$ rpki-client -vvf repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft File: 6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft (raw, json) Hash identifier: ieOSZ15tsRG/SAVK30KRAG6Zc5dvrFYlXWuirBzDOgQ= Subject key identifier: A5:D8:09:5B:0F:80:A3:38:1D:FA:9C:D0:CD:BC:05:74:65:7B:FD:1A Authority key identifier: 6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B Certificate issuer: /CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B Certificate serial: 7BCA3F9D4311CA3A9B586B61BCF7142839E9C13D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft Manifest number: 01AB Signing time: Sun 02 Nov 2025 05:41:48 +0000 Manifest this update: Sun 02 Nov 2025 05:36:48 +0000 Manifest next update: Wed 05 Nov 2025 09:22:48 +0000 Files and hashes: 1: 6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl (hash: PmNQeM3zaJGQipGX2LwHVJSvJ68L4fz9HyBu3BoXvcQ=) 2: 3130332e3232332e312e302f32342d3234203d3e20313335343435.roa (hash: Meqto9gp7Tw3/wVHdB4HIOhRI0iUBfsDLYkbvujxqHk=) 3: 3130332e3232332e332e302f32342d3234203d3e20313335343435.roa (hash: 3ivbK9KpjZVb/XVJskMLhHcZHY/PxWUUM4YeUyN+bNw=) 4: 3130332e3232332e322e302f32342d3234203d3e20313335343435.roa (hash: kiwAboKBcY+KUfdKJ8QPyYYmhUR1O0Z8PHji6TPQSyQ=) 5: 3130332e3232332e322e302f32332d3233203d3e20313335343435.roa (hash: 1514IP+F3fs/wWPY76J3M+VGkLwDN+TVOPCGmIn0YeI=) 6: 3130332e3232332e302e302f32322d3232203d3e20313335343435.roa (hash: Gp+3hoUQHoSs7BqoZ98uo/JPIvevE7xLEnrTa4hmSmU=) 7: 3130332e3232332e302e302f32342d3234203d3e20313335343435.roa (hash: Ysc9Qtc/MJl5dYJb0Qhr9xILFagM64+bvGrjMt7zT9k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 09:22:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ca:3f:9d:43:11:ca:3a:9b:58:6b:61:bc:f7:14:28:39:e9:c1:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B Validity Not Before: Nov 2 05:36:48 2025 GMT Not After : Nov 5 09:22:48 2025 GMT Subject: CN=A5D8095B0F80A3381DFA9CD0CDBC0574657BFD1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:62:09:42:3c:2d:ec:01:f9:f9:69:c4:8f:e6: d7:b4:6e:07:4a:12:23:ad:68:ed:ba:0a:8c:c2:74: 88:76:43:5e:68:5e:07:2d:6c:62:8a:49:02:6a:3f: 58:cb:15:b9:6d:b3:68:4f:31:2f:a2:97:c2:ab:6b: e4:ba:9d:09:3a:09:60:20:f6:fd:30:c6:ff:99:54: 05:ae:4a:db:83:e1:79:23:23:79:00:6e:28:cb:48: ca:f9:7e:1f:cf:83:53:8c:a5:28:9f:2e:dc:b4:7a: 23:73:11:0c:ec:e2:c8:5f:ff:6a:d0:8b:ae:69:f9: 42:6f:34:e7:54:f2:a1:8a:fc:4a:0c:46:27:28:af: 6d:fa:fc:58:c4:ba:75:26:4b:fd:c3:51:96:5b:fe: 76:2d:ca:81:a8:56:41:d4:df:1f:56:a4:46:0c:49: 61:1a:99:f7:67:f6:98:26:82:3e:4e:3d:9a:1f:b9: 20:0f:9b:47:88:3d:5a:9d:3b:df:04:31:be:4e:67: bd:06:14:c0:00:68:36:e3:b9:63:31:0c:3d:73:41: 76:b0:e2:73:c9:d8:f9:65:99:ea:f0:ca:c8:ea:f9: d5:9f:8d:7c:da:b6:76:db:fc:68:2e:9a:aa:2d:c7: 