$ rpki-client -vvf repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/6592459773B9BF90E892EF4DE9361A991482809F.mft File: 6592459773B9BF90E892EF4DE9361A991482809F.mft (raw, json) Hash identifier: OmX53qp7NhiLLuuTbf0GYbh96Y4lSJ9qvs/G6REDqSk= Subject key identifier: 94:9F:5C:A4:D6:FF:4C:B2:4E:49:6C:B0:B2:F5:A0:10:46:9C:A5:2D Authority key identifier: 65:92:45:97:73:B9:BF:90:E8:92:EF:4D:E9:36:1A:99:14:82:80:9F Certificate issuer: /CN=6592459773B9BF90E892EF4DE9361A991482809F Certificate serial: 268A19DFCABCF0E7F8B6D20FDD9782FD9203070A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6592459773B9BF90E892EF4DE9361A991482809F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/6592459773B9BF90E892EF4DE9361A991482809F.mft Manifest number: 017E Signing time: Mon 03 Nov 2025 10:32:16 +0000 Manifest this update: Mon 03 Nov 2025 10:27:16 +0000 Manifest next update: Thu 06 Nov 2025 16:57:16 +0000 Files and hashes: 1: 3130332e3231312e3130362e302f32342d3234203d3e20313530393938.roa (hash: OzDPsQ0j/kOveCiQy/dCFt8m39AccV/cQJY2lcE/LQY=) 2: 3130332e3231312e3130372e302f32342d3234203d3e20313530393938.roa (hash: Yqses+sM6Ch7Yy0wlsERwjD51XaycOIOWt4JofJnhIQ=) 3: 6592459773B9BF90E892EF4DE9361A991482809F.crl (hash: 8CnMmIYD3QIdKD3B283T14pxSPyMohtPBbKEeP+ElUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/6592459773B9BF90E892EF4DE9361A991482809F.crl rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/6592459773B9BF90E892EF4DE9361A991482809F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6592459773B9BF90E892EF4DE9361A991482809F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 16:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:8a:19:df:ca:bc:f0:e7:f8:b6:d2:0f:dd:97:82:fd:92:03:07:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6592459773B9BF90E892EF4DE9361A991482809F Validity Not Before: Nov 3 10:27:16 2025 GMT Not After : Nov 6 16:57:16 2025 GMT Subject: CN=949F5CA4D6FF4CB24E496CB0B2F5A010469CA52D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c5:7a:ab:bd:4d:68:32:7a:4c:2e:58:fa:7f: 5a:dd:3e:f5:2f:a1:7b:2f:91:9d:35:75:93:92:1c: 30:fd:12:4e:d1:eb:09:89:1b:bc:2f:d4:5d:b3:dd: 22:ea:d1:0a:63:13:14:78:13:c6:a2:8e:b6:a6:88: a4:a2:62:42:91:78:9b:18:15:be:19:19:b4:cc:db: 01:02:d2:fb:67:46:bc:68:14:ea:08:d0:60:1d:2d: d3:80:86:a3:d1:94:7c:74:17:d6:c0:5d:21:69:72: 69:96:7e:94:20:61:92:5c:d7:2d:d6:b4:59:8f:13: cc:bc:4a:d7:5d:71:78:7b:33:07:f7:c4:a2:86:7e: 6d:3f:74:1e:79:b6:81:c9:c9:54:bc:e4:37:07:07: 26:01:9a:ec:c9:e7:34:27:6f:2e:c3:d9:68:4f:79: e8:b7:47:3f:9a:5a:60:50:4b:f8:c6:2c:18:c8:ae: b5:30:e5:4e:09:9a:63:8c:e9:15:d7:89:84:f4:a3: ee:aa:f7:ab:a5:2d:13:16:55:83:33:ca:10:e0:da: 3f:79:1a:2d:34:c1:db:9c:eb:01:9d:32:d7:95:10: 31:08:ea:88:f1:7f:bd:84:3f:5d:16:78:5f:05:88: 3d:59:17:71:59:d0:c3:5d:b8:c8:d2:32:14:c1:87: 6c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:9F:5C:A4:D6:FF:4C:B2:4E:49:6C:B0:B2:F5:A0:10:46:9C:A5:2D X509v3 Authority Key