$ rpki-client -vvf repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft File: 6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft (raw, json) Hash identifier: B9h2feLmwvSMAnZ9s0xXGCASgonoErfZDgcau2PLmmU= Subject key identifier: 1B:51:B8:74:C5:EC:8F:16:58:54:2C:29:2F:0B:BF:CA:78:05:23:F2 Authority key identifier: 6B:3B:A2:8F:EC:36:89:C8:F8:8C:E4:13:7A:3D:64:5A:51:FE:6D:32 Certificate issuer: /CN=6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32 Certificate serial: 33E4178136F11EC86CC21527A6895693E4F283C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft Manifest number: 0140 Signing time: Tue 04 Nov 2025 05:02:19 +0000 Manifest this update: Tue 04 Nov 2025 04:57:19 +0000 Manifest next update: Fri 07 Nov 2025 06:32:19 +0000 Files and hashes: 1: 3130332e3234352e3136382e302f32342d3234203d3e20313531353333.roa (hash: kI4GK1miuL8zvjM4rLASPraKVyslKl4McqJeefiMXSg=) 2: 3130332e3234352e3136392e302f32342d3234203d3e20313531353333.roa (hash: F8gVzqK4Hbz0Z6s+Ltl0BOnl1HF8YZ7ceJ/yBja8KLc=) 3: 6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl (hash: HZuk6u78vXaX5yVa0WnfqYnAkW+VXJGR9k3flhEHhZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 06:32:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:e4:17:81:36:f1:1e:c8:6c:c2:15:27:a6:89:56:93:e4:f2:83:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32 Validity Not Before: Nov 4 04:57:19 2025 GMT Not After : Nov 7 06:32:19 2025 GMT Subject: CN=1B51B874C5EC8F1658542C292F0BBFCA780523F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:de:eb:6b:bc:63:e2:c6:eb:10:48:97:e3:74: 17:d3:b8:e4:ba:1b:03:e2:3c:db:fe:cf:a4:c9:c4: 64:00:c8:41:c0:5d:bb:9a:55:b2:b2:5c:be:4f:f5: 71:61:be:6e:bb:95:92:6e:ef:69:1d:ff:d4:cd:25: fb:1a:90:3b:eb:44:95:0f:8d:37:54:21:1b:20:12: 92:97:76:cb:61:7e:87:cb:f8:d9:1e:3f:a9:9a:30: 6c:27:f7:2a:59:e1:a5:95:23:59:29:b1:c1:af:0b: 04:45:a7:50:59:11:e7:ae:71:30:62:7f:87:d0:c6: 29:9c:0c:83:c6:02:84:33:8e:7e:4a:ee:4f:9a:1a: 8e:f3:45:c1:cb:da:2c:74:6a:90:c2:b6:e5:b8:50: 76:97:ba:6f:dc:5a:e1:ce:e3:e7:22:bc:78:81:af: 2d:28:fd:31:c9:58:0e:93:34:95:54:13:ef:af:d0: ef:27:66:4b:9b:e6:6c:bb:12:76:5e:69:55:0d:f9: cd:70:08:51:a3:e6:f6:28:94:ce:df:7e:2e:cf:b0: 85:ef:a9:31:a6:3f:9f:75:b4:3b:66:75:93:ed:87: 13:b7:8c:f2:b4:e8:49:6c:da:43:2c:9c:74:d0:31: 33:ee:57:34:d4:41:ad:4c:e6:9b:36:a7:90:02:29: 5f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:51:B8:74:C5:EC:8F:16:58:54:2C:29:2F:0B:BF:CA:78:05:23:F2 X509v3 Authority Key Identifier: