$ rpki-client -vvf repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft File: 6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft (raw, json) Hash identifier: EwRZdSo0KGhc3cRsLuvNO6tzCZ/f3Khs1bqWU7Jt0+k= Subject key identifier: 48:4E:27:DC:83:52:C1:38:82:B0:17:E2:B9:91:F9:B0:99:2D:10:9C Authority key identifier: 6A:2F:66:2B:6D:6A:DE:8B:FC:30:D2:CD:E4:9E:36:01:52:FD:38:BF Certificate issuer: /CN=6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF Certificate serial: 4DCECA1092B973642339D06480423299F99D59B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft Manifest number: 0216 Signing time: Sun 19 Oct 2025 15:42:06 +0000 Manifest this update: Sun 19 Oct 2025 15:37:06 +0000 Manifest next update: Wed 22 Oct 2025 18:32:06 +0000 Files and hashes: 1: 6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.crl (hash: YJ2bfGlqkJ8lq3P233oHH3a1EYRQSD1wlMuIulEMhjM=) 2: 3130332e3135382e3132382e302f32332d3234203d3e203338333230.roa (hash: k8S4ytxUaj76beyPRcDHD1fQEEQNVlrOr14776a6SbE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.crl rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 18:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:ce:ca:10:92:b9:73:64:23:39:d0:64:80:42:32:99:f9:9d:59:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF Validity Not Before: Oct 19 15:37:06 2025 GMT Not After : Oct 22 18:32:06 2025 GMT Subject: CN=484E27DC8352C13882B017E2B991F9B0992D109C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3f:fc:5d:38:57:a0:26:46:ad:95:aa:37:a5: ea:15:ca:f5:d2:b4:5f:dd:4e:67:ee:5c:eb:8d:e0: 5f:a0:5f:76:b2:16:0f:dc:ba:21:7f:38:79:a7:ff: 40:3d:4f:01:b4:55:33:85:1b:97:1b:6e:c0:d1:02: 96:16:c7:2d:2e:5d:3b:9b:2c:90:62:8e:7c:be:fc: a4:af:bd:bb:15:96:92:e0:1a:aa:4d:07:8a:b6:d9: 2b:3b:d7:19:36:52:3f:36:47:ae:e1:ee:45:4e:1a: 1c:c4:cc:7f:75:11:bb:cd:11:af:68:34:2a:ae:b2: 37:b7:69:cc:ad:25:36:26:a0:96:62:70:a1:8b:1e: 7d:01:aa:22:26:84:01:da:78:8c:e9:fc:16:2b:31: 9a:82:18:b9:f1:44:74:bf:f3:e0:2b:33:43:fc:dd: 87:c5:af:99:52:42:2b:88:c0:7e:47:87:ce:ea:24: 45:26:de:2e:34:45:64:ab:5b:39:52:2e:2e:34:9a: 7f:65:e4:e7:91:15:fc:38:f5:44:b3:52:16:10:fb: 35:8c:57:0d:f1:e9:c4:87:83:ba:d1:03:20:f1:56: 9c:25:c8:93:e5:c6:1f:c9:e2:0f:83:a0:f3:db:9b: 12:9a:c5:7a:fc:f1:7c:08:08:11:6c:ae:6d:ee:16: e9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4E:27:DC:83:52:C1:38:82:B0:17:E2:B9:91:F9:B0:99:2D:10:9C X509v3 Authority Key Identifier: keyid:6A:2F:66:2B:6D:6A:DE:8B:FC:30:D2:CD:E4:9E:36:01:52:FD:38:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/6A2F662B6D6ADE8BFC30D2CDE49E360152FD38BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:8f:b1:b3:eb:7b:f3:df:82:1f:1d:f0:b0:e0:a2:57:9d:d2: 