$ rpki-client -vvf repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft File: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft (raw, json) Hash identifier: odsOFu2mGH9kaXPac4pvryC20NkFmvm79SPTZxe9gCU= Subject key identifier: B1:41:38:ED:91:A8:0F:9B:6E:FF:79:BC:87:4D:86:51:13:87:21:C7 Authority key identifier: 6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21 Certificate issuer: /CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121 Certificate serial: 042C02C0E3B647A4C3D64A4D8534DC6916177976 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft Manifest number: 0519 Signing time: Mon 20 Oct 2025 09:30:52 +0000 Manifest this update: Mon 20 Oct 2025 09:25:52 +0000 Manifest next update: Thu 23 Oct 2025 09:55:52 +0000 Files and hashes: 1: 3130332e35302e32372e302f32342d3234203d3e203633383639.roa (hash: CMxLGqk+5iIxSLstgSUEPMheQZBFi/aQaQ40AR/6xck=) 2: 3130332e35302e32342e302f32342d3234203d3e203633383639.roa (hash: pjDRNdkxVNQAonOH/ajeQNBbErsBzCB65TjYTm/AV04=) 3: 3130332e35302e32362e302f32342d3234203d3e203633383639.roa (hash: XC5DYejk2ouXNggePM7faKlSdJX+qPYu8hQvOlxyDok=) 4: 3130332e35302e32352e302f32342d3234203d3e203633383639.roa (hash: JbxABL76MkkqswIqSBjIy3QFwClw0Z/ylcfelmeq75g=) 5: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl (hash: sbsstgEvhIdsxRe6mCe6gfcedT+pn8PE9o9N8YgoVoM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 09:55:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:2c:02:c0:e3:b6:47:a4:c3:d6:4a:4d:85:34:dc:69:16:17:79:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121 Validity Not Before: Oct 20 09:25:52 2025 GMT Not After : Oct 23 09:55:52 2025 GMT Subject: CN=B14138ED91A80F9B6EFF79BC874D8651138721C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ec:41:64:31:89:e7:7c:1b:cf:f0:91:cd:c9: 00:6f:f7:e0:ca:8a:f3:e6:e9:8d:95:98:76:9b:39: 1f:19:13:45:8d:40:71:52:71:6e:f6:ae:89:69:c8: e5:69:15:7c:6a:9e:59:cb:c6:85:43:ec:dc:64:a9: 99:37:12:c2:b7:2f:d7:ce:50:b9:93:fa:c6:ce:9d: b4:a9:1d:0f:c4:a4:b4:83:de:90:80:40:cd:94:34: e2:00:6a:ca:53:a9:b4:a2:78:49:eb:49:ed:f2:e2: 51:cc:b7:37:d6:40:cf:87:d7:12:36:1c:ae:89:22: 69:2b:93:34:cf:a3:44:1c:01:e9:20:54:fe:d5:44: bf:ec:63:af:b2:50:22:9d:40:f9:a0:69:a1:07:e8: 3d:03:cb:6d:da:de:ca:a7:cc:f3:61:eb:d5:2e:b6: 2f:87:c1:a8:97:cf:25:b0:f1:f2:a1:63:00:7b:fe: 4d:a3:6f:ce:92:67:56:50:ed:f7:1c:4b:d5:d7:56: 2e:e6:68:55:e2:6a:68:bb:0c:c0:b6:71:31:d4:d6: 46:60:86:07:c6:3a:13:58:bd:ee:6a:90:20:55:7a: a8:7d:d3:80:c9:1b:3b:c8:27:08:d3:6e:8c:cf:0c: d0:f9:5c:dc:7f:ec:a8:92:8d:16:2b:5d:7b:89:a8: 2f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:41:38:ED:91:A8:0F:9B:6E:FF:79:BC:87:4D:86:51:13:87:21:C7 