$ rpki-client -vvf repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft File: 6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft (raw, json) Hash identifier: 7VmaGUSc+zslEQt18aN0U6MNvz0nWCBl0dJjqkcPutk= Subject key identifier: 09:54:FB:FE:52:6E:BF:A9:42:BE:F5:DC:AD:6F:DC:DB:0F:0C:64:8B Authority key identifier: 6A:AF:6E:8D:1C:9A:80:94:46:CB:C0:76:FE:39:08:3A:F9:54:70:8E Certificate issuer: /CN=6AAF6E8D1C9A809446CBC076FE39083AF954708E Certificate serial: 533CACA3CCF3FDEE236EFF2E87139366AB8F9638 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft Manifest number: 01D0 Signing time: Sun 19 Oct 2025 15:01:27 +0000 Manifest this update: Sun 19 Oct 2025 14:56:27 +0000 Manifest next update: Wed 22 Oct 2025 20:00:27 +0000 Files and hashes: 1: 3130332e33392e37342e302f32332d3234203d3e20313530323732.roa (hash: pekVrjodYi69uEjwrgeD1ua34vzyep4R8BPpULwsQiM=) 2: 6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl (hash: IK03Uw8D9Nui7ZuOX/2DZQ11YUuBZKCI10d24fy1mU8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 20:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:3c:ac:a3:cc:f3:fd:ee:23:6e:ff:2e:87:13:93:66:ab:8f:96:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AAF6E8D1C9A809446CBC076FE39083AF954708E Validity Not Before: Oct 19 14:56:27 2025 GMT Not After : Oct 22 20:00:27 2025 GMT Subject: CN=0954FBFE526EBFA942BEF5DCAD6FDCDB0F0C648B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f1:9a:a3:fc:4c:8c:ed:b8:a6:03:64:23:3c: 2c:50:c4:95:58:64:b8:96:f5:d6:ef:14:c8:ce:27: 1f:36:1f:31:c2:d7:b2:4c:65:f7:2f:38:06:e3:63: f0:cc:fd:62:f2:23:ac:bf:2d:b4:2f:3b:a6:20:90: d8:16:71:36:a7:c0:c3:96:bb:df:78:19:60:18:fe: 16:cf:09:4e:d7:5c:c6:ea:4d:d0:a8:f1:e4:21:f9: 65:11:dc:e7:cb:0e:ad:de:e3:8c:2c:d3:80:d6:b1: 1c:55:86:5e:ca:99:fb:f8:38:ca:80:15:78:68:e8: 92:34:54:50:b6:67:12:a0:f3:52:68:6b:37:99:8c: eb:86:31:ce:89:11:19:75:d7:e3:36:13:9c:44:90: 96:fc:18:1b:4b:6a:f9:3b:88:d5:b8:a7:2b:10:14: ab:1e:57:2a:ef:60:01:1f:37:90:2a:73:22:79:67: 8c:86:10:5f:7d:c8:e3:f3:ea:e2:a9:97:51:bc:90: 31:dd:e8:b8:34:52:25:5a:26:6f:06:52:28:a8:1f: f7:cc:20:01:ed:98:9c:93:21:0b:01:c2:65:1b:4e: 5e:3c:4f:5c:d2:ed:b0:90:f6:a5:ed:21:f2:9c:d9: 71:6f:65:03:6c:2a:63:f8:66:95:e4:da:13:6f:77: 7f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:54:FB:FE:52:6E:BF:A9:42:BE:F5:DC:AD:6F:DC:DB:0F:0C:64:8B X509v3 Authority Key Identifier: keyid:6A:AF:6E:8D:1C:9A:80:94:46:CB:C0:76:FE:39:08:3A:F9:54:70:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:57:a2:d6:9b:67:54:95:b8:6c:a6:24:cd:14:eb:07:5b:b4: 