$ rpki-client -vvf repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft File: 6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft (raw, json) Hash identifier: Op8NjyPdjvM9tDd/qkO0BOuKYWs9/nQap2dSqper5cw= Subject key identifier: 0D:9E:7F:88:7B:4A:79:73:62:58:9E:C4:6C:EE:26:61:AA:B6:B7:80 Authority key identifier: 6B:A0:87:A8:C1:BF:46:BB:D4:74:8D:23:F9:E3:4B:92:77:4F:CC:66 Certificate issuer: /CN=6BA087A8C1BF46BBD4748D23F9E34B92774FCC66 Certificate serial: 59D1472581F069947CC0C5C8730008F2929A6CB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft Manifest number: CB Signing time: Mon 20 Oct 2025 05:10:54 +0000 Manifest this update: Mon 20 Oct 2025 05:05:54 +0000 Manifest next update: Thu 23 Oct 2025 14:01:54 +0000 Files and hashes: 1: 3230332e3131342e3232342e302f32332d3234203d3e203435363937.roa (hash: teH2zqo+KFTz5fsLV5Az67IPM5Fevb+2T7eyV5BSfR4=) 2: 6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl (hash: lfAzJueMCIJNLoecHnombulEZC0Cg6nHi8tZ22OROmg=) 3: 323030313a6466303a39613a3a2f34382d3438203d3e203435363937.roa (hash: ZceMWlNxLHIqsif36KN1ms0kpQpQ1f71pr5K0XWa9aY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:d1:47:25:81:f0:69:94:7c:c0:c5:c8:73:00:08:f2:92:9a:6c:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6BA087A8C1BF46BBD4748D23F9E34B92774FCC66 Validity Not Before: Oct 20 05:05:54 2025 GMT Not After : Oct 23 14:01:54 2025 GMT Subject: CN=0D9E7F887B4A797362589EC46CEE2661AAB6B780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:93:fd:de:5b:1d:f7:16:04:a7:4c:33:ae:3c: 4f:f9:1b:de:8b:80:cb:11:a2:a6:b0:71:ca:af:60: 2a:0b:06:f0:30:2d:4d:fb:03:c5:be:74:de:12:ae: b7:f8:1b:e4:44:8c:fb:43:5e:ce:ac:20:97:f1:8d: 3b:69:b7:89:fb:af:84:6e:04:11:bf:34:db:81:c6: a3:0d:94:e7:ac:83:1d:bf:a8:b8:63:f5:df:75:2b: f9:53:87:43:ce:92:ce:7d:b7:9a:a6:10:81:2b:c9: 89:65:8c:7f:22:de:29:e5:37:08:e7:e6:00:ba:3e: 9e:61:5b:d8:2c:20:e0:29:bb:06:5f:42:bd:c0:fd: c3:62:24:2a:b7:0a:a6:af:b0:01:dd:e0:13:fa:6f: 3c:05:70:62:11:ca:4d:f0:44:cc:2f:bf:d9:f1:69: 12:c8:e6:e1:61:65:20:1f:19:b0:74:b3:ab:64:43: 32:78:9e:b7:94:15:98:99:82:82:1e:86:7c:48:2d: ec:0b:ed:29:6e:84:be:8f:ce:85:b9:21:7f:80:de: 37:0a:04:38:8c:77:15:e1:96:80:80:c3:09:d2:09: 4f:4f:20:5d:d4:df:80:50:69:b6:e6:24:37:28:1d: 5d:da:0e:f1:65:5e:23:39:c4:c5:8e:61:cb:95:ec: 41:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:9E:7F:88:7B:4A:79:73:62:58:9E:C4:6C:EE:26:61:AA:B6:B7:80 X509v3 Authority Key Identifier: keyid:6B:A0:87:A8:C1:BF:46:BB:D4:74:8D:23:F9:E3:4B:92:77:4F:CC:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:12:6a:e0:e4:34:31:8c:e1:91:8f:01:ba:6d:d5:ea:7e:42: d1:ea:2e:96:be:e4:09:4d:28:4a:39:de:ed:e6:24:af:1a:81: a8:bc:eb:a9:26:3a:22:4b:d1:49:f3:06:cc:36:b9:fd:64:af: 12:bb:a7:65:46:3e:79:f7:bd:f2:62:ad:e6:ad:d4:00:0d:61: 9f:55:9c:4f:8b:88:f1:dd:b1:44:8e:14:63:5d:14:3d:ba:1a: 6c:31:f4:e4:de:cf:d1:cc:95:9f:a4:0e:fe:de:3d:32:7d:f7: 9a:bc:45:ed:1b:4d:ae:d7:a4:95:43:83:d8:b8:e2:c8:d3:ef: c6:02:e5:12:88:db:e4:b5:69:20:bc:e8:bb:2e:f2:be:e0:8c: 63:0d:c0:cf:49:91:64:55:24:f9:c7:23:ff:d3:b0:48:68:c9: 9e:e0:78:9e:e6:1c:ff:ed:d2:34:ef:5f:8b:9c:65:fb:9a:bc: fa:1f:45:39:b9:d6:a1:f4:49:28:8a:cc:0c:5c:ff:54:44:36: 22:b1:6b:b5:be:05:e6:54:24:da:14:28:64:b3:e8:67:3e:6e: ba:74:f1:8b:83:cf:fc:7b:76:5e:5f:b1:6e:65:4a:76:ad:55: 19:5f:ad:e7:cb:b2:00:6f:89:db:66:4d:d3:9d:6f:2f:bf:17: 9b:72:c1:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWdFHJYHwaZR8wMXIcwAI8pKabLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkJBMDg3QThDMUJGNDZCQkQ0NzQ4RDIzRjlFMzRCOTI3 NzRGQ0M2NjAeFw0yNTEwMjAwNTA1NTRaFw0yNTEwMjMxNDAxNTRaMDMxMTAvBgNV BAMTKDBEOUU3Rjg4N0I0QTc5NzM2MjU4OUVDNDZDRUUyNjYxQUFCNkI3ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4k/3eWx33FgSnTDOuPE/5G96L gMsRoqawccqvYCoLBvAwLU37A8W+dN4Srrf4G+REjPtDXs6sIJfxjTtpt4n7r4Ru BBG/NNuBxqMNlOesgx2/qLhj9d91K/lTh0POks59t5qmEIEryYlljH8i3inlNwjn 5gC6Pp5hW9gsIOApuwZfQr3A/cNiJCq3CqavsAHd4BP6bzwFcGIRyk3wRMwvv9nx aRLI5uFhZSAfGbB0s6tkQzJ4nreUFZiZgoIehnxILewL7SluhL6PzoW5IX+A3jcK BDiMdxXhloCAwwnSCU9PIF3U34BQabbmJDcoHV3aDvFlXiM5xMWOYcuV7EEBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDZ5/iHtKeXNiWJ7EbO4mYaq2t4AwHwYDVR0j BBgwFoAUa6CHqMG/RrvUdI0j+eNLkndPzGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzUwMDc2Ny05MjI3LTQzZWMtYTUyNS0yZTk3ZDVhMDNmMDkvMC82QkEwODdBOEMx QkY0NkJCRDQ3NDhEMjNGOUUzNEI5Mjc3NEZDQzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkJBMDg3QThDMUJGNDZCQkQ0NzQ4RDIzRjlFMzRCOTI3NzRG Q0M2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDM1MDA3NjctOTIyNy00M2VjLWE1 MjUtMmU5N2Q1YTAzZjA5LzAvNkJBMDg3QThDMUJGNDZCQkQ0NzQ4RDIzRjlFMzRC OTI3NzRGQ0M2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwSauDkNDGM4ZGPAbpt1ep+QtHqLpa+5AlN KEo53u3mJK8agai866kmOiJL0UnzBsw2uf1krxK7p2VGPnn3vfJireat1AANYZ9V nE+LiPHdsUSOFGNdFD26Gmwx9OTez9HMlZ+kDv7ePTJ995q8Re0bTa7XpJVDg9i4 4sjT78YC5RKI2+S1aSC86Lsu8r7gjGMNwM9JkWRVJPnHI//TsEhoyZ7geJ7mHP/t 0jTvX4ucZfuavPofRTm51qH0SSiKzAxc/1RENiKxa7W+BeZUJNoUKGSz6Gc+brp0 8YuDz/x7dl5fsW5lSnatVRlfrefLsgBvidtmTdOdby+/F5tywfY= -----END CERTIFICATE-----Generated at Tue Oct 21 00:00:49 2025 by rpki-client