$ rpki-client -vvf repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft File: C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft (raw, json) Hash identifier: nhzPONLUzbg+KRXlDeyKwbSSslo6N5OLD41Wg3kDZ1c= Subject key identifier: 7D:09:FF:1D:3B:1A:99:F1:A7:11:6B:C8:45:BB:6D:15:B3:AF:B6:D9 Authority key identifier: C6:95:0F:BC:93:F3:09:E8:39:CF:C5:E1:A2:EF:0F:6C:91:BF:09:C7 Certificate issuer: /CN=C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7 Certificate serial: 35E30A34B70975DE5E9E3578BC154D6393B611E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft Manifest number: 011C Signing time: Sun 19 Oct 2025 22:21:03 +0000 Manifest this update: Sun 19 Oct 2025 22:16:03 +0000 Manifest next update: Thu 23 Oct 2025 10:14:03 +0000 Files and hashes: 1: C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl (hash: JlgsTHyw8CsXqq75vPiehlHWD1P9fbMuTW3eXy8mvNk=) 2: 3130332e37382e35312e302f32342d3234203d3e20313530323536.roa (hash: IGaUhhhYSDgHiHBNKXPmkyIkbMtz8KycOxh90/k+Fes=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:14:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e3:0a:34:b7:09:75:de:5e:9e:35:78:bc:15:4d:63:93:b6:11:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7 Validity Not Before: Oct 19 22:16:03 2025 GMT Not After : Oct 23 10:14:03 2025 GMT Subject: CN=7D09FF1D3B1A99F1A7116BC845BB6D15B3AFB6D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e8:5a:b6:53:e9:8f:a8:a9:29:b9:33:24:24: 7f:03:87:c9:a0:83:72:f6:67:75:18:3f:b1:46:5f: b4:e6:79:3f:a8:8c:bc:42:48:c8:92:f3:2b:08:be: 79:63:8f:3d:f0:c1:19:95:38:2d:54:1b:70:db:e6: 1d:d6:8b:4d:bf:4e:ee:20:41:d2:a0:3c:5f:a9:19: 47:e0:67:11:f5:75:fc:4b:ca:bb:0b:2f:de:0e:9b: d9:c4:1e:86:8d:08:b9:81:91:2c:6d:43:ab:13:8a: 1a:74:a4:c7:b2:ee:85:8f:d7:55:fd:b2:0e:24:36: 6a:26:0a:01:79:ae:c2:74:c2:d4:37:63:cc:c2:2e: e1:3e:65:a9:f8:49:60:10:f0:98:d7:d2:9f:bd:31: 70:1f:03:7b:58:e2:e6:e3:85:bd:9d:c6:70:76:14: d0:15:ce:a9:c6:c9:35:51:80:77:0b:8e:6f:a7:ce: 3d:0a:15:87:69:53:00:a5:e8:63:a8:01:6d:99:12: b1:05:d3:72:73:55:e8:3d:1b:0a:58:04:ae:62:4b: 14:e8:23:90:39:5e:be:42:fe:1c:05:2f:51:f4:cf: 1b:15:dc:2d:a0:bb:ea:8c:c0:ed:be:67:93:3a:ea: c2:a7:17:f0:ed:63:c9:64:30:62:0d:78:9f:c4:d2: ef:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:09:FF:1D:3B:1A:99:F1:A7:11:6B:C8:45:BB:6D:15:B3:AF:B6:D9 X509v3 Authority Key Identifier: keyid:C6:95:0F:BC:93:F3:09:E8:39:CF:C5:E1:A2:EF:0F:6C:91:BF:09:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:18:c6:1f:17:11:0b:8b:12:20:1b:38:fd:fe:de:a0:3f:1d: 