$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft File: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft (raw, json) Hash identifier: MTIttIp56ci2LyBdp6UtbAwHTeHlcRp/F/3WmmIXH9c= Subject key identifier: B9:24:1D:80:9C:BC:62:A2:B0:E9:25:FE:AF:9D:07:0C:D5:3F:DE:E2 Authority key identifier: 69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E Certificate issuer: /CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Certificate serial: 46A731052C419AC165FEE76552033EFE7975C9EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft Manifest number: 0213 Signing time: Tue 04 Nov 2025 16:20:06 +0000 Manifest this update: Tue 04 Nov 2025 16:15:06 +0000 Manifest next update: Fri 07 Nov 2025 18:22:06 +0000 Files and hashes: 1: 3130312e302e342e302f32322d3234203d3e203438343635.roa (hash: 0Vbzbdds4DlTIQ/frtEsWuiBQ6OCjLTHiqaNJsXbu/0=) 2: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl (hash: /SopdXbTnCZq0QU4mv/f6VLqujLbDtzcawvkZkL4lhE=) 3: 3130332e31322e32382e302f32322d3234203d3e203438343635.roa (hash: hq6fcTyLZ0Befnc7SCHGWV/VgoDOfnIfMb9/pRr7Usc=) 4: 3130332e31322e32382e302f32322d3234203d3e203535363730.roa (hash: 56/u0yMrkC94FdPOEf+mn1+2joJi+oVC5l6/K3alTgQ=) 5: 3130312e302e342e302f32322d3234203d3e203535363730.roa (hash: 7ECSmeZAaiWw7xemuyw220yGHio1fDg8eukqs4CuhkU=) 6: 323430303a666230303a3a2f33322d3438203d3e203535363730.roa (hash: FVA48wGL4/cskX5JvDPv5QyssORBEsld3N+rmhCU4Gc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 18:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:a7:31:05:2c:41:9a:c1:65:fe:e7:65:52:03:3e:fe:79:75:c9:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Validity Not Before: Nov 4 16:15:06 2025 GMT Not After : Nov 7 18:22:06 2025 GMT Subject: CN=B9241D809CBC62A2B0E925FEAF9D070CD53FDEE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f3:d1:41:2c:0f:8c:91:9e:eb:34:78:d0:7e: c8:76:fb:64:b9:af:77:cc:f0:fd:d3:c4:bc:e4:86: bf:46:8e:83:48:56:ed:be:2a:26:0a:4a:d1:5f:d4: 3c:65:0d:ff:fe:7b:ea:17:2f:17:ca:cb:67:51:b5: 89:88:47:1d:ec:b2:d1:ce:6e:4f:65:22:ac:9d:58: 35:40:a9:02:00:f1:11:8c:be:09:d3:13:55:8e:0b: ca:e6:11:8c:c7:aa:cf:10:35:0b:bb:4f:d9:55:f0: bf:de:85:59:ba:8e:4b:b3:6a:44:c4:d8:6a:5d:1a: 51:c9:2c:e3:cc:83:57:3b:8e:07:2e:9f:97:bc:c5: 18:d5:99:fe:0e:40:7a:a8:12:53:e8:70:c4:fb:9d: ef:de:75:af:44:5b:4d:0b:e6:5c:46:18:e4:d4:ab: 43:f0:0a:22:bd:bf:a8:50:38:1d:cb:a4:e7:3c:6f: ef:93:36:cf:72:18:57:28:dd:73:29:a9:58:36:9c: 44:56:68:a1:9b:ff:63:b5:f8:7b:a7:ba:8c:90:db: 4a:9b:cb:1f:0e:ed:e4:53:bb:e1:e2:ca:84:45:94: a7:02:c0:9f:c9:6a:54:22:7d:a6:4b:ea:c9:36:f2: 3a:46:84:c3:3b:ba:4f:67:46:ec:c8:ff:78:4d:86: 14:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:24:1D:80:9C:BC:62:A2:B0:E9:25:FE:AF:9D:07:0C:D5:3F:DE:E2 X509v3 Authority Key Identifier: keyid:69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:58:88:b1:e4:f8:45:6c:01:59:87:3b:2f:b4:18:ec:7c:a1: 18:ca:17:0a:ce:4a:9d:71:2c:3a:f9:cd:ee:5c:10:1e:3c:74: ed:a4:7a:3f:7d:13:50:f8:74:c6:cb:28:66:fd:2b:04:d5:1f: 83:2a:83:19:d9:d6:a0:5b:4d:8c:23:83:2d:d8:45:2c:07:e2: 6d:eb:c4:1f:2f:6b:de:b1:90:23:c7:33:64:0e:a8:93:f4:c7: 6f:d3:4d:a5:4f:96:94:d7:e2:86:96:d5:d9:7e:56:6c:dd:a3: 4d:3d:c7:80:11:7c:d4:76:5c:bd:34:f1:db:74:e3:20:c2:42: d2:47:b1:08:8b:06:c0:00:6a:c6:8d:af:39:81:35:12:55:2d: 7e:1d:b5:b3:89:d4:7d:b9:8b:79:46:dd:c6:be:27:30:51:6b: a1:7e:ad:eb:bf:7d:02:36:10:37:1d:96:f9:71:0f:3f:5a:68: ea:1f:f9:a1:ce:41:26:e2:c0:25:ad:13:54:f9:b8:eb:50:56: 33:8c:ae:51:57:b5:c1:16:26:40:06:96:63:e3:ef:48:d2:15: 5f:a1:57:3a:0f:2b:b4:ff:54:71:96:93:f4:16:16:5d:a0:37: db:06:67:c8:4d:0f:8d:17:08:80:82:b4:93:c0:9a:4d:1c:d0: 50:a1:fd:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURqcxBSxBmsFl/udlUgM+/nl1yewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVG RTNFN0MzRTAeFw0yNTExMDQxNjE1MDZaFw0yNTExMDcxODIyMDZaMDMxMTAvBgNV BAMTKEI5MjQxRDgwOUNCQzYyQTJCMEU5MjVGRUFGOUQwNzBDRDUzRkRFRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM89FBLA+MkZ7rNHjQfsh2+2S5 r3fM8P3TxLzkhr9GjoNIVu2+KiYKStFf1DxlDf/+e+oXLxfKy2dRtYmIRx3sstHO bk9lIqydWDVAqQIA8RGMvgnTE1WOC8rmEYzHqs8QNQu7T9lV8L/ehVm6jkuzakTE 2GpdGlHJLOPMg1c7jgcun5e8xRjVmf4OQHqoElPocMT7ne/eda9EW00L5lxGGOTU q0PwCiK9v6hQOB3LpOc8b++TNs9yGFco3XMpqVg2nERWaKGb/2O1+HunuoyQ20qb yx8O7eRTu+HiyoRFlKcCwJ/JalQifaZL6sk28jpGhMM7uk9nRuzI/3hNhhSXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuSQdgJy8YqKw6SX+r50HDNU/3uIwHwYDVR0j BBgwFoAUaWcBLvykNpjo4bckuR38Xv4+fD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDZlYTdmYS05NGQyLTRkZGMtYThlNi01ZGM2MjZjMjkxZDQvMC82OTY3MDEyRUZD QTQzNjk4RThFMUI3MjRCOTFERkM1RUZFM0U3QzNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVGRTNF N0MzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4 ZTYtNWRjNjI2YzI5MWQ0LzAvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZD NUVGRTNFN0MzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1YiLHk+EVsAVmHOy+0GOx8oRjKFwrOSp1x LDr5ze5cEB48dO2kej99E1D4dMbLKGb9KwTVH4MqgxnZ1qBbTYwjgy3YRSwH4m3r xB8va96xkCPHM2QOqJP0x2/TTaVPlpTX4oaW1dl+Vmzdo009x4ARfNR2XL008dt0 4yDCQtJHsQiLBsAAasaNrzmBNRJVLX4dtbOJ1H25i3lG3ca+JzBRa6F+reu/fQI2 EDcdlvlxDz9aaOof+aHOQSbiwCWtE1T5uOtQVjOMrlFXtcEWJkAGlmPj70jSFV+h VzoPK7T/VHGWk/QWFl2gN9sGZ8hND40XCICCtJPAmk0c0FCh/Ss= -----END CERTIFICATE-----Generated at Wed Nov 5 02:55:55 2025 by rpki-client