$ rpki-client -vvf repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft File: D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft (raw, json) Hash identifier: lwJ1rPBnvHiiwmGGKpVUfqPEbhIOsf3mdh++K7/w8KE= Subject key identifier: F7:12:EC:6A:C9:02:C3:AA:2C:37:5A:85:9A:8C:C2:A8:2C:86:1A:D1 Authority key identifier: D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 Certificate issuer: /CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Certificate serial: 0171723070D5D60BAE097FD55CB9966526CA619F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft Manifest number: 02E8 Signing time: Mon 03 Nov 2025 03:10:00 +0000 Manifest this update: Mon 03 Nov 2025 03:05:00 +0000 Manifest next update: Thu 06 Nov 2025 14:03:00 +0000 Files and hashes: 1: D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl (hash: +xZI03Z8Ty0OTzP3nkeq99VwVc608j++0wGMDL+PR/o=) 2: 3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa (hash: EWRSldncuijDwUH5kmTIxzgLmknYFLpjI5NK+K1R4Fw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 14:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:71:72:30:70:d5:d6:0b:ae:09:7f:d5:5c:b9:96:65:26:ca:61:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Validity Not Before: Nov 3 03:05:00 2025 GMT Not After : Nov 6 14:03:00 2025 GMT Subject: CN=F712EC6AC902C3AA2C375A859A8CC2A82C861AD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:85:4d:8a:52:8e:7a:70:ba:a0:c5:4c:f0:a0: ec:1b:92:11:5c:b2:4a:a0:7d:4c:07:52:4a:13:f1: 74:84:04:10:73:23:e4:bc:0f:b0:77:4b:61:b3:07: 47:50:1c:3f:f7:da:06:68:01:7b:1d:07:7c:f9:6a: 8b:bf:2e:7f:b1:89:70:f3:7c:a7:48:28:99:18:69: 9f:60:e7:ae:5a:91:8c:cb:2c:f4:05:f1:fc:0a:8b: 87:c0:20:61:bc:e9:42:5d:b2:5e:8a:44:df:1f:d4: 14:10:38:0b:15:c2:50:a3:44:ae:b3:ae:a4:14:79: db:a8:83:4b:84:cf:5d:53:86:27:64:12:cb:b7:79: cd:36:37:b0:18:3b:3e:ae:dd:77:b6:a1:c1:1a:0f: 38:b7:9e:eb:df:6a:56:dc:3a:df:48:3b:9a:b8:51: d5:39:1a:95:6f:f0:34:33:6d:26:41:30:c0:d6:f7: 34:d2:c4:a1:cf:6b:25:2f:68:c2:d0:d2:4e:4a:ba: cc:6b:39:0d:78:a9:0c:74:cf:fe:7a:91:6e:89:71: 0a:51:b9:fb:14:e4:b7:33:21:a1:77:18:41:40:f1: a8:ee:cf:11:26:f5:2c:36:ad:26:5c:c0:c1:a2:0b: d6:71:49:32:b8:50:53:38:f8:aa:d0:d4:65:83:73: f0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:12:EC:6A:C9:02:C3:AA:2C:37:5A:85:9A:8C:C2:A8:2C:86:1A:D1 X509v3 Authority Key Identifier: keyid:D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:a6:d7:4d:64:d6:40:a2:85:ee:9f:6e:82:f0:48:3d:e2:80: 0a:9a:23:19:bf:51:5b:4f:30:fc:fc:e1:9b:74:be:f9:65:2f: 3c:34:d7:5b:45:b4:18:9b:6a:59:62:a0:1e:1e:f4:e5:83:c5: 72:be:e1:1c:fc:37:f4:ec:12:27:87:f7:f2:52:e3:bc:bb:50: f8:29:c1:96:a1:a9:bb:0d:75:49:27:a6:63:c0:1b:a1:51:ce: ab:5e:56:2f:ee:80:26:b1:32:72:35:28:29:44:fa:f4:41:b9: 38:28:64:72:b7:6b:5c:4b:5d:2d:34:b0:62:d2:12:25:de:81: 62:38:20:a2:3f:17:84:6f:69:46:37:07:6f:45:bd:1a:3c:30: dd:83:53:7c:3c:56:aa:b1:e8:83:28:32:1b:a6:e8:59:3c:5e: ec:df:5e:ee:f0:ca:ad:34:60:86:0e:93:0e:06:45:85:08:84: 5b:41:5c:4a:63:4f:99:f7:83:d9:45:36:e3:cd:08:9b:76:9e: d9:78:90:7a:32:b4:d3:76:f8:94:89:77:1e:e9:03:f0:a1:b7: 88:2e:4b:17:04:83:a1:2e:98:6d:ee:99:ee:91:80:3d:d0:5e: f0:03:5b:29:18:ab:31:9c:68:b1:ce:ea:18:a9:cd:47:e6:a0: 98:95:dd:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAXFyMHDV1guuCX/VXLmWZSbKYZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVB M0ZDRUI2NjAeFw0yNTExMDMwMzA1MDBaFw0yNTExMDYxNDAzMDBaMDMxMTAvBgNV BAMTKEY3MTJFQzZBQzkwMkMzQUEyQzM3NUE4NTlBOENDMkE4MkM4NjFBRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQhU2KUo56cLqgxUzwoOwbkhFc skqgfUwHUkoT8XSEBBBzI+S8D7B3S2GzB0dQHD/32gZoAXsdB3z5aou/Ln+xiXDz fKdIKJkYaZ9g565akYzLLPQF8fwKi4fAIGG86UJdsl6KRN8f1BQQOAsVwlCjRK6z rqQUeduog0uEz11ThidkEsu3ec02N7AYOz6u3Xe2ocEaDzi3nuvfalbcOt9IO5q4 UdU5GpVv8DQzbSZBMMDW9zTSxKHPayUvaMLQ0k5KusxrOQ14qQx0z/56kW6JcQpR ufsU5LczIaF3GEFA8ajuzxEm9Sw2rSZcwMGiC9ZxSTK4UFM4+KrQ1GWDc/DzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9xLsaskCw6osN1qFmozCqCyGGtEwHwYDVR0j BBgwFoAU1sHxPGfNAlRd66qEbrKPbqP862YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2EyZTBkYi1lMjkzLTQxYzUtODU4My0zODAxNTc1ODQyMWMvMC9ENkMxRjEzQzY3 Q0QwMjU0NURFQkFBODQ2RUIyOEY2RUEzRkNFQjY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVBM0ZD RUI2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NhMmUwZGItZTI5My00MWM1LTg1 ODMtMzgwMTU3NTg0MjFjLzAvRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhG NkVBM0ZDRUI2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAim101k1kCihe6fboLwSD3igAqaIxm/UVtP MPz84Zt0vvllLzw011tFtBiballioB4e9OWDxXK+4Rz8N/TsEieH9/JS47y7UPgp wZahqbsNdUknpmPAG6FRzqteVi/ugCaxMnI1KClE+vRBuTgoZHK3a1xLXS00sGLS EiXegWI4IKI/F4RvaUY3B29FvRo8MN2DU3w8Vqqx6IMoMhum6Fk8XuzfXu7wyq00 YIYOkw4GRYUIhFtBXEpjT5n3g9lFNuPNCJt2ntl4kHoytNN2+JSJdx7pA/Cht4gu SxcEg6EumG3ume6RgD3QXvADWykYqzGcaLHO6hipzUfmoJiV3ec= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:01 2025 by rpki-client