$ rpki-client -vvf repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft File: 06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft (raw, json) Hash identifier: 7GU+BBf5dEHbaXRkpWLNYDYSRNvezVd2L2pOH7zoC0E= Subject key identifier: C7:B1:1C:80:03:11:48:EC:1F:47:73:52:CE:42:58:C8:60:38:35:D2 Authority key identifier: 06:A0:35:96:D6:FA:10:E3:F5:08:10:F5:86:E3:F6:3A:EE:96:F9:8E Certificate issuer: /CN=06A03596D6FA10E3F50810F586E3F63AEE96F98E Certificate serial: 0AAD7A8DAA2F452D7C590FD85A7CA2083C0BBE9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft Manifest number: 0102 Signing time: Mon 03 Nov 2025 03:42:04 +0000 Manifest this update: Mon 03 Nov 2025 03:37:04 +0000 Manifest next update: Thu 06 Nov 2025 11:47:04 +0000 Files and hashes: 1: 3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa (hash: c4zKb4BC8Sb0059Tmuc8jeyTEWO85EjEdef3ktgt6EU=) 2: 06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl (hash: JG+3SsHJY++ln7o9ZiTNc9IIwaTca2LUc5HA4zTpIoA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 11:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ad:7a:8d:aa:2f:45:2d:7c:59:0f:d8:5a:7c:a2:08:3c:0b:be:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06A03596D6FA10E3F50810F586E3F63AEE96F98E Validity Not Before: Nov 3 03:37:04 2025 GMT Not After : Nov 6 11:47:04 2025 GMT Subject: CN=C7B11C80031148EC1F477352CE4258C8603835D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b7:47:f9:0a:d2:47:0b:52:4e:a2:54:27:6d: 36:35:31:6c:23:57:c7:f3:26:50:34:bf:7a:e4:9c: 98:85:65:d2:8c:38:1f:39:d4:ea:ed:de:45:52:79: 9f:59:ae:6e:fc:43:40:0e:28:d9:d9:b0:2a:9b:ef: bc:65:1b:9d:9e:69:05:be:ea:31:98:ff:26:93:f7: 51:d5:1f:fd:4e:19:ac:86:9a:bf:9c:24:79:d0:08: 97:03:4c:f4:79:29:f3:57:0a:fb:5d:1c:b0:97:62: 9b:9a:4d:4f:c7:7f:9a:46:a7:e4:38:9e:2f:5d:5a: fa:2e:ef:f3:ec:2d:0b:6e:48:d2:d8:54:1b:8d:c0: 7e:a3:a0:8a:0a:ba:09:e4:49:99:8c:5e:3a:5d:44: 02:de:8d:de:f0:c6:ba:8f:db:44:6e:0c:0a:6b:97: e0:91:0f:3e:db:84:04:ef:48:a3:c3:bb:c8:e1:50: 25:02:a7:7b:59:f2:5e:46:1a:ab:68:55:ba:ed:5d: a3:92:60:62:f1:0e:1f:bd:01:dc:7d:e3:07:34:c6: 45:81:aa:a2:9c:6a:e9:17:c5:5b:d7:db:ad:fc:c4: 38:0c:92:3a:f2:d8:82:83:04:40:d0:7c:3c:51:56: 55:8c:05:3a:e0:63:fe:01:c8:fb:e8:73:7a:c2:37: fa:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B1:1C:80:03:11:48:EC:1F:47:73:52:CE:42:58:C8:60:38:35:D2 X509v3 Authority Key Identifier: keyid:06:A0:35:96:D6:FA:10:E3:F5:08:10:F5:86:E3:F6:3A:EE:96:F9:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:51:b5:b5:f5:51:d2:33:86:7e:83:28:dc:14:63:c0:97:f3: 