$ rpki-client -vvf repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft File: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft (raw, json) Hash identifier: d3XxGAHy2af+vS5bfwoePjDqDNe5zh3bySY1qTNpy2U= Subject key identifier: 33:98:05:4C:51:94:7D:79:A0:12:36:77:17:C4:12:37:C8:88:F4:1C Authority key identifier: 62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 Certificate issuer: /CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Certificate serial: 3B664C6F431ABB5852920DE9E43DD5A2ED1CC30A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft Manifest number: 9C Signing time: Sun 02 Nov 2025 16:21:21 +0000 Manifest this update: Sun 02 Nov 2025 16:16:21 +0000 Manifest next update: Wed 05 Nov 2025 23:12:21 +0000 Files and hashes: 1: 3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa (hash: lqWm7H1VLaNogQYDvPWFxyEVAtvNrhxj3L3hhsj87j0=) 2: 3136302e3139312e3138312e302f32342d3234203d3e20313533313530.roa (hash: R1Eo64irF2fqBU24QMOkIR4K/Db3F6prGasQKdzareI=) 3: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl (hash: jZyyHlqriR2iZqz1DzH+rOx8ka7xUi2yTHRZ+pJEMqg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:12:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:66:4c:6f:43:1a:bb:58:52:92:0d:e9:e4:3d:d5:a2:ed:1c:c3:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Validity Not Before: Nov 2 16:16:21 2025 GMT Not After : Nov 5 23:12:21 2025 GMT Subject: CN=3398054C51947D79A012367717C41237C888F41C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bf:a4:83:ae:34:f8:fe:da:1d:10:22:85:7c: 32:b8:af:df:dd:44:41:d9:ee:1e:f9:4c:43:f2:20: 27:3c:68:3f:97:f1:2e:e3:fd:f2:1f:a9:8c:89:90: 38:74:73:d2:78:e7:cb:bc:f5:80:c2:32:31:72:e5: e0:eb:cb:d8:b0:3c:c8:f7:d8:29:e0:79:4b:67:92: 4c:93:5c:c3:ad:93:4f:9a:a9:90:2e:83:f9:76:8c: 5e:b0:1f:97:91:81:12:f9:30:d0:50:cf:90:f1:18: ef:c0:16:ea:1b:9e:e1:ac:2f:28:d3:92:45:bb:68: 05:f2:11:0e:79:9e:20:25:6e:8f:a4:7f:88:13:35: 9a:8e:58:6f:22:1a:a9:0f:4d:2b:14:89:06:b4:c2: b3:96:d6:77:44:d7:b3:b9:37:de:1b:a7:94:28:50: 47:0f:c4:0a:93:ac:0e:e2:df:02:fe:a1:40:a5:74: 5a:93:8e:e1:4a:94:40:ec:34:73:78:4d:50:7e:02: a0:ee:f0:b6:b1:f8:87:83:81:9f:5d:d1:38:74:32: 4c:5c:96:68:71:b9:ea:a3:ce:cb:33:eb:df:97:e9: 0d:ca:5c:ec:9d:49:9d:49:02:f9:4b:de:ee:ee:bd: 23:63:bb:4a:fb:85:5e:69:d4:58:d9:24:8f:2e:0b: 2d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:98:05:4C:51:94:7D:79:A0:12:36:77:17:C4:12:37:C8:88:F4:1C X509v3 Authority Key Identifier: keyid:62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:72:cb:ef:f0:ae:cc:24:b2:65:d0:c1:44:c8:2e:99:3f:3f: 9e:de:f3:09:d6:e6:f5:a6:1b:5e:d7:09:8e:73:c5:ab:37:88: 97:24:bf:11:82:19:6c:a0:f5:03:72:3a:26:c9:d1:f9:8a:f8: be:23:f7:64:cc:c6:dd:72:0b:35:aa:a9:f9:e3:3e:f3:f0:92: d2:02:44:0e:ae:a5:78:6d:0b:90:42:7b:ed:ed:7c:fd:fd:f1: 70:69:0f:08:04:f0:92:41:e0:6c:13:03:b8:6f:94:5f:71:e9: 59:d6:8f:0f:72:8e:59:15:91:25:76:60:62:2b:b3:de:54:1d: fe:ab:f0:ef:d5:34:4e:db:5e:e7:ab:e5:36:3a:96:c5:15:d3: ab:41:f3:37:80:73:73:d6:b7:f4:cb:3a:ba:83:01:11:b6:07: ee:55:7a:01:8e:b1:28:a8:15:1f:88:12:2d:98:1b:4e:7c:30: 15:a3:96:9f:38:3e:e8:1a:6d:65:2a:01:38:71:72:d7:13:bb: 7f:90:23:47:1e:80:2a:4d:ad:46:95:9e:b8:00:32:5f:c8:ff: 08:9f:16:9b:fb:88:64:05:e7:a8:04:ab:15:69:4f:f0:3d:37: 21:ff:ff:76:ce:6f:1b:d2:9e:a8:02:2c:59:d1:39:a2:d8:5a: 62:3e:71:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO2ZMb0Mau1hSkg3p5D3Vou0cwwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAw Qjk0RjhBNDAeFw0yNTExMDIxNjE2MjFaFw0yNTExMDUyMzEyMjFaMDMxMTAvBgNV BAMTKDMzOTgwNTRDNTE5NDdENzlBMDEyMzY3NzE3QzQxMjM3Qzg4OEY0MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBv6SDrjT4/todECKFfDK4r9/d REHZ7h75TEPyICc8aD+X8S7j/fIfqYyJkDh0c9J458u89YDCMjFy5eDry9iwPMj3 2CngeUtnkkyTXMOtk0+aqZAug/l2jF6wH5eRgRL5MNBQz5DxGO/AFuobnuGsLyjT kkW7aAXyEQ55niAlbo+kf4gTNZqOWG8iGqkPTSsUiQa0wrOW1ndE17O5N94bp5Qo UEcPxAqTrA7i3wL+oUCldFqTjuFKlEDsNHN4TVB+AqDu8Lax+IeDgZ9d0Th0Mkxc lmhxueqjzssz69+X6Q3KXOydSZ1JAvlL3u7uvSNju0r7hV5p1FjZJI8uCy1FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM5gFTFGUfXmgEjZ3F8QSN8iI9BwwHwYDVR0j BBgwFoAUYkfRqvOxW1DTpz5E5Z4sAAuU+KQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTk2MTJhMi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMC82MjQ3RDFBQUYz QjE1QjUwRDNBNzNFNDRFNTlFMkMwMDBCOTRGOEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAwQjk0 RjhBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzAvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJD MDAwQjk0RjhBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALtyy+/wrswksmXQwUTILpk/P57e8wnW5vWm G17XCY5zxas3iJckvxGCGWyg9QNyOibJ0fmK+L4j92TMxt1yCzWqqfnjPvPwktIC RA6upXhtC5BCe+3tfP398XBpDwgE8JJB4GwTA7hvlF9x6VnWjw9yjlkVkSV2YGIr s95UHf6r8O/VNE7bXuer5TY6lsUV06tB8zeAc3PWt/TLOrqDARG2B+5VegGOsSio FR+IEi2YG058MBWjlp84PugabWUqAThxctcTu3+QI0cegCpNrUaVnrgAMl/I/wif Fpv7iGQF56gEqxVpT/A9NyH//3bObxvSnqgCLFnROaLYWmI+cWY= -----END CERTIFICATE-----Generated at Tue Nov 4 16:38:06 2025 by rpki-client