$ rpki-client -vvf repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft File: 6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft (raw, json) Hash identifier: BxT7fZbffheCG0Yp5RACQdTrq1pxIcfGxUmK98GmCsI= Subject key identifier: AB:A3:BD:C4:D8:13:FE:A0:62:33:75:EB:7D:8C:88:BC:19:48:C1:22 Authority key identifier: 6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92 Certificate issuer: /CN=6A200D6FC5434DAD6106CEE5439CA1270DDCBC92 Certificate serial: 3A7A82D4023604E356E56308B4B83747D11BF2EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft Manifest number: BA Signing time: Sun 19 Oct 2025 10:11:09 +0000 Manifest this update: Sun 19 Oct 2025 10:06:09 +0000 Manifest next update: Wed 22 Oct 2025 17:00:09 +0000 Files and hashes: 1: 3130332e3130332e3138302e302f32332d3234203d3e20313336383437.roa (hash: Ub40BPe4KMOTxitaoAUpxbpNc0bfpI5fDNOKKNlDeX8=) 2: 6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl (hash: QV2XG/O04l68+aeV6os75zk09N/coaFRMazaUIjt0k4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:7a:82:d4:02:36:04:e3:56:e5:63:08:b4:b8:37:47:d1:1b:f2:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A200D6FC5434DAD6106CEE5439CA1270DDCBC92 Validity Not Before: Oct 19 10:06:09 2025 GMT Not After : Oct 22 17:00:09 2025 GMT Subject: CN=ABA3BDC4D813FEA0623375EB7D8C88BC1948C122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:28:68:98:17:95:aa:1e:39:39:c2:7d:1c:d6: b3:5a:c2:b3:b6:f3:21:43:8f:96:f2:51:51:72:5f: 53:46:d2:93:68:ec:91:3b:42:00:30:50:b8:10:3e: f5:b7:81:37:0a:e3:bc:a1:f0:07:58:eb:86:2b:22: 32:62:b5:08:7e:1f:ed:24:3b:c8:fe:2b:57:1c:97: 86:78:f5:79:59:b5:f6:8c:25:97:0e:67:54:48:10: 67:3d:99:62:88:d2:af:67:7b:73:41:f2:e9:f1:91: ca:63:55:0f:b4:11:41:ad:78:ac:cb:0c:fc:2a:18: 89:c9:a0:97:f4:95:e9:7c:53:b0:69:f0:2f:26:e4: ad:74:d1:cc:aa:b5:5f:73:e6:8d:b0:16:8e:78:4b: 4e:5e:cb:c9:61:1b:60:e3:9d:8c:e3:fa:56:a1:80: 04:7a:7d:14:10:c8:e4:c5:e7:c9:6f:1c:0b:dd:e4: 8c:19:94:ca:10:c9:4e:38:9c:e7:4c:e2:18:ce:8c: 50:53:34:29:9a:f3:ec:73:be:52:3f:33:70:aa:ef: 3d:0c:3e:c7:44:28:4a:6e:26:64:79:1b:0f:a3:a4: 03:b5:62:a3:59:ee:b3:35:9c:61:6f:17:72:55:bd: 32:48:49:a7:e8:0b:1c:43:bd:47:2e:ac:1b:41:ab: ce:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A3:BD:C4:D8:13:FE:A0:62:33:75:EB:7D:8C:88:BC:19:48:C1:22 X509v3 Authority Key Identifier: keyid:6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:4e:13:91:f7:24:45:3c:db:52:cb:4a:31:d1:15:fe:7f:06: 