$ rpki-client -vvf repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft File: 6437999FD06F2C7F0F16F8160CD6145F775884A4.mft (raw, json) Hash identifier: eqCdW/bDXfsdrk7BMEIyKW2/oHx+9HP8rnv79eup6Os= Subject key identifier: 57:94:10:CD:00:57:38:10:EB:75:7F:FB:38:94:D5:18:9D:CC:41:33 Authority key identifier: 64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 Certificate issuer: /CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Certificate serial: 3D54539E6742D779CB8E9687867E73BCE79EB129 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft Manifest number: 0257 Signing time: Wed 05 Nov 2025 17:30:03 +0000 Manifest this update: Wed 05 Nov 2025 17:25:03 +0000 Manifest next update: Sat 08 Nov 2025 23:37:03 +0000 Files and hashes: 1: 3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa (hash: 6kBcLlz4I+EwiYd/zHv8YINF31MEROhjhbQ+A0qjPjE=) 2: 3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa (hash: b3wEoQmduATe2XsB1+5lzcIjLJ7k0E7+xb68g1ewVFQ=) 3: 6437999FD06F2C7F0F16F8160CD6145F775884A4.crl (hash: +c9A+fyw/fX0QZ1N93yT0uKS9IJOtPqmqY4axnET3FU=) 4: 3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa (hash: FtQ7YyJ/nXZZN06U1YB5sNs24X+l1RzMYb5gI1y1G9M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 23:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:54:53:9e:67:42:d7:79:cb:8e:96:87:86:7e:73:bc:e7:9e:b1:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Validity Not Before: Nov 5 17:25:03 2025 GMT Not After : Nov 8 23:37:03 2025 GMT Subject: CN=579410CD00573810EB757FFB3894D5189DCC4133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:42:4c:b7:80:e0:04:0e:f5:5e:36:29:e6:ec: 10:c1:74:a8:34:85:a2:ef:ec:04:31:c2:96:f2:1b: dc:d1:46:38:83:6c:19:ac:04:35:31:26:c1:2d:33: 77:81:55:47:e1:e4:bf:ce:25:25:8e:08:62:13:ad: 7d:db:6c:dd:67:5e:f6:7f:ab:1d:12:23:1e:d9:2d: 07:14:10:7d:ee:53:54:08:e7:f0:b5:fa:ce:88:d8: f2:8c:66:f0:53:c1:e4:2a:34:33:b0:bb:7c:68:53: a3:b3:dd:c8:c9:f2:44:73:02:84:25:9e:3f:a3:4d: 18:a7:4b:d1:99:e6:7b:ae:97:3f:9d:99:b0:81:c9: ec:4f:d1:4f:d4:ad:89:4a:a6:c0:66:8a:a8:a5:5b: 21:a4:74:e8:58:77:4f:10:85:3d:1f:d8:5e:ec:dc: 81:4d:da:60:28:e1:74:b9:9d:00:dd:e6:16:44:84: e6:45:f7:5e:b8:cc:78:2e:82:82:2d:3a:3b:9d:17: 8c:ab:d5:3a:bd:c9:48:68:11:2b:40:76:41:3b:ab: 4a:97:09:07:78:ed:27:8b:00:b5:1c:cb:70:31:c5: 51:dc:c2:af:bb:75:3a:53:09:1c:e0:17:d5:ef:0e: 1c:de:ab:00:8e:26:4a:6b:ce:a9:23:f7:f9:d8:f6: 84:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:94:10:CD:00:57:38:10:EB:75:7F:FB:38:94:D5:18:9D:CC:41:33 X509v3 Authority