$ rpki-client -vvf repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft File: 6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft (raw, json) Hash identifier: G7u3VPhhqwsWjtHSSJ4erCEwvz8LJK13pAo6akpt/9c= Subject key identifier: 07:D2:EA:0E:2E:62:9B:6F:56:07:7C:2A:EA:6D:8A:DD:73:51:93:BA Authority key identifier: 6C:F6:DF:7E:65:16:A6:AB:F5:39:F0:39:6C:B6:C0:D4:DB:50:F4:D8 Certificate issuer: /CN=6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8 Certificate serial: 49775F58934B1E003050E7B100C5A6CE29F80489 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft Manifest number: 0217 Signing time: Sun 02 Nov 2025 08:41:52 +0000 Manifest this update: Sun 02 Nov 2025 08:36:52 +0000 Manifest next update: Wed 05 Nov 2025 16:10:52 +0000 Files and hashes: 1: 6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl (hash: jhjydefD96q/qwr9wJpq0wAzpE7YONV1r53F/TRjB4s=) 2: 3130332e3139312e3134382e302f32332d3234203d3e2034383030.roa (hash: LB25lzl1k2b8wSXRCoswASZkgaqBVFdROFOv1MVYW7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:77:5f:58:93:4b:1e:00:30:50:e7:b1:00:c5:a6:ce:29:f8:04:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8 Validity Not Before: Nov 2 08:36:52 2025 GMT Not After : Nov 5 16:10:52 2025 GMT Subject: CN=07D2EA0E2E629B6F56077C2AEA6D8ADD735193BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:db:86:47:67:65:e1:ff:3b:25:b7:79:d7:ec: d2:4a:3e:e3:86:ef:2a:8e:5f:09:3d:73:e4:f1:2e: 6c:fd:ae:b4:26:25:ef:77:f1:f7:9a:b0:0a:e8:46: e5:d0:6f:b6:66:bc:a3:07:37:f9:d9:b7:be:25:23: 38:9f:61:55:89:24:78:28:ee:ac:e8:9c:03:6c:06: 67:30:b5:dd:73:b3:9e:ac:e2:91:08:be:2d:cc:cc: 21:22:88:50:82:5b:fc:98:92:24:41:0d:1e:8d:76: bf:0c:3e:5a:b0:cc:78:23:d4:e3:57:1e:72:0e:ac: 49:6f:da:28:8d:07:b1:71:ec:db:22:59:45:75:73: 14:ad:4f:18:24:80:e8:b7:c3:d8:28:40:50:23:e4: 24:62:26:6b:c6:83:ce:25:5c:e8:e0:39:67:d1:e8: 8e:47:8c:96:28:f4:75:1d:20:59:00:9e:a1:fc:9b: 4e:ba:86:8b:29:b7:41:76:be:8c:eb:17:40:a7:9d: 6e:84:30:e9:fc:8c:3c:ec:4f:91:9d:82:8c:76:4b: a8:14:37:96:29:8c:c5:5e:d7:ba:ea:75:55:f8:7b: bc:6b:39:ed:b7:d7:fc:14:64:7f:fd:37:6f:a1:6f: c6:1b:c3:a7:03:81:40:6f:b3:62:be:c2:80:ed:e4: 0a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D2:EA:0E:2E:62:9B:6F:56:07:7C:2A:EA:6D:8A:DD:73:51:93:BA X509v3 Authority Key Identifier: keyid:6C:F6:DF:7E:65:16:A6:AB:F5:39:F0:39:6C:B6:C0:D4:DB:50:F4:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:19:b6:89:98:9e:eb:8d:a9:82:16:0a:52:e8:ed:1c:a0:5c: c9:5b:ec:96:42:39:59:0e:13:cf:40:b6:4b:f5:e7:b0:9b:24: c8:de:34:72:40:ef:d4:84:d1:67:de:85:8b:e4:ee:e6:93:be: 20:ae:1a:e7:76:25:cb:e5:b7:47:e1:5e:40:34:c6:dc:c5:e9: 00:68:8b:a3:99:36:2e:5c:0c:fb:57:1b:05:72:5e:d5:69:6b: 4a:1d:96:ce:a0:05:d7:c6:37:f3:38:ff:8b:05:a2:fa:eb:e3: ee:ee:d6:24:bc:d4:bf:72:b3:cc:b5:9b:82:f4:de:57:d8:11: 29:45:80:59:77:5f:a9:07:ed:d0:52:89:60:01:52:12:b7:35: 90:1d:5b:cb:32:ea:31:ae:99:18:71:61:57:80:46:63:61:18: ba:b1:6f:5e:26:4e:b0:2b:48:85:8d:e6:f3:31:84:0c:38:57: 1c:48:d6:bf:cb:54:80:1c:de:44:69:60:bb:a8:e4:dd:1e:be: f6:6f:22:52:3a:98:28:c3:f2:93:fe:b9:74:d9:d7:1f:9a:50: 73:62:bb:5f:b7:fb:8f:9c:3f:5e:fd:f8:5b:dc:87:b7:91:04: d7:cb:01:ce:81:c3:e9:10:a0:bc:e0:72:e4:26:05:98:fd:98: 6b:a6:a8:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSXdfWJNLHgAwUOexAMWmzin4BIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMwRDRE QjUwRjREODAeFw0yNTExMDIwODM2NTJaFw0yNTExMDUxNjEwNTJaMDMxMTAvBgNV BAMTKDA3RDJFQTBFMkU2MjlCNkY1NjA3N0MyQUVBNkQ4QURENzM1MTkzQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ24ZHZ2Xh/zslt3nX7NJKPuOG 7yqOXwk9c+TxLmz9rrQmJe938feasAroRuXQb7ZmvKMHN/nZt74lIzifYVWJJHgo 7qzonANsBmcwtd1zs56s4pEIvi3MzCEiiFCCW/yYkiRBDR6Ndr8MPlqwzHgj1ONX HnIOrElv2iiNB7Fx7NsiWUV1cxStTxgkgOi3w9goQFAj5CRiJmvGg84lXOjgOWfR 6I5HjJYo9HUdIFkAnqH8m066hospt0F2vozrF0CnnW6EMOn8jDzsT5Gdgox2S6gU N5YpjMVe17rqdVX4e7xrOe231/wUZH/9N2+hb8Ybw6cDgUBvs2K+woDt5ArlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB9LqDi5im29WB3wq6m2K3XNRk7owHwYDVR0j BBgwFoAUbPbffmUWpqv1OfA5bLbA1NtQ9NgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDkwNmZjMC00MzYzLTRmNDYtOWIxNC01YzFhYjgyNWEzMzUvMC82Q0Y2REY3RTY1 MTZBNkFCRjUzOUYwMzk2Q0I2QzBENERCNTBGNEQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMwRDREQjUw RjREOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ5MDZmYzAtNDM2My00ZjQ2LTli MTQtNWMxYWI4MjVhMzM1LzAvNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMw RDREQjUwRjREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEZtomYnuuNqYIWClLo7RygXMlb7JZCOVkO E89Atkv157CbJMjeNHJA79SE0WfehYvk7uaTviCuGud2Jcvlt0fhXkA0xtzF6QBo i6OZNi5cDPtXGwVyXtVpa0odls6gBdfGN/M4/4sFovrr4+7u1iS81L9ys8y1m4L0 3lfYESlFgFl3X6kH7dBSiWABUhK3NZAdW8sy6jGumRhxYVeARmNhGLqxb14mTrAr SIWN5vMxhAw4VxxI1r/LVIAc3kRpYLuo5N0evvZvIlI6mCjD8pP+uXTZ1x+aUHNi u1+3+4+cP179+Fvch7eRBNfLAc6Bw+kQoLzgcuQmBZj9mGumqMU= -----END CERTIFICATE-----Generated at Tue Nov 4 01:58:36 2025 by rpki-client