23:22:c1:57:98:3d:4a:2f:2c:4a:5a:1a:da:4f:7a:2f:03:e3: 93:ef:be:02:d3:d4:09:16:e6:4b:bb:a0:c6:b4:c8:a4:03:7c: f6:46:90:34:d2:1a:96:3c:60:af:42:23:52:a3:c4:19:0f:62: 4e:9b:73:dc:f4:0f:54:2e:9d:60:21:fc:e9:19:a1:76:f8:cd: 4b:b0:59:16:42:e1:2b:43:77:2e:58:85:7a:49:c0:55:6f:26: 05:83:54:30:88:60:a3:26:24:b6:91:3f:53:fc:9e:73:03:c0: 02:87:8b:60:ea:74:f2:c6:fe:33:01:9d:64:f3:60:66:8d:82: da:31:e1:3b:f6:c6:14:21:ab:3f:18:19:f1:7b:89:b1:ef:b1: 74:24:32:e4:83:69:c1:84:de:40:ba:52:0e:63:ba:7f:dd:6c: 04:ee:36:61:9d:a5:c7:2c:5d:71:ba:3b:5b:21:e5:8c:b0:1f: f9:21:ca:22:b3:c2:ba:67:0d:cd:53:40:fd:db:04:4f:0a:a5: a2:3c:b6:f4:db:d0:27:4b:b7:b8:b0:8b:8b:b5:c6:46:e8:c8: 22:bd:43:23:eb:f6:35:f6:63:a5:6e:00:65:30:c9:17:03:b4: e9:0d:1b:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOnqC1AI2BONW5WMItLg3R9Eb8uowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0ExMjcw RERDQkM5MjAeFw0yNTEwMTkxMDA2MDlaFw0yNTEwMjIxNzAwMDlaMDMxMTAvBgNV BAMTKEFCQTNCREM0RDgxM0ZFQTA2MjMzNzVFQjdEOEM4OEJDMTk0OEMxMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClKGiYF5WqHjk5wn0c1rNawrO2 8yFDj5byUVFyX1NG0pNo7JE7QgAwULgQPvW3gTcK47yh8AdY64YrIjJitQh+H+0k O8j+K1ccl4Z49XlZtfaMJZcOZ1RIEGc9mWKI0q9ne3NB8unxkcpjVQ+0EUGteKzL DPwqGInJoJf0lel8U7Bp8C8m5K100cyqtV9z5o2wFo54S05ey8lhG2DjnYzj+lah gAR6fRQQyOTF58lvHAvd5IwZlMoQyU44nOdM4hjOjFBTNCma8+xzvlI/M3Cq7z0M PsdEKEpuJmR5Gw+jpAO1YqNZ7rM1nGFvF3JVvTJISafoCxxDvUcurBtBq84TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq6O9xNgT/qBiM3XrfYyIvBlIwSIwHwYDVR0j BBgwFoAUaiANb8VDTa1hBs7lQ5yhJw3cvJIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGQwZmNhOC01YzJkLTRlMzUtYmQ3ZC1iNDQ4YWE3NWYyYmUvMC82QTIwMEQ2RkM1 NDM0REFENjEwNkNFRTU0MzlDQTEyNzBERENCQzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0ExMjcwRERD QkM5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhkMGZjYTgtNWMyZC00ZTM1LWJk N2QtYjQ0OGFhNzVmMmJlLzAvNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0Ex MjcwRERDQkM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJtOE5H3JEU821LLSjHRFf5/BiMiwVeYPUov LEpaGtpPei8D45PvvgLT1AkW5ku7oMa0yKQDfPZGkDTSGpY8YK9CI1KjxBkPYk6b c9z0D1QunWAh/OkZoXb4zUuwWRZC4StDdy5YhXpJwFVvJgWDVDCIYKMmJLaRP1P8 nnMDwAKHi2DqdPLG/jMBnWTzYGaNgtox4Tv2xhQhqz8YGfF7ibHvsXQkMuSDacGE 3kC6Ug5jun/dbATuNmGdpccsXXG6O1sh5YywH/khyiKzwrpnDc1TQP3bBE8KpaI8 tvTb0CdLt7iwi4u1xkboyCK9QyPr9jX2Y6VuAGUwyRcDtOkNG9I= -----END CERTIFICATE-----Generated at Mon Oct 20 12:02:50 2025 by rpki-client