Key Identifier: keyid:64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:b2:e1:26:34:4a:f0:f5:78:06:8e:9b:d3:af:5a:fb:10:59: 52:02:67:55:c7:42:08:26:9d:be:4f:00:d0:36:a3:30:68:e9: d6:d9:d8:f6:d7:c5:2b:0c:70:b4:07:42:fe:99:a4:17:ae:45: ae:a2:98:13:37:21:8c:18:6a:79:88:45:3a:2a:b9:87:e7:ba: e5:e0:1d:ce:35:c1:a4:12:5e:52:ef:92:76:e3:7b:f0:bd:5a: 96:3a:e4:06:ca:da:0f:a0:f5:9b:ec:15:5e:52:0e:71:36:f5: f5:cd:22:a6:02:ca:4e:5e:32:c9:6f:61:72:ea:a9:40:72:b7: f8:7f:e1:60:82:80:83:22:99:dd:0d:c1:9d:02:e6:43:75:c9: 5b:36:d0:64:d8:09:64:c5:b7:f0:68:6b:05:18:1e:63:78:3e: 21:5f:f8:a7:75:1c:f2:af:b9:d9:1f:ec:87:b1:d1:bd:2f:d3: cd:fd:fe:07:aa:fd:d1:46:fa:c3:c2:49:d8:1e:24:ed:0f:10: 71:b9:0c:63:a7:2d:2f:21:e7:7a:28:ca:ad:ba:30:f9:36:df: 69:66:00:b1:10:aa:03:fb:09:59:ca:4c:6b:98:a4:b5:9f:ca: 0a:76:8f:ed:25:7b:4d:1c:09:00:9c:2d:5d:f1:45:43:5c:b7: d9:f8:15:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPVRTnmdC13nLjpaHhn5zvOeesSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3 NzU4ODRBNDAeFw0yNTExMDUxNzI1MDNaFw0yNTExMDgyMzM3MDNaMDMxMTAvBgNV BAMTKDU3OTQxMENEMDA1NzM4MTBFQjc1N0ZGQjM4OTRENTE4OURDQzQxMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrQky3gOAEDvVeNinm7BDBdKg0 haLv7AQxwpbyG9zRRjiDbBmsBDUxJsEtM3eBVUfh5L/OJSWOCGITrX3bbN1nXvZ/ qx0SIx7ZLQcUEH3uU1QI5/C1+s6I2PKMZvBTweQqNDOwu3xoU6Oz3cjJ8kRzAoQl nj+jTRinS9GZ5nuulz+dmbCByexP0U/UrYlKpsBmiqilWyGkdOhYd08QhT0f2F7s 3IFN2mAo4XS5nQDd5hZEhOZF9164zHgugoItOjudF4yr1Tq9yUhoEStAdkE7q0qX CQd47SeLALUcy3AxxVHcwq+7dTpTCRzgF9XvDhzeqwCOJkprzqkj9/nY9oS3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV5QQzQBXOBDrdX/7OJTVGJ3MQTMwHwYDVR0j BBgwFoAUZDeZn9BvLH8PFvgWDNYUX3dYhKQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzZmZGM2MC04MDIzLTQwY2QtYWFhNC1jZDZlZDIyYzRkNDUvMC82NDM3OTk5RkQw NkYyQzdGMEYxNkY4MTYwQ0Q2MTQ1Rjc3NTg4NEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3NzU4 ODRBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc2ZmRjNjAtODAyMy00MGNkLWFh YTQtY2Q2ZWQyMmM0ZDQ1LzAvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0 NUY3NzU4ODRBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKey4SY0SvD1eAaOm9OvWvsQWVICZ1XHQggm nb5PANA2ozBo6dbZ2PbXxSsMcLQHQv6ZpBeuRa6imBM3IYwYanmIRToquYfnuuXg Hc41waQSXlLvknbje/C9WpY65AbK2g+g9ZvsFV5SDnE29fXNIqYCyk5eMslvYXLq qUByt/h/4WCCgIMimd0NwZ0C5kN1yVs20GTYCWTFt/BoawUYHmN4PiFf+Kd1HPKv udkf7Iex0b0v0839/geq/dFG+sPCSdgeJO0PEHG5DGOnLS8h53ooyq26MPk232lm ALEQqgP7CVnKTGuYpLWfygp2j+0le00cCQCcLV3xRUNct9n4FdM= -----END CERTIFICATE-----Generated at Wed Nov 5 20:49:05 2025 by rpki-client