$ rpki-client -vvf repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft File: 6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft (raw, json) Hash identifier: xHJbcEIPPItdp8M8z2AvmB/BLnRFz/LqDeHZOonls1I= Subject key identifier: E2:48:0F:C4:7D:56:CD:A2:56:33:C4:E6:E5:92:A7:75:51:93:0F:86 Authority key identifier: 6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB Certificate issuer: /CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB Certificate serial: 2212776E995FA2997EB65302DF91F2AEFABE6C75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft Manifest number: 03E6 Signing time: Sat 18 Oct 2025 16:51:43 +0000 Manifest this update: Sat 18 Oct 2025 16:46:43 +0000 Manifest next update: Tue 21 Oct 2025 17:19:43 +0000 Files and hashes: 1: 3130332e3131362e3130382e302f32342d3234203d3e20313331373835.roa (hash: LY7WT+w7FguQLmfrSOP0mKv6BUNq2KCw3SGoAGK1WaA=) 2: 3130332e31362e37392e302f32342d3234203d3e20313331373835.roa (hash: dq2C0qn2bszea5JrNdqQBrs3uxaP2+6us75MTw8i5Kc=) 3: 3130332e3232362e35352e302f32342d3234203d3e20313331373835.roa (hash: w25Hdja8cVcMSMfXbCo6MIHOJSikdvlBUIB8EBkQuqs=) 4: 6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl (hash: nDU6tzDhsK1ap7tZ6Y+5GyCF/GyEHDixhzwlUJ5wxXg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 17:19:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:12:77:6e:99:5f:a2:99:7e:b6:53:02:df:91:f2:ae:fa:be:6c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB Validity Not Before: Oct 18 16:46:43 2025 GMT Not After : Oct 21 17:19:43 2025 GMT Subject: CN=E2480FC47D56CDA25633C4E6E592A77551930F86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a0:ff:2b:d9:c2:e1:99:87:ba:08:c6:5c:00: c7:5b:ce:cf:a1:81:35:e1:73:02:7c:c6:94:8f:02: ec:7f:55:56:a1:7b:bf:9f:86:09:5f:f9:d2:8d:bb: db:1a:4a:72:73:55:eb:84:0c:34:9c:9f:75:a3:37: 4a:f5:1c:cf:9a:ab:e7:69:63:e1:3f:67:a0:1f:e6: 19:24:48:4d:0e:e5:31:84:be:d0:f6:0c:b1:9f:05: 55:cf:96:78:59:2e:0c:ca:b0:ce:de:7e:65:26:21: 63:18:c3:23:99:4b:5e:1a:8b:62:5a:20:c3:10:8f: 00:d6:5e:c2:ff:7c:0e:de:3c:5b:72:2c:42:95:14: c3:7d:17:35:2d:3d:6e:2f:1d:74:ad:5e:21:ac:bf: 88:c8:f1:ca:cb:fe:1c:91:4f:f4:51:97:8d:ad:09: b3:e4:92:09:f8:89:84:2a:95:bc:49:41:e6:e1:60: 00:74:24:21:a5:91:ca:34:1e:cd:7e:be:e0:16:c3: ad:a6:5a:61:6c:28:fa:36:32:45:4e:a7:81:7b:0f: 36:3d:62:69:8e:5f:ab:3c:f4:4b:06:30:2c:24:fb: 6d:c4:e7:60:f2:2f:6e:bf:64:b7:92:f4:7b:50:ae: a0:3d:27:83:4a:60:eb:6b:57:34:76:9c:5c:53:80: 57:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:48:0F:C4:7D:56:CD:A2:56:33:C4:E6:E5:92:A7:75:51:93:0F:86 