$ rpki-client -vvf repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft File: 6490D3D85678E9C1587D21E9545EF730D21346B5.mft (raw, json) Hash identifier: 0oavA+W/5w+uGTG976/eGPNtOfcq5pmEmqd+7HJEPK0= Subject key identifier: C0:69:1A:1D:9B:5B:D9:28:4E:85:FE:9E:9D:30:D0:EA:B4:02:85:BA Authority key identifier: 64:90:D3:D8:56:78:E9:C1:58:7D:21:E9:54:5E:F7:30:D2:13:46:B5 Certificate issuer: /CN=6490D3D85678E9C1587D21E9545EF730D21346B5 Certificate serial: 5436AE7C4A9916C607DF1EF4946E6B93F8087759 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft Manifest number: CF Signing time: Tue 04 Nov 2025 09:40:45 +0000 Manifest this update: Tue 04 Nov 2025 09:35:45 +0000 Manifest next update: Fri 07 Nov 2025 16:53:45 +0000 Files and hashes: 1: 3136302e32302e3232302e302f32342d3234203d3e20313532373835.roa (hash: jOlBtBmkXSj+fSYaHlDdKI9RGX/xpsWQdqL9iASpC0w=) 2: 6490D3D85678E9C1587D21E9545EF730D21346B5.crl (hash: MEGJjZjJC6GGZ/4vFl0G+judL8Awgwo/LqN0+gs98hk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.crl rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:36:ae:7c:4a:99:16:c6:07:df:1e:f4:94:6e:6b:93:f8:08:77:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6490D3D85678E9C1587D21E9545EF730D21346B5 Validity Not Before: Nov 4 09:35:45 2025 GMT Not After : Nov 7 16:53:45 2025 GMT Subject: CN=C0691A1D9B5BD9284E85FE9E9D30D0EAB40285BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:80:8e:0d:d0:83:13:10:aa:0e:cf:fc:5b:20: 24:c7:f0:41:85:31:d2:25:cf:c4:80:68:6e:f0:76: 46:43:b5:a8:c8:60:fd:a0:73:d5:dc:68:ed:da:f8: 69:36:7b:08:b0:f0:69:6c:b9:f2:0e:fd:41:7e:de: 10:a4:26:0c:23:ec:aa:ca:f8:2d:41:8a:ff:c0:2f: 87:ef:ef:a4:f6:5b:3a:f5:d3:94:3c:bd:81:60:60: 9d:89:6f:32:43:9d:15:a3:01:cf:1b:09:32:f0:a4: 2b:70:f3:fc:ad:55:14:df:67:25:94:ef:43:87:a7: 31:a4:f3:ca:e4:6e:f0:6c:08:03:94:44:b5:02:61: b6:fc:cc:7c:82:85:0d:b5:7e:eb:ab:71:bb:0b:24: 70:0b:3b:27:fb:57:69:53:4d:83:fe:27:20:f1:98: 81:c4:95:15:e2:3e:2a:d4:2a:19:b5:a0:36:ea:9f: 4f:63:20:56:f9:86:4c:04:63:2e:f9:78:fe:89:c0: 32:2b:54:d0:f7:c3:7c:ad:03:b2:93:24:4f:31:8a: 95:bc:87:94:0d:92:c0:ea:54:8f:c0:ca:d9:4e:f9: b1:f3:35:18:92:5a:62:be:ba:d1:3a:35:16:c9:9b: 14:c7:0a:41:e6:32:63:87:1d:d2:87:99:64:75:66: cd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:69:1A:1D:9B:5B:D9:28:4E:85:FE:9E:9D:30:D0:EA:B4:02:85:BA X509v3 Authority Key Identifier: keyid:64:90:D3:D8:56:78:E9:C1:58:7D:21:E9:54:5E:F7:30:D2:13:46:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6490D3D85678E9C1587D21E9545EF730D21346B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/6490D3D85678E9C1587D21E9545EF730D21346B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:a4:b0:30:4a:94:8b:5c:77:fe:7b:17:0f:b0:1c:b9:75:ba: 