47:02:bb:69:fa:ce:e2:fc:e4:e9:78:2e:4c:be:b6:4c:be:1f: 33:0c:46:15:cc:a0:30:22:ec:57:5b:fe:a4:5f:d9:f8:96:8f: 7b:28:bb:0e:b6:3d:bd:a0:c2:a0:c0:71:3e:37:bb:10:d7:95: fe:b8:31:0e:de:34:e9:75:25:c2:be:85:40:56:00:f1:7a:f6: eb:ed:43:8d:f5:a5:63:e3:05:50:ea:fd:32:3f:ba:8e:54:a8: b9:56:e3:46:d5:fd:7a:46:b0:7a:66:6e:dd:a6:04:dc:e4:81: b5:14:ec:31:89:cf:16:cf:9e:96:8b:d6:53:78:b6:40:40:b4: 5d:8b:63:aa:30:c7:4b:3c:af:15:1f:2e:84:a9:32:94:ad:6d: 87:a3:92:da:f3:1a:77:84:7b:fc:fb:dd:f6:2d:ae:aa:6f:45: df:16:13:f0:a6:ca:f1:b3:9f:23:91:00:21:e5:6e:8f:b8:89: 11:29:e4:54:63:d8:75:ad:87:81:3d:90:21:bc:06:9e:80:a6: 2f:87:53:6c:93:fd:e8:49:86:a1:29:81:59:59:f5:df:30:e7: d9:aa:a5:72:e9:5c:1f:8a:30:a0:72:9a:d5:4f:67:6f:52:ad: c0:98:6d:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUzyso8zz/e4jbv8uhxOTZquPljgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4M0FG OTU0NzA4RTAeFw0yNTEwMTkxNDU2MjdaFw0yNTEwMjIyMDAwMjdaMDMxMTAvBgNV BAMTKDA5NTRGQkZFNTI2RUJGQTk0MkJFRjVEQ0FENkZEQ0RCMEYwQzY0OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC18Zqj/EyM7bimA2QjPCxQxJVY ZLiW9dbvFMjOJx82HzHC17JMZfcvOAbjY/DM/WLyI6y/LbQvO6YgkNgWcTanwMOW u994GWAY/hbPCU7XXMbqTdCo8eQh+WUR3OfLDq3e44ws04DWsRxVhl7Kmfv4OMqA FXho6JI0VFC2ZxKg81JoazeZjOuGMc6JERl11+M2E5xEkJb8GBtLavk7iNW4pysQ FKseVyrvYAEfN5AqcyJ5Z4yGEF99yOPz6uKpl1G8kDHd6Lg0UiVaJm8GUiioH/fM IAHtmJyTIQsBwmUbTl48T1zS7bCQ9qXtIfKc2XFvZQNsKmP4ZpXk2hNvd3+zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCVT7/lJuv6lCvvXcrW/c2w8MZIswHwYDVR0j BBgwFoAUaq9ujRyagJRGy8B2/jkIOvlUcI4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTE5YWJjOC04NTA3LTQxZWQtODI4OS03ZTNhYzdiMjQ5MzUvMC82QUFGNkU4RDFD OUE4MDk0NDZDQkMwNzZGRTM5MDgzQUY5NTQ3MDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4M0FGOTU0 NzA4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2UxOWFiYzgtODUwNy00MWVkLTgy ODktN2UzYWM3YjI0OTM1LzAvNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4 M0FGOTU0NzA4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALdXotabZ1SVuGymJM0U6wdbtEcCu2n6zuL8 5Ol4Lky+tky+HzMMRhXMoDAi7Fdb/qRf2fiWj3souw62Pb2gwqDAcT43uxDXlf64 MQ7eNOl1JcK+hUBWAPF69uvtQ431pWPjBVDq/TI/uo5UqLlW40bV/XpGsHpmbt2m BNzkgbUU7DGJzxbPnpaL1lN4tkBAtF2LY6owx0s8rxUfLoSpMpStbYejktrzGneE e/z73fYtrqpvRd8WE/CmyvGznyORACHlbo+4iREp5FRj2HWth4E9kCG8Bp6Api+H U2yT/ehJhqEpgVlZ9d8w59mqpXLpXB+KMKBymtVPZ29SrcCYbUo= -----END CERTIFICATE-----Generated at Tue Oct 21 00:07:35 2025 by rpki-client