$ rpki-client -vvf repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft File: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft (raw, json) Hash identifier: 0sgLcevgozRfG76iEfwy7beUvBWR4N7lXpL61b7iZEk= Subject key identifier: 67:94:5D:DD:B9:57:0E:57:9E:78:EC:36:78:0B:FE:72:F7:88:AD:12 Authority key identifier: 6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E Certificate issuer: /CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Certificate serial: 784C1B180E9C83BAE4271017C6CE5C075AF59426 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft Manifest number: ED Signing time: Sun 19 Oct 2025 09:42:15 +0000 Manifest this update: Sun 19 Oct 2025 09:37:15 +0000 Manifest next update: Wed 22 Oct 2025 17:21:15 +0000 Files and hashes: 1: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl (hash: ZiBPGdyUB4zl2FD4vFD3FkqkEWAJb881Fka5pfFpa3s=) 2: 33362e35302e3231362e302f32332d3233203d3e20313437313238.roa (hash: TzFqnwzzY9xia0s3waMLkiGG8A7BVi2jn0Tebn9ZTXg=) 3: 33362e35302e3231362e302f32342d3234203d3e20313437313238.roa (hash: knY/ggPl78wk2nvRxnL0Ik6PzIK0DYSQq15iPy2gM40=) 4: 33362e35302e3231372e302f32342d3234203d3e20313437313238.roa (hash: suvA+Wk962jHlhC9+yItBsXmZi+V1BXvTufHDqbDzJE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:4c:1b:18:0e:9c:83:ba:e4:27:10:17:c6:ce:5c:07:5a:f5:94:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Validity Not Before: Oct 19 09:37:15 2025 GMT Not After : Oct 22 17:21:15 2025 GMT Subject: CN=67945DDDB9570E579E78EC36780BFE72F788AD12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6f:c8:0f:3e:0c:91:f4:b3:a2:67:ed:fc:8c: ed:78:e6:1c:cc:48:ca:fa:ff:4e:0a:48:3e:c8:8b: cc:1d:2a:af:be:d5:7a:50:6a:5c:76:f5:cf:95:4f: 05:10:60:c4:24:b9:7b:9d:47:09:69:cd:cf:e8:f6: 20:31:e2:23:c8:d8:63:74:dd:93:8d:d6:ef:2e:29: 07:80:28:63:e3:a3:22:c1:30:bb:c9:df:cd:99:12: e8:95:7f:87:ef:8c:19:12:95:03:af:0f:57:8d:26: c5:54:e8:4f:ef:ca:14:35:3e:e9:b2:a4:6e:84:21: 13:6a:f5:fc:2a:40:02:a4:6d:57:ee:9b:35:af:57: 41:60:e8:6d:1c:4b:b9:4e:51:5b:0b:9f:d5:0f:f9: 1c:c2:fe:67:48:1c:22:f7:ea:17:d4:b5:b8:9c:fc: fb:e6:78:48:55:83:f6:8f:0c:08:c2:7c:3c:de:7a: 34:12:7e:27:45:24:ec:74:a4:a8:c4:80:1a:f3:23: 65:c3:58:98:fe:03:05:7b:67:11:b3:c2:47:10:29: dc:c7:14:42:c8:c4:08:eb:40:fe:82:a6:a2:d6:65: b8:15:b3:38:92:91:24:8b:ea:1c:db:f3:19:b3:18: 7d:b1:f5:26:46:21:11:bf:d0:ac:95:9c:13:b4:85: aa:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:94:5D:DD:B9:57:0E:57:9E:78:EC:36:78:0B:FE:72:F7:88:AD:12 X509v3 Authority Key Identifier: