$ rpki-client -vvf repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft File: 6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft (raw, json) Hash identifier: q4RpMKSK4OH4UyJsOdP12SUtYaw+z4256O8D6VjKiP4= Subject key identifier: F2:3F:A8:20:35:FF:73:CE:65:87:2D:31:B5:27:F1:4F:85:97:45:8E Authority key identifier: 6D:34:40:FA:38:B5:13:21:C8:A8:FD:81:36:BA:70:59:7A:86:86:E0 Certificate issuer: /CN=6D3440FA38B51321C8A8FD8136BA70597A8686E0 Certificate serial: 6626CDBAB0926422A257DA88C96B1A11B15CA46F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft Manifest number: 018F Signing time: Sat 18 Oct 2025 17:40:38 +0000 Manifest this update: Sat 18 Oct 2025 17:35:38 +0000 Manifest next update: Tue 21 Oct 2025 22:47:38 +0000 Files and hashes: 1: 3130332e3136302e3139332e302f32342d3234203d3e20313530353433.roa (hash: 4Rc4ZkmdbbdveQiTO9ywjy41ILEiG5tUChzvFR34zXM=) 2: 6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl (hash: 8kfOXflJM0ysYFd0RJ+3SQZSC6aP2JwGz6z4PoNtvig=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 22:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:26:cd:ba:b0:92:64:22:a2:57:da:88:c9:6b:1a:11:b1:5c:a4:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D3440FA38B51321C8A8FD8136BA70597A8686E0 Validity Not Before: Oct 18 17:35:38 2025 GMT Not After : Oct 21 22:47:38 2025 GMT Subject: CN=F23FA82035FF73CE65872D31B527F14F8597458E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:36:ea:ad:ed:44:a7:9f:93:53:2b:b0:bf:69: 07:41:12:93:af:dd:74:d4:9c:75:06:98:ae:c1:b5: dd:11:a1:a6:0e:61:87:1c:06:d1:6c:c1:7b:62:00: bb:24:b5:2e:b1:73:c6:44:ff:75:0b:93:45:24:47: c3:c1:39:c1:45:8a:d9:9f:c8:db:00:49:c1:6f:2e: 30:d6:bb:6a:0b:aa:b1:db:7b:47:97:b2:d3:cb:d4: d8:ef:c0:06:2c:3e:73:bd:eb:b2:40:33:6d:d6:e8: a3:4b:bf:af:7a:8a:03:e1:c9:94:c6:32:8f:fe:69: 09:20:26:a8:a1:8c:9b:2e:d6:68:d0:66:50:f1:45: 37:60:ec:19:59:f2:a4:9c:c7:82:81:be:8d:e6:fc: c2:44:30:d1:7d:21:00:2f:98:bf:8c:bc:33:81:9d: eb:7b:a3:2f:0d:a0:7f:7f:67:aa:1c:ef:18:eb:4a: 6f:bd:4a:49:a1:a6:9d:85:29:ee:ee:83:e9:d1:fb: 7b:0e:7f:3d:07:20:77:30:4e:e3:55:56:d0:92:e2: 75:8c:aa:0d:fa:c9:ba:4b:df:70:f7:2e:95:cd:73: e0:41:47:be:aa:18:e5:db:64:7b:71:49:9c:6c:88: 4c:47:67:5f:89:27:44:bc:f6:bd:9b:ad:ef:1c:d6: 8b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3F:A8:20:35:FF:73:CE:65:87:2D:31:B5:27:F1:4F:85:97:45:8E X509v3 Authority Key Identifier: keyid:6D:34:40:FA:38:B5:13:21:C8:A8:FD:81:36:BA:70:59:7A:86:86:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:bc:2c:ed:04:9b:f5:0c:7b:01:75:46:2e:5b:76:dd:96:ef: 