keyid:6B:3B:A2:8F:EC:36:89:C8:F8:8C:E4:13:7A:3D:64:5A:51:FE:6D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:7c:3a:30:74:39:65:c1:f7:b2:13:e7:0d:59:d6:08:0a:6f: bf:27:ee:fd:62:d8:a0:17:59:16:5c:60:b1:78:b9:d0:b4:8f: 4c:22:46:23:83:9b:de:e8:70:d7:73:ab:de:d0:8c:57:62:e5: 83:eb:1c:7c:22:d1:11:db:d5:3c:e6:f9:fe:97:bc:2e:1d:19: 68:af:3f:42:da:96:22:b1:5f:ca:a8:8c:a2:73:c1:3f:a8:88: ed:8e:52:e0:45:4d:52:1b:6d:b7:9f:45:c3:41:f3:e6:b8:3a: 9a:db:19:c3:39:86:64:22:4b:c7:95:52:f8:ab:f8:82:62:08: 49:f6:f5:99:fb:52:f9:a0:e7:75:c8:91:68:41:da:2c:0a:3a: 12:c0:04:62:57:fa:c5:50:6d:58:2c:03:6c:fe:3e:69:a1:4f: 5f:40:08:4f:66:0f:02:ed:ec:58:99:00:b6:59:a3:5e:5c:72: 74:95:09:69:f8:1e:3a:ba:02:8b:b1:66:bf:e1:91:15:dc:8d: 1d:17:de:54:89:fc:48:0b:10:f1:a6:20:cb:9e:6b:93:17:db: 0c:c1:a4:d5:93:e2:74:c4:e2:55:cc:65:fb:0b:83:8e:22:00: aa:90:e4:6e:3a:d8:4c:a6:10:90:34:b3:05:b0:cd:ad:15:94: 1b:2d:b0:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM+QXgTbxHshswhUnpolWk+Tyg8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzQkEyOEZFQzM2ODlDOEY4OENFNDEzN0EzRDY0NUE1 MUZFNkQzMjAeFw0yNTExMDQwNDU3MTlaFw0yNTExMDcwNjMyMTlaMDMxMTAvBgNV BAMTKDFCNTFCODc0QzVFQzhGMTY1ODU0MkMyOTJGMEJCRkNBNzgwNTIzRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT3utrvGPixusQSJfjdBfTuOS6 GwPiPNv+z6TJxGQAyEHAXbuaVbKyXL5P9XFhvm67lZJu72kd/9TNJfsakDvrRJUP jTdUIRsgEpKXdsthfofL+NkeP6maMGwn9ypZ4aWVI1kpscGvCwRFp1BZEeeucTBi f4fQximcDIPGAoQzjn5K7k+aGo7zRcHL2ix0apDCtuW4UHaXum/cWuHO4+civHiB ry0o/THJWA6TNJVUE++v0O8nZkub5my7EnZeaVUN+c1wCFGj5vYolM7ffi7PsIXv qTGmP591tDtmdZPthxO3jPK06Els2kMsnHTQMTPuVzTUQa1M5ps2p5ACKV9fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG1G4dMXsjxZYVCwpLwu/yngFI/IwHwYDVR0j BBgwFoAUazuij+w2icj4jOQTej1kWlH+bTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTFkZWI5My1jMTkwLTQ2ZWUtYmE4My0yZDkxOTMwYTQzOTUvMC82QjNCQTI4RkVD MzY4OUM4Rjg4Q0U0MTM3QTNENjQ1QTUxRkU2RDMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkIzQkEyOEZFQzM2ODlDOEY4OENFNDEzN0EzRDY0NUE1MUZF NkQzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2UxZGViOTMtYzE5MC00NmVlLWJh ODMtMmQ5MTkzMGE0Mzk1LzAvNkIzQkEyOEZFQzM2ODlDOEY4OENFNDEzN0EzRDY0 NUE1MUZFNkQzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACF8OjB0OWXB97IT5w1Z1ggKb78n7v1i2KAX WRZcYLF4udC0j0wiRiODm97ocNdzq97QjFdi5YPrHHwi0RHb1Tzm+f6XvC4dGWiv P0LaliKxX8qojKJzwT+oiO2OUuBFTVIbbbefRcNB8+a4OprbGcM5hmQiS8eVUvir +IJiCEn29Zn7Uvmg53XIkWhB2iwKOhLABGJX+sVQbVgsA2z+PmmhT19ACE9mDwLt 7FiZALZZo15ccnSVCWn4Hjq6AouxZr/hkRXcjR0X3lSJ/EgLEPGmIMuea5MX2wzB pNWT4nTE4lXMZfsLg44iAKqQ5G462EymEJA0swWwza0VlBstsEM= -----END CERTIFICATE-----Generated at Tue Nov 4 08:10:17 2025 by rpki-client