74:7a:ae:49:0a:87:61:8a:d6:43:2e:a1:91:54:94:72:f7:39: 78:db:7b:dc:36:f1:47:d5:94:4a:3b:63:48:3e:f0:8b:92:5b: 0f:00:39:62:06:71:c6:31:7e:e4:70:a8:bd:13:c5:a1:cd:f0: be:4d:cd:b2:dc:c1:57:03:53:69:dc:de:e8:ec:16:96:0b:e2: 8e:db:71:a1:b9:48:a4:88:e2:74:be:1b:bc:f9:67:53:9e:19: d4:8f:9e:1b:7c:d9:51:9d:25:fb:0e:3b:54:51:9c:24:41:ef: 05:9d:64:e8:89:52:cc:8d:9b:09:d1:48:51:41:5a:d4:f6:35: 42:dd:30:d4:79:b3:d8:c1:9c:7b:2c:65:c1:b3:3f:a7:95:be: 41:2a:71:bd:f8:30:31:df:33:e7:ea:2f:dd:7e:aa:21:14:f8: 4b:e3:a5:39:a9:e6:91:3b:a5:52:83:55:6c:6d:dc:e2:33:70: 0f:59:62:62:40:7e:46:12:75:9a:c3:20:9d:a7:6a:3c:1e:09: e4:0d:a9:27:c6:8c:a4:95:8c:cf:29:6e:47:aa:8b:fa:20:1d: ee:e0:87:2f:c5:1a:5c:f6:cc:22:1e:67:0d:ef:cb:ea:63:c7: 66:60:c3:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNeMKNLcJdd5enjV4vBVNY5O2EeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5NTBGQkM5M0YzMDlFODM5Q0ZDNUUxQTJFRjBGNkM5 MUJGMDlDNzAeFw0yNTEwMTkyMjE2MDNaFw0yNTEwMjMxMDE0MDNaMDMxMTAvBgNV BAMTKDdEMDlGRjFEM0IxQTk5RjFBNzExNkJDODQ1QkI2RDE1QjNBRkI2RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv6Fq2U+mPqKkpuTMkJH8Dh8mg g3L2Z3UYP7FGX7TmeT+ojLxCSMiS8ysIvnljjz3wwRmVOC1UG3Db5h3Wi02/Tu4g QdKgPF+pGUfgZxH1dfxLyrsLL94Om9nEHoaNCLmBkSxtQ6sTihp0pMey7oWP11X9 sg4kNmomCgF5rsJ0wtQ3Y8zCLuE+Zan4SWAQ8JjX0p+9MXAfA3tY4ubjhb2dxnB2 FNAVzqnGyTVRgHcLjm+nzj0KFYdpUwCl6GOoAW2ZErEF03JzVeg9GwpYBK5iSxTo I5A5Xr5C/hwFL1H0zxsV3C2gu+qMwO2+Z5M66sKnF/DtY8lkMGINeJ/E0u+DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfQn/HTsamfGnEWvIRbttFbOvttkwHwYDVR0j BBgwFoAUxpUPvJPzCeg5z8Xhou8PbJG/CccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjUyMWJkMS0xZGEyLTRiODAtODQxNi1mMDVkZTI5MjIxNmUvMC9DNjk1MEZCQzkz RjMwOUU4MzlDRkM1RTFBMkVGMEY2QzkxQkYwOUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzY5NTBGQkM5M0YzMDlFODM5Q0ZDNUUxQTJFRjBGNkM5MUJG MDlDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI1MjFiZDEtMWRhMi00YjgwLTg0 MTYtZjA1ZGUyOTIyMTZlLzAvQzY5NTBGQkM5M0YzMDlFODM5Q0ZDNUUxQTJFRjBG NkM5MUJGMDlDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABEYxh8XEQuLEiAbOP3+3qA/HXR6rkkKh2GK 1kMuoZFUlHL3OXjbe9w28UfVlEo7Y0g+8IuSWw8AOWIGccYxfuRwqL0TxaHN8L5N zbLcwVcDU2nc3ujsFpYL4o7bcaG5SKSI4nS+G7z5Z1OeGdSPnht82VGdJfsOO1RR nCRB7wWdZOiJUsyNmwnRSFFBWtT2NULdMNR5s9jBnHssZcGzP6eVvkEqcb34MDHf M+fqL91+qiEU+EvjpTmp5pE7pVKDVWxt3OIzcA9ZYmJAfkYSdZrDIJ2najweCeQN qSfGjKSVjM8pbkeqi/ogHe7ghy/FGlz2zCIeZw3vy+pjx2Zgw20= -----END CERTIFICATE-----Generated at Mon Oct 20 09:45:02 2025 by rpki-client