$ rpki-client -vvf repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.mft File: 6DBEA32A7EE18535066521365EFB05C4148698C9.mft (raw, json) Hash identifier: NLNEoh3QPM4FcMk/8DAH2g1ggYtfdFhYOlcuayOMk8M= Subject key identifier: DE:E9:0B:23:FC:C8:20:89:40:82:47:28:4C:8E:2E:D0:A8:0E:22:72 Authority key identifier: 6D:BE:A3:2A:7E:E1:85:35:06:65:21:36:5E:FB:05:C4:14:86:98:C9 Certificate issuer: /CN=6DBEA32A7EE18535066521365EFB05C4148698C9 Certificate serial: 2DA11762D91CE2A6954D7291E132F5A815CE7EE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBEA32A7EE18535066521365EFB05C4148698C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.mft Manifest number: 051D Signing time: Wed 05 Nov 2025 10:22:20 +0000 Manifest this update: Wed 05 Nov 2025 10:17:20 +0000 Manifest next update: Sat 08 Nov 2025 16:03:20 +0000 Files and hashes: 1: 6DBEA32A7EE18535066521365EFB05C4148698C9.crl (hash: O/6XTggxYAsyg+rxX9vlb1wtLnCHKR4e1ZQYxMXPQXY=) 2: 3130332e3133372e3131302e302f32332d3234203d3e20313338383239.roa (hash: Py1k6xmnp+wD3zAOREcnFDtaHJ01Rtyy2hDt3IzTRvw=) 3: 323430343a616663303a3a2f33322d3438203d3e20313338383239.roa (hash: ZX6Ox+wx5nbIu1GT16bLGXKsL0RQ4fgAjbd+X3UIku8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.crl rsync://repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBEA32A7EE18535066521365EFB05C4148698C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 16:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:a1:17:62:d9:1c:e2:a6:95:4d:72:91:e1:32:f5:a8:15:ce:7e:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DBEA32A7EE18535066521365EFB05C4148698C9 Validity Not Before: Nov 5 10:17:20 2025 GMT Not After : Nov 8 16:03:20 2025 GMT Subject: CN=DEE90B23FCC82089408247284C8E2ED0A80E2272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:70:57:bb:75:78:4e:9b:2b:59:0d:58:2e:34: 35:72:2c:5e:77:73:72:22:a5:c3:ea:10:63:77:c0: 3f:b8:8f:c8:37:bf:f1:1b:96:50:bf:c7:b4:3a:9d: 0b:2c:4f:b9:73:89:a7:90:30:db:83:8a:c4:b1:0e: 39:02:e4:ef:71:fa:f0:a4:2c:90:68:ad:54:1a:c2: 74:27:41:80:31:0d:ba:d5:8e:0a:0d:c2:c8:46:2a: 4a:16:32:97:71:99:89:9c:81:3d:8a:ec:73:8e:93: eb:78:c6:d6:47:57:59:28:d1:7f:d0:35:59:32:f7: 17:ac:94:f4:b2:b5:24:6b:62:74:f7:34:c4:5d:8a: b4:73:72:2a:44:d9:d2:f7:7b:be:c4:06:a5:47:75: 38:18:a0:2a:51:60:ca:a5:bf:3e:69:a3:e0:c0:6b: 33:ae:0c:22:6d:82:d8:f7:f0:16:7c:52:f6:9f:fd: 86:c0:f8:35:4c:3a:ba:99:92:31:5a:ec:b1:a1:de: 8e:3b:78:f3:d1:3c:ce:25:14:ca:a8:2f:f4:bf:4b: 69:e9:a6:35:fd:bd:35:00:f6:00:64:94:c7:bd:7d: 37:36:66:38:d0:c3:bd:3a:fd:05:0e:a0:f2:ee:d2: 35:a0:81:f1:34:31:da:b0:04:73:28:3d:2c:0a:2d: 44:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E9:0B:23:FC:C8:20:89:40:82:47:28:4C:8E:2E:D0:A8:0E:22:72 X509v3 Authority Key Identifier: