$ rpki-client -vvf repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft File: 6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft (raw, json) Hash identifier: P6qRcSHFKMsofcFEPXjbT4gsGuC44k+d42b/nmI4MFk= Subject key identifier: 39:2A:E4:27:81:C6:E0:16:9E:C6:C2:C2:F7:50:03:06:29:AE:36:B7 Authority key identifier: 6C:FA:BB:BC:88:D3:9C:7F:78:09:5D:A7:D3:D3:5D:D3:AA:2E:95:67 Certificate issuer: /CN=6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567 Certificate serial: 04774D1EF1B7FE02617CB3E0C80B5208A7F0EA47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft Manifest number: 02FF Signing time: Tue 04 Nov 2025 17:21:09 +0000 Manifest this update: Tue 04 Nov 2025 17:16:09 +0000 Manifest next update: Fri 07 Nov 2025 18:35:09 +0000 Files and hashes: 1: 3130332e3137352e3135382e302f32332d3234203d3e20313331313131.roa (hash: KlJ7xe9jxJPv2ghljBXv+XqaG+xdsmEYctXqZgRhERI=) 2: 6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.crl (hash: EkbgYCF6o8EII8TZhYTAuHRKc6dec+QTqCfD9GyQiD0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.crl rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 18:35:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:77:4d:1e:f1:b7:fe:02:61:7c:b3:e0:c8:0b:52:08:a7:f0:ea:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567 Validity Not Before: Nov 4 17:16:09 2025 GMT Not After : Nov 7 18:35:09 2025 GMT Subject: CN=392AE42781C6E0169EC6C2C2F750030629AE36B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f0:58:bb:f3:1c:55:1a:7d:39:4d:6c:25:29: 5d:11:f9:c7:6a:0f:27:e6:1a:f5:a7:ad:45:c6:5a: 96:f8:1d:6f:7a:6f:02:85:37:4c:24:08:18:e8:19: 68:5c:b1:63:3d:11:e5:41:6b:1e:ae:82:16:4c:54: 93:41:37:73:58:ad:f6:fa:16:a3:3a:e8:58:08:f7: 08:70:98:45:d8:80:49:b6:47:c5:7f:9b:de:26:e1: a1:f3:77:da:df:fa:ee:d5:d9:ea:7e:41:62:b7:4d: 4d:b2:87:3c:b1:70:fb:35:88:92:4c:13:68:6b:af: fc:3a:5d:78:5b:73:a5:b0:0f:0a:36:7c:b6:84:4c: d5:ae:1c:60:30:37:ed:93:db:dd:4a:0f:59:b8:df: 01:97:ce:e9:61:13:41:90:15:07:26:6e:5e:7d:4a: 22:d5:6f:80:3f:dc:6e:b5:77:c9:bf:0f:69:68:c2: 10:5c:97:8b:74:65:cc:7e:2f:ed:24:96:7d:da:85: 83:56:c7:0a:ed:48:fb:c7:f7:93:c0:e4:64:41:6d: d6:db:66:4b:0c:6b:b6:1b:e2:75:ae:bc:2d:0b:55: 54:d0:c1:e7:b8:0f:81:e4:e8:29:bc:30:2d:79:57: 98:ec:dd:43:07:65:d3:d4:03:5e:40:85:ac:e6:35: bd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2A:E4:27:81:C6:E0:16:9E:C6:C2:C2:F7:50:03:06:29:AE:36:B7 X509v3 Authority Key Identifier: keyid:6C:FA:BB:BC:88:D3:9C:7F:78:09:5D:A7:D3:D3:5D:D3:AA:2E:95:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ae:07:33:92:69:61:9a:72:57:b2:18:09:1b:ab:01:2e:8f: b4:e4:c1:fc:55:fa:d5:0f:18:ba:0f:26:d8:f2:1c:33:07:7b: 8a:37:f0:05:8d:1a:67:7d:c2:56:54:68:7b:b7:62:80:33:65: 19:88:8f:f5:32:3f:5c:fc:e0:bc:2f:bb:50:3d:12:3d:a4:9b: 1e:23:b9:d9:fc:48:1a:75:a8:9c:49:a1:8b:74:88:b4:b6:b2: e9:cf:c5:7e:4f:65:57:d4:0c:e6:94:f2:21:58:e7:97:2a:44: fd:65:f6:e6:d2:bd:b6:72:12:d8:cd:43:ad:ff:29:79:fe:d4: 22:18:5f:a6:da:2c:29:d8:5f:c4:a3:71:79:bd:44:3d:82:f7: 6f:c0:3f:fe:20:a9:07:3f:0a:6a:2c:d9:2e:6c:04:ae:19:0a: 19:a4:79:e2:20:42:76:6d:78:50:64:9e:c8:e9:4e:95:59:86: 24:5e:09:1b:87:d2:35:da:c8:29:8d:87:0b:45:51:c1:33:c5: 1e:82:2d:93:7a:d6:7e:7d:67:41:5b:e8:9a:10:b5:2b:cd:9e: 3e:1d:95:6c:6d:83:8f:90:87:5a:94:83:29:60:e6:16:d1:a2: 47:7b:3f:69:ad:c1:32:9a:5f:c4:64:9f:c9:e7:65:99:96:98: 4d:0c:1a:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBHdNHvG3/gJhfLPgyAtSCKfw6kcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNGQUJCQkM4OEQzOUM3Rjc4MDk1REE3RDNEMzVERDNB QTJFOTU2NzAeFw0yNTExMDQxNzE2MDlaFw0yNTExMDcxODM1MDlaMDMxMTAvBgNV BAMTKDM5MkFFNDI3ODFDNkUwMTY5RUM2QzJDMkY3NTAwMzA2MjlBRTM2QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV8Fi78xxVGn05TWwlKV0R+cdq DyfmGvWnrUXGWpb4HW96bwKFN0wkCBjoGWhcsWM9EeVBax6ughZMVJNBN3NYrfb6 FqM66FgI9whwmEXYgEm2R8V/m94m4aHzd9rf+u7V2ep+QWK3TU2yhzyxcPs1iJJM E2hrr/w6XXhbc6WwDwo2fLaETNWuHGAwN+2T291KD1m43wGXzulhE0GQFQcmbl59 SiLVb4A/3G61d8m/D2lowhBcl4t0Zcx+L+0kln3ahYNWxwrtSPvH95PA5GRBbdbb ZksMa7Yb4nWuvC0LVVTQwee4D4Hk6Cm8MC15V5js3UMHZdPUA15AhazmNb2pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOSrkJ4HG4BaexsLC91ADBimuNrcwHwYDVR0j BBgwFoAUbPq7vIjTnH94CV2n09Nd06oulWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Mzg3NGNmMy1hZGIxLTQ5NDctYTdlNC1hMmQzMmM1NGVkMWYvMC82Q0ZBQkJCQzg4 RDM5QzdGNzgwOTVEQTdEM0QzNUREM0FBMkU5NTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNGQUJCQkM4OEQzOUM3Rjc4MDk1REE3RDNEMzVERDNBQTJF OTU2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzM4NzRjZjMtYWRiMS00OTQ3LWE3 ZTQtYTJkMzJjNTRlZDFmLzAvNkNGQUJCQkM4OEQzOUM3Rjc4MDk1REE3RDNEMzVE RDNBQTJFOTU2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAyuBzOSaWGacleyGAkbqwEuj7TkwfxV+tUP GLoPJtjyHDMHe4o38AWNGmd9wlZUaHu3YoAzZRmIj/UyP1z84Lwvu1A9Ej2kmx4j udn8SBp1qJxJoYt0iLS2sunPxX5PZVfUDOaU8iFY55cqRP1l9ubSvbZyEtjNQ63/ KXn+1CIYX6baLCnYX8SjcXm9RD2C92/AP/4gqQc/Cmos2S5sBK4ZChmkeeIgQnZt eFBknsjpTpVZhiReCRuH0jXayCmNhwtFUcEzxR6CLZN61n59Z0Fb6JoQtSvNnj4d lWxtg4+Qh1qUgylg5hbRokd7P2mtwTKaX8Rkn8nnZZmWmE0MGms= -----END CERTIFICATE-----Generated at Wed Nov 5 13:21:43 2025 by rpki-client