$ rpki-client -vvf repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft File: 6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft (raw, json) Hash identifier: siymMkV8V4OI0CwcOT+r1KR+EBCIcuRMXkmNdviAdbk= Subject key identifier: 37:EF:D1:EE:6F:81:6C:4D:A3:0B:FB:EF:6E:3A:BB:F3:80:C3:B4:F9 Authority key identifier: 6D:CC:69:50:8E:F4:E6:70:EF:BC:5C:69:20:3D:6B:12:0F:A9:39:2F Certificate issuer: /CN=6DCC69508EF4E670EFBC5C69203D6B120FA9392F Certificate serial: 5A84EB748718960AABB037C25F57F191A0669ACC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft Manifest number: 0525 Signing time: Mon 03 Nov 2025 03:30:44 +0000 Manifest this update: Mon 03 Nov 2025 03:25:44 +0000 Manifest next update: Thu 06 Nov 2025 06:39:44 +0000 Files and hashes: 1: 6DCC69508EF4E670EFBC5C69203D6B120FA9392F.crl (hash: mHpwkUrEKfeWuZ9s+vZMOFVovO+FTUvM+fAfIH+F71I=) 2: 3130332e3135322e3131392e302f32342d3234203d3e20313430343433.roa (hash: OYW0otw/C3geO3TMH4Vh+kOExJnpA1YbtcKJkivMvls=) 3: 3130332e3135322e3131382e302f32332d3233203d3e20313430343433.roa (hash: /yZJ48q5869CHyqd6SiEVpfiGq8gtKkTaa5YhAFQVoI=) 4: 3130332e3135322e3131382e302f32342d3234203d3e20313430343433.roa (hash: E4zG118v/qHLN7ZNOQGDXXsw7DicdH5quyuAOIhYJfs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.crl rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 06:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:84:eb:74:87:18:96:0a:ab:b0:37:c2:5f:57:f1:91:a0:66:9a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DCC69508EF4E670EFBC5C69203D6B120FA9392F Validity Not Before: Nov 3 03:25:44 2025 GMT Not After : Nov 6 06:39:44 2025 GMT Subject: CN=37EFD1EE6F816C4DA30BFBEF6E3ABBF380C3B4F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:81:2e:88:ec:a5:39:28:dc:dd:67:66:f6:41: 14:96:f1:41:73:a0:06:40:8b:0c:29:57:9c:2a:73: 9d:ac:f3:c9:f6:c6:20:a1:6c:49:83:5e:d2:f6:35: 13:b7:ab:44:bd:be:37:6e:52:29:fa:f8:55:90:ab: bd:6a:93:d0:a3:70:a9:37:5f:db:99:6a:41:dc:78: 17:ae:60:f0:57:1f:73:88:cd:45:85:50:31:d2:68: af:75:13:b3:95:75:9d:7d:3e:98:a4:b8:94:e6:33: a8:b4:38:9a:91:b5:fc:72:f5:91:7f:0c:97:7f:b8: 48:9a:ae:c6:4e:cb:8d:ff:06:e6:74:aa:ba:99:7d: f1:57:05:6f:72:61:bf:1e:03:52:e4:70:d5:fa:ef: 0d:a2:d7:d7:7a:04:4b:3a:b7:b7:3a:71:50:c9:31: be:40:ba:95:ab:8a:58:cd:06:72:3e:8f:0c:b1:4f: 5a:41:9d:bd:ab:96:74:05:af:04:1a:76:b9:dd:75: bc:e3:b6:28:20:54:6e:a4:63:4a:c1:88:2d:7f:53: 06:fb:13:18:4c:1b:1f:83:89:c9:bc:b0:d4:95:27: fc:b1:60:78:c4:ce:5e:40:0a:41:2c:af:70:66:33: 10:08:3d:54:6c:44:7e:cb:a5:30:c4:56:77:7d:69: 6b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:EF:D1:EE:6F:81:6C:4D:A3:0B:FB:EF:6E:3A:BB:F3:80:C3:B4:F9 X509v3 Authority Key