Identifier: keyid:65:92:45:97:73:B9:BF:90:E8:92:EF:4D:E9:36:1A:99:14:82:80:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/6592459773B9BF90E892EF4DE9361A991482809F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6592459773B9BF90E892EF4DE9361A991482809F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/6592459773B9BF90E892EF4DE9361A991482809F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c0:61:fc:0c:ae:ed:2a:7c:c6:5d:84:ee:3e:ec:14:0b:43: 53:75:32:74:f1:8e:dd:84:80:34:64:74:2c:a2:e3:47:1d:f9: 60:1d:7f:35:78:90:3c:ea:d7:65:f1:c1:b8:40:ec:ae:34:26: 9d:c7:72:de:e0:5a:46:4b:a2:78:f8:b3:fd:b2:70:91:1f:a3: a9:2b:fc:51:a1:80:59:f6:58:04:97:01:7c:f9:8f:9f:8e:2e: 83:d0:5f:43:b3:8e:cb:71:03:e4:d3:bf:33:7e:6f:fb:5f:c0: a3:62:6d:22:23:df:18:4c:dd:d6:30:46:e0:46:f3:8f:46:6d: ee:e2:13:7b:5e:9c:7e:1a:da:fb:5f:f5:78:57:2b:4e:43:98: 8d:55:16:51:9d:b4:69:74:94:26:70:6f:7c:a9:6e:f6:b4:a6: b0:b7:ee:76:9e:e0:a1:a3:c4:3f:47:a9:df:a3:f2:ca:30:26: 53:47:32:bc:31:d4:6d:b5:bc:6d:ba:00:93:73:3f:ac:48:b2: a2:0c:b1:c0:63:06:ef:fa:7d:65:63:b7:9d:8e:67:9f:d4:fe: 54:66:ca:7f:db:d5:85:19:7b:ee:7a:00:92:ae:d6:a1:ab:49: 91:7e:a2:18:92:8f:a3:96:78:81:61:c8:1a:cd:60:d9:d9:44: 8e:17:a8:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJooZ38q88Of4ttIP3ZeC/ZIDBwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU5MjQ1OTc3M0I5QkY5MEU4OTJFRjRERTkzNjFBOTkx NDgyODA5RjAeFw0yNTExMDMxMDI3MTZaFw0yNTExMDYxNjU3MTZaMDMxMTAvBgNV BAMTKDk0OUY1Q0E0RDZGRjRDQjI0RTQ5NkNCMEIyRjVBMDEwNDY5Q0E1MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuxXqrvU1oMnpMLlj6f1rdPvUv oXsvkZ01dZOSHDD9Ek7R6wmJG7wv1F2z3SLq0QpjExR4E8aijramiKSiYkKReJsY Fb4ZGbTM2wEC0vtnRrxoFOoI0GAdLdOAhqPRlHx0F9bAXSFpcmmWfpQgYZJc1y3W tFmPE8y8StddcXh7Mwf3xKKGfm0/dB55toHJyVS85DcHByYBmuzJ5zQnby7D2WhP eei3Rz+aWmBQS/jGLBjIrrUw5U4JmmOM6RXXiYT0o+6q96ulLRMWVYMzyhDg2j95 Gi00wduc6wGdMteVEDEI6ojxf72EP10WeF8FiD1ZF3FZ0MNduMjSMhTBh2zBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlJ9cpNb/TLJOSWywsvWgEEacpS0wHwYDVR0j BBgwFoAUZZJFl3O5v5Doku9N6TYamRSCgJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODc4YzA2Mi1iMDkyLTQwMjUtOWI2OC1iZmViOWI2NWE1YTAvMC82NTkyNDU5Nzcz QjlCRjkwRTg5MkVGNERFOTM2MUE5OTE0ODI4MDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU5MjQ1OTc3M0I5QkY5MEU4OTJFRjRERTkzNjFBOTkxNDgy ODA5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg3OGMwNjItYjA5Mi00MDI1LTli NjgtYmZlYjliNjVhNWEwLzAvNjU5MjQ1OTc3M0I5QkY5MEU4OTJFRjRERTkzNjFB OTkxNDgyODA5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7AYfwMru0qfMZdhO4+7BQLQ1N1MnTxjt2E gDRkdCyi40cd+WAdfzV4kDzq12XxwbhA7K40Jp3Hct7gWkZLonj4s/2ycJEfo6kr /FGhgFn2WASXAXz5j5+OLoPQX0OzjstxA+TTvzN+b/tfwKNibSIj3xhM3dYwRuBG 849Gbe7iE3tenH4a2vtf9XhXK05DmI1VFlGdtGl0lCZwb3ypbva0prC37nae4KGj xD9Hqd+j8sowJlNHMrwx1G21vG26AJNzP6xIsqIMscBjBu/6fWVjt52OZ5/U/lRm yn/b1YUZe+56AJKu1qGrSZF+ohiSj6OWeIFhyBrNYNnZRI4XqF8= -----END CERTIFICATE-----Generated at Wed Nov 5 01:14:32 2025 by rpki-client