:dd:71:f9:5c:1a:a4:fe:a9: 19:6c:11:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTJbTZYsPUpd8t/t1Zu440mz1n5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZFM0EyMjgxN0NFNkUwOThERkM2NzRCMjYyODhDODNE NkMzRjFDRTAeFw0yNTExMDIxOTM1NThaFw0yNTExMDUyMzQ2NThaMDMxMTAvBgNV BAMTKEMwRkMxNTg2MTQwMjU0NzUzMjBCRTlGMjI1NjczNDBEODBFNzkyQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI3VUVQyUli8W5Qymq7nVYkrcK UD3372jiMlLi3myc59Mfmyl222BZX2gy5tQHNfsU5GIztXgxc6vyhT753aUhmjjK XReg25U3sx+MTC8ZggVshg786+l9xwUiSLA5WgxBfqI1dxhyR790VaLKRMaPmlT6 s5KJ6G+WSquVJfI/vSEn7/+HTqF5iqV7cJaSGBchpwwoehqZ3J9LeVfnUhmpnGZe 3ZW6AgIOhV/VwZYNQa6EDw7/yS38JrfRpUXKt2RQBxe+VVFjN7iShTOeUIVD+DJa DLLJJz+JGzgdKc+oear5H/BPbcfJLqIJ6NgDBdwSi04mjYK3qXUd8pu82d2vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwPwVhhQCVHUyC+nyJWc0DYDnksswHwYDVR0j BBgwFoAUxuOiKBfObgmN/GdLJiiMg9bD8c4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmVlMWVlMS1hNWI1LTRjNjQtYmJiYi0yNjM2MzUyZGFjZmMvMC9DNkUzQTIyODE3 Q0U2RTA5OERGQzY3NEIyNjI4OEM4M0Q2QzNGMUNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzZFM0EyMjgxN0NFNkUwOThERkM2NzRCMjYyODhDODNENkMz RjFDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlZTFlZTEtYTViNS00YzY0LWJi YmItMjYzNjM1MmRhY2ZjLzAvQzZFM0EyMjgxN0NFNkUwOThERkM2NzRCMjYyODhD ODNENkMzRjFDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXgihmHWCvyRiviMTWdiUg5S8U95/0hXCXP ifhEZv2urWRVdwszBPE2ulsUlap8tNO+YkACCwxTk1gjarkJJcFfBGwtdMFw08HZ yPbJsd9dAN2I9Inol/fNHZbidBFP3vSmncvdBE0urMlEzPzIIa2WDqIxPqvDCESt yjvmbvyh4wllWotyZl0kpUvxH3yqRfPoPl0tWSrWhIA+NUOJHPOyFLYpKd+Z0Bg2 wD6Q7YqEncxEQCZz4e/UUBulIbUDn1HkmbTlLa41dN/RRC/i/Cs//yfanGCKf/tg c7uo0blI7tdPyMm2ILdwryxe80BpLdP0PwjdcflcGqT+qRlsEbw= -----END CERTIFICATE-----Generated at Tue Nov 4 21:09:59 2025 by rpki-client