Identifier: keyid:6D:CC:69:50:8E:F4:E6:70:EF:BC:5C:69:20:3D:6B:12:0F:A9:39:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:6d:99:66:2b:7e:fa:f8:6f:2b:9e:ee:46:f0:5d:06:25:46: 38:8d:ae:70:db:12:22:8b:05:ff:b7:b1:6e:5d:9c:80:ba:61: a8:60:3b:ed:ba:84:37:e8:0a:00:7c:57:79:fd:3e:0a:f6:94: 19:1e:e3:02:8f:67:57:eb:74:4c:0e:fe:00:3e:ac:a5:ec:12: 49:05:8a:f3:a0:78:d3:e6:5d:c9:29:5c:12:6b:35:89:b8:4a: de:7d:7d:d1:41:14:fa:1c:8e:91:ad:cd:1f:7a:e7:7a:bb:9d: d3:e2:80:4a:63:c3:8f:51:56:c9:27:81:76:0f:83:9a:ac:4f: 8b:0f:bd:e3:a1:43:ea:c7:f1:7b:d9:f3:10:70:4b:b2:50:3a: 2d:d2:18:48:a8:64:27:21:00:3f:2b:af:cd:5a:e0:78:fc:b9: 13:4c:d5:f2:05:74:2a:d8:68:2d:ff:69:ff:d5:a3:d8:60:8b: b9:c7:de:68:c4:08:8f:99:fa:4c:6b:56:af:fa:f7:37:c2:f9: df:5b:f0:0b:58:ee:c1:e9:a4:46:bf:0f:ac:a6:c0:5b:d1:75: df:cd:b8:8e:70:43:17:f5:7a:9a:a4:11:50:70:7e:93:b3:9b: 52:d3:5f:0e:22:64:c6:c7:36:df:87:7a:d0:40:30:4a:cb:e1: 0b:00:88:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWoTrdIcYlgqrsDfCX1fxkaBmmswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRDQzY5NTA4RUY0RTY3MEVGQkM1QzY5MjAzRDZCMTIw RkE5MzkyRjAeFw0yNTExMDMwMzI1NDRaFw0yNTExMDYwNjM5NDRaMDMxMTAvBgNV BAMTKDM3RUZEMUVFNkY4MTZDNERBMzBCRkJFRjZFM0FCQkYzODBDM0I0RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCygS6I7KU5KNzdZ2b2QRSW8UFz oAZAiwwpV5wqc52s88n2xiChbEmDXtL2NRO3q0S9vjduUin6+FWQq71qk9CjcKk3 X9uZakHceBeuYPBXH3OIzUWFUDHSaK91E7OVdZ19PpikuJTmM6i0OJqRtfxy9ZF/ DJd/uEiarsZOy43/BuZ0qrqZffFXBW9yYb8eA1LkcNX67w2i19d6BEs6t7c6cVDJ Mb5AupWriljNBnI+jwyxT1pBnb2rlnQFrwQadrnddbzjtiggVG6kY0rBiC1/Uwb7 ExhMGx+Dicm8sNSVJ/yxYHjEzl5ACkEsr3BmMxAIPVRsRH7LpTDEVnd9aWtvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN+/R7m+BbE2jC/vvbjq784DDtPkwHwYDVR0j BBgwFoAUbcxpUI705nDvvFxpID1rEg+pOS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjA3M2FjZS1hNjkxLTQ4NjMtOWMxYy01OWIyZGI5Y2I0NjMvMC82RENDNjk1MDhF RjRFNjcwRUZCQzVDNjkyMDNENkIxMjBGQTkzOTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRDQzY5NTA4RUY0RTY3MEVGQkM1QzY5MjAzRDZCMTIwRkE5 MzkyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIwNzNhY2UtYTY5MS00ODYzLTlj MWMtNTliMmRiOWNiNDYzLzAvNkRDQzY5NTA4RUY0RTY3MEVGQkM1QzY5MjAzRDZC MTIwRkE5MzkyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAptmWYrfvr4byue7kbwXQYlRjiNrnDbEiKL Bf+3sW5dnIC6YahgO+26hDfoCgB8V3n9Pgr2lBke4wKPZ1frdEwO/gA+rKXsEkkF ivOgeNPmXckpXBJrNYm4St59fdFBFPocjpGtzR9653q7ndPigEpjw49RVskngXYP g5qsT4sPveOhQ+rH8XvZ8xBwS7JQOi3SGEioZCchAD8rr81a4Hj8uRNM1fIFdCrY aC3/af/Vo9hgi7nH3mjECI+Z+kxrVq/69zfC+d9b8AtY7sHppEa/D6ymwFvRdd/N uI5wQxf1epqkEVBwfpOzm1LTXw4iZMbHNt+HetBAMErL4QsAiOc= -----END CERTIFICATE-----Generated at Wed Nov 5 05:08:39 2025 by rpki-client