$ rpki-client -vvf repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft File: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft (raw, json) Hash identifier: 0RnFJfclXpk+sabcQ6adZxSTFtWRU7Icy8lntEGQ+ug= Subject key identifier: DD:54:C8:09:13:37:B7:61:4C:0C:84:EC:7E:A4:CA:30:2D:7A:91:C2 Authority key identifier: 6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A Certificate issuer: /CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Certificate serial: 6B4D7DB3D46C01DA051BBB9A8B14419BF1721D97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft Manifest number: 0266 Signing time: Tue 04 Nov 2025 08:20:57 +0000 Manifest this update: Tue 04 Nov 2025 08:15:57 +0000 Manifest next update: Fri 07 Nov 2025 17:00:57 +0000 Files and hashes: 1: 3130332e3136322e3231382e302f32332d3233203d3e20313331373433.roa (hash: pFmd2Evf1JfCwSJUq1zKZ7DKdZUK7KTT5wZCiV9Wfcs=) 2: 3130332e3136322e3231382e302f32342d3234203d3e20313331373433.roa (hash: XhAJmRm6ZcTMjlVm4d1YrSxmeNRfzEm7fPRW8yuZLvM=) 3: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl (hash: cyK69yLgKXSfwgYgNkgd+ag6En4SSduJ6Sn2VaFbJKs=) 4: 3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa (hash: +5fEWevOuyJb1CnTGLGl6p7WxrkXj1d5/mnwXJQ5EjI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 17:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:4d:7d:b3:d4:6c:01:da:05:1b:bb:9a:8b:14:41:9b:f1:72:1d:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Validity Not Before: Nov 4 08:15:57 2025 GMT Not After : Nov 7 17:00:57 2025 GMT Subject: CN=DD54C8091337B7614C0C84EC7EA4CA302D7A91C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:54:8c:5d:d8:62:5e:82:f5:9d:67:6c:8a:ea: 7c:09:79:04:48:bb:bc:73:66:a7:d1:8a:dd:96:1e: 17:7d:c4:98:d7:49:2d:ef:71:1b:00:0a:db:47:3e: 84:5c:0c:e8:9e:e2:f4:6a:18:76:f3:52:5e:e0:e9: 0a:1f:d1:58:3a:c6:2c:3e:3b:4a:0e:6c:d8:6f:d1: 5f:72:3d:fc:b7:65:62:c2:5e:63:92:96:74:5d:52: 57:da:8d:33:93:ed:25:14:1e:f8:1c:1c:7c:2c:f0: e6:98:4c:71:d6:3b:8e:00:70:57:f2:1b:7b:64:36: 03:d4:f0:7e:09:14:d5:43:09:35:32:da:cf:50:d0: 99:18:02:07:06:d5:49:a8:c6:d1:92:8f:fc:c5:36: af:ea:2f:b6:a4:00:8e:31:3e:6e:3c:bb:b4:f5:15: 25:25:f5:34:66:7c:fc:9e:4a:e7:43:f8:f8:41:cf: ff:be:69:ab:ed:80:48:c4:14:f3:8e:35:7e:26:8e: f8:a3:1d:54:82:8c:1f:12:b0:db:b7:e3:57:98:f6: 73:46:a5:f8:f5:df:84:50:89:65:5a:f5:9a:6b:be: 3f:3d:cc:b4:9d:6d:9f:f9:d8:cd:ba:d9:84:55:f4: 2f:f6:93:89:71:e5:bb:0e:4c:11:80:ce:1d:97:44: 9a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:54:C8:09:13:37:B7:61:4C:0C:84:EC:7E:A4:CA:30:2D:7A:91:C2 