$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft File: 6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft (raw, json) Hash identifier: IRSH+F/R+/OxkDNeqBBE9M0R4roHWrnKbiD0ItJrSBA= Subject key identifier: 88:D4:BA:B4:B0:8F:DD:1F:4C:98:0C:CE:6E:98:C9:F3:B5:B4:71:DA Authority key identifier: 6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8 Certificate issuer: /CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8 Certificate serial: 21859627FD736FAF496D1E403EE2203FE010D79A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft Manifest number: A7 Signing time: Mon 03 Nov 2025 15:01:25 +0000 Manifest this update: Mon 03 Nov 2025 14:56:25 +0000 Manifest next update: Fri 07 Nov 2025 01:24:25 +0000 Files and hashes: 1: 323030313a6466343a353663303a3a2f34382d3438203d3e20313533313231.roa (hash: EZ7jR9+lQhRaaJFDwK6y0EbEgy21NUoqJfk8uRlaKvI=) 2: 6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl (hash: or7FCeR/z/Qql9AI02LWDFD3tQCv7wlxlw3J3Bl0R2o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 01:24:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:85:96:27:fd:73:6f:af:49:6d:1e:40:3e:e2:20:3f:e0:10:d7:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8 Validity Not Before: Nov 3 14:56:25 2025 GMT Not After : Nov 7 01:24:25 2025 GMT Subject: CN=88D4BAB4B08FDD1F4C980CCE6E98C9F3B5B471DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:37:3a:db:10:30:20:1e:48:80:55:99:9e:62: 91:4d:a5:02:04:5b:04:ea:75:58:d6:d0:6d:d4:cf: 77:05:04:d3:98:38:39:9d:f4:1d:9c:ee:58:06:f9: 35:07:8f:66:78:5e:95:88:2a:48:4c:82:57:ae:41: a6:64:f0:ba:51:49:84:83:34:05:5a:8e:07:8a:9f: b3:4c:77:75:e9:6e:a1:b0:4a:fa:57:1a:90:4d:eb: a7:7b:99:f0:83:ff:ee:6b:69:9b:8f:97:62:9e:50: 3b:c3:7f:ce:38:b0:d0:3d:06:c8:b2:d3:be:4d:87: 4c:39:99:3d:d5:31:e9:da:8c:74:05:7f:32:57:a9: e7:dc:b6:55:15:25:07:a9:de:99:d9:74:c6:fe:30: d6:78:be:0e:24:a7:04:14:ad:41:da:1e:c4:2e:53: 54:e6:bd:fc:f3:b6:f4:50:6f:a0:ce:db:1e:82:b9: 4d:61:35:47:17:a1:54:2a:76:cb:71:08:b7:b9:fc: 8b:f3:95:af:1c:5c:00:45:6f:47:d3:1b:4f:dc:f7: 86:2c:16:e1:22:5c:a7:97:0a:fa:e4:dc:d7:6c:d2: 5e:66:77:30:65:8e:eb:2d:b1:f8:6c:ef:a0:a7:b4: 8a:a5:0f:aa:1b:e0:cb:a8:33:c1:96:2f:b4:a9:25: df:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D4:BA:B4:B0:8F:DD:1F:4C:98:0C:CE:6E:98:C9:F3:B5:B4:71:DA X509v3 Authority Key Identifier: keyid:6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:22:6e:ae:bc:b1:24:01:4a:90:49:57:fd:9c:41:ce:d8:06: 