$ rpki-client -vvf repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft File: 6189E4F67BE53DF65282F8E1BB63165CCA784862.mft (raw, json) Hash identifier: 8DFzvyzBh8eEyanofMneB5gLZAwiyfN+sfJiqqPcyIM= Subject key identifier: 1C:CB:2C:47:04:2C:6D:00:A3:9E:D2:4A:F2:5E:C3:46:F7:51:42:DF Authority key identifier: 61:89:E4:F6:7B:E5:3D:F6:52:82:F8:E1:BB:63:16:5C:CA:78:48:62 Certificate issuer: /CN=6189E4F67BE53DF65282F8E1BB63165CCA784862 Certificate serial: 562C1471E50E9523D10B3A6AF6A7629FD946192B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft Manifest number: 018B Signing time: Sun 19 Oct 2025 01:52:11 +0000 Manifest this update: Sun 19 Oct 2025 01:47:11 +0000 Manifest next update: Wed 22 Oct 2025 06:50:11 +0000 Files and hashes: 1: 6189E4F67BE53DF65282F8E1BB63165CCA784862.crl (hash: M554v/2cw5b7tAenFdmp2ktQjRd5nDWkDK5m2KDZMwM=) 2: 3130332e37302e39322e302f32332d3234203d3e20313338303634.roa (hash: TA4sXIkX/1vgSRuW9l2sSfoKt1o5FCsmy++oilBd+h0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.crl rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 06:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:2c:14:71:e5:0e:95:23:d1:0b:3a:6a:f6:a7:62:9f:d9:46:19:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6189E4F67BE53DF65282F8E1BB63165CCA784862 Validity Not Before: Oct 19 01:47:11 2025 GMT Not After : Oct 22 06:50:11 2025 GMT Subject: CN=1CCB2C47042C6D00A39ED24AF25EC346F75142DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fb:2d:a3:ff:c3:e4:47:15:63:d4:65:cf:70: 44:e5:c9:85:ce:7a:03:ae:d5:4a:d3:6a:0d:83:b8: 51:02:82:98:1d:6d:97:f4:1b:64:b3:01:24:9c:66: 40:e6:29:c4:0a:92:5b:d5:05:0c:12:4d:ba:99:b0: de:91:c2:be:45:41:5d:1f:8b:e9:39:d1:22:99:6f: df:81:be:f1:59:54:c7:26:fd:49:34:1c:4c:90:84: e6:ed:b2:76:44:99:22:d8:fb:d8:36:12:82:8b:7d: 71:54:4a:d9:d9:22:93:c1:b3:03:7b:1a:98:58:20: 43:f3:d1:33:9e:ee:2a:43:2d:30:e7:2e:7a:91:f6: b7:88:ad:73:30:62:3e:56:30:6a:21:fe:f3:c3:c4: 90:87:12:fd:ae:d3:80:ed:10:59:bf:ee:c9:93:fa: 90:7d:fb:98:3c:cb:b5:bf:59:36:cd:72:53:3e:ca: d9:b1:c2:a1:e2:82:a8:cf:a8:d1:b5:03:11:cb:80: b3:31:05:5f:3e:9e:e4:0a:47:61:52:2f:e9:1b:60: 59:6e:53:00:6f:42:71:48:6e:d9:c6:57:44:5c:fc: 2a:25:ea:3f:bb:ad:12:d6:76:91:9d:c8:f8:84:98: df:b8:44:64:a2:9c:65:89:a1:33:f1:65:75:6f:ce: ba:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:CB:2C:47:04:2C:6D:00:A3:9E:D2:4A:F2:5E:C3:46:F7:51:42:DF X509v3 Authority Key Identifier: keyid:61:89:E4:F6:7B:E5:3D:F6:52:82:F8:E1:BB:63:16:5C:CA:78:48:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:ef:91:fd:3e:e3:29:64:e5:3e:5a:f6:76:93:8f:79:b7:a1: c5:45:aa:c2:91:15:67:84:9f:7c:be:8e:00:e3:58:d0:4a:0e: 32:29:e8:01:6e:2d:5e:5b:dc:38:9d:00:c0:06:6a:db:e0:5e: 7e:ab:9d:54:0c:23:a5:e8:1e:ef:6c:78:f3:84:32:0f:48:66: 98:82:90:e4:26:58:95:5e:83:1b:b4:6b:f6:8f:43:98:ad:98: a3:eb:7d:37:37:34:d3:b7:2d:d3:19:74:54:a2:a4:94:b3:8f: a9:40:1a:40:81:6a:fa:0b:78:ed:f8:07:08:de:25:ef:d9:ba: f9:0d:a4:60:21:a0:85:41:a6:d6:09:81:17:41:fc:1e:e1:0d: 64:04:36:0b:c2:b3:ab:e9:89:84:cb:53:c1:1e:5e:e0:e9:dd: b2:5d:be:c7:57:57:a7:dc:54:1a:68:8c:30:e8:d2:0f:63:4a: b1:89:09:c8:27:68:5f:97:4a:c0:9c:30:68:49:13:9d:40:83: a6:fa:4a:ae:36:eb:a1:9a:0e:11:51:24:87:7d:90:4d:07:a3: eb:03:b1:41:9b:ff:ac:d7:9b:9a:b3:a0:30:cf:2c:ed:4e:9a: f1:ac:ea:06:9b:cd:59:c9:ff:d2:8f:5e:85:ae:05:1c:b4:ff: 35:25:93:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUViwUceUOlSPRCzpq9qdin9lGGSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE4OUU0RjY3QkU1M0RGNjUyODJGOEUxQkI2MzE2NUND QTc4NDg2MjAeFw0yNTEwMTkwMTQ3MTFaFw0yNTEwMjIwNjUwMTFaMDMxMTAvBgNV BAMTKDFDQ0IyQzQ3MDQyQzZEMDBBMzlFRDI0QUYyNUVDMzQ2Rjc1MTQyREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1+y2j/8PkRxVj1GXPcETlyYXO egOu1UrTag2DuFECgpgdbZf0G2SzASScZkDmKcQKklvVBQwSTbqZsN6Rwr5FQV0f i+k50SKZb9+BvvFZVMcm/Uk0HEyQhObtsnZEmSLY+9g2EoKLfXFUStnZIpPBswN7 GphYIEPz0TOe7ipDLTDnLnqR9reIrXMwYj5WMGoh/vPDxJCHEv2u04DtEFm/7smT +pB9+5g8y7W/WTbNclM+ytmxwqHigqjPqNG1AxHLgLMxBV8+nuQKR2FSL+kbYFlu UwBvQnFIbtnGV0Rc/Col6j+7rRLWdpGdyPiEmN+4RGSinGWJoTPxZXVvzrr3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHMssRwQsbQCjntJK8l7DRvdRQt8wHwYDVR0j BBgwFoAUYYnk9nvlPfZSgvjhu2MWXMp4SGIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTg5ZjY0My0zN2JjLTRmZmItOTUyOS00MDFlNGI2ZWY2NzUvMC82MTg5RTRGNjdC RTUzREY2NTI4MkY4RTFCQjYzMTY1Q0NBNzg0ODYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE4OUU0RjY3QkU1M0RGNjUyODJGOEUxQkI2MzE2NUNDQTc4 NDg2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU4OWY2NDMtMzdiYy00ZmZiLTk1 MjktNDAxZTRiNmVmNjc1LzAvNjE4OUU0RjY3QkU1M0RGNjUyODJGOEUxQkI2MzE2 NUNDQTc4NDg2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjvkf0+4ylk5T5a9naTj3m3ocVFqsKRFWeE n3y+jgDjWNBKDjIp6AFuLV5b3DidAMAGatvgXn6rnVQMI6XoHu9sePOEMg9IZpiC kOQmWJVegxu0a/aPQ5itmKPrfTc3NNO3LdMZdFSipJSzj6lAGkCBavoLeO34Bwje Je/ZuvkNpGAhoIVBptYJgRdB/B7hDWQENgvCs6vpiYTLU8EeXuDp3bJdvsdXV6fc VBpojDDo0g9jSrGJCcgnaF+XSsCcMGhJE51Ag6b6Sq4266GaDhFRJId9kE0Ho+sD sUGb/6zXm5qzoDDPLO1OmvGs6gabzVnJ/9KPXoWuBRy0/zUlk1g= -----END CERTIFICATE-----Generated at Mon Oct 20 19:24:53 2025 by rpki-client