$ rpki-client -vvf repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft File: C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft (raw, json) Hash identifier: eppEwIFI1HGIrkseXkBvqJMr5CHYQFav0klPTxYnEK4= Subject key identifier: 53:B4:5B:29:32:30:89:6F:09:EF:BD:FF:12:4D:0F:C5:AD:6E:E1:78 Authority key identifier: C6:E3:A2:28:17:CE:6E:09:8D:FC:67:4B:26:28:8C:83:D6:C3:F1:CE Certificate issuer: /CN=C6E3A22817CE6E098DFC674B26288C83D6C3F1CE Certificate serial: 3B19ED1C7CB190A3713F3B2B886390D60A097033 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft Manifest number: 04A7 Signing time: Mon 20 Oct 2025 09:50:58 +0000 Manifest this update: Mon 20 Oct 2025 09:45:58 +0000 Manifest next update: Thu 23 Oct 2025 18:36:58 +0000 Files and hashes: 1: 3130332e3136302e3231322e302f32332d3233203d3e20313430333839.roa (hash: u5WfQAzN1c26Bk/yoWUZSKe+Zg3RVzlzDJ1SjGA5ptQ=) 2: 3130332e3136302e3231332e302f32342d3234203d3e20313430333839.roa (hash: sD1D71HTJcX0Tgc5u0wKCnB+drLmqPRrwWzHCdL5tpk=) 3: 3130332e3136302e3231322e302f32342d3234203d3e20313430333839.roa (hash: b/xbORHT+fQcjRsUPACV/EddNJE5h6xg8w5gIZewjWA=) 4: C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl (hash: Tf6OmTxy9RyjPF/tYJnfe9/Y5DnXdQbGvU0s9aUCVp0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 18:36:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:19:ed:1c:7c:b1:90:a3:71:3f:3b:2b:88:63:90:d6:0a:09:70:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6E3A22817CE6E098DFC674B26288C83D6C3F1CE Validity Not Before: Oct 20 09:45:58 2025 GMT Not After : Oct 23 18:36:58 2025 GMT Subject: CN=53B45B293230896F09EFBDFF124D0FC5AD6EE178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:bc:39:96:14:40:f7:06:73:58:15:ba:e5:a9: a8:88:bb:9a:88:7b:64:bf:50:0e:72:ed:d8:50:c9: 17:f6:e1:15:bc:60:14:24:95:d1:2d:80:a8:87:f2: d4:d0:8a:c0:b5:ae:60:7d:5c:7e:47:76:3e:e5:67: 4a:01:71:03:f6:59:36:c9:d1:9d:5a:b6:c1:5a:79: cd:24:12:7b:63:6c:f2:70:4d:8c:da:3a:88:23:a0: 00:93:47:aa:a6:7b:db:6d:02:f9:1c:d1:10:7d:af: 3a:6c:93:cb:50:75:94:24:21:2f:0e:dd:14:3f:5f: 12:3b:3d:c8:56:2a:9e:05:32:35:bf:5f:c1:b4:67: 4c:16:3e:b2:34:c0:97:61:d5:ec:1a:e0:73:31:51: b7:c8:13:a1:bd:33:f8:f6:4e:46:02:6a:cc:c6:77: 6c:2c:5c:d8:68:96:12:e8:ed:de:13:d7:68:11:f4: 0f:0e:27:9a:c6:01:c4:a0:4b:6e:b2:e9:6c:0f:13: e2:fd:03:39:00:4b:7e:82:7b:82:a6:f4:c8:78:c7: 36:b2:15:dd:21:dc:d9:09:0a:99:17:58:51:4d:f9: b3:e5:e9:5c:c0:51:e8:03:ad:74:8e:46:b9:e9:b4: e9:7a:32:47:1c:89:e4:c2:06:bd:de:8a:84:77:4b: 9f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B4:5B:29:32:30:89:6F:09:EF:BD:FF:12:4D:0F:C5:AD:6E:E1:78 X509v3 Authority Key Identifier: keyid:C6:E3:A2:28:17:CE:6E:09:8D:FC:67:4B:26:28:8C:83:D6:C3:F1:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:33:9b:5d:b4:96:1d:1e:2b:01:62:66:12:ff:63:c4:53:13: 35:a9:bd:cc:76:ea:c3:97:85:83:9a:72:03:98:4d:71:40:26: b1:2a:dc:c0:b7:47:03:40:e7:65:49:e1:92:0a:1f:1e:ed:6d: f7:03:bb:25:77:f9:ed:be:70:51:32:40:75:a8:9b:c3:ab:0b: fb:16:ac:4e:e0:29:03:7a:3b:4c:b1:c6:c8:3c:9e:fc:a0:2d: ba:36:6a:96:e5:ef:6a:9d:66:20:c4:1e:80:fe:dd:f0:82:40: d6:d9:45:d9:c3:7c:bf:e2:75:0c:46:cf:74:fa:6b:26:49:54: b7:09:3d:c2:3d:66:fe:95:ba:0c:0d:b3:35:78:22:4b:96:91: 56:12:a9:52:73:f6:94:fe:30:ad:a3:39:f8:0b:f7:cb:5b:74: 7a:4f:82:69:c4:b7:cb:5b:4a:09:97:55:a2:cb:a8:96:a9:e5: 38:47:02:1c:e2:0c:8f:7c:e5:1a:19:51:e6:86:0b:ed:49:c6: 01:74:b3:7e:fc:63:89:6d:b0:d0:dd:17:e1:f3:22:ae:dd:74: d7:24:22:d6:1a:6e:45:75:d8:09:31:d0:80:dc:21:71:ce:bf: 27:bf:26:e1:21:b2:96:fd:b8:0c:b9:74:43:00:15:42:14:f1: 15:9a:8b:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOxntHHyxkKNxPzsriGOQ1goJcDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZFM0EyMjgxN0NFNkUwOThERkM2NzRCMjYyODhDODNE NkMzRjFDRTAeFw0yNTEwMjAwOTQ1NThaFw0yNTEwMjMxODM2NThaMDMxMTAvBgNV BAMTKDUzQjQ1QjI5MzIzMDg5NkYwOUVGQkRGRjEyNEQwRkM1QUQ2RUUxNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpvDmWFED3BnNYFbrlqaiIu5qI e2S/UA5y7dhQyRf24RW8YBQkldEtgKiH8tTQisC1rmB9XH5Hdj7lZ0oBcQP2WTbJ 0Z1atsFaec0kEntjbPJwTYzaOogjoACTR6qme9ttAvkc0RB9rzpsk8tQdZQkIS8O 3RQ/XxI7PchWKp4FMjW/X8G0Z0wWPrI0wJdh1ewa4HMxUbfIE6G9M/j2TkYCaszG d2wsXNholhLo7d4T12gR9A8OJ5rGAcSgS26y6WwPE+L9AzkAS36Ce4Km9Mh4xzay Fd0h3NkJCpkXWFFN+bPl6VzAUegDrXSORrnptOl6MkccieTCBr3eioR3S597AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU7RbKTIwiW8J773/Ek0Pxa1u4XgwHwYDVR0j BBgwFoAUxuOiKBfObgmN/GdLJiiMg9bD8c4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmVlMWVlMS1hNWI1LTRjNjQtYmJiYi0yNjM2MzUyZGFjZmMvMC9DNkUzQTIyODE3 Q0U2RTA5OERGQzY3NEIyNjI4OEM4M0Q2QzNGMUNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzZFM0EyMjgxN0NFNkUwOThERkM2NzRCMjYyODhDODNENkMz RjFDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlZTFlZTEtYTViNS00YzY0LWJi YmItMjYzNjM1MmRhY2ZjLzAvQzZFM0EyMjgxN0NFNkUwOThERkM2NzRCMjYyODhD ODNENkMzRjFDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYzm120lh0eKwFiZhL/Y8RTEzWpvcx26sOX hYOacgOYTXFAJrEq3MC3RwNA52VJ4ZIKHx7tbfcDuyV3+e2+cFEyQHWom8OrC/sW rE7gKQN6O0yxxsg8nvygLbo2apbl72qdZiDEHoD+3fCCQNbZRdnDfL/idQxGz3T6 ayZJVLcJPcI9Zv6VugwNszV4IkuWkVYSqVJz9pT+MK2jOfgL98tbdHpPgmnEt8tb SgmXVaLLqJap5ThHAhziDI985RoZUeaGC+1JxgF0s378Y4ltsNDdF+HzIq7ddNck ItYabkV12Akx0IDcIXHOvye/JuEhspb9uAy5dEMAFUIU8RWai50= -----END CERTIFICATE-----Generated at Tue Oct 21 04:19:49 2025 by rpki-client