X509v3 Authority Key Identifier: keyid:6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:aa:2e:53:ef:c0:c6:d4:03:b4:fa:c5:3e:18:20:86:5b:1a: 94:71:55:bc:74:94:80:2b:01:68:fc:db:b9:1e:a3:09:30:5b: 2f:0d:c7:54:5a:bf:5e:1a:d7:18:6c:4f:6c:fb:d5:88:b1:05: b0:20:9b:a2:94:35:0b:27:32:b9:93:78:3b:32:0b:b3:4f:07: be:0a:19:ef:4b:db:dd:ad:e0:4f:96:9d:27:30:76:f1:a2:9b: 46:58:4e:db:e9:15:c6:61:9b:15:cf:64:b0:69:56:03:50:ef: 9d:94:4f:35:57:1f:32:d0:7b:91:8b:32:63:75:72:20:95:c1: de:92:b6:fa:4d:9c:0c:43:29:31:4d:bd:50:86:d2:43:e0:fb: 90:54:8b:a2:bc:ca:92:b4:41:82:74:f7:83:78:4c:b3:26:2d: e5:0b:cd:91:9c:e4:ec:c3:11:e3:d8:03:58:29:bc:b9:7e:51: 75:85:13:57:40:f8:95:59:91:03:28:ed:62:7f:11:52:1b:cb: f2:b0:5f:46:99:6e:a0:31:19:c9:e0:3a:36:68:f9:2f:01:88: ed:ce:84:3c:f6:1b:28:e3:21:61:a0:4f:0d:e0:1e:d8:7f:51: c9:e1:11:f0:79:23:23:72:8b:76:35:c8:42:63:4d:5b:19:e2: 1c:2b:20:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIhJ3bplfopl+tlMC35Hyrvq+bHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhGN0M1 OEFDQThBQjAeFw0yNTEwMTgxNjQ2NDNaFw0yNTEwMjExNzE5NDNaMDMxMTAvBgNV BAMTKEUyNDgwRkM0N0Q1NkNEQTI1NjMzQzRFNkU1OTJBNzc1NTE5MzBGODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/oP8r2cLhmYe6CMZcAMdbzs+h gTXhcwJ8xpSPAux/VVahe7+fhglf+dKNu9saSnJzVeuEDDScn3WjN0r1HM+aq+dp Y+E/Z6Af5hkkSE0O5TGEvtD2DLGfBVXPlnhZLgzKsM7efmUmIWMYwyOZS14ai2Ja IMMQjwDWXsL/fA7ePFtyLEKVFMN9FzUtPW4vHXStXiGsv4jI8crL/hyRT/RRl42t CbPkkgn4iYQqlbxJQebhYAB0JCGlkco0Hs1+vuAWw62mWmFsKPo2MkVOp4F7DzY9 YmmOX6s89EsGMCwk+23E52DyL26/ZLeS9HtQrqA9J4NKYOtrVzR2nFxTgFeJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4kgPxH1WzaJWM8Tm5ZKndVGTD4YwHwYDVR0j BBgwFoAUbUsXSN5S3OOXuGh3LhKPfFisqKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDIwNzUyMy1kNWY1LTRhY2MtYjBhYy1iZmIwOTU0ZmE0ZTAvMC82RDRCMTc0OERF NTJEQ0UzOTdCODY4NzcyRTEyOEY3QzU4QUNBOEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhGN0M1OEFD QThBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQyMDc1MjMtZDVmNS00YWNjLWIw YWMtYmZiMDk1NGZhNGUwLzAvNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhG N0M1OEFDQThBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWqLlPvwMbUA7T6xT4YIIZbGpRxVbx0lIAr AWj827keowkwWy8Nx1Rav14a1xhsT2z71YixBbAgm6KUNQsnMrmTeDsyC7NPB74K Ge9L292t4E+WnScwdvGim0ZYTtvpFcZhmxXPZLBpVgNQ752UTzVXHzLQe5GLMmN1 ciCVwd6StvpNnAxDKTFNvVCG0kPg+5BUi6K8ypK0QYJ094N4TLMmLeULzZGc5OzD EePYA1gpvLl+UXWFE1dA+JVZkQMo7WJ/EVIby/KwX0aZbqAxGcngOjZo+S8BiO3O hDz2GyjjIWGgTw3gHth/UcnhEfB5IyNyi3Y1yEJjTVsZ4hwrIOs= -----END CERTIFICATE-----Generated at Mon Oct 20 18:38:28 2025 by rpki-client