$ rpki-client -vvf repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft File: 6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft (raw, json) Hash identifier: zrOVYZZsrxiG1CAfuafuh9cISvZAubmwL62JWMc27gM= Subject key identifier: B9:D2:C5:0F:A0:44:C4:A9:B3:59:1B:49:2C:CE:00:66:E8:9B:64:BB Authority key identifier: 6D:DA:5C:1E:72:FD:CA:12:9B:06:9E:D9:C4:4B:8A:AE:08:BA:E6:40 Certificate issuer: /CN=6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640 Certificate serial: 6EBC4068BB7C2168EC5E28E2B861D1964C31975A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer Subject info access: rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft Manifest number: 0514 Signing time: Sun 19 Oct 2025 02:21:08 +0000 Manifest this update: Sun 19 Oct 2025 02:16:08 +0000 Manifest next update: Wed 22 Oct 2025 04:29:08 +0000 Files and hashes: 1: 3130332e3233332e3130302e302f32342d3234203d3e20313333333537.roa (hash: Sp1gcRSl9gkUunIoA7wttKs/P7PqHdCHTdTVU9qZ8Lk=) 2: 6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl (hash: TuN9ynKo2f5D0+zC3u3wQirx6IV83ly789J13YKL7gU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 04:29:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:bc:40:68:bb:7c:21:68:ec:5e:28:e2:b8:61:d1:96:4c:31:97:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640 Validity Not Before: Oct 19 02:16:08 2025 GMT Not After : Oct 22 04:29:08 2025 GMT Subject: CN=B9D2C50FA044C4A9B3591B492CCE0066E89B64BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5d:6f:52:1c:6f:12:d2:d2:dd:77:38:b4:2f: 25:ee:06:c9:5c:77:02:a8:67:1b:8c:30:a5:fb:8a: 35:b3:9c:3f:19:62:7a:82:3e:e9:f8:08:51:89:89: 70:f2:1e:d9:85:c5:4a:ed:e7:fe:f0:f6:6b:0c:01: 32:40:4e:5a:ca:0d:93:a1:04:28:d5:51:db:0f:79: d7:af:91:0e:af:15:06:74:41:7a:ec:63:18:e0:c3: 2b:b5:bd:a7:51:c2:68:c5:ed:03:1b:41:84:5a:78: ad:26:bf:b9:c4:6e:ba:08:41:eb:33:05:9f:0e:f1: d7:95:25:e8:60:d1:ac:43:08:dd:ec:71:f2:dc:cd: 27:40:fc:aa:a9:13:f5:27:e1:3f:f0:7b:9c:40:45: 09:73:c3:ca:f5:cc:f8:25:79:55:7f:4c:a6:36:96: d2:33:74:cc:f4:b8:2d:7f:7b:3e:9a:c0:0d:d9:e9: d5:c1:5f:7d:f1:24:34:58:0b:97:3b:25:84:19:ce: 27:c3:ea:a6:bc:e0:b4:3e:b2:ba:37:65:13:a1:bf: 4b:f3:ce:18:ec:6b:fa:f4:aa:3f:e2:fa:7f:70:bb: b4:d7:ef:d1:72:81:18:f9:3a:8d:10:35:67:f5:64: 24:2f:37:f9:73:65:de:a9:8e:45:ec:d2:9e:81:48: 59:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D2:C5:0F:A0:44:C4:A9:B3:59:1B:49:2C:CE:00:66:E8:9B:64:BB X509v3 Authority Key Identifier: keyid:6D:DA:5C:1E:72:FD:CA:12:9B:06:9E:D9:C4:4B:8A:AE:08:BA:E6:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:1a:ed:9c:88:5f:e2:7a:75:8f:30:e4:70:9f:a0:51:14:72: e9:fc:d5:9b:62:e4:d0:0d:83:4c:e3:26:45:1d:7f:bb:ef:67: 61:45:b1:0b:ac:f6:02:ec:22:a0:a3:3d:33:83:ac:3a:23:cb: 4b:41:01:3b:32:24:20:5e:a1:d1:c3:ad:ac:34:24:26:f1:da: 15:c4:38:84:ea:50:7b:fe:44:c1:de:9b:aa:b0:55:a4:70:04: 0d:cf:54:69:e0:4c:13:f3:3d:fa:41:a9:10:78:a9:02:89:c8: 5d:ff:ce:3e:17:84:e2:39:19:0c:e5:64:ac:01:3c:5d:35:77: a9:1b:eb:27:ab:0e:a0:8c:ba:18:ba:e3:b7:f3:4f:01:9f:77: 21:06:2c:c4:ca:41:7e:cf:90:29:38:cf:36:4e:ed:98:c7:5f: 54:ef:b6:f2:e9:36:b0:20:95:58:c6:74:75:51:1d:2a:f9:22: 9d:d2:5b:35:fa:29:89:9f:79:dc:8e:e8:db:58:4e:91:d3:ad: 5e:00:c7:17:48:7d:5a:e0:b1:b4:54:f0:96:9d:db:88:0d:4e: b3:95:a9:5e:89:85:85:7c:86:30:b8:70:1f:30:b1:28:49:e6: f6:1f:5c:af:91:9f:40:47:8b:b9:02:1a:24:b2:06:6f:6a:92: 42:e0:00:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbrxAaLt8IWjsXijiuGHRlkwxl1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhBQUUw OEJBRTY0MDAeFw0yNTEwMTkwMjE2MDhaFw0yNTEwMjIwNDI5MDhaMDMxMTAvBgNV BAMTKEI5RDJDNTBGQTA0NEM0QTlCMzU5MUI0OTJDQ0UwMDY2RTg5QjY0QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDXW9SHG8S0tLddzi0LyXuBslc dwKoZxuMMKX7ijWznD8ZYnqCPun4CFGJiXDyHtmFxUrt5/7w9msMATJATlrKDZOh BCjVUdsPedevkQ6vFQZ0QXrsYxjgwyu1vadRwmjF7QMbQYRaeK0mv7nEbroIQesz BZ8O8deVJehg0axDCN3scfLczSdA/KqpE/Un4T/we5xARQlzw8r1zPgleVV/TKY2 ltIzdMz0uC1/ez6awA3Z6dXBX33xJDRYC5c7JYQZzifD6qa84LQ+sro3ZROhv0vz zhjsa/r0qj/i+n9wu7TX79FygRj5Oo0QNWf1ZCQvN/lzZd6pjkXs0p6BSFnTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUudLFD6BExKmzWRtJLM4AZuibZLswHwYDVR0j BBgwFoAUbdpcHnL9yhKbBp7ZxEuKrgi65kAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTdjOGMwMS00YWY3LTQxYjAtODVhMy05ZDFmYTRlYjlmYmEvMC82RERBNUMxRTcy RkRDQTEyOUIwNjlFRDlDNDRCOEFBRTA4QkFFNjQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhBQUUwOEJB RTY0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE3YzhjMDEtNGFmNy00MWIwLTg1 YTMtOWQxZmE0ZWI5ZmJhLzAvNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhB QUUwOEJBRTY0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMa7ZyIX+J6dY8w5HCfoFEUcun81Zti5NAN g0zjJkUdf7vvZ2FFsQus9gLsIqCjPTODrDojy0tBATsyJCBeodHDraw0JCbx2hXE OITqUHv+RMHem6qwVaRwBA3PVGngTBPzPfpBqRB4qQKJyF3/zj4XhOI5GQzlZKwB PF01d6kb6yerDqCMuhi647fzTwGfdyEGLMTKQX7PkCk4zzZO7ZjHX1TvtvLpNrAg lVjGdHVRHSr5Ip3SWzX6KYmfedyO6NtYTpHTrV4AxxdIfVrgsbRU8Jad24gNTrOV qV6JhYV8hjC4cB8wsShJ5vYfXK+Rn0BHi7kCGiSyBm9qkkLgAD4= -----END CERTIFICATE-----Generated at Mon Oct 20 09:27:49 2025 by rpki-client