$ rpki-client -vvf repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft File: 6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft (raw, json) Hash identifier: nFLw9IzZAYt4T0WWPqRJoMuw3dF0LNNRqj7IMK+InPo= Subject key identifier: 1D:C5:39:7B:12:41:7F:56:A1:8E:55:75:A5:98:9F:A4:72:D1:34:02 Authority key identifier: 6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 Certificate issuer: /CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31 Certificate serial: 655C0A8BA581647618D8F0A27FE273A0D963988C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft Manifest number: D9 Signing time: Mon 03 Nov 2025 23:40:47 +0000 Manifest this update: Mon 03 Nov 2025 23:35:47 +0000 Manifest next update: Fri 07 Nov 2025 09:44:47 +0000 Files and hashes: 1: 3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa (hash: hNrDFdJZIJVijEPlIae7oRd0LDEkkVmTrltcwdQNZWQ=) 2: 3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa (hash: nPtUGKaHPiIgcmd7zVYYYWB0FNbLMK1i/rlw7h+2X4I=) 3: 6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl (hash: 8xGI3I7uZpi9hmHRLNJ/lGqdMRbBdgaV0D6Dl2pnSHQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:5c:0a:8b:a5:81:64:76:18:d8:f0:a2:7f:e2:73:a0:d9:63:98:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31 Validity Not Before: Nov 3 23:35:47 2025 GMT Not After : Nov 7 09:44:47 2025 GMT Subject: CN=1DC5397B12417F56A18E5575A5989FA472D13402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8c:20:7d:27:b5:0a:36:c9:f8:86:d7:ab:e4: a4:8a:58:c8:2d:ad:53:3c:e0:f8:0a:d9:45:46:44: e1:cb:34:8b:b5:22:eb:40:c9:a6:10:c2:a6:15:80: fb:5a:21:23:35:af:6d:e6:8f:2d:a9:d5:a1:42:63: 99:21:9b:74:80:fd:48:b2:9f:8e:8f:cc:a3:95:4a: b8:99:10:38:37:3a:ae:04:7c:b1:90:52:26:0b:ef: 64:7a:9d:9b:82:02:24:f1:e5:f6:b2:46:be:7f:eb: fc:b8:e6:f5:7f:ca:7b:d2:84:3d:a2:45:1e:37:8d: 30:dd:ea:61:bb:cc:d6:6c:5b:b8:1a:fc:dc:7e:b0: bc:cd:7f:b1:7e:c7:79:26:16:7a:f7:d2:5b:3d:3a: d2:70:14:ee:8b:5d:a1:11:9c:a2:ce:8d:99:df:20: 89:e5:03:f7:a4:8f:9d:86:34:28:8c:78:51:a3:21: 50:4a:5f:bd:05:51:e4:9b:cb:37:26:c9:d2:cd:f3: ef:1f:dd:65:de:18:29:15:e7:cb:83:a9:d4:0d:71: f9:6d:ca:ea:b6:18:11:d6:99:0b:08:91:a5:00:2a: 8a:be:19:fd:3f:8a:d3:b9:50:42:96:65:c7:39:6e: 8c:3f:1a:ba:0e:fa:42:64:d9:68:34:ca:d9:6a:5b: b9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C5:39:7B:12:41:7F:56:A1:8E:55:75:A5:98:9F:A4:72:D1:34:02 X509v3 Authority Key Identifier: keyid:6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:05:76:20:81:9b:fb:11:bf:23:97:aa:71:b1:90:93:06:bd: 