$ rpki-client -vvf repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft File: 6D2120D281865021E16D49A2451DC53A851B5BBD.mft (raw, json) Hash identifier: /XdMK5YgVAHukasFfyvH2KuKX8t++lAxn+kmeeXR3QI= Subject key identifier: 53:56:DE:E2:90:DA:B1:D4:5A:F4:2A:F6:FB:74:56:C4:27:6B:88:38 Authority key identifier: 6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD Certificate issuer: /CN=6D2120D281865021E16D49A2451DC53A851B5BBD Certificate serial: 1DE385D45ACDBB64A867A4555C6E7EA713ADBCFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft Manifest number: 9F Signing time: Sun 19 Oct 2025 19:51:39 +0000 Manifest this update: Sun 19 Oct 2025 19:46:39 +0000 Manifest next update: Thu 23 Oct 2025 05:10:39 +0000 Files and hashes: 1: 3130332e3234352e31362e302f32332d3234203d3e203436303233.roa (hash: 0APaiG4EPBJHGaX3y0J+GecXQsnJ2nU7GWM7XyiSeBU=) 2: 3130332e3234352e31362e302f32342d3234203d3e203436303233.roa (hash: BohmVCdqXlKZG+sKe25j9jAyDRmpT+hYiOTt1ls3vLA=) 3: 3130332e3234352e31382e302f32342d3234203d3e203436303233.roa (hash: Fc0MX+JArFKhMRFuhW8MKgfQ8zyeDdlWFyn08XsgRD0=) 4: 3130332e3234352e31382e302f32332d3234203d3e203436303233.roa (hash: td0OSINBGBuv5HEsFIZ58nSKSttNzeWBzHe87KLyw90=) 5: 3130332e3234352e31362e302f32322d3234203d3e203436303233.roa (hash: MByiWqioSG0bs5FrR2S5ZWO/VS/KpKaL9p/BlUB5wIY=) 6: 3130332e3234352e31372e302f32342d3234203d3e203436303233.roa (hash: SznPKhQPKlumNSdukCt0jZbfcUX8DE7OHpbeCdn75DM=) 7: 3130332e3234352e31392e302f32342d3234203d3e203436303233.roa (hash: OP9t4BATr719tJwNacPpBjZgjvtQIUgiKYybPvtxo7U=) 8: 6D2120D281865021E16D49A2451DC53A851B5BBD.crl (hash: GeZsayVGYKO5DJRYXHFNg1SyG7bRinxjhWQE5H0Bhxo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 05:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:e3:85:d4:5a:cd:bb:64:a8:67:a4:55:5c:6e:7e:a7:13:ad:bc:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D2120D281865021E16D49A2451DC53A851B5BBD Validity Not Before: Oct 19 19:46:39 2025 GMT Not After : Oct 23 05:10:39 2025 GMT Subject: CN=5356DEE290DAB1D45AF42AF6FB7456C4276B8838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:35:9c:45:10:c3:01:ea:c7:d6:83:36:8e:57: 3d:2b:92:6c:d7:e4:e6:95:50:09:ff:6c:6e:d0:fc: e2:db:82:85:ee:83:bc:18:b6:81:d3:d4:da:34:5e: f0:a1:42:b8:e0:11:d7:f7:09:dd:86:3b:f3:c3:48: 9e:69:d9:00:f4:32:5e:7f:4f:c2:67:25:e0:3b:0c: c4:04:d0:26:16:12:26:30:ed:b0:66:4e:af:ba:c0: ae:bf:a7:11:b9:9e:eb:cb:c1:cd:ea:02:78:11:57: a8:73:db:58:7f:1e:d9:8c:e3:db:71:77:c1:2a:e8: 18:d0:b9:3c:f9:1c:9d:38:20:b0:33:34:ce:26:dd: f6:0e:10:d5:6c:8f:3f:c8:e4:28:77:c4:19:c7:bc: 98:e0:4b:d3:ea:dc:c4:80:e1:91:35:3e:86:19:c3: c3:71:bc:47:b8:fe:66:1c:06:73:72:93:08:f3:dd: 8c:66:f9:0a:e2:f4:fc:9f:b2:01:ae:d0:61:c5:7f: f6:e0:d4:30:dd:4d:4a:d9:96:0a:da:bf:cc:b9:37: