$ rpki-client -vvf repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft File: 6862B9697E607C0C4861E56917A18D87AC33A721.mft (raw, json) Hash identifier: /r0RytTIo7WVzJaMRMfvrZGcyaP6yNZGQtF3TT2ZRMs= Subject key identifier: 63:DD:13:66:36:6B:83:9B:65:E7:25:A3:4A:22:37:E0:77:81:18:C5 Authority key identifier: 68:62:B9:69:7E:60:7C:0C:48:61:E5:69:17:A1:8D:87:AC:33:A7:21 Certificate issuer: /CN=6862B9697E607C0C4861E56917A18D87AC33A721 Certificate serial: 5749D888DF04858C30295FAC6C20B1EE86E81CBC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer Subject info access: rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft Manifest number: 01D1 Signing time: Tue 04 Nov 2025 06:22:13 +0000 Manifest this update: Tue 04 Nov 2025 06:17:13 +0000 Manifest next update: Fri 07 Nov 2025 07:34:13 +0000 Files and hashes: 1: 3130332e36302e3233322e302f32342d3234203d3e20313530353034.roa (hash: mAaFNkz4VS/8CUTW6nLj8oCW6VaOOiFXLJeViPHtvE4=) 2: 6862B9697E607C0C4861E56917A18D87AC33A721.crl (hash: dcNqZ/AE5BdMrnvFNas21J6IdRF1AN6k8xJy3uDIaik=) 3: 3130332e36302e3233332e302f32342d3234203d3e20313530353034.roa (hash: dF+8Wtg6B9yArRChkZjRjTgsTdgcRkNXBMlkqZFq73s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.crl rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:34:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:49:d8:88:df:04:85:8c:30:29:5f:ac:6c:20:b1:ee:86:e8:1c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6862B9697E607C0C4861E56917A18D87AC33A721 Validity Not Before: Nov 4 06:17:13 2025 GMT Not After : Nov 7 07:34:13 2025 GMT Subject: CN=63DD1366366B839B65E725A34A2237E0778118C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7c:ad:59:c2:09:b4:a1:3e:b5:97:fb:8f:0d: 89:03:35:58:45:b7:1f:1b:33:92:05:1c:e7:0a:5d: 9e:3b:42:99:e8:45:cc:1c:d3:95:fd:79:89:dc:04: fa:f6:a1:c2:b8:55:90:f3:f8:82:63:9d:32:79:79: b1:56:48:d6:27:cf:2d:e2:a9:50:c1:22:7f:30:54: 6c:7b:3d:45:78:9a:b0:ea:59:32:43:98:56:ff:15: 01:eb:5a:ce:4a:a9:4e:c9:8c:27:34:86:c4:3f:7a: 87:49:fe:28:9d:00:3d:c7:c2:f8:f2:78:2e:1f:8f: e6:e4:52:de:72:4e:b5:7b:4b:6a:4d:68:49:55:b5: 35:1c:df:b0:36:f8:fa:4a:e4:46:ca:e9:7b:79:72: 73:e1:6b:73:42:4a:46:5b:bc:47:2d:ec:5d:8a:90: 76:3b:f4:6b:96:64:8d:aa:17:a8:13:78:c8:1c:3b: 1b:5d:a4:77:eb:3e:7f:ec:2c:06:04:1c:d8:49:81: bf:97:7f:df:89:de:32:05:7a:5b:6d:85:b9:51:b1: 6f:f1:fb:f5:bc:8e:e4:69:20:78:6f:77:a3:94:01: 87:53:a9:8d:20:b6:ec:e4:47:0f:a2:84:84:d1:b9: 95:a8:de:cd:0a:5a:a8:7c:2f:81:c7:00:9c:01:bb: ae:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DD:13:66:36:6B:83:9B:65:E7:25:A3:4A:22:37:E0:77:81:18:C5 X509v3 Authority Key Identifier: keyid:68:62:B9:69:7E:60:7C:0C:48:61:E5:69:17:A1:8D:87:AC:33:A7:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:a4:3e:03:02:37:03:59:2f:61:fc:36:6f:a5:93:f7:f8:fd: cb:da:06:7e:35:f6:ef:3c:1e:b9:4d:85:07:f3:34:15:bd:20: eb:64:17:61:dc:64:d6:ae:25:a9:95:e5:c6:b6:bd:2c:d6:86: 76:7e:61:4f:1a:8b:3d:bb:78:56:1f:56:37:9b:1d:84:05:d8: 90:1e:31:7e:f9:af:c6:55:8b:ff:61:a7:16:8b:43:be:32:33: 1e:1d:b3:64:02:37:5a:87:8c:89:84:23:1a:64:72:e0:d5:14: 29:52:57:1a:6b:e1:a1:ea:4f:b9:7d:ef:16:4f:fe:d7:ea:5e: e0:8a:71:b0:ee:ca:59:1c:30:33:0b:b6:59:b7:6d:64:fb:1f: 9d:3b:24:5d:43:bf:89:26:2c:19:ae:63:42:37:2c:69:2c:ab: b2:92:2e:13:ba:88:a5:22:3d:49:dc:99:11:41:f4:24:77:7c: 92:9d:e8:3b:a7:9b:bf:7b:9a:18:25:42:00:02:c8:1d:bb:a7: 2d:0c:f4:2c:66:cf:b2:9f:36:41:16:bf:62:b0:f2:69:04:29: aa:21:f9:8b:12:43:06:9e:7c:3c:e2:ef:99:7a:3d:07:3b:df: c9:86:ec:75:d3:45:cf:6f:98:88:e0:13:44:21:4d:99:53:71: fd:81:78:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV0nYiN8EhYwwKV+sbCCx7oboHLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg2MkI5Njk3RTYwN0MwQzQ4NjFFNTY5MTdBMThEODdB QzMzQTcyMTAeFw0yNTExMDQwNjE3MTNaFw0yNTExMDcwNzM0MTNaMDMxMTAvBgNV BAMTKDYzREQxMzY2MzY2QjgzOUI2NUU3MjVBMzRBMjIzN0UwNzc4MTE4QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDifK1Zwgm0oT61l/uPDYkDNVhF tx8bM5IFHOcKXZ47QpnoRcwc05X9eYncBPr2ocK4VZDz+IJjnTJ5ebFWSNYnzy3i qVDBIn8wVGx7PUV4mrDqWTJDmFb/FQHrWs5KqU7JjCc0hsQ/eodJ/iidAD3Hwvjy eC4fj+bkUt5yTrV7S2pNaElVtTUc37A2+PpK5EbK6Xt5cnPha3NCSkZbvEct7F2K kHY79GuWZI2qF6gTeMgcOxtdpHfrPn/sLAYEHNhJgb+Xf9+J3jIFeltthblRsW/x +/W8juRpIHhvd6OUAYdTqY0gtuzkRw+ihITRuZWo3s0KWqh8L4HHAJwBu66bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY90TZjZrg5tl5yWjSiI34HeBGMUwHwYDVR0j BBgwFoAUaGK5aX5gfAxIYeVpF6GNh6wzpyEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjVlODhiZC03NWUyLTQ1ZGYtODg2Ny00NTQwMmZjN2M0YjEvMC82ODYyQjk2OTdF NjA3QzBDNDg2MUU1NjkxN0ExOEQ4N0FDMzNBNzIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg2MkI5Njk3RTYwN0MwQzQ4NjFFNTY5MTdBMThEODdBQzMz QTcyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI1ZTg4YmQtNzVlMi00NWRmLTg4 NjctNDU0MDJmYzdjNGIxLzAvNjg2MkI5Njk3RTYwN0MwQzQ4NjFFNTY5MTdBMThE ODdBQzMzQTcyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJWkPgMCNwNZL2H8Nm+lk/f4/cvaBn419u88 HrlNhQfzNBW9IOtkF2HcZNauJamV5ca2vSzWhnZ+YU8aiz27eFYfVjebHYQF2JAe MX75r8ZVi/9hpxaLQ74yMx4ds2QCN1qHjImEIxpkcuDVFClSVxpr4aHqT7l97xZP /tfqXuCKcbDuylkcMDMLtlm3bWT7H507JF1Dv4kmLBmuY0I3LGksq7KSLhO6iKUi PUncmRFB9CR3fJKd6Dunm797mhglQgACyB27py0M9Cxmz7KfNkEWv2Kw8mkEKaoh +YsSQwaefDzi75l6PQc738mG7HXTRc9vmIjgE0QhTZlTcf2BeNk= -----END CERTIFICATE-----Generated at Tue Nov 4 21:09:05 2025 by rpki-client