0b:f5:69:94:fc:04:83:5c:6d:fd:e8:61:df:e8:9f:ed:f7:2b: ea:32:f0:fb:6c:93:d7:70:81:d4:75:f3:5a:7c:ec:ef:8a:d2: b3:19:47:ac:1e:60:d7:2a:37:ba:a1:4d:cc:8b:02:ec:61:98: d9:24:06:04:1d:e7:25:6c:4c:20:cf:f8:d3:6c:db:6d:10:87: 56:02:e2:a1:db:2f:6f:69:76:83:63:f4:f4:1f:6e:23:87:78: ce:0f:d7:f0:ee:12:10:32:32:5c:55:df:a7:f6:17:c6:9a:57: e2:6d:31:74:51:3b:fb:59:29:8d:59:c2:8f:fe:25:2a:67:ee: 23:e9:9e:f0:19:6e:aa:ed:cd:4d:f3:b8:6b:11:55:66:9f:80: 8c:92:b3:4d:b9:6f:9f:d2:b3:9e:fe:67:58:b9:6d:57:7a:22: 9b:46:e3:3c:fa:ec:6e:7c:c8:c3:df:c1:4e:e2:1a:7b:85:40: fc:dd:d8:f2:20:6e:b1:b8:83:05:a0:d9:fa:4b:b2:69:07:cf: 7a:31:c2:6f:86:0a:03:84:4d:5a:ed:c0:7b:52:ad:69:08:e6: 65:f6:59:b7:45:7d:fa:51:92:77:63:e1:c9:24:f2:22:e9:3d: b2:25:90:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCq16jaovRS18WQ/YWnyiCDwLvp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2M0FF RTk2Rjk4RTAeFw0yNTExMDMwMzM3MDRaFw0yNTExMDYxMTQ3MDRaMDMxMTAvBgNV BAMTKEM3QjExQzgwMDMxMTQ4RUMxRjQ3NzM1MkNFNDI1OEM4NjAzODM1RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJt0f5CtJHC1JOolQnbTY1MWwj V8fzJlA0v3rknJiFZdKMOB851Ort3kVSeZ9Zrm78Q0AOKNnZsCqb77xlG52eaQW+ 6jGY/yaT91HVH/1OGayGmr+cJHnQCJcDTPR5KfNXCvtdHLCXYpuaTU/Hf5pGp+Q4 ni9dWvou7/PsLQtuSNLYVBuNwH6joIoKugnkSZmMXjpdRALejd7wxrqP20RuDApr l+CRDz7bhATvSKPDu8jhUCUCp3tZ8l5GGqtoVbrtXaOSYGLxDh+9Adx94wc0xkWB qqKcaukXxVvX2638xDgMkjry2IKDBEDQfDxRVlWMBTrgY/4ByPvoc3rCN/rPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx7EcgAMRSOwfR3NSzkJYyGA4NdIwHwYDVR0j BBgwFoAUBqA1ltb6EOP1CBD1huP2Ou6W+Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGY3Yzc5MC03NmI1LTQ5NjctYjZmZi0xMmRjNzU2YmJmN2QvMC8wNkEwMzU5NkQ2 RkExMEUzRjUwODEwRjU4NkUzRjYzQUVFOTZGOThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2M0FFRTk2 Rjk4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmN2M3OTAtNzZiNS00OTY3LWI2 ZmYtMTJkYzc1NmJiZjdkLzAvMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2 M0FFRTk2Rjk4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVRtbX1UdIzhn6DKNwUY8CX8wv1aZT8BINc bf3oYd/on+33K+oy8Ptsk9dwgdR181p87O+K0rMZR6weYNcqN7qhTcyLAuxhmNkk BgQd5yVsTCDP+NNs220Qh1YC4qHbL29pdoNj9PQfbiOHeM4P1/DuEhAyMlxV36f2 F8aaV+JtMXRRO/tZKY1Zwo/+JSpn7iPpnvAZbqrtzU3zuGsRVWafgIySs025b5/S s57+Z1i5bVd6IptG4zz67G58yMPfwU7iGnuFQPzd2PIgbrG4gwWg2fpLsmkHz3ox wm+GCgOETVrtwHtSrWkI5mX2WbdFffpRkndj4ckk8iLpPbIlkPo= -----END CERTIFICATE-----Generated at Wed Nov 5 00:37:27 2025 by rpki-client