$ rpki-client -vvf repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.mft File: 6319B77FD8EB7EC968DD59FE94AE146A879A74E5.mft (raw, json) Hash identifier: Y2/8CB2EGEj1K/542qw8n2U4N7rQzXWyb7DENjwCKNE= Subject key identifier: 3B:DB:7E:F7:C0:34:FE:50:AD:41:15:F6:E4:AE:43:CF:97:72:80:1F Authority key identifier: 63:19:B7:7F:D8:EB:7E:C9:68:DD:59:FE:94:AE:14:6A:87:9A:74:E5 Certificate issuer: /CN=6319B77FD8EB7EC968DD59FE94AE146A879A74E5 Certificate serial: 088A88EDDA9F693025FB726F249369B0D5F8DC5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.mft Manifest number: 051F Signing time: Mon 03 Nov 2025 15:41:57 +0000 Manifest this update: Mon 03 Nov 2025 15:36:57 +0000 Manifest next update: Thu 06 Nov 2025 19:55:57 +0000 Files and hashes: 1: 323430303a623138303a3a2f33322d3438203d3e203539323736.roa (hash: o6odkvAl/hKTp4KI63oh9m6EF8ypSkoU3xcKf1Jgr6o=) 2: 3130332e3232362e3233322e302f32322d3234203d3e203539323736.roa (hash: wXEz476nIlWr9YPVy2btympb5pWVJFYVSK12JD1WOHw=) 3: 3130332e3232362e3233342e302f32342d3234203d3e203539323736.roa (hash: YASd+4IY2ByHOpeWGSgT5aSz1TSDcJWrWxZ8mmmAyH4=) 4: 6319B77FD8EB7EC968DD59FE94AE146A879A74E5.crl (hash: eHP7uO3tXl4PHpBz4FKLFwR4bn2emWOVcvEVZ+P37Go=) 5: 3130332e3232362e3233332e302f32342d3234203d3e203539323736.roa (hash: VyjiO45+sx8rVhpe+p1nyWOxHRDbuxx2WR1qZ8IEuUM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.crl rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 19:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:8a:88:ed:da:9f:69:30:25:fb:72:6f:24:93:69:b0:d5:f8:dc:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6319B77FD8EB7EC968DD59FE94AE146A879A74E5 Validity Not Before: Nov 3 15:36:57 2025 GMT Not After : Nov 6 19:55:57 2025 GMT Subject: CN=3BDB7EF7C034FE50AD4115F6E4AE43CF9772801F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:20:90:94:1b:57:79:95:06:e1:6c:86:1a:0c: 13:90:e4:8d:2d:cf:02:9b:67:43:2e:f7:89:f2:1c: bc:80:d2:ee:94:e3:52:43:89:9e:84:24:f7:4c:f1: 11:af:56:b4:3e:b6:e8:00:ca:19:e2:a8:68:34:f5: 28:f2:47:59:e0:a1:52:ca:67:b4:90:b3:ba:53:33: c7:b0:b1:b7:54:bb:49:29:69:56:12:44:2b:50:15: 74:10:1f:1e:1c:32:4f:47:5f:c4:e5:e1:1c:bf:0b: 0b:24:33:b7:3b:32:aa:55:27:94:01:09:aa:a3:4c: 86:e0:43:84:b1:be:6b:18:04:e5:09:3a:49:74:9d: 85:0e:20:af:14:59:6a:4b:46:49:2d:ae:c7:2a:95: 36:19:75:6e:bb:f0:c1:ba:85:6b:db:4e:a9:16:da: 37:98:b7:45:ed:71:31:9f:ee:60:33:32:ff:fb:56: ef:4b:64:c1:b8:95:7d:2a:79:bf:90:83:3d:0a:aa: 09:05:3f:d9:19:ad:bb:c7:b7:32:73:31:f5:40:2a: 5e:ba:6a:21:61:ac:4b:ea:f0:76:9e:00:a7:50:80: d6:46:4e:29:85:aa:aa:f9:9d:af:4b:3f:ad:77:74: 41:e9:f0:81:02:5b:b0:e1:8c:bc:e7:e2:ed:0c:24: cb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DB:7E:F7:C0:34:FE:50:AD:41:15:F6:E4:AE:43:CF:97:72:80:1F