$ rpki-client -vvf repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft File: 6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft (raw, json) Hash identifier: QaUnza1HuOVKdl71LuUYcl1EgA5iYxscH0CjpMKdH8o= Subject key identifier: B5:D9:3A:FC:D2:25:3E:1F:65:10:88:0C:C5:DA:D2:24:FC:F3:34:F6 Authority key identifier: 6B:FD:65:6A:9F:A6:3F:B8:98:16:B1:7C:CE:D2:83:2B:43:FE:41:CD Certificate issuer: /CN=6BFD656A9FA63FB89816B17CCED2832B43FE41CD Certificate serial: 74F0A4D9FDE0F8C5EC2E127A9EBDF0DF3E4F1372 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft Manifest number: 0127 Signing time: Mon 03 Nov 2025 08:11:26 +0000 Manifest this update: Mon 03 Nov 2025 08:06:26 +0000 Manifest next update: Thu 06 Nov 2025 14:26:26 +0000 Files and hashes: 1: 323030313a6466333a356334303a3a2f34382d3438203d3e20313431313236.roa (hash: QBBO/FoYTyAYgTzseCUJPqnk8CnediRAVVQ9iko63Nk=) 2: 6BFD656A9FA63FB89816B17CCED2832B43FE41CD.crl (hash: cnsIUhyYifhlom1gNotYqvW4PfZbI/qEwsrKMmmbbTw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.crl rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 14:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:f0:a4:d9:fd:e0:f8:c5:ec:2e:12:7a:9e:bd:f0:df:3e:4f:13:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6BFD656A9FA63FB89816B17CCED2832B43FE41CD Validity Not Before: Nov 3 08:06:26 2025 GMT Not After : Nov 6 14:26:26 2025 GMT Subject: CN=B5D93AFCD2253E1F6510880CC5DAD224FCF334F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2c:48:ce:0c:3b:a9:79:df:1e:4f:19:b4:ce: 09:74:3f:c5:10:86:b1:0d:9e:70:57:3a:08:51:fd: 46:c1:d8:14:b5:90:8d:42:d6:e2:12:63:41:57:04: d8:d8:1f:ec:34:d4:30:13:82:01:54:1f:07:10:c5: 62:95:ba:f4:cc:1f:34:41:76:3d:80:5a:fe:b7:d0: c1:01:b6:9a:12:12:86:f3:0f:f0:cc:bc:1a:88:55: df:57:18:69:7b:1f:8d:38:df:84:7d:06:f6:1a:e8: d4:53:ef:da:ac:09:c0:41:cd:78:f9:7f:c6:01:12: 25:69:e7:ca:4a:c1:64:8e:43:f7:ae:83:ef:8b:c4: 6a:e6:3b:b5:cc:42:d3:34:41:72:e3:b4:73:d2:5b: 58:ff:6d:9a:21:b0:c7:40:ed:35:68:f8:3e:51:be: 33:76:cf:43:7a:bd:de:3d:ee:e4:28:00:20:4c:e3: c9:46:9c:38:c6:f1:e3:60:80:5e:d7:4b:f4:5d:77: e0:cf:be:7c:40:95:fa:1c:5e:50:33:a4:31:27:a2: ca:0c:f7:43:d4:48:f2:1f:f1:00:3d:69:45:55:71: 8e:9a:3b:d8:ee:bf:40:e3:c2:b0:75:3b:b6:27:d0: 7b:08:0c:66:0b:0f:b2:e5:db:96:59:eb:54:9c:9e: 8d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D9:3A:FC:D2:25:3E:1F:65:10:88:0C:C5:DA:D2:24:FC:F3:34:F6 X509v3 Authority Key Identifier: keyid:6B:FD:65:6A:9F:A6:3F:B8:98:16:B1:7C:CE:D2:83:2B:43:FE:41:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:97:19:08:da:d3:ab:6d:74:9e:43:24:6c:df:ab:9b:83:fc: 