$ rpki-client -vvf repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft File: 6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft (raw, json) Hash identifier: +RTVXi/WwGW9cmyXmDwzXNX7feHKeKPh5UQ1ahNwhtY= Subject key identifier: 49:33:BF:D2:B1:77:58:F5:31:C0:9D:42:A2:D7:DA:F1:EC:D8:6E:E9 Authority key identifier: 6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 Certificate issuer: /CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53 Certificate serial: 5FA7D3C862A9A0DAB6EEEF28C3090BDE2D4354A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer Subject info access: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft Manifest number: 8A Signing time: Sun 19 Oct 2025 12:32:19 +0000 Manifest this update: Sun 19 Oct 2025 12:27:19 +0000 Manifest next update: Wed 22 Oct 2025 16:29:19 +0000 Files and hashes: 1: 3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa (hash: R+IkOnhEEkrZOxf8Y3xufcx4Q4z9+2sI/l2mQF5vKrU=) 2: 6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl (hash: dgf10Got7R6bfjEbwXjGC+Op0gz8e6YshbWczj6z3to=) 3: 3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa (hash: b3FwlMsLVeDm7arhAC1MOxAg/+Ixy8Gs1MmwDRmmqco=) 4: 3130332e3133362e31322e302f32322d3234203d3e20313338383231.roa (hash: Cb5AEtlH1NnuqmCvEw1t1v8nRYfGeJ7DwpY/kiNXrBE=) 5: 3130332e3133362e31322e302f32342d3234203d3e20313338383231.roa (hash: Lk7MgzxdNvFWTQC60iPK0vpuf42JvMwfykIHdcb6dFo=) 6: 3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa (hash: 4xFtj009j2KyXApXnh4MToBnYNS6TXxPJe0g07ZPzfw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 16:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:a7:d3:c8:62:a9:a0:da:b6:ee:ef:28:c3:09:0b:de:2d:43:54:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53 Validity Not Before: Oct 19 12:27:19 2025 GMT Not After : Oct 22 16:29:19 2025 GMT Subject: CN=4933BFD2B17758F531C09D42A2D7DAF1ECD86EE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:17:77:ac:09:df:1c:f7:64:c6:88:1b:f4:6d: db:88:20:98:ac:e4:d3:fc:a1:96:70:e6:75:d3:06: ae:49:c0:68:78:b3:7a:74:41:6b:9c:8d:e0:56:ec: 7b:c1:76:b0:1e:f2:83:1b:4e:b0:61:ad:94:e9:b2: 54:5b:cc:fd:48:c0:bc:9c:6b:99:53:06:00:76:67: b8:20:14:91:85:35:ff:d0:37:c8:03:17:56:30:df: 47:f0:5b:83:8d:d2:27:47:ea:76:9f:68:db:bd:11: 19:36:56:ca:61:d8:9e:8d:87:40:d8:37:40:14:de: e7:e1:7b:a8:13:4b:d2:29:08:a9:65:4d:47:92:1b: be:d6:b5:18:ec:08:cf:18:ea:c6:14:41:1a:90:57: 6a:ea:fd:25:07:f7:b3:12:d7:7e:0c:94:26:f0:d7: 32:3f:60:90:de:49:1d:ff:2f:18:ae:aa:f5:86:bc: 61:f1:3f:67:2c:ba:c9:84:a8:85:f1:95:d8:88:6e: 91:30:35:63:48:a4:fd:c2:70:cf:53:6a:c3:24:af: d4:1b:32:ab:8f:b5:be:0e:c3:8f:38:2d:53:4c:d6: 7e:2c:2d:61:2e:f7:aa:f0:15:f3:59:75:f3:99:1e: ca:b7:05:2f:b5:2f:a5:1a:2a:5e:3c:0a:9a:b3:ce: 77:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:33:BF:D2:B1:77:58:F5:31:C0:9D:42:A2:D7:DA:F1:EC:D8:6E:E9 X509v3 Authority Key Identifier: keyid:6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:23:c1:f5:1b:b2:ed:0d:bc:28:17:f4:a2:62:46:60:31:88: 49:33:11:84:f8:8b:33:e5:8c:e0:87:21:21:7b:9d:cd:ef:40: a8:8a:fd:e7:27:09:03:89:17:b3:41:99:fe:39:a0:44:52:63: 5e:aa:c6:b1:92:eb:50:f8:d2:0d:62:29:54:bf:34:2b:74:49: 1f:f6:51:cc:24:8e:e4:a8:33:58:0e:89:24:d4:a0:e3:e1:2d: fd:47:4a:b3:43:85:d2:d5:6b:0f:eb:95:91:cb:99:54:45:93: 1d:93:10:4f:ac:81:63:cc:b2:f1:00:98:c9:e5:a8:5c:89:d9: ef:a4:58:c6:e7:23:cb:be:67:b2:1a:1c:7a:c9:32:76:61:be: 7d:32:28:ca:83:22:44:de:14:be:5f:ee:fb:f9:b0:29:07:cd: d7:94:4d:44:4f:cb:16:3b:f0:3e:30:51:4f:0d:4a:8e:df:e3: ce:03:d2:8b:09:ed:08:1d:18:24:d2:e9:29:a0:fd:ad:ff:b0: 71:d9:65:4f:40:74:0c:18:80:68:93:d0:ee:9c:7f:c6:f6:3a: 22:45:f2:1e:b9:7e:fa:2b:8c:90:d9:9d:1a:02:b3:05:54:d4: 95:3f:b1:2f:9b:57:6e:24:58:c9:18:35:d5:7f:67:32:79:1d: b4:66:aa:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX6fTyGKpoNq27u8owwkL3i1DVKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNC RkIzN0I1MzAeFw0yNTEwMTkxMjI3MTlaFw0yNTEwMjIxNjI5MTlaMDMxMTAvBgNV BAMTKDQ5MzNCRkQyQjE3NzU4RjUzMUMwOUQ0MkEyRDdEQUYxRUNEODZFRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVF3esCd8c92TGiBv0bduIIJis 5NP8oZZw5nXTBq5JwGh4s3p0QWucjeBW7HvBdrAe8oMbTrBhrZTpslRbzP1IwLyc a5lTBgB2Z7ggFJGFNf/QN8gDF1Yw30fwW4ON0idH6nafaNu9ERk2Vsph2J6Nh0DY N0AU3ufhe6gTS9IpCKllTUeSG77WtRjsCM8Y6sYUQRqQV2rq/SUH97MS134MlCbw 1zI/YJDeSR3/LxiuqvWGvGHxP2csusmEqIXxldiIbpEwNWNIpP3CcM9TasMkr9Qb MquPtb4Ow484LVNM1n4sLWEu96rwFfNZdfOZHsq3BS+1L6UaKl48CpqzzncvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSTO/0rF3WPUxwJ1Cotfa8ezYbukwHwYDVR0j BBgwFoAUamnvxciXkHx0yKHr3Z03/L+ze1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDFiMWMxYi02NTZjLTQ4OWQtOWVkMy1jY2M3N2M4MzAxOGQvMC82QTY5RUZDNUM4 OTc5MDdDNzRDOEExRUJERDlEMzdGQ0JGQjM3QjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNCRkIz N0I1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAxYjFjMWItNjU2Yy00ODlkLTll ZDMtY2NjNzdjODMwMThkLzAvNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3 RkNCRkIzN0I1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcjwfUbsu0NvCgX9KJiRmAxiEkzEYT4izPl jOCHISF7nc3vQKiK/ecnCQOJF7NBmf45oERSY16qxrGS61D40g1iKVS/NCt0SR/2 UcwkjuSoM1gOiSTUoOPhLf1HSrNDhdLVaw/rlZHLmVRFkx2TEE+sgWPMsvEAmMnl qFyJ2e+kWMbnI8u+Z7IaHHrJMnZhvn0yKMqDIkTeFL5f7vv5sCkHzdeUTURPyxY7 8D4wUU8NSo7f484D0osJ7QgdGCTS6Smg/a3/sHHZZU9AdAwYgGiT0O6cf8b2OiJF 8h65fvorjJDZnRoCswVU1JU/sS+bV24kWMkYNdV/ZzJ5HbRmqow= -----END CERTIFICATE-----Generated at Mon Oct 20 14:58:08 2025 by rpki-client