$ rpki-client -vvf repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft File: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft (raw, json) Hash identifier: WjThKy44Ls0SgM2jNS1dnqkPWaTrQTW+LJumHCdFgRI= Subject key identifier: BD:64:4C:E1:96:FB:27:68:96:C7:40:CF:14:E2:5D:B1:90:D2:92:8B Authority key identifier: 6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA Certificate issuer: /CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Certificate serial: 62F7336BEA9B258E6DAE3A32D1BDD1FB0E77D509 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft Manifest number: 021A Signing time: Sat 18 Oct 2025 08:10:02 +0000 Manifest this update: Sat 18 Oct 2025 08:05:02 +0000 Manifest next update: Tue 21 Oct 2025 09:25:02 +0000 Files and hashes: 1: 3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa (hash: R1C6O4ul1Ppozfaiesg+Uhn8MwDAOfzdAmq+sSEet2w=) 2: 3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa (hash: XLXbrSM75a4OOhdIFSVSWGya3QA7TZER3P7tGhI+wW0=) 3: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl (hash: lXYDCgl/696R6gdqEU+Vv4KiTVP77HxJLpPM7xEGPSM=) 4: 3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa (hash: jcYNuwq5tBbtUM+5LFf+gih2lHYu/silWmdWErgVy5M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 09:25:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:f7:33:6b:ea:9b:25:8e:6d:ae:3a:32:d1:bd:d1:fb:0e:77:d5:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Validity Not Before: Oct 18 08:05:02 2025 GMT Not After : Oct 21 09:25:02 2025 GMT Subject: CN=BD644CE196FB276896C740CF14E25DB190D2928B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:40:0e:3a:54:7a:2f:44:f0:8b:c2:dd:4d:9d: f6:8f:ce:54:6e:f1:2c:63:35:24:12:75:eb:e6:57: 34:2f:35:47:22:19:84:90:85:64:f7:8f:a5:23:b4: 8f:d7:6e:2d:be:81:4a:8f:ab:47:bf:be:03:54:3a: 11:89:98:3d:d1:5b:e7:8c:ca:2f:84:f6:14:31:90: ed:fb:ef:af:36:b8:9e:a1:36:9e:7b:bb:35:02:30: c6:29:2d:b6:09:4c:fe:0c:0d:08:b1:ec:05:52:fe: bc:70:9a:b7:a4:f9:1e:fd:c1:56:5e:c1:00:3e:d0: 01:10:5a:b6:0a:bc:ee:e6:bb:1c:18:86:04:b7:a3: 54:04:d1:71:f4:b3:fe:a4:10:72:e5:25:ac:32:54: b2:c5:24:31:69:e9:42:59:10:a5:d6:12:59:3b:f5: ca:de:47:2c:3b:a7:ee:9d:df:04:a1:ed:5c:4d:78: 69:87:9a:c5:8d:a6:f8:ea:9a:fd:c3:3f:7b:19:45: c5:67:f6:3c:c6:ef:c4:a3:52:d3:ad:14:18:55:51: 89:60:b3:68:2b:cc:bb:70:00:c7:35:fb:b9:76:ed: b5:45:34:ae:e9:f7:7a:7c:27:2c:16:03:29:7a:d4: bf:1e:33:7d:6b:cb:f0:0b:be:0c:24:d0:32:35:65: 06:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:64:4C:E1:96:FB:27:68:96:C7:40:CF:14:E2:5D:B1:90:D2:92:8B X509v3 