59:72:f9:c9:34:58:ad:a4:71:13:f7:a3:01:9b:20:3e:00:c8: e1:e2:9d:d1:da:52:e5:7c:62:6a:54:7b:fc:5b:2c:ef:b2:b7: 9b:c2:07:dc:ce:09:69:18:fc:bf:3b:8f:01:28:ad:b8:58:c1: d4:ba:60:4f:6b:8d:ce:fd:2b:2c:14:07:8d:e0:72:e6:02:35: 6a:e8:04:ff:a4:60:1f:96:90:ab:83:31:c3:ae:49:2e:e4:f5: e4:ba:2a:d9:6a:cc:f9:cf:d9:b1:02:c8:11:00:69:1a:19:ba: a6:85:91:a6:e8:4f:f2:21:2d:27:82:be:c7:07:17:ce:d1:df: b2:a8:3b:00:7f:b8:ae:7a:5a:a6:15:3d:71:82:3e:1c:51:8a: a3:1c:79:cc:ec:c0:75:50:3f:29:29:ef:c6:af:9c:14:41:24: b1:48:af:67:37:0e:4f:65:b8:0d:d5:4c:43:b2:ab:92:44:ca: 55:4b:be:82:b2:6e:c9:c1:24:aa:03:fb:8e:23:09:f4:a7:37: 5f:34:07:80:48:71:24:a3:56:11:0b:48:34:ef:ac:09:7f:a1: 0f:59:10:fe:c0:9e:91:b0:e7:04:38:33:7c:c7:a6:28:3c:d6: 47:85:ae:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdPCk2f3g+MXsLhJ6nr3w3z5PE3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkJGRDY1NkE5RkE2M0ZCODk4MTZCMTdDQ0VEMjgzMkI0 M0ZFNDFDRDAeFw0yNTExMDMwODA2MjZaFw0yNTExMDYxNDI2MjZaMDMxMTAvBgNV BAMTKEI1RDkzQUZDRDIyNTNFMUY2NTEwODgwQ0M1REFEMjI0RkNGMzM0RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOLEjODDuped8eTxm0zgl0P8UQ hrENnnBXOghR/UbB2BS1kI1C1uISY0FXBNjYH+w01DATggFUHwcQxWKVuvTMHzRB dj2AWv630MEBtpoSEobzD/DMvBqIVd9XGGl7H40434R9BvYa6NRT79qsCcBBzXj5 f8YBEiVp58pKwWSOQ/eug++LxGrmO7XMQtM0QXLjtHPSW1j/bZohsMdA7TVo+D5R vjN2z0N6vd497uQoACBM48lGnDjG8eNggF7XS/Rdd+DPvnxAlfocXlAzpDEnosoM 90PUSPIf8QA9aUVVcY6aO9juv0DjwrB1O7Yn0HsIDGYLD7Ll25ZZ61Scno3dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtdk6/NIlPh9lEIgMxdrSJPzzNPYwHwYDVR0j BBgwFoAUa/1lap+mP7iYFrF8ztKDK0P+Qc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTBjYjYzMC02MzZhLTRiNmEtOTNkZi1iNWQ5MDhmZTZlZTcvMC82QkZENjU2QTlG QTYzRkI4OTgxNkIxN0NDRUQyODMyQjQzRkU0MUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkJGRDY1NkE5RkE2M0ZCODk4MTZCMTdDQ0VEMjgzMkI0M0ZF NDFDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmUwY2I2MzAtNjM2YS00YjZhLTkz ZGYtYjVkOTA4ZmU2ZWU3LzAvNkJGRDY1NkE5RkE2M0ZCODk4MTZCMTdDQ0VEMjgz MkI0M0ZFNDFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKiXGQja06ttdJ5DJGzfq5uD/Fly+ck0WK2k cRP3owGbID4AyOHindHaUuV8YmpUe/xbLO+yt5vCB9zOCWkY/L87jwEorbhYwdS6 YE9rjc79KywUB43gcuYCNWroBP+kYB+WkKuDMcOuSS7k9eS6KtlqzPnP2bECyBEA aRoZuqaFkaboT/IhLSeCvscHF87R37KoOwB/uK56WqYVPXGCPhxRiqMceczswHVQ Pykp78avnBRBJLFIr2c3Dk9luA3VTEOyq5JEylVLvoKybsnBJKoD+44jCfSnN180 B4BIcSSjVhELSDTvrAl/oQ9ZEP7AnpGw5wQ4M3zHpig81keFrng= -----END CERTIFICATE-----Generated at Wed Nov 5 08:21:21 2025 by rpki-client