30:73:14:af:00:75:fb:df:63:20:e2:f6:8a:71:f3:27:14:f6: e4:f0:6a:73:42:93:3d:5b:51:ed:8c:99:d7:78:d1:3f:a7:d5: 68:f6:48:77:9c:03:5c:90:f1:6c:34:37:a1:ac:a4:5d:80:a9: 25:d4:9a:98:5e:d9:3c:89:91:f4:ee:93:e9:91:9b:00:65:32: 42:bc:0d:17:41:be:c4:89:d3:f6:95:ad:a2:70:a0:fb:95:26: 84:90:f3:cf:2a:e3:ac:9e:17:e2:c1:44:84:2a:f7:61:b1:57: 10:b2:4f:8f:0b:1e:f5:5f:75:59:40:38:21:dd:8b:e1:16:f0: 25:c2:ca:08:22:c3:35:42:3e:55:90:9a:ea:f0:04:a5:d7:24: 2d:a7:97:40:9e:ac:2b:3d:65:90:19:2a:3d:3a:a3:02:86:c0: ec:60:f5:ec:c8:4f:fa:5d:2a:df:65:90:b5:56:f2:a6:57:e4: 1c:0d:3a:e1:58:a9:ce:35:0c:93:a7:92:ad:d9:fa:52:9d:b5: de:4d:76:3d:fd:54:aa:b3:4d:05:d3:21:ac:3d:be:31:c1:a8: 18:78:fa:af:ba:9a:8c:73:a6:60:a7:43:0f:89:20:0f:39:ef: f8:55:0c:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIYWWJ/1zb69JbR5APuIgP+AQ15owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEzOTk2QUZFMTEzODIzODUzMEMyRkM5MkIyQUI2NzVG Q0QyMThDODAeFw0yNTExMDMxNDU2MjVaFw0yNTExMDcwMTI0MjVaMDMxMTAvBgNV BAMTKDg4RDRCQUI0QjA4RkREMUY0Qzk4MENDRTZFOThDOUYzQjVCNDcxREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvNzrbEDAgHkiAVZmeYpFNpQIE WwTqdVjW0G3Uz3cFBNOYODmd9B2c7lgG+TUHj2Z4XpWIKkhMgleuQaZk8LpRSYSD NAVajgeKn7NMd3XpbqGwSvpXGpBN66d7mfCD/+5raZuPl2KeUDvDf844sNA9Bsiy 075Nh0w5mT3VMenajHQFfzJXqefctlUVJQep3pnZdMb+MNZ4vg4kpwQUrUHaHsQu U1TmvfzztvRQb6DO2x6CuU1hNUcXoVQqdstxCLe5/Ivzla8cXABFb0fTG0/c94Ys FuEiXKeXCvrk3Nds0l5mdzBljustsfhs76CntIqlD6ob4MuoM8GWL7SpJd8tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiNS6tLCP3R9MmAzObpjJ87W0cdowHwYDVR0j BBgwFoAUajmWr+ETgjhTDC/JKyq2dfzSGMgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTg5YjdkZC05OWE3LTQ1MGUtYmU4NC1iM2JmYzczNDBmMWYvMS82QTM5OTZBRkUx MTM4MjM4NTMwQzJGQzkyQjJBQjY3NUZDRDIxOEM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEzOTk2QUZFMTEzODIzODUzMEMyRkM5MkIyQUI2NzVGQ0Qy MThDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzEvNkEzOTk2QUZFMTEzODIzODUzMEMyRkM5MkIyQUI2 NzVGQ0QyMThDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABoibq68sSQBSpBJV/2cQc7YBjBzFK8Adfvf YyDi9opx8ycU9uTwanNCkz1bUe2Mmdd40T+n1Wj2SHecA1yQ8Ww0N6GspF2AqSXU mphe2TyJkfTuk+mRmwBlMkK8DRdBvsSJ0/aVraJwoPuVJoSQ888q46yeF+LBRIQq 92GxVxCyT48LHvVfdVlAOCHdi+EW8CXCyggiwzVCPlWQmurwBKXXJC2nl0CerCs9 ZZAZKj06owKGwOxg9ezIT/pdKt9lkLVW8qZX5BwNOuFYqc41DJOnkq3Z+lKdtd5N dj39VKqzTQXTIaw9vjHBqBh4+q+6moxzpmCnQw+JIA857/hVDL4= -----END CERTIFICATE-----Generated at Wed Nov 5 16:14:17 2025 by rpki-client