1c:30:03:e4:28:6e:16:da:4a:f3:7f:cd:4d:e8:d4:e7:2d:f4: eb:d3:23:f7:a7:c4:5a:f0:7f:ca:98:f8:74:89:08:05:1a:a5: e8:50:8a:ec:b9:ee:6f:c6:bd:75:4b:e0:0e:7a:85:e0:c8:d4: 4d:a0:ed:7b:ca:f7:cd:79:79:b8:9c:88:6a:64:2a:b7:18:24: 2c:29:c9:91:a5:4f:b0:e0:f5:88:60:2a:a5:3b:64:c3:51:4d: f8:2f:27:53:52:da:42:f1:59:d6:4e:d7:ec:ff:c2:4b:fa:19: ad:6b:27:2e:2a:e1:4e:ab:ba:18:a4:9c:c0:ca:45:62:41:72: f0:87:74:ee:e2:ec:05:30:dc:15:0f:ef:8d:fa:75:3a:7f:c2: 2c:a4:f2:14:03:0b:fe:fd:7d:9b:e8:20:3f:43:f8:7e:f4:85: 75:9f:8c:a4:a3:06:24:99:2c:db:ed:93:b8:c5:db:c2:52:9c: 9b:dd:9a:ee:0f:24:92:60:b6:2b:15:2e:ac:86:7a:7a:53:66: e7:de:86:5e:54:24:2a:09:8c:db:12:e6:25:e1:d3:64:88:5f: d5:d9:f2:b6:e1:86:e0:17:2d:b4:9c:da:10:ea:ca:53:17:84: ad:89:67:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVDaufEqZFsYH3x70lG5rk/gId1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3MzBE MjEzNDZCNTAeFw0yNTExMDQwOTM1NDVaFw0yNTExMDcxNjUzNDVaMDMxMTAvBgNV BAMTKEMwNjkxQTFEOUI1QkQ5Mjg0RTg1RkU5RTlEMzBEMEVBQjQwMjg1QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/gI4N0IMTEKoOz/xbICTH8EGF MdIlz8SAaG7wdkZDtajIYP2gc9XcaO3a+Gk2ewiw8GlsufIO/UF+3hCkJgwj7KrK +C1Biv/AL4fv76T2Wzr105Q8vYFgYJ2JbzJDnRWjAc8bCTLwpCtw8/ytVRTfZyWU 70OHpzGk88rkbvBsCAOURLUCYbb8zHyChQ21fuurcbsLJHALOyf7V2lTTYP+JyDx mIHElRXiPirUKhm1oDbqn09jIFb5hkwEYy75eP6JwDIrVND3w3ytA7KTJE8xipW8 h5QNksDqVI/AytlO+bHzNRiSWmK+utE6NRbJmxTHCkHmMmOHHdKHmWR1Zs0JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwGkaHZtb2ShOhf6enTDQ6rQChbowHwYDVR0j BBgwFoAUZJDT2FZ46cFYfSHpVF73MNITRrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODg1NzVjOC01NGZlLTQ4MDEtYTdiMS01MTdkMGU2YjhiNzMvMC82NDkwRDNEODU2 NzhFOUMxNTg3RDIxRTk1NDVFRjczMEQyMTM0NkI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3MzBEMjEz NDZCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg4NTc1YzgtNTRmZS00ODAxLWE3 YjEtNTE3ZDBlNmI4YjczLzAvNjQ5MEQzRDg1Njc4RTlDMTU4N0QyMUU5NTQ1RUY3 MzBEMjEzNDZCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMKksDBKlItcd/57Fw+wHLl1uhwwA+Qobhba SvN/zU3o1Oct9OvTI/enxFrwf8qY+HSJCAUapehQiuy57m/GvXVL4A56heDI1E2g 7XvK9815ebiciGpkKrcYJCwpyZGlT7Dg9YhgKqU7ZMNRTfgvJ1NS2kLxWdZO1+z/ wkv6Ga1rJy4q4U6ruhiknMDKRWJBcvCHdO7i7AUw3BUP7436dTp/wiyk8hQDC/79 fZvoID9D+H70hXWfjKSjBiSZLNvtk7jF28JSnJvdmu4PJJJgtisVLqyGenpTZufe hl5UJCoJjNsS5iXh02SIX9XZ8rbhhuAXLbSc2hDqylMXhK2JZ9A= -----END CERTIFICATE-----Generated at Tue Nov 4 21:06:22 2025 by rpki-client