$ rpki-client -vvf repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft File: 6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft (raw, json) Hash identifier: y31OkBkZV1dqXZ+ZncHYmcF9rfCn43rb48/hwWnVUP8= Subject key identifier: 50:31:F2:6E:97:FA:0E:73:9C:AD:75:B4:8D:F6:2E:E0:56:09:BE:7E Authority key identifier: 6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 Certificate issuer: /CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Certificate serial: 58BDD4E74EDA4839F249DCA428F6CCD28E031678 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft Manifest number: 036F Signing time: Mon 20 Oct 2025 04:21:31 +0000 Manifest this update: Mon 20 Oct 2025 04:16:31 +0000 Manifest next update: Thu 23 Oct 2025 09:52:31 +0000 Files and hashes: 1: 6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl (hash: uMozhHS7yi93rq+StlQSG/jIIyKIPS02Vw0xSvVgytk=) 2: 3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa (hash: QReThr3L/8y8L/3AEdob8H7epOdOKEjss3T3HzyvfMI=) 3: 3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa (hash: lkrHej4FZPJ4f2E40DosArf8hhkwpkjiPyYFXEzD3uU=) 4: 3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa (hash: G1U9gODI47ty2yrLIvmBDS+xG1WkgDbqidFt5qR0lew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 09:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:bd:d4:e7:4e:da:48:39:f2:49:dc:a4:28:f6:cc:d2:8e:03:16:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Validity Not Before: Oct 20 04:16:31 2025 GMT Not After : Oct 23 09:52:31 2025 GMT Subject: CN=5031F26E97FA0E739CAD75B48DF62EE05609BE7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a2:43:22:6f:1a:0b:e6:50:06:62:b4:90:48: 71:3e:df:ca:e0:70:a1:43:fe:2b:11:5c:01:cb:ec: 67:44:a2:a1:d1:37:65:23:9c:de:56:96:92:1b:87: 76:33:39:5a:a4:6f:b1:6e:ef:eb:33:7c:8c:2c:54: e4:39:68:1d:68:ca:fa:f8:6e:20:7f:7f:ad:6a:a1: bb:28:86:85:2a:07:47:6f:15:32:b9:f9:db:8f:04: 37:59:02:a5:0b:5d:62:b0:7b:23:1f:5e:aa:8e:a1: 7e:68:44:e9:44:5f:ab:1d:86:20:7b:c7:e6:28:86: 7c:a1:a6:2e:c8:dc:87:9a:e8:06:08:a2:e8:fb:b1: 0c:69:b4:79:93:e6:5b:8d:a7:8a:ce:0b:7f:18:63: 60:30:5d:f5:c9:a8:1c:1a:89:10:7e:f1:cf:eb:b7: e6:d9:3e:11:ea:de:67:fb:8b:26:50:7b:cb:ed:a2: 1f:ed:cd:f1:ed:d7:ca:39:87:80:6c:20:f2:1b:18: 37:7b:b6:04:d2:4a:9a:4d:78:d6:b3:84:aa:2a:ed: 38:61:41:52:70:47:16:6c:e3:f8:76:56:2f:e0:ea: c4:74:69:e0:86:90:55:1c:f5:12:9c:bd:31:bc:ab: 17:86:a7:fe:91:22:45:33:ca:90:55:c7:cb:8d:d0: b5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:31:F2:6E:97:FA:0E:73:9C:AD:75:B4:8D:F6:2E:E0:56:09:BE:7E X509v3 