Authority Key Identifier: keyid:6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:62:82:00:42:e7:8e:ae:fa:eb:29:49:ac:3d:96:22:61:c4: ae:59:8e:e2:cd:b1:d2:b3:33:2c:a1:e8:35:88:fe:ed:98:f4: 37:cb:5c:a3:cb:26:a5:2d:97:17:49:58:e0:b8:e2:c3:9e:38: 5b:dc:09:9c:5d:94:dd:7f:12:e8:ab:f5:a7:11:b8:83:84:34: 73:85:cc:3e:7a:b8:39:53:56:4c:80:31:5c:db:2c:78:42:7d: b4:53:0f:00:ec:dc:a3:1d:d2:8e:ec:53:84:82:48:ff:84:78: 79:0b:fc:5b:2e:5f:f6:68:8f:c1:c1:8d:f4:7c:29:46:9e:e7: da:8c:a1:9b:1a:a8:86:a8:57:48:30:f3:77:fa:e5:7d:a3:c4: 01:31:cc:97:91:42:70:85:b0:04:d4:bb:05:b3:27:dc:42:4f: 25:b0:b3:58:fc:03:8e:a6:cb:22:d2:36:7a:f7:37:6c:14:0d: 1c:9b:4f:cd:15:55:98:a2:b5:47:7c:31:83:84:f5:74:fc:2b: 07:15:ed:3b:2c:1a:cb:35:58:b5:8d:e6:09:53:03:2e:e8:2f: ac:b7:f9:3b:75:5e:3b:7e:80:4a:16:fe:2e:57:b4:cd:c2:38: 0b:85:d5:75:67:7f:35:18:3c:51:f6:6b:c2:b5:6b:6f:11:00: cc:b9:69:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYvcza+qbJY5trjoy0b3R+w531QkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMx REIwOEZEQTAeFw0yNTEwMTgwODA1MDJaFw0yNTEwMjEwOTI1MDJaMDMxMTAvBgNV BAMTKEJENjQ0Q0UxOTZGQjI3Njg5NkM3NDBDRjE0RTI1REIxOTBEMjkyOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgQA46VHovRPCLwt1NnfaPzlRu 8SxjNSQSdevmVzQvNUciGYSQhWT3j6UjtI/Xbi2+gUqPq0e/vgNUOhGJmD3RW+eM yi+E9hQxkO377682uJ6hNp57uzUCMMYpLbYJTP4MDQix7AVS/rxwmrek+R79wVZe wQA+0AEQWrYKvO7muxwYhgS3o1QE0XH0s/6kEHLlJawyVLLFJDFp6UJZEKXWElk7 9creRyw7p+6d3wSh7VxNeGmHmsWNpvjqmv3DP3sZRcVn9jzG78SjUtOtFBhVUYlg s2grzLtwAMc1+7l27bVFNK7p93p8JywWAyl61L8eM31ry/ALvgwk0DI1ZQYdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvWRM4Zb7J2iWx0DPFOJdsZDSkoswHwYDVR0j BBgwFoAUb8DJM0D/c1k0NMjv/O2Osx2wj9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjY1OTkwNC0zNzAyLTQ3OTctYmQxYi00NDdhYjhjOTRlMGMvMC82RkMwQzkzMzQw RkY3MzU5MzQzNEM4RUZGQ0VEOEVCMzFEQjA4RkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMxREIw OEZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY2NTk5MDQtMzcwMi00Nzk3LWJk MWItNDQ3YWI4Yzk0ZTBjLzAvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhF QjMxREIwOEZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdiggBC546u+uspSaw9liJhxK5ZjuLNsdKz Myyh6DWI/u2Y9DfLXKPLJqUtlxdJWOC44sOeOFvcCZxdlN1/Euir9acRuIOENHOF zD56uDlTVkyAMVzbLHhCfbRTDwDs3KMd0o7sU4SCSP+EeHkL/FsuX/Zoj8HBjfR8 KUae59qMoZsaqIaoV0gw83f65X2jxAExzJeRQnCFsATUuwWzJ9xCTyWws1j8A46m yyLSNnr3N2wUDRybT80VVZiitUd8MYOE9XT8KwcV7TssGss1WLWN5glTAy7oL6y3 +Tt1Xjt+gEoW/i5XtM3COAuF1XVnfzUYPFH2a8K1a28RAMy5abw= -----END CERTIFICATE-----Generated at Mon Oct 20 09:20:16 2025 by rpki-client