86:21:80:4e:2e:78:7e:ef:54:84:37:be:12:a1:b7:53:db:10: 80:88:7a:d7:43:6b:b1:40:24:c6:9e:2d:a7:ff:25:8e:40:ae: 97:1a:a7:c3:7d:a9:e1:73:c1:14:a7:a5:b7:5b:8d:be:62:26: 63:3f:72:9b:c8:c1:9a:ab:d1:47:03:99:b6:28:e7:c9:6e:23: 96:4a:cd:83:e4:65:17:2c:80:86:4b:90:fa:6f:f3:87:c6:de: 1a:09:85:a7:9e:2c:f0:de:62:4f:b7:f8:6d:a1:29:20:b4:58: 85:95:fd:86:bb:b1:63:80:a2:3f:7d:6c:25:62:5b:1b:cc:d1: 55:00:ae:ab:d4:40:d7:5f:65:09:2e:65:e8:67:af:05:f0:17: c6:ae:66:bc:2b:4c:3d:07:41:1e:d7:b3:86:5b:6b:f8:0d:27: 0e:43:40:4f:dd:91:4b:f6:91:7c:dc:a6:5d:09:47:4b:f3:7a: fa:2a:22:70:a3:e1:0e:6d:5b:1e:ff:01:a8:09:d5:77:9e:f4: 18:e9:68:c9:57:e6:59:c5:b7:41:f0:30:91:b2:f1:c6:62:83: 24:f3:d6:20:04:a7:11:53:23:1f:ac:16:5c:c9:09:06:bc:4a: c2:1e:3e:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZibNurCSZCKiV9qIyWsaEbFcpG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQzNDQwRkEzOEI1MTMyMUM4QThGRDgxMzZCQTcwNTk3 QTg2ODZFMDAeFw0yNTEwMTgxNzM1MzhaFw0yNTEwMjEyMjQ3MzhaMDMxMTAvBgNV BAMTKEYyM0ZBODIwMzVGRjczQ0U2NTg3MkQzMUI1MjdGMTRGODU5NzQ1OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Nuqt7USnn5NTK7C/aQdBEpOv 3XTUnHUGmK7Btd0RoaYOYYccBtFswXtiALsktS6xc8ZE/3ULk0UkR8PBOcFFitmf yNsAScFvLjDWu2oLqrHbe0eXstPL1NjvwAYsPnO967JAM23W6KNLv696igPhyZTG Mo/+aQkgJqihjJsu1mjQZlDxRTdg7BlZ8qScx4KBvo3m/MJEMNF9IQAvmL+MvDOB net7oy8NoH9/Z6oc7xjrSm+9Skmhpp2FKe7ug+nR+3sOfz0HIHcwTuNVVtCS4nWM qg36ybpL33D3LpXNc+BBR76qGOXbZHtxSZxsiExHZ1+JJ0S89r2bre8c1osXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8j+oIDX/c85lhy0xtSfxT4WXRY4wHwYDVR0j BBgwFoAUbTRA+ji1EyHIqP2BNrpwWXqGhuAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2IzYjAwYi1hZDdiLTQ4NDktYjBiMi1lMjQ5YTJmYTYwNGEvMC82RDM0NDBGQTM4 QjUxMzIxQzhBOEZEODEzNkJBNzA1OTdBODY4NkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQzNDQwRkEzOEI1MTMyMUM4QThGRDgxMzZCQTcwNTk3QTg2 ODZFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NiM2IwMGItYWQ3Yi00ODQ5LWIw YjItZTI0OWEyZmE2MDRhLzAvNkQzNDQwRkEzOEI1MTMyMUM4QThGRDgxMzZCQTcw NTk3QTg2ODZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+8LO0Em/UMewF1Ri5bdt2W74YhgE4ueH7v VIQ3vhKht1PbEICIetdDa7FAJMaeLaf/JY5Arpcap8N9qeFzwRSnpbdbjb5iJmM/ cpvIwZqr0UcDmbYo58luI5ZKzYPkZRcsgIZLkPpv84fG3hoJhaeeLPDeYk+3+G2h KSC0WIWV/Ya7sWOAoj99bCViWxvM0VUArqvUQNdfZQkuZehnrwXwF8auZrwrTD0H QR7Xs4Zba/gNJw5DQE/dkUv2kXzcpl0JR0vzevoqInCj4Q5tWx7/AagJ1Xee9Bjp aMlX5lnFt0HwMJGy8cZigyTz1iAEpxFTIx+sFlzJCQa8SsIePjw= -----END CERTIFICATE-----Generated at Mon Oct 20 09:26:47 2025 by rpki-client