Authority Key Identifier: keyid:6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:11:b2:4c:56:a5:a2:c7:cc:60:45:6b:da:45:14:b4:c8:43: 0a:47:99:a8:4b:c3:ef:5a:ef:f2:b8:42:6a:6a:76:0d:2d:36: 73:7b:69:57:4f:0c:04:2b:7f:65:d7:45:a0:3b:f0:c2:6b:a0: f9:6e:64:a6:41:36:0c:1f:4a:18:73:7c:70:6b:d5:99:bd:d3: 94:5d:b2:3e:8c:40:27:d0:84:f4:cb:f1:80:cd:55:10:97:86: cb:76:5c:2b:38:58:5f:a3:5f:1c:72:e4:59:51:44:f1:5a:9e: 6d:08:f3:c6:30:a4:4d:ed:50:cf:eb:22:5f:73:3b:2d:58:c9: 57:d7:4b:dc:bb:ff:7a:0d:b4:d9:3b:c2:b9:40:16:cf:c5:f9: 82:bb:46:a6:7d:b7:fc:e1:c6:63:65:7f:1f:03:c9:29:41:e7: a2:a8:1f:c7:db:7f:3e:05:59:27:58:1d:19:a8:70:70:43:52: 05:a4:40:bf:2d:16:3b:b3:54:20:a9:f5:ac:65:f5:86:2a:5f: 1a:71:14:46:69:77:92:61:2d:5f:ac:d7:b1:8a:82:cb:31:e6: 0e:76:1b:c5:6f:b4:0a:f0:f1:4a:ea:13:38:7d:f8:08:7b:0e: c8:2a:ad:dc:77:5f:04:0c:de:5a:e4:53:6d:b9:67:f0:59:74: ce:76:c6:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWL3U507aSDnySdykKPbM0o4DFngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlD MEYyRTNGNzAeFw0yNTEwMjAwNDE2MzFaFw0yNTEwMjMwOTUyMzFaMDMxMTAvBgNV BAMTKDUwMzFGMjZFOTdGQTBFNzM5Q0FENzVCNDhERjYyRUUwNTYwOUJFN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgokMibxoL5lAGYrSQSHE+38rg cKFD/isRXAHL7GdEoqHRN2UjnN5WlpIbh3YzOVqkb7Fu7+szfIwsVOQ5aB1oyvr4 biB/f61qobsohoUqB0dvFTK5+duPBDdZAqULXWKweyMfXqqOoX5oROlEX6sdhiB7 x+Yohnyhpi7I3Iea6AYIouj7sQxptHmT5luNp4rOC38YY2AwXfXJqBwaiRB+8c/r t+bZPhHq3mf7iyZQe8vtoh/tzfHt18o5h4BsIPIbGDd7tgTSSppNeNazhKoq7Thh QVJwRxZs4/h2Vi/g6sR0aeCGkFUc9RKcvTG8qxeGp/6RIkUzypBVx8uN0LXBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUDHybpf6DnOcrXW0jfYu4FYJvn4wHwYDVR0j BBgwFoAUagLcEPQfzg60l5jdvPMfycDy4/cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTQ2YmRhZC1mMTMwLTQ4YTktODUzNC01NGJhM2U4ZWQ2MWYvMC82QTAyREMxMEY0 MUZDRTBFQjQ5Nzk4RERCQ0YzMUZDOUMwRjJFM0Y3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlDMEYy RTNGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE0NmJkYWQtZjEzMC00OGE5LTg1 MzQtNTRiYTNlOGVkNjFmLzAvNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFG QzlDMEYyRTNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4RskxWpaLHzGBFa9pFFLTIQwpHmahLw+9a 7/K4Qmpqdg0tNnN7aVdPDAQrf2XXRaA78MJroPluZKZBNgwfShhzfHBr1Zm905Rd sj6MQCfQhPTL8YDNVRCXhst2XCs4WF+jXxxy5FlRRPFanm0I88YwpE3tUM/rIl9z Oy1YyVfXS9y7/3oNtNk7wrlAFs/F+YK7RqZ9t/zhxmNlfx8DySlB56KoH8fbfz4F WSdYHRmocHBDUgWkQL8tFjuzVCCp9axl9YYqXxpxFEZpd5JhLV+s17GKgssx5g52 G8VvtArw8UrqEzh9+Ah7Dsgqrdx3XwQM3lrkU225Z/BZdM52xnc= -----END CERTIFICATE-----Generated at Tue Oct 21 04:44:05 2025 by rpki-client