$ rpki-client -vvf repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft File: 6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft (raw, json) Hash identifier: 6j09QngO/4Kfwm0V9KDoxM0wDuUaSKbkBvBhPP/Hrdg= Subject key identifier: 3F:4D:CC:A6:D7:0C:19:9A:A1:24:BD:D5:6C:1F:0C:56:D7:FA:6E:11 Authority key identifier: 6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87 Certificate issuer: /CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187 Certificate serial: 61A87ED775A06FCB97B3B908ECC1960B679BFC19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft Manifest number: 01A1 Signing time: Sun 02 Nov 2025 13:31:09 +0000 Manifest this update: Sun 02 Nov 2025 13:26:09 +0000 Manifest next update: Wed 05 Nov 2025 22:17:09 +0000 Files and hashes: 1: 6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl (hash: pp46+XBpLQfE2+VnbT3sX8KPwim6phrIkAUtUKI8JvQ=) 2: 3130332e3234352e3232352e302f32342d3234203d3e20313331373635.roa (hash: /abYrA5yp8Nre7zAYDHYwFsGgEom3ZQxvMGjfmSiyZM=) 3: 3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa (hash: +wBbu1cMZCAeulSyWUHjp9S6buaiwbJ9EYT932oWUfk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 22:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:a8:7e:d7:75:a0:6f:cb:97:b3:b9:08:ec:c1:96:0b:67:9b:fc:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187 Validity Not Before: Nov 2 13:26:09 2025 GMT Not After : Nov 5 22:17:09 2025 GMT Subject: CN=3F4DCCA6D70C199AA124BDD56C1F0C56D7FA6E11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:73:b9:07:1e:08:e1:7e:33:55:26:2f:c7:e4: 78:2f:55:4c:88:7e:39:d4:ef:7c:1c:df:66:97:41: 38:33:d1:65:6c:bc:e3:32:37:4e:e8:2f:95:56:1e: 89:e1:53:b8:38:62:82:cc:5d:8c:58:93:b6:44:fc: 40:2c:98:c5:16:3c:4a:d6:72:4a:b6:cb:44:4c:d6: 2d:da:39:74:f8:62:1d:39:99:a9:29:46:6b:bd:4a: 1a:0a:a9:17:af:ff:e7:59:bd:d8:86:77:05:d2:19: 16:98:87:86:3f:6a:00:67:4d:0c:34:42:71:02:21: 3c:c9:5a:5c:26:c2:78:14:1e:c4:0a:22:c8:0a:2f: 3d:a3:72:91:b4:a1:d4:70:1c:d6:35:37:65:4a:1d: 11:44:e3:96:1b:3b:22:dc:70:40:79:40:cf:9c:24: 18:ad:9b:ef:bd:e6:94:8a:13:e8:f4:5b:5e:57:5d: f1:24:22:11:de:1e:7b:a9:4a:fa:61:80:be:ee:55: 03:14:4c:30:bb:ce:24:63:a4:2e:85:cb:d3:8e:70: 6b:cd:c3:40:ae:af:46:35:cf:e4:bb:e3:84:c6:ea: 49:d1:ec:9a:10:ff:71:eb:91:41:00:00:41:e6:28: f9:c7:b2:9e:0c:5d:c3:a8:a4:cf:45:d6:bb:89:07: 41:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:4D:CC:A6:D7:0C:19:9A:A1:24:BD:D5:6C:1F:0C:56:D7:FA:6E:11 X509v3 Authority Key Identifier: keyid:6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:75:40:6b:5e:97:94:c3:6f:c4:d0:a1:10:94:19:f8:5c:9c: 09:5b:a9:38:9c:5c:59:71:4d:01:70:b7:d0:3f:ae:dd:d8:24: 28:f7:09:c0:72:2a:5e:0a:c6:b3:bd:fd:98:16:95:7d:a8:04: 84:a4:6a:66:1d:bb:21:4c:8a:0d:fc:73:0c:ab:db:b2:ea:08: a9:50:8a:91:5f:91:fa:86:d4:da:f9:f8:03:c2:d7:e7:8d:ea: 52:c4:82:3e:cb:3a:b6:e1:37:7f:e8:c7:76:b2:a0:36:60:13: b4:da:6a:f9:59:7b:6b:76:97:9e:7c:5a:0d:be:8b:7c:88:61: d4:d1:10:15:94:37:4d:7d:67:7e:ae:e8:80:4e:9e:32:6b:25: 59:1b:43:6e:51:3c:67:76:9b:1f:78:0f:75:5d:05:c4:cd:a2: 11:31:a8:2d:ea:07:79:29:67:75:a0:d0:82:88:da:64:4e:c8: bc:0f:ba:74:79:de:00:5f:1e:1a:5b:dc:65:db:f7:72:81:3a: 0a:bd:eb:3b:f4:c8:9d:cf:ec:9b:91:51:14:04:51:35:e1:27: 71:f5:06:73:69:cf:56:ef:b6:ef:9a:13:b9:15:e4:f5:5f:2f: 9d:e7:65:07:7f:bb:2b:5f:06:3a:e8:07:52:8d:1a:bf:3e:98: c5:99:6d:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYah+13Wgb8uXs7kI7MGWC2eb/BkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkzMzIz MkVDMjE4NzAeFw0yNTExMDIxMzI2MDlaFw0yNTExMDUyMjE3MDlaMDMxMTAvBgNV BAMTKDNGNERDQ0E2RDcwQzE5OUFBMTI0QkRENTZDMUYwQzU2RDdGQTZFMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFc7kHHgjhfjNVJi/H5HgvVUyI fjnU73wc32aXQTgz0WVsvOMyN07oL5VWHonhU7g4YoLMXYxYk7ZE/EAsmMUWPErW ckq2y0RM1i3aOXT4Yh05makpRmu9ShoKqRev/+dZvdiGdwXSGRaYh4Y/agBnTQw0 QnECITzJWlwmwngUHsQKIsgKLz2jcpG0odRwHNY1N2VKHRFE45YbOyLccEB5QM+c JBitm++95pSKE+j0W15XXfEkIhHeHnupSvphgL7uVQMUTDC7ziRjpC6Fy9OOcGvN w0Cur0Y1z+S744TG6knR7JoQ/3HrkUEAAEHmKPnHsp4MXcOopM9F1ruJB0HRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP03MptcMGZqhJL3VbB8MVtf6bhEwHwYDVR0j BBgwFoAUb7Ta52sSygDgc0Sk3S+TMjLsIYcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmQ3MDM0Ni01YmRmLTQ5NjEtYTc0Zi01NWFlODU1NjcyYTEvMC82RkI0REFFNzZC MTJDQTAwRTA3MzQ0QTRERDJGOTMzMjMyRUMyMTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkzMzIzMkVD MjE4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkNzAzNDYtNWJkZi00OTYxLWE3 NGYtNTVhZTg1NTY3MmExLzAvNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkz MzIzMkVDMjE4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJ1QGtel5TDb8TQoRCUGfhcnAlbqTicXFlx TQFwt9A/rt3YJCj3CcByKl4KxrO9/ZgWlX2oBISkamYduyFMig38cwyr27LqCKlQ ipFfkfqG1Nr5+APC1+eN6lLEgj7LOrbhN3/ox3ayoDZgE7TaavlZe2t2l558Wg2+ i3yIYdTREBWUN019Z36u6IBOnjJrJVkbQ25RPGd2mx94D3VdBcTNohExqC3qB3kp Z3Wg0IKI2mROyLwPunR53gBfHhpb3GXb93KBOgq96zv0yJ3P7JuRURQEUTXhJ3H1 BnNpz1bvtu+aE7kV5PVfL53nZQd/uytfBjroB1KNGr8+mMWZbTA= -----END CERTIFICATE-----Generated at Tue Nov 4 08:11:30 2025 by rpki-client