keyid:6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:71:77:58:d5:bc:66:61:59:c1:bc:19:7a:19:25:0b:c8:b4: 32:5b:a8:9f:82:b5:97:12:f0:aa:be:48:69:e0:cc:70:cf:71: 87:4c:c8:7f:da:3b:f8:b3:e5:62:ed:ad:2d:bb:19:30:66:31: 01:32:d9:4e:fa:5e:be:71:84:70:72:66:0e:41:4a:85:de:dc: 89:11:55:7a:1b:9d:c7:c9:4a:a8:0f:dd:ee:3b:af:60:b9:14: a5:78:a4:96:82:b4:b9:96:a0:6e:43:dd:bd:e7:34:8a:dd:13: 62:0f:92:62:9e:3f:13:62:ea:97:73:8b:1a:f9:23:62:95:7f: 02:2e:70:4e:70:5c:7b:bf:1c:a0:a7:2a:43:6e:c4:9d:24:af: b8:35:ed:93:7e:0b:df:17:a4:6f:b3:48:89:ef:0d:57:6b:b1: 06:95:ac:67:15:f2:67:d5:a8:d4:ac:df:af:58:41:9f:91:bd: 1e:45:0f:56:99:12:33:9c:a3:76:9e:28:91:31:05:57:61:90: 0a:f4:05:09:41:c9:09:12:92:60:cb:30:61:57:18:29:a7:76: 1e:ad:23:dd:30:a2:ce:29:75:76:b0:5f:60:1e:a7:59:76:b4: be:b7:3f:d1:0a:1f:18:6b:33:bf:c1:55:de:16:57:84:37:ac: 32:cd:8a:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeEwbGA6cg7rkJxAXxs5cB1r1lCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3 QTk4MDk5RTAeFw0yNTEwMTkwOTM3MTVaFw0yNTEwMjIxNzIxMTVaMDMxMTAvBgNV BAMTKDY3OTQ1REREQjk1NzBFNTc5RTc4RUMzNjc4MEJGRTcyRjc4OEFEMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCob8gPPgyR9LOiZ+38jO145hzM SMr6/04KSD7Ii8wdKq++1XpQalx29c+VTwUQYMQkuXudRwlpzc/o9iAx4iPI2GN0 3ZON1u8uKQeAKGPjoyLBMLvJ382ZEuiVf4fvjBkSlQOvD1eNJsVU6E/vyhQ1Pumy pG6EIRNq9fwqQAKkbVfumzWvV0Fg6G0cS7lOUVsLn9UP+RzC/mdIHCL36hfUtbic /PvmeEhVg/aPDAjCfDzeejQSfidFJOx0pKjEgBrzI2XDWJj+AwV7ZxGzwkcQKdzH FELIxAjrQP6CpqLWZbgVsziSkSSL6hzb8xmzGH2x9SZGIRG/0KyVnBO0harPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ5Rd3blXDleeeOw2eAv+cveIrRIwHwYDVR0j BBgwFoAUbbsQDY1GaauKXH7gVyKO1nqYCZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTk4OWZhZi00OGZiLTRmNDAtOWU3Ny0yNDNkNzhhNWI1YzQvMC82REJCMTAwRDhE NDY2OUFCOEE1QzdFRTA1NzIyOEVENjdBOTgwOTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhFRDY3QTk4 MDk5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU5ODlmYWYtNDhmYi00ZjQwLTll NzctMjQzZDc4YTViNWM0LzAvNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3RUUwNTcyMjhF RDY3QTk4MDk5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBxd1jVvGZhWcG8GXoZJQvItDJbqJ+CtZcS 8Kq+SGngzHDPcYdMyH/aO/iz5WLtrS27GTBmMQEy2U76Xr5xhHByZg5BSoXe3IkR VXobncfJSqgP3e47r2C5FKV4pJaCtLmWoG5D3b3nNIrdE2IPkmKePxNi6pdzixr5 I2KVfwIucE5wXHu/HKCnKkNuxJ0kr7g17ZN+C98XpG+zSInvDVdrsQaVrGcV8mfV qNSs369YQZ+RvR5FD1aZEjOco3aeKJExBVdhkAr0BQlByQkSkmDLMGFXGCmndh6t I90wos4pdXawX2Aep1l2tL63P9EKHxhrM7/BVd4WV4Q3rDLNiv8= -----END CERTIFICATE-----Generated at Mon Oct 20 23:30:44 2025 by rpki-client