$ rpki-client -vvf repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft File: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft (raw, json) Hash identifier: 6TTdPlNw9RAK9EO1dmoXEtLac9fIs6FYHBu35aGGrKA= Subject key identifier: 04:6B:B2:99:65:35:F7:CB:5D:7F:9F:66:CB:FF:05:E6:A3:1F:ED:0F Authority key identifier: 6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 Certificate issuer: /CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Certificate serial: C54E527A1BE94CB934908613962CAE0D1A6FED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft Manifest number: 0234 Signing time: Mon 20 Oct 2025 16:50:52 +0000 Manifest this update: Mon 20 Oct 2025 16:45:52 +0000 Manifest next update: Fri 24 Oct 2025 02:26:52 +0000 Files and hashes: 1: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl (hash: SyCgJjI9D7Tb+C80Va1EcgXzIvYY+IJZEZ/kJ9dFgoc=) 2: 3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa (hash: 8i2rkzBjlPEti5Kr8Zm8/78pVX8xhxtJgE0QaB9hDOo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c5:4e:52:7a:1b:e9:4c:b9:34:90:86:13:96:2c:ae:0d:1a:6f:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Validity Not Before: Oct 20 16:45:52 2025 GMT Not After : Oct 24 02:26:52 2025 GMT Subject: CN=046BB2996535F7CB5D7F9F66CBFF05E6A31FED0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f1:d3:93:fe:2a:da:2b:a0:fe:23:b8:a7:95: 9b:ec:04:2f:6d:40:3e:e5:4e:2a:f8:5e:f9:e1:cb: f6:ef:3e:1b:2c:94:0c:e9:4b:9d:b6:56:35:7e:5a: 10:a8:21:0d:06:46:c7:9c:f8:91:6b:dc:78:0d:0c: db:3a:ee:bc:37:be:d0:63:0a:fb:60:4e:57:13:b5: b2:05:c6:4e:15:60:55:82:7f:ec:0d:4c:9e:c4:aa: e8:1a:d2:58:e0:98:b3:e4:fb:d8:10:8e:8b:6f:ca: 90:74:d2:af:9c:64:f7:97:44:e6:86:95:a7:79:8a: f6:43:71:08:fe:84:d6:ee:c7:4f:0e:dc:9a:b9:13: 9c:36:ad:c4:1e:72:34:e2:87:f4:77:fa:72:4b:50: 44:a6:d8:8c:60:2b:ad:32:81:30:6d:9f:d2:81:cb: 96:87:42:be:64:da:21:11:fe:18:af:81:94:88:a3: 94:c8:54:df:7a:bf:7d:68:90:27:4f:27:ac:07:67: 9d:45:16:5e:00:91:d6:83:3c:fe:df:52:cc:ee:99: 18:56:73:fb:46:8e:e1:50:d2:4e:ea:b3:97:4c:71: b2:da:f2:cb:08:db:e4:31:cf:12:16:59:41:cc:8e: b1:2b:af:6b:c2:3c:28:56:b6:bc:82:4d:b2:55:a3: 2d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:6B:B2:99:65:35:F7:CB:5D:7F:9F:66:CB:FF:05:E6:A3:1F:ED:0F X509v3 Authority Key Identifier: keyid:6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d9:db:1b:3e:39:80:2e:8d:2d:b1:79:19:d0:9b:e0:da:36: 83:c0:32:7e:02:e5:3c:26:f3:2a:97:8f:ba:fa:df:99:e4:e6: 47:4b:62:7a:d2:6d:e2:28:3c:7e:f5:ed:95:b1:4b:1a:98:0c: c3:73:ac:35:ec:a4:0d:f0:12:b2:57:46:f3:83:72:db:c5:ee: a3:b1:3e:36:b2:4d:e5:75:d4:cc:e6:67:66:4e:39:4c:9c:27: 1d:b3:67:46:e4:e4:49:16:58:ac:9a:96:60:00:0c:54:9b:df: 8a:9b:38:11:1e:fb:7b:63:bd:64:ab:72:a9:fa:6a:b6:07:ec: 07:80:74:bc:74:22:54:9a:37:9c:91:e6:57:b6:b1:00:f7:66: 09:7b:91:94:5a:a2:ed:8d:75:e4:ec:22:2a:fd:13:7e:d2:64: 68:15:ef:90:68:1d:a8:4c:12:ff:5c:81:55:56:02:5c:69:9d: d4:01:c0:d2:95:b1:c6:e0:0a:ae:e7:f1:af:e1:6c:b4:35:06: 3d:ec:fc:02:e9:e3:f7:7d:8d:aa:e3:59:47:00:a5:1a:34:32: 1a:47:27:72:d2:f7:0e:11:35:0a:ee:4c:e6:66:db:aa:da:93: 53:b2:ca:2f:d6:1e:c1:66:57:cc:73:6e:92:32:39:e3:1d:bd: aa:e3:08:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAMVOUnob6Uy5NJCGE5Ysrg0ab+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1 RkUwQkUxMTAeFw0yNTEwMjAxNjQ1NTJaFw0yNTEwMjQwMjI2NTJaMDMxMTAvBgNV BAMTKDA0NkJCMjk5NjUzNUY3Q0I1RDdGOUY2NkNCRkYwNUU2QTMxRkVEMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc8dOT/iraK6D+I7inlZvsBC9t QD7lTir4Xvnhy/bvPhsslAzpS522VjV+WhCoIQ0GRsec+JFr3HgNDNs67rw3vtBj CvtgTlcTtbIFxk4VYFWCf+wNTJ7Equga0ljgmLPk+9gQjotvypB00q+cZPeXROaG lad5ivZDcQj+hNbux08O3Jq5E5w2rcQecjTih/R3+nJLUESm2IxgK60ygTBtn9KB y5aHQr5k2iER/hivgZSIo5TIVN96v31okCdPJ6wHZ51FFl4AkdaDPP7fUszumRhW c/tGjuFQ0k7qs5dMcbLa8ssI2+QxzxIWWUHMjrErr2vCPChWtryCTbJVoy2DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBGuymWU198tdf59my/8F5qMf7Q8wHwYDVR0j BBgwFoAUb8hX33/lNQpsBaHxE/PcLl/gvhEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTIzOGE2Mi02YTk2LTQzYmMtODdhZi0wMmRiNjQxZjcxMDkvMC82RkM4NTdERjdG RTUzNTBBNkMwNUExRjExM0YzREMyRTVGRTBCRTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1RkUw QkUxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGEyMzhhNjItNmE5Ni00M2JjLTg3 YWYtMDJkYjY0MWY3MTA5LzAvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RD MkU1RkUwQkUxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3Z2xs+OYAujS2xeRnQm+DaNoPAMn4C5Twm 8yqXj7r635nk5kdLYnrSbeIoPH717ZWxSxqYDMNzrDXspA3wErJXRvODctvF7qOx PjayTeV11MzmZ2ZOOUycJx2zZ0bk5EkWWKyalmAADFSb34qbOBEe+3tjvWSrcqn6 arYH7AeAdLx0IlSaN5yR5le2sQD3Zgl7kZRaou2NdeTsIir9E37SZGgV75BoHahM Ev9cgVVWAlxpndQBwNKVscbgCq7n8a/hbLQ1Bj3s/ALp4/d9jarjWUcApRo0MhpH J3LS9w4RNQruTOZm26rak1Oyyi/WHsFmV8xzbpIyOeMdvarjCCw= -----END CERTIFICATE-----Generated at Mon Oct 20 23:36:25 2025 by rpki-client