X509v3 Authority Key Identifier: keyid:6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:89:56:08:40:9e:ff:84:c6:f8:f4:1d:9f:93:b4:b2:46:ce: b9:e4:bd:f7:32:ec:bc:34:38:97:ad:54:71:66:c9:3e:be:94: 9f:37:2d:f2:66:f7:e3:23:18:90:b6:9b:76:ea:01:47:ed:16: ee:31:9a:69:59:9b:c4:9c:fd:63:a5:59:1b:95:80:9b:d1:38: 13:7c:2c:ef:72:6b:17:f1:da:d4:15:2b:61:9e:56:4f:b0:38: 1c:32:3e:3d:94:49:16:c8:db:bb:b4:d3:aa:0b:0c:87:1b:42: 6b:08:fe:6e:32:7f:d9:4c:df:a7:92:15:ac:6a:1e:af:e1:3b: d9:e1:4f:df:6b:a4:e8:4d:36:ba:5e:f8:11:dd:8f:93:4d:e0: 7c:4a:7b:37:72:22:c7:81:8a:c2:77:d5:f4:8d:11:9c:9f:c1: 1f:4f:b5:94:e8:31:2a:30:d6:dd:93:8e:1d:fd:88:e8:a8:98: 24:7f:5f:5e:83:c5:75:f4:e1:10:c5:de:96:08:34:3e:aa:ce: 37:b9:aa:61:3e:8f:0e:c3:47:a4:4f:90:5c:d3:03:42:77:ae: 49:2b:38:93:b9:10:f3:81:2b:3e:8e:55:d6:28:cb:55:67:01: 9e:51:6c:fb:a7:31:5c:d5:ef:2b:a5:b1:f2:c5:32:47:dc:c0: b1:32:99:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBCwCwOO2R6TD1kpNhTTcaRYXeXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3 MUQyRDEyMTAeFw0yNTEwMjAwOTI1NTJaFw0yNTEwMjMwOTU1NTJaMDMxMTAvBgNV BAMTKEIxNDEzOEVEOTFBODBGOUI2RUZGNzlCQzg3NEQ4NjUxMTM4NzIxQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ7EFkMYnnfBvP8JHNyQBv9+DK ivPm6Y2VmHabOR8ZE0WNQHFScW72rolpyOVpFXxqnlnLxoVD7NxkqZk3EsK3L9fO ULmT+sbOnbSpHQ/EpLSD3pCAQM2UNOIAaspTqbSieEnrSe3y4lHMtzfWQM+H1xI2 HK6JImkrkzTPo0QcAekgVP7VRL/sY6+yUCKdQPmgaaEH6D0Dy23a3sqnzPNh69Uu ti+HwaiXzyWw8fKhYwB7/k2jb86SZ1ZQ7fccS9XXVi7maFXiami7DMC2cTHU1kZg hgfGOhNYve5qkCBVeqh904DJGzvIJwjTbozPDND5XNx/7KiSjRYrXXuJqC8JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsUE47ZGoD5tu/3m8h02GUROHIccwHwYDVR0j BBgwFoAUbBWXYHoMPqw+MM9I/zG6/XHS0SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzY2ODU0MS1kNmM2LTQwOWUtOGFkMS01ZTg5YTRiMjg1MGUvMC82QzE1OTc2MDdB MEMzRUFDM0UzMENGNDhGRjMxQkFGRDcxRDJEMTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3MUQy RDEyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc2Njg1NDEtZDZjNi00MDllLThh ZDEtNWU4OWE0YjI4NTBlLzAvNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJB RkQ3MUQyRDEyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSJVghAnv+Exvj0HZ+TtLJGzrnkvfcy7Lw0 OJetVHFmyT6+lJ83LfJm9+MjGJC2m3bqAUftFu4xmmlZm8Sc/WOlWRuVgJvROBN8 LO9yaxfx2tQVK2GeVk+wOBwyPj2USRbI27u006oLDIcbQmsI/m4yf9lM36eSFaxq Hq/hO9nhT99rpOhNNrpe+BHdj5NN4HxKezdyIseBisJ31fSNEZyfwR9PtZToMSow 1t2Tjh39iOiomCR/X16DxXX04RDF3pYIND6qzje5qmE+jw7DR6RPkFzTA0J3rkkr OJO5EPOBKz6OVdYoy1VnAZ5RbPunMVzV7yulsfLFMkfcwLEymcw= -----END CERTIFICATE-----Generated at Mon Oct 20 14:32:48 2025 by rpki-client