X509v3 Authority Key Identifier: keyid:6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:cd:06:12:e5:18:3b:8d:cd:13:b1:4a:df:96:a6:b7:e1:2a: 07:37:ca:f0:d2:b9:f4:a2:17:73:9b:4b:ee:9b:83:18:3e:7b: b9:a5:cb:ab:af:80:6e:bd:bc:fd:a7:0d:b0:1e:90:e0:8d:f8: d3:6d:1c:75:1d:25:a7:d7:69:08:59:c7:c3:35:0d:a1:26:5b: b0:f5:5e:5c:20:f1:23:19:87:20:b4:3f:89:e4:14:0c:6f:58: 8c:16:bd:6b:f4:93:2a:c8:32:bf:da:46:1c:0e:b4:23:42:1d: 4f:d2:51:a7:69:b2:ab:01:7a:79:6d:ec:8a:9b:18:cd:1b:90: a6:e0:09:5c:01:c8:79:f2:ce:24:fe:8c:ab:e0:48:05:31:01: 81:c2:e5:ff:59:d8:3d:fd:15:4c:1d:2d:ab:d6:bb:e9:57:c2: 85:74:c6:26:e0:ae:24:7c:e6:6a:ae:d2:5c:f4:78:97:a4:cd: 04:92:24:f7:51:b9:fe:c4:4c:51:99:3c:d1:23:b1:f3:06:65: 14:f0:8f:94:44:87:89:96:eb:90:c3:ed:ac:5b:5e:67:5a:75: 2b:6b:83:23:1c:f7:7a:10:e5:6d:9a:56:c2:75:5f:10:0a:4c: 18:a3:3f:b4:c3:f2:64:34:31:a3:43:8c:8d:7d:13:6f:91:62: e7:74:43:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa019s9RsAdoFG7uaixRBm/FyHZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1 MUY5NTg3QTAeFw0yNTExMDQwODE1NTdaFw0yNTExMDcxNzAwNTdaMDMxMTAvBgNV BAMTKERENTRDODA5MTMzN0I3NjE0QzBDODRFQzdFQTRDQTMwMkQ3QTkxQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2VIxd2GJegvWdZ2yK6nwJeQRI u7xzZqfRit2WHhd9xJjXSS3vcRsACttHPoRcDOie4vRqGHbzUl7g6Qof0Vg6xiw+ O0oObNhv0V9yPfy3ZWLCXmOSlnRdUlfajTOT7SUUHvgcHHws8OaYTHHWO44AcFfy G3tkNgPU8H4JFNVDCTUy2s9Q0JkYAgcG1UmoxtGSj/zFNq/qL7akAI4xPm48u7T1 FSUl9TRmfPyeSudD+PhBz/++aavtgEjEFPOONX4mjvijHVSCjB8SsNu341eY9nNG pfj134RQiWVa9Zprvj89zLSdbZ/52M262YRV9C/2k4lx5bsOTBGAzh2XRJr1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3VTICRM3t2FMDITsfqTKMC16kcIwHwYDVR0j BBgwFoAUbN9c0f3f8sAkwTopJk1w+lH5WHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDI2NjUxMS02MzllLTRjMmItOTYzNC05Y2MxZTIyZmE3MDgvMC82Q0RGNUNEMUZE REZGMkMwMjRDMTNBMjkyNjRENzBGQTUxRjk1ODdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1MUY5 NTg3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QyNjY1MTEtNjM5ZS00YzJiLTk2 MzQtOWNjMWUyMmZhNzA4LzAvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcw RkE1MUY5NTg3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPNBhLlGDuNzROxSt+WprfhKgc3yvDSufSi F3ObS+6bgxg+e7mly6uvgG69vP2nDbAekOCN+NNtHHUdJafXaQhZx8M1DaEmW7D1 Xlwg8SMZhyC0P4nkFAxvWIwWvWv0kyrIMr/aRhwOtCNCHU/SUadpsqsBenlt7Iqb GM0bkKbgCVwByHnyziT+jKvgSAUxAYHC5f9Z2D39FUwdLavWu+lXwoV0xibgriR8 5mqu0lz0eJekzQSSJPdRuf7ETFGZPNEjsfMGZRTwj5REh4mW65DD7axbXmdadStr gyMc93oQ5W2aVsJ1XxAKTBijP7TD8mQ0MaNDjI19E2+RYud0Qz4= -----END CERTIFICATE-----Generated at Wed Nov 5 14:04:52 2025 by rpki-client