keyid:6D:BE:A3:2A:7E:E1:85:35:06:65:21:36:5E:FB:05:C4:14:86:98:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBEA32A7EE18535066521365EFB05C4148698C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:64:f5:c2:f6:56:1c:45:d8:bd:d8:40:17:16:e0:1b:77:cc: 19:63:bd:94:5e:6c:ae:e3:53:65:c3:f7:50:96:38:da:84:92: aa:71:47:29:cf:74:8d:45:2a:f4:81:85:07:3e:db:c7:45:c2: 9f:34:be:d9:a1:0d:43:da:1d:3c:fb:bc:21:cb:a7:af:dd:aa: e1:13:4e:84:5a:fc:f0:3e:e1:bd:bb:eb:0f:d1:4d:9b:e2:b6: 65:21:5e:ef:26:0c:b6:b0:c9:12:7b:10:64:c3:67:25:fd:1d: a0:fc:7e:13:81:c6:93:65:b3:df:9a:af:12:33:0f:da:4d:4e: 88:e4:cc:f4:73:45:b0:a5:0f:8c:88:61:1c:55:ba:bf:81:46: e8:1d:d0:38:3e:2c:c7:7b:e9:54:bb:25:2d:63:8a:a7:cb:6b: 4d:1e:99:e8:0b:f0:3c:ac:1e:37:33:82:de:e9:54:87:03:26: a6:ce:32:08:44:6a:5a:3e:05:35:11:45:63:aa:cc:51:64:79: 81:a7:21:55:24:f4:00:8a:6b:3a:54:05:86:88:4b:68:99:8e: 75:c2:2b:38:78:2b:78:5e:4b:e0:ac:36:40:be:87:0a:37:00: 81:b3:a2:50:59:a3:40:44:b6:e4:6b:fe:dd:f6:ca:9c:9d:12: 21:34:a0:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULaEXYtkc4qaVTXKR4TL1qBXOfukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCRUEzMkE3RUUxODUzNTA2NjUyMTM2NUVGQjA1QzQx NDg2OThDOTAeFw0yNTExMDUxMDE3MjBaFw0yNTExMDgxNjAzMjBaMDMxMTAvBgNV BAMTKERFRTkwQjIzRkNDODIwODk0MDgyNDcyODRDOEUyRUQwQTgwRTIyNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3cFe7dXhOmytZDVguNDVyLF53 c3IipcPqEGN3wD+4j8g3v/EbllC/x7Q6nQssT7lziaeQMNuDisSxDjkC5O9x+vCk LJBorVQawnQnQYAxDbrVjgoNwshGKkoWMpdxmYmcgT2K7HOOk+t4xtZHV1ko0X/Q NVky9xeslPSytSRrYnT3NMRdirRzcipE2dL3e77EBqVHdTgYoCpRYMqlvz5po+DA azOuDCJtgtj38BZ8Uvaf/YbA+DVMOrqZkjFa7LGh3o47ePPRPM4lFMqoL/S/S2np pjX9vTUA9gBklMe9fTc2ZjjQw706/QUOoPLu0jWggfE0MdqwBHMoPSwKLURvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3ukLI/zIIIlAgkcoTI4u0KgOInIwHwYDVR0j BBgwFoAUbb6jKn7hhTUGZSE2XvsFxBSGmMkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGQ4ODBkNC1jMzNlLTQwMWUtYjQ2OC1hNWE2YThhYWYzZDcvMC82REJFQTMyQTdF RTE4NTM1MDY2NTIxMzY1RUZCMDVDNDE0ODY5OEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRCRUEzMkE3RUUxODUzNTA2NjUyMTM2NUVGQjA1QzQxNDg2 OThDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBkODgwZDQtYzMzZS00MDFlLWI0 NjgtYTVhNmE4YWFmM2Q3LzAvNkRCRUEzMkE3RUUxODUzNTA2NjUyMTM2NUVGQjA1 QzQxNDg2OThDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKtk9cL2VhxF2L3YQBcW4Bt3zBljvZRebK7j U2XD91CWONqEkqpxRynPdI1FKvSBhQc+28dFwp80vtmhDUPaHTz7vCHLp6/dquET ToRa/PA+4b276w/RTZvitmUhXu8mDLawyRJ7EGTDZyX9HaD8fhOBxpNls9+arxIz D9pNTojkzPRzRbClD4yIYRxVur+BRugd0Dg+LMd76VS7JS1jiqfLa00emegL8Dys Hjczgt7pVIcDJqbOMghEalo+BTURRWOqzFFkeYGnIVUk9ACKazpUBYaIS2iZjnXC Kzh4K3heS+CsNkC+hwo3AIGzolBZo0BEtuRr/t32ypydEiE0oBI= -----END CERTIFICATE-----Generated at Wed Nov 5 21:10:12 2025 by rpki-client