71:44:24:6a:60:09:d9:06:4e:b4:4a:a9:a1:7c:48:5f:9a:23: a4:f0:a1:77:f0:ad:2a:08:f5:45:a9:dd:ed:08:fa:dd:7c:c8: d0:7c:d9:c6:35:bc:d2:a3:95:ba:d7:7a:5f:2b:16:6e:89:8a: a5:3f:80:0c:f1:52:3b:4a:b1:4d:a7:16:2f:d8:0d:46:22:4f: 14:84:fd:20:33:a3:b4:e3:cc:4c:f5:8c:e2:fc:cb:55:aa:fa: 47:95:f2:87:28:a2:b1:34:1f:d3:24:4a:c3:68:38:6a:17:db: a8:f0:07:7e:1c:64:6b:20:ab:c9:4b:50:d2:1c:fc:26:5d:52: 33:dd:f5:a5:39:91:15:e5:c6:b4:b9:dd:49:27:34:5e:f8:9f: c4:56:87:1f:d4:14:34:60:f7:6a:46:93:85:73:0e:a5:00:de: ac:35:ec:3f:b9:03:e8:21:3c:bf:5e:71:2f:d0:7f:48:48:19: e7:03:a5:ef:57:3b:45:61:30:d4:d4:99:fa:9c:87:61:9a:33: 53:17:8e:7d:75:d9:73:7e:ae:80:bd:67:f7:73:ab:df:bf:df: c0:d1:96:0d:8b:76:6e:c6:a1:d0:24:e3:e3:f3:6e:cd:55:96: 34:6b:25:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZVwKi6WBZHYY2PCif+JzoNljmIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFBRTlF M0QxOEQzMTAeFw0yNTExMDMyMzM1NDdaFw0yNTExMDcwOTQ0NDdaMDMxMTAvBgNV BAMTKDFEQzUzOTdCMTI0MTdGNTZBMThFNTU3NUE1OTg5RkE0NzJEMTM0MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIjCB9J7UKNsn4hter5KSKWMgt rVM84PgK2UVGROHLNIu1IutAyaYQwqYVgPtaISM1r23mjy2p1aFCY5khm3SA/Uiy n46PzKOVSriZEDg3Oq4EfLGQUiYL72R6nZuCAiTx5fayRr5/6/y45vV/ynvShD2i RR43jTDd6mG7zNZsW7ga/Nx+sLzNf7F+x3kmFnr30ls9OtJwFO6LXaERnKLOjZnf IInlA/ekj52GNCiMeFGjIVBKX70FUeSbyzcmydLN8+8f3WXeGCkV58uDqdQNcflt yuq2GBHWmQsIkaUAKoq+Gf0/itO5UEKWZcc5bow/GroO+kJk2Wg0ytlqW7lhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHcU5exJBf1ahjlV1pZifpHLRNAIwHwYDVR0j BBgwFoAUaizJ08cxSOJl6ZZhkpwa6ePRjTEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjJhOTE2YS1hZDIyLTQ5NzktYmU0My05NTFjNzZmMmY5MjAvMC82QTJDQzlEM0M3 MzE0OEUyNjVFOTk2NjE5MjlDMUFFOUUzRDE4RDMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFBRTlFM0Qx OEQzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2IyYTkxNmEtYWQyMi00OTc5LWJl NDMtOTUxYzc2ZjJmOTIwLzAvNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFB RTlFM0QxOEQzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0FdiCBm/sRvyOXqnGxkJMGvXFEJGpgCdkG TrRKqaF8SF+aI6TwoXfwrSoI9UWp3e0I+t18yNB82cY1vNKjlbrXel8rFm6JiqU/ gAzxUjtKsU2nFi/YDUYiTxSE/SAzo7TjzEz1jOL8y1Wq+keV8ocoorE0H9MkSsNo OGoX26jwB34cZGsgq8lLUNIc/CZdUjPd9aU5kRXlxrS53UknNF74n8RWhx/UFDRg 92pGk4VzDqUA3qw17D+5A+ghPL9ecS/Qf0hIGecDpe9XO0VhMNTUmfqch2GaM1MX jn112XN+roC9Z/dzq9+/38DRlg2Ldm7GodAk4+Pzbs1VljRrJQc= -----END CERTIFICATE-----Generated at Wed Nov 5 01:38:11 2025 by rpki-client