ba:a7:4d:55:6e:bf:33:06:08:80:3c:62:7b:37:95: ec:00:88:fc:b2:df:e6:47:8b:5c:02:48:22:e0:a0: 94:43:36:80:66:1e:ad:15:7d:f5:92:47:ad:64:28: b8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:56:DE:E2:90:DA:B1:D4:5A:F4:2A:F6:FB:74:56:C4:27:6B:88:38 X509v3 Authority Key Identifier: keyid:6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:34:dc:12:1a:ac:f9:b1:2c:29:a7:e0:11:a1:53:c8:90:c3: 03:13:27:34:66:78:53:97:24:75:19:ca:e4:fa:9c:a9:c5:73: 17:62:43:bf:6e:de:da:a3:2d:79:9b:50:03:06:67:22:a9:92: 92:a5:3b:b0:9f:c1:e5:74:65:ed:ea:0e:6c:92:d8:7f:78:f7: 9f:b1:a0:d6:c5:85:fe:a2:10:32:3f:c8:bc:e7:5e:56:59:70: 3f:d2:5d:b0:4f:ea:12:96:be:5a:64:18:c7:6d:9d:49:c4:1e: 7d:96:b0:4e:d3:10:ca:da:91:7d:8f:0c:df:9f:d2:f7:11:d1: 66:c7:32:c3:87:b7:c2:52:82:5a:b8:64:f5:98:45:0c:ef:9e: c6:35:df:d2:8c:9b:44:0e:a8:6c:25:8a:f4:8d:e0:84:0a:8b: a7:d6:93:f0:ee:e8:4d:2b:d6:01:af:a7:2d:8a:da:eb:31:49: 01:3f:91:b0:fe:03:14:39:b7:6c:74:d8:f9:97:70:21:af:51: bc:a1:90:93:93:3f:6b:3d:6d:3f:bd:8c:d9:0b:95:ef:b3:e8: 00:8f:d0:2e:86:0e:17:aa:4c:04:d7:02:ca:d9:69:85:f6:84: cd:1e:3c:07:69:ce:02:51:16:cb:37:46:29:fa:79:fe:06:ce: b6:6e:81:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHeOF1FrNu2SoZ6RVXG5+pxOtvPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4 NTFCNUJCRDAeFw0yNTEwMTkxOTQ2MzlaFw0yNTEwMjMwNTEwMzlaMDMxMTAvBgNV BAMTKDUzNTZERUUyOTBEQUIxRDQ1QUY0MkFGNkZCNzQ1NkM0Mjc2Qjg4MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrNZxFEMMB6sfWgzaOVz0rkmzX 5OaVUAn/bG7Q/OLbgoXug7wYtoHT1No0XvChQrjgEdf3Cd2GO/PDSJ5p2QD0Ml5/ T8JnJeA7DMQE0CYWEiYw7bBmTq+6wK6/pxG5nuvLwc3qAngRV6hz21h/HtmM49tx d8Eq6BjQuTz5HJ04ILAzNM4m3fYOENVsjz/I5Ch3xBnHvJjgS9Pq3MSA4ZE1PoYZ w8NxvEe4/mYcBnNykwjz3Yxm+Qri9PyfsgGu0GHFf/bg1DDdTUrZlgrav8y5N7qn TVVuvzMGCIA8Yns3lewAiPyy3+ZHi1wCSCLgoJRDNoBmHq0VffWSR61kKLgjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU1be4pDasdRa9Cr2+3RWxCdriDgwHwYDVR0j BBgwFoAUbSEg0oGGUCHhbUmiRR3FOoUbW70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTI3MmY3Yi1kNjU2LTQwNTgtYTdiNi1mMjVhZGYzZWQxYmUvMC82RDIxMjBEMjgx ODY1MDIxRTE2RDQ5QTI0NTFEQzUzQTg1MUI1QkJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4NTFC NUJCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTUyNzJmN2ItZDY1Ni00MDU4LWE3 YjYtZjI1YWRmM2VkMWJlLzAvNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1 M0E4NTFCNUJCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL803BIarPmxLCmn4BGhU8iQwwMTJzRmeFOX JHUZyuT6nKnFcxdiQ79u3tqjLXmbUAMGZyKpkpKlO7CfweV0Ze3qDmyS2H9495+x oNbFhf6iEDI/yLznXlZZcD/SXbBP6hKWvlpkGMdtnUnEHn2WsE7TEMrakX2PDN+f 0vcR0WbHMsOHt8JSglq4ZPWYRQzvnsY139KMm0QOqGwlivSN4IQKi6fWk/Du6E0r 1gGvpy2K2usxSQE/kbD+AxQ5t2x02PmXcCGvUbyhkJOTP2s9bT+9jNkLle+z6ACP 0C6GDheqTATXAsrZaYX2hM0ePAdpzgJRFss3Rin6ef4GzrZugaU= -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:38 2025 by rpki-client