$ rpki-client -vvf repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft File: 6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft (raw, json) Hash identifier: jcCtF7rGUfOmIDFp6TqUSVtH4d8B8iSpReNew8+ukp0= Subject key identifier: CD:FF:BC:83:71:D6:B1:A2:D1:ED:C1:52:32:49:70:20:90:08:B8:1F Authority key identifier: 6A:C5:8D:24:85:5E:7F:E2:4A:C4:52:B7:D0:FD:DB:9B:D9:00:3A:8B Certificate issuer: /CN=6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B Certificate serial: 23A7D0DDED69132010F27EB588AFD7D7F5B49299 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft Manifest number: 01FA Signing time: Tue 04 Nov 2025 11:22:18 +0000 Manifest this update: Tue 04 Nov 2025 11:17:18 +0000 Manifest next update: Fri 07 Nov 2025 14:32:18 +0000 Files and hashes: 1: 6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.crl (hash: v8T9nQQpMmqaLjRMcVcd/RCRy5yaPX6G0Um1RciBB7I=) 2: 3130332e3135342e37342e302f32342d3234203d3e20313430343830.roa (hash: 9yEpf7UptHKPtJGMSNZGjTG/u5N0H8I6F7MGckJB2CA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.crl rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 14:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a7:d0:dd:ed:69:13:20:10:f2:7e:b5:88:af:d7:d7:f5:b4:92:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B Validity Not Before: Nov 4 11:17:18 2025 GMT Not After : Nov 7 14:32:18 2025 GMT Subject: CN=CDFFBC8371D6B1A2D1EDC152324970209008B81F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:de:22:10:0d:95:f9:c7:30:4f:fc:ee:11:70: c5:a1:73:24:cf:35:ad:dc:3c:01:a9:ce:df:ec:0b: 05:04:27:66:b5:6c:9a:53:07:df:5c:84:eb:fa:ac: ea:5a:9e:a0:55:21:2c:38:7d:d2:d3:d7:7a:d2:8e: 8b:14:2e:ab:dd:f3:ea:fe:bc:c7:4c:cb:66:0b:e0: 9a:74:2b:b2:6f:6c:fe:33:45:ed:38:71:4e:a1:74: ce:de:33:83:34:16:c4:3c:77:e9:b0:c8:96:21:90: f9:44:f1:cc:2b:11:d7:94:d3:6a:1a:a5:76:66:0d: 39:ef:6d:fa:09:b8:f2:22:fb:a7:f7:e5:ef:90:a6: 15:ed:da:a0:7f:d4:ad:64:b0:5c:c9:8f:7a:25:fa: c5:9a:49:ee:fd:ad:0d:12:2d:a5:a1:ae:24:f9:0a: 8a:c5:11:67:7d:85:07:74:ae:23:65:ce:0f:0b:a1: ce:46:83:3e:f7:45:44:3f:b8:43:5c:24:2b:4e:e8: 22:df:60:f4:0c:62:f9:92:c3:c3:30:1c:4d:a1:64: 1f:ca:a2:e6:18:71:8c:fb:32:ec:bf:93:71:83:bd: 20:2b:e1:61:64:a7:2b:da:51:5b:f8:1b:fb:a2:e0: 57:ed:d0:4f:a2:9f:28:d8:0a:10:d5:1b:a9:16:b6: b8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:FF:BC:83:71:D6:B1:A2:D1:ED:C1:52:32:49:70:20:90:08:B8:1F X509v3 Authority Key Identifier: keyid:6A:C5:8D:24:85:5E:7F:E2:4A:C4:52:B7:D0:FD:DB:9B:D9:00:3A:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:d8:d2:32:94:0e:2c:41:8e:ec:89:d3:a9:99:4a:44:38:c3: ac:dd:69:2c:4e:0f:ea:a6:75:3f:3a:e6:0c:3f:b8:77:17:47: 12:ca:ec:0c:6e:9d:e9:82:0e:5e:a1:2e:e3:28:54:6f:91:d4: ad:c3:09:9c:cf:6b:c4:26:32:0b:d4:53:9d:a8:fe:ad:5b:33: a6:a2:49:bf:f3:ac:f7:38:e7:aa:ed:b8:24:5b:c4:35:56:1f: d8:0e:ff:97:f8:94:70:b7:2b:2b:6b:57:d8:27:bc:43:ba:e7: 33:aa:3b:fa:cc:b1:f1:20:8e:86:ea:91:a5:f2:90:22:a0:e4: 20:fa:6f:2f:08:99:82:ef:73:83:e4:c5:7d:2a:90:04:38:42: 53:b4:59:ea:d2:c5:b4:36:8b:ad:54:0a:dc:d1:20:a5:ea:c3: 6d:ac:ac:78:1a:07:91:49:df:98:aa:ba:3c:5b:95:27:c9:71: 01:25:54:ae:35:c1:db:87:a4:1d:5d:fc:b4:76:63:c8:42:da: 0d:73:2f:0a:e0:2f:1c:9f:2f:5d:e9:c4:50:16:52:bd:8f:4c: 5b:5e:34:22:82:c4:2e:e2:9e:44:ed:ad:f8:5b:05:6c:79:99: b0:11:8a:26:80:72:fa:22:50:7f:1f:1c:11:7b:2c:05:f0:77: bf:7c:60:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI6fQ3e1pEyAQ8n61iK/X1/W0kpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFDNThEMjQ4NTVFN0ZFMjRBQzQ1MkI3RDBGRERCOUJE OTAwM0E4QjAeFw0yNTExMDQxMTE3MThaFw0yNTExMDcxNDMyMThaMDMxMTAvBgNV BAMTKENERkZCQzgzNzFENkIxQTJEMUVEQzE1MjMyNDk3MDIwOTAwOEI4MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq3iIQDZX5xzBP/O4RcMWhcyTP Na3cPAGpzt/sCwUEJ2a1bJpTB99chOv6rOpanqBVISw4fdLT13rSjosULqvd8+r+ vMdMy2YL4Jp0K7JvbP4zRe04cU6hdM7eM4M0FsQ8d+mwyJYhkPlE8cwrEdeU02oa pXZmDTnvbfoJuPIi+6f35e+QphXt2qB/1K1ksFzJj3ol+sWaSe79rQ0SLaWhriT5 CorFEWd9hQd0riNlzg8Loc5Ggz73RUQ/uENcJCtO6CLfYPQMYvmSw8MwHE2hZB/K ouYYcYz7Muy/k3GDvSAr4WFkpyvaUVv4G/ui4Fft0E+inyjYChDVG6kWtrhtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzf+8g3HWsaLR7cFSMklwIJAIuB8wHwYDVR0j BBgwFoAUasWNJIVef+JKxFK30P3bm9kAOoswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTUwNTMxOS1jMzNkLTQzNGEtYWJjNS02YTYxY2U4NTNlOTUvMC82QUM1OEQyNDg1 NUU3RkUyNEFDNDUyQjdEMEZEREI5QkQ5MDAzQThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFDNThEMjQ4NTVFN0ZFMjRBQzQ1MkI3RDBGRERCOUJEOTAw M0E4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U1MDUzMTktYzMzZC00MzRhLWFi YzUtNmE2MWNlODUzZTk1LzAvNkFDNThEMjQ4NTVFN0ZFMjRBQzQ1MkI3RDBGRERC OUJEOTAwM0E4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDY0jKUDixBjuyJ06mZSkQ4w6zdaSxOD+qm dT865gw/uHcXRxLK7AxunemCDl6hLuMoVG+R1K3DCZzPa8QmMgvUU52o/q1bM6ai Sb/zrPc456rtuCRbxDVWH9gO/5f4lHC3KytrV9gnvEO65zOqO/rMsfEgjobqkaXy kCKg5CD6by8ImYLvc4PkxX0qkAQ4QlO0WerSxbQ2i61UCtzRIKXqw22srHgaB5FJ 35iqujxblSfJcQElVK41wduHpB1d/LR2Y8hC2g1zLwrgLxyfL13pxFAWUr2PTFte NCKCxC7inkTtrfhbBWx5mbARiiaAcvoiUH8fHBF7LAXwd798YKE= -----END CERTIFICATE-----Generated at Wed Nov 5 02:08:13 2025 by rpki-client