$ rpki-client -vvf repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft File: 1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft (raw, json) Hash identifier: okXSJRaj24+egp6d2UAu9dlcgxLUKZjz+jCfRgGfanY= Subject key identifier: 16:87:8B:75:AF:6C:2E:32:57:B7:14:3D:CF:4C:E3:FE:E6:0D:A2:74 Authority key identifier: 1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 Certificate issuer: /CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754 Certificate serial: 6A73519B312B078CCA1923ED68F5D0C5438ED91C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft Manifest number: 0243 Signing time: Mon 03 Nov 2025 04:41:43 +0000 Manifest this update: Mon 03 Nov 2025 04:36:43 +0000 Manifest next update: Thu 06 Nov 2025 16:13:43 +0000 Files and hashes: 1: 3130332e3130322e3134332e302f32342d3234203d3e20313336383534.roa (hash: Ue24uXPwQGc54JNB/telr39Lz7e1QRjzsLYAEfr9eLA=) 2: 3130332e3130322e3134312e302f32342d3234203d3e20313336383534.roa (hash: B2qLIiehd/VzdAIdfO6T4LFNUB/9FZCQ+7yI4OPC/0Q=) 3: 3130332e3130322e3134322e302f32342d3234203d3e20313336383534.roa (hash: E9hexxYc1bqmjJVzYlcJ1n0jxfd6pWxzNygPPPDyMeU=) 4: 1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl (hash: ZwlUA6Rwkuwemu8tw8MtMohLUmw7e9hiU6EkxGijKiE=) 5: 3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa (hash: 7vNFqyZ19GIU7uMKM54m1pt7f10H0K5mcAT54ul2qeA=) 6: 3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa (hash: r4/2SO1KfMaPGbX/FsKDs7agHGywqOgLxZjLIrvX7OQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 16:13:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:73:51:9b:31:2b:07:8c:ca:19:23:ed:68:f5:d0:c5:43:8e:d9:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754 Validity Not Before: Nov 3 04:36:43 2025 GMT Not After : Nov 6 16:13:43 2025 GMT Subject: CN=16878B75AF6C2E3257B7143DCF4CE3FEE60DA274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:58:6b:dd:74:c6:b4:4d:a6:dd:ed:92:bc:ae: 89:0f:3b:51:a8:95:c4:ea:69:6e:e9:fc:ea:3b:ac: 90:41:ce:35:ff:61:e8:97:98:ac:b4:2c:46:e5:2d: 2d:2c:c6:4e:46:50:c2:72:5f:cb:c4:26:46:7e:be: 77:f6:f0:6b:27:32:65:ae:d9:25:7b:86:cb:36:8d: 2a:be:ea:92:28:12:95:87:db:6e:e3:b7:51:7c:4d: 24:d2:ed:2a:e0:c1:0b:06:a4:55:44:dc:bb:35:10: ce:ab:40:40:d8:0a:68:08:33:bc:d9:24:d3:16:f3: a0:b1:9f:66:0d:f0:89:f9:30:29:19:45:42:62:c4: a0:25:ee:dd:96:f9:2b:12:b2:fa:14:05:88:85:2d: 29:e7:07:c5:cf:01:56:74:e6:34:e8:2a:1c:ea:3e: d1:ab:e8:d2:54:c4:3b:4a:86:eb:bb:7d:bb:5e:29: e0:31:2d:c5:4d:df:78:60:91:85:ff:38:f2:3b:8c: 18:fc:fe:67:7f:c4:c7:79:67:d2:0c:8d:ac:8c:5d: 5b:30:8d:a1:0d:fe:36:6c:fe:8e:5b:e3:7d:19:d2: 94:57:c8:bc:01:48:d7:f7:52:d9:70:92:fe:75:1f: 2b:d4:0f:0c:e3:2d:c0:a7:e3:a2:4b:d1:d0:e4:ce: dc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:87:8B:75:AF:6C:2E:32:57:B7:14:3D:CF:4C:E3:FE:E6:0D:A2:74 X509v3 Authority Key Identifier: keyid:1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:14:e7:2a:68:84:fb:1d:d1:46:98:4f:d5:46:6b:06:1b:3e: e6:dd:b2:02:ff:43:07:76:d3:51:27:13:6c:2a:3c:1a:13:71: 06:e7:53:e5:00:c7:57:82:d4:53:5d:f2:03:fa:ac:cf:e7:56: b1:e3:af:49:46:3b:1b:cf:46:d8:17:bc:86:9f:38:e1:1a:f9: db:53:b5:a7:5a:72:8a:32:e9:47:b4:4f:c3:df:4f:79:5a:95: a6:7a:42:06:39:a2:a6:51:d0:7a:07:29:c8:f7:8d:39:1d:2a: 2a:c4:ab:96:2d:a9:8b:62:80:17:b9:9d:96:37:12:5d:8a:c4: 8c:f0:11:c3:2d:ae:c2:b6:be:f2:db:2b:10:12:bf:a0:4f:6c: 54:9f:19:97:3e:55:b3:7b:10:a8:6f:9c:f9:bd:6b:88:ed:42: 0f:39:06:88:51:7f:8e:fd:bc:2c:53:08:dd:d9:95:cc:f6:ed: 87:1b:93:f0:2e:fe:54:31:b0:db:6a:eb:6d:92:f1:67:43:fe: aa:68:f8:63:88:dc:79:86:9a:b3:03:e2:e3:cb:5b:a7:de:b9: 56:50:cc:d0:a2:de:bf:63:1a:ff:92:7d:de:b9:0f:79:cd:e5: 9f:b2:55:41:2f:5f:af:24:64:09:50:4e:94:c3:b5:07:b2:cc: b4:45:ea:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUanNRmzErB4zKGSPtaPXQxUOO2RwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4RjdB RjUwRDc1NDAeFw0yNTExMDMwNDM2NDNaFw0yNTExMDYxNjEzNDNaMDMxMTAvBgNV BAMTKDE2ODc4Qjc1QUY2QzJFMzI1N0I3MTQzRENGNENFM0ZFRTYwREEyNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQWGvddMa0Tabd7ZK8rokPO1Go lcTqaW7p/Oo7rJBBzjX/YeiXmKy0LEblLS0sxk5GUMJyX8vEJkZ+vnf28GsnMmWu 2SV7hss2jSq+6pIoEpWH227jt1F8TSTS7SrgwQsGpFVE3Ls1EM6rQEDYCmgIM7zZ JNMW86Cxn2YN8In5MCkZRUJixKAl7t2W+SsSsvoUBYiFLSnnB8XPAVZ05jToKhzq PtGr6NJUxDtKhuu7fbteKeAxLcVN33hgkYX/OPI7jBj8/md/xMd5Z9IMjayMXVsw jaEN/jZs/o5b430Z0pRXyLwBSNf3Utlwkv51HyvUDwzjLcCn46JL0dDkztyVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFoeLda9sLjJXtxQ9z0zj/uYNonQwHwYDVR0j BBgwFoAUHWABpPRlSLN+2HHKXPCI969Q11QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTYzMmQ5OS0zMmIyLTQ2N2ItYjdmZS0wZDI1Zjg1M2JmYTYvMC8xRDYwMDFBNEY0 NjU0OEIzN0VEODcxQ0E1Q0YwODhGN0FGNTBENzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4RjdBRjUw RDc1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU2MzJkOTktMzJiMi00NjdiLWI3 ZmUtMGQyNWY4NTNiZmE2LzAvMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4 RjdBRjUwRDc1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0U5ypohPsd0UaYT9VGawYbPubdsgL/Qwd2 01EnE2wqPBoTcQbnU+UAx1eC1FNd8gP6rM/nVrHjr0lGOxvPRtgXvIafOOEa+dtT tadacooy6Ue0T8PfT3lalaZ6QgY5oqZR0HoHKcj3jTkdKirEq5YtqYtigBe5nZY3 El2KxIzwEcMtrsK2vvLbKxASv6BPbFSfGZc+VbN7EKhvnPm9a4jtQg85BohRf479 vCxTCN3Zlcz27Ycbk/Au/lQxsNtq622S8WdD/qpo+GOI3HmGmrMD4uPLW6feuVZQ zNCi3r9jGv+Sfd65D3nN5Z+yVUEvX68kZAlQTpTDtQeyzLRF6pY= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:47 2025 by rpki-client