X509v3 Authority Key Identifier: keyid:63:19:B7:7F:D8:EB:7E:C9:68:DD:59:FE:94:AE:14:6A:87:9A:74:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:80:10:78:98:07:fe:db:e2:ac:3b:17:18:81:8f:9d:11:e2: 4d:ff:35:a0:83:ad:b7:b1:8b:d0:38:8e:91:00:50:6b:2c:7d: 41:2f:28:41:9f:c4:39:f6:35:80:0b:51:92:29:80:52:63:fe: 77:35:bc:08:90:b3:06:77:49:c2:4e:09:52:57:df:85:9b:bd: ae:71:61:8d:ec:37:33:45:f1:0b:5c:98:73:82:20:5e:b9:f5: b1:22:35:5b:89:83:fb:a4:79:af:d2:e1:f7:5e:b7:a7:35:5b: 33:4c:34:23:c9:a8:da:79:1a:e9:da:59:de:cc:b1:7f:a8:32: d5:b6:e0:fc:e6:62:d4:16:4b:21:57:f0:77:88:fd:e0:24:51: 16:20:07:c5:2a:85:77:51:78:78:8f:a7:54:21:43:8e:a3:d5: 71:28:da:6d:ca:7e:cf:cf:15:b5:e2:11:45:3b:d2:3b:36:0f: f3:36:96:b6:41:8c:aa:bf:dc:89:15:cc:b2:2e:b6:6a:61:6b: 09:48:4c:91:5d:02:18:95:b6:7a:09:e3:5c:84:a7:a5:4c:0a: 05:b4:79:6f:9b:6d:a8:c1:5a:38:10:68:ef:b3:17:ed:b6:5d: 86:91:b6:29:6a:74:10:8e:89:1c:07:ee:3e:67:f7:75:87:90: b3:09:ea:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCIqI7dqfaTAl+3JvJJNpsNX43FswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMxOUI3N0ZEOEVCN0VDOTY4REQ1OUZFOTRBRTE0NkE4 NzlBNzRFNTAeFw0yNTExMDMxNTM2NTdaFw0yNTExMDYxOTU1NTdaMDMxMTAvBgNV BAMTKDNCREI3RUY3QzAzNEZFNTBBRDQxMTVGNkU0QUU0M0NGOTc3MjgwMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYIJCUG1d5lQbhbIYaDBOQ5I0t zwKbZ0Mu94nyHLyA0u6U41JDiZ6EJPdM8RGvVrQ+tugAyhniqGg09SjyR1ngoVLK Z7SQs7pTM8ewsbdUu0kpaVYSRCtQFXQQHx4cMk9HX8Tl4Ry/CwskM7c7MqpVJ5QB CaqjTIbgQ4SxvmsYBOUJOkl0nYUOIK8UWWpLRkktrscqlTYZdW678MG6hWvbTqkW 2jeYt0XtcTGf7mAzMv/7Vu9LZMG4lX0qeb+Qgz0KqgkFP9kZrbvHtzJzMfVAKl66 aiFhrEvq8HaeAKdQgNZGTimFqqr5na9LP613dEHp8IECW7DhjLzn4u0MJMv/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO9t+98A0/lCtQRX25K5Dz5dygB8wHwYDVR0j BBgwFoAUYxm3f9jrfslo3Vn+lK4UaoeadOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjU0MmJjNC03NGRjLTQ1ZGQtYjY1OS03NDVjYTJhY2EzMzMvMC82MzE5Qjc3RkQ4 RUI3RUM5NjhERDU5RkU5NEFFMTQ2QTg3OUE3NEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjMxOUI3N0ZEOEVCN0VDOTY4REQ1OUZFOTRBRTE0NkE4NzlB NzRFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmY1NDJiYzQtNzRkYy00NWRkLWI2 NTktNzQ1Y2EyYWNhMzMzLzAvNjMxOUI3N0ZEOEVCN0VDOTY4REQ1OUZFOTRBRTE0 NkE4NzlBNzRFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKAEHiYB/7b4qw7FxiBj50R4k3/NaCDrbex i9A4jpEAUGssfUEvKEGfxDn2NYALUZIpgFJj/nc1vAiQswZ3ScJOCVJX34Wbva5x YY3sNzNF8QtcmHOCIF659bEiNVuJg/ukea/S4fdet6c1WzNMNCPJqNp5GunaWd7M sX+oMtW24PzmYtQWSyFX8HeI/eAkURYgB8UqhXdReHiPp1QhQ46j1XEo2m3Kfs/P FbXiEUU70js2D/M2lrZBjKq/3IkVzLIutmphawlITJFdAhiVtnoJ41yEp6VMCgW0 eW+bbajBWjgQaO+zF+22XYaRtilqdBCOiRwH7j5n93WHkLMJ6lo= -----END CERTIFICATE-----Generated at Tue Nov 4 01:58:36 2025 by rpki-client