71:b8:bf:86:fa:bf:e7:1d:56:78:fd:4a:b1:01:a3: 26:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D8:09:5B:0F:80:A3:38:1D:FA:9C:D0:CD:BC:05:74:65:7B:FD:1A X509v3 Authority Key Identifier: keyid:6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:4c:ad:89:27:d3:5b:0d:a2:3f:8a:58:c2:4f:b9:3f:ad:a9: f9:10:8e:25:03:69:ed:b0:18:15:24:96:1e:ad:15:03:93:3c: ef:68:97:d8:aa:10:48:0e:01:6f:c8:c3:9b:94:e5:97:9b:28: 30:77:63:d9:dd:71:d9:3f:6b:80:90:f3:8b:48:cf:26:3a:43: 12:bf:37:ee:29:e2:0b:a4:84:94:a2:09:f7:b5:74:a4:1e:d2: f6:67:18:bf:eb:da:c2:5e:a3:ad:1e:10:4c:e5:26:66:34:f8: b6:35:bf:95:8f:ca:31:41:81:07:36:fa:49:91:61:45:a2:66: 7b:e4:9f:ac:ee:5a:23:6b:ed:8a:9c:7d:85:b2:43:fc:8a:40: cb:b0:b7:8b:77:98:41:5a:a3:f2:e9:dd:c9:59:d7:63:ce:7b: e8:d0:a6:09:26:e3:d9:b7:bb:87:b7:b3:cf:25:00:b3:88:17: 8f:8d:51:98:cf:71:80:9c:bc:85:a1:9a:b1:df:1c:11:55:90: d1:7b:0b:12:5f:29:1a:c9:e0:0a:ab:4c:09:2c:8d:0b:83:3a: fa:d1:76:f3:d6:a5:91:08:0e:c0:e6:6b:6c:0b:fc:6b:14:f7: b1:ea:14:1b:0d:a2:d6:55:96:eb:70:23:23:8c:c7:16:7f:2d: 31:89:28:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe8o/nUMRyjqbWGthvPcUKDnpwT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI0RDE0RkM2RDM3NEFGQ0NBQjE5MEM1NERERjNBMUE5 RDREOTMwQjAeFw0yNTExMDIwNTM2NDhaFw0yNTExMDUwOTIyNDhaMDMxMTAvBgNV BAMTKEE1RDgwOTVCMEY4MEEzMzgxREZBOUNEMENEQkMwNTc0NjU3QkZEMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3YglCPC3sAfn5acSP5te0bgdK EiOtaO26CozCdIh2Q15oXgctbGKKSQJqP1jLFblts2hPMS+il8Kra+S6nQk6CWAg 9v0wxv+ZVAWuStuD4XkjI3kAbijLSMr5fh/Pg1OMpSifLty0eiNzEQzs4shf/2rQ i65p+UJvNOdU8qGK/EoMRicor236/FjEunUmS/3DUZZb/nYtyoGoVkHU3x9WpEYM SWEamfdn9pgmgj5OPZofuSAPm0eIPVqdO98EMb5OZ70GFMAAaDbjuWMxDD1zQXaw 4nPJ2Pllmerwysjq+dWfjXzatnbb/Ggumqotx3G4v4b6v+cdVnj9SrEBoybpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpdgJWw+Aozgd+pzQzbwFdGV7/RowHwYDVR0j BBgwFoAUa00U/G03SvzKsZDFTd86Gp1NkwswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzU0NWI4NS05Mjc0LTQ3MGEtYWQyNy0yNDY5ZTlkMTU1YmMvMC82QjREMTRGQzZE Mzc0QUZDQ0FCMTkwQzU0RERGM0ExQTlENEQ5MzBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkI0RDE0RkM2RDM3NEFGQ0NBQjE5MEM1NERERjNBMUE5RDRE OTMwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjc1NDViODUtOTI3NC00NzBhLWFk MjctMjQ2OWU5ZDE1NWJjLzAvNkI0RDE0RkM2RDM3NEFGQ0NBQjE5MEM1NERERjNB MUE5RDREOTMwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9MrYkn01sNoj+KWMJPuT+tqfkQjiUDae2w GBUklh6tFQOTPO9ol9iqEEgOAW/Iw5uU5ZebKDB3Y9ndcdk/a4CQ84tIzyY6QxK/ N+4p4gukhJSiCfe1dKQe0vZnGL/r2sJeo60eEEzlJmY0+LY1v5WPyjFBgQc2+kmR YUWiZnvkn6zuWiNr7YqcfYWyQ/yKQMuwt4t3mEFao/Lp3clZ12POe+jQpgkm49m3 u4e3s88lALOIF4+NUZjPcYCcvIWhmrHfHBFVkNF7CxJfKRrJ4AqrTAksjQuDOvrR dvPWpZEIDsDma2wL/GsU97HqFBsNotZVlutwIyOMxxZ/LTGJKKg= -----END CERTIFICATE-----Generated at Tue Nov 4 01:58:36 2025 by rpki-client