68:e3:da:ac:41:e0:94:2b:de:41:cf:8b:2d:80:3a:fe:93:ac: fd:79:92:ea:f3:38:d5:b7:f8:64:c8:24:bc:71:cb:86:9f:19: 0f:87:df:87:09:fd:fd:54:4b:3f:31:1f:d4:24:df:af:81:6b: 86:dd:2d:3c:c6:32:99:5b:e9:ae:db:3b:5f:6c:61:fc:68:cd: 0b:ea:0d:fb:f1:43:8f:20:0d:37:78:95:5b:42:50:d9:6e:29: 74:07:5a:3c:e0:c1:81:a2:20:5d:90:d9:59:da:4d:4a:4f:79: 2f:4f:3d:d7:0b:2a:aa:00:ce:5b:d0:ae:c9:2d:22:d6:6e:25: 0c:72:3d:d4:a7:1d:27:a2:02:51:4e:b5:61:ac:23:ee:84:5c: 51:4d:ad:20:25:54:83:bd:08:00:ab:7c:35:e8:d0:40:31:50: 1d:17:64:a9:95:0a:c3:d8:6d:18:e3:6a:f9:7c:0e:71:be:bd: c1:d6:56:ba:ea:ce:0e:87:81:b6:4b:37:dd:af:4b:68:68:ee: 71:ca:ce:e5:76:6c:b1:44:ed:cf:e3:0a:f0:84:69:37:ca:4a: 16:fa:34:31:e9:80:94:77:32:7f:aa:7b:e7:df:38:dd:7e:d1: 1c:7d:7f:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTc7KEJK5c2QjOdBkgEIymfmdWbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEyRjY2MkI2RDZBREU4QkZDMzBEMkNERTQ5RTM2MDE1 MkZEMzhCRjAeFw0yNTEwMTkxNTM3MDZaFw0yNTEwMjIxODMyMDZaMDMxMTAvBgNV BAMTKDQ4NEUyN0RDODM1MkMxMzg4MkIwMTdFMkI5OTFGOUIwOTkyRDEwOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdP/xdOFegJkatlao3peoVyvXS tF/dTmfuXOuN4F+gX3ayFg/cuiF/OHmn/0A9TwG0VTOFG5cbbsDRApYWxy0uXTub LJBijny+/KSvvbsVlpLgGqpNB4q22Ss71xk2Uj82R67h7kVOGhzEzH91EbvNEa9o NCqusje3acytJTYmoJZicKGLHn0BqiImhAHaeIzp/BYrMZqCGLnxRHS/8+ArM0P8 3YfFr5lSQiuIwH5Hh87qJEUm3i40RWSrWzlSLi40mn9l5OeRFfw49USzUhYQ+zWM Vw3x6cSHg7rRAyDxVpwlyJPlxh/J4g+DoPPbmxKaxXr88XwICBFsrm3uFukjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSE4n3INSwTiCsBfiuZH5sJktEJwwHwYDVR0j BBgwFoAUai9mK21q3ov8MNLN5J42AVL9OL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x M2YwYTgzYy0yYmMwLTQyYTUtYTRhZS0xMWE1Mzg4MmRmMTAvMC82QTJGNjYyQjZE NkFERThCRkMzMEQyQ0RFNDlFMzYwMTUyRkQzOEJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEyRjY2MkI2RDZBREU4QkZDMzBEMkNERTQ5RTM2MDE1MkZE MzhCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTNmMGE4M2MtMmJjMC00MmE1LWE0 YWUtMTFhNTM4ODJkZjEwLzAvNkEyRjY2MkI2RDZBREU4QkZDMzBEMkNERTQ5RTM2 MDE1MkZEMzhCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWPsbPre/Pfgh8d8LDgoled0mjj2qxB4JQr 3kHPiy2AOv6TrP15kurzONW3+GTIJLxxy4afGQ+H34cJ/f1USz8xH9Qk36+Ba4bd LTzGMplb6a7bO19sYfxozQvqDfvxQ48gDTd4lVtCUNluKXQHWjzgwYGiIF2Q2Vna TUpPeS9PPdcLKqoAzlvQrsktItZuJQxyPdSnHSeiAlFOtWGsI+6EXFFNrSAlVIO9 CACrfDXo0EAxUB0XZKmVCsPYbRjjavl8DnG+vcHWVrrqzg6HgbZLN92vS2ho7nHK zuV2bLFE7c/jCvCEaTfKShb6NDHpgJR3Mn+qe+ffON1+0Rx9fyQ= -----END CERTIFICATE-----Generated at Mon Oct 20 12:09:31 2025 by rpki-client