$ rpki-client -vvf repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft File: 6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft (raw, json) Hash identifier: sWg1HlcSmESy/7s6q9jSEv5a6zTJrGCaThzDxHouxCo= Subject key identifier: 70:8D:4A:58:27:14:26:AC:38:5D:44:EC:36:6D:BA:C7:5E:60:43:4F Authority key identifier: 6C:FA:BB:BC:88:D3:9C:7F:78:09:5D:A7:D3:D3:5D:D3:AA:2E:95:67 Certificate issuer: /CN=6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567 Certificate serial: 5448593EBC206E98340119F1FBE814C64A7D7124 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft Manifest number: 02F8 Signing time: Mon 20 Oct 2025 03:11:10 +0000 Manifest this update: Mon 20 Oct 2025 03:06:10 +0000 Manifest next update: Thu 23 Oct 2025 04:40:10 +0000 Files and hashes: 1: 3130332e3137352e3135382e302f32332d3234203d3e20313331313131.roa (hash: KlJ7xe9jxJPv2ghljBXv+XqaG+xdsmEYctXqZgRhERI=) 2: 6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.crl (hash: /9kTc7h0Aez1ibHVL856mc4eSJ6T66lKAnNb6Si5Jfc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.crl rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 04:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:48:59:3e:bc:20:6e:98:34:01:19:f1:fb:e8:14:c6:4a:7d:71:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567 Validity Not Before: Oct 20 03:06:10 2025 GMT Not After : Oct 23 04:40:10 2025 GMT Subject: CN=708D4A58271426AC385D44EC366DBAC75E60434F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:23:ab:82:85:93:a2:ee:73:73:a0:3e:06:a5: e5:09:b9:38:fa:67:48:e8:58:64:57:fe:3f:45:49: 04:2b:4f:bd:65:6d:c3:d6:92:4e:ff:c3:91:00:ab: d5:03:82:cf:6e:a5:11:1b:b9:8d:53:b9:70:2e:2d: 88:21:c7:3f:71:a7:a8:a2:17:8c:85:3f:99:cf:54: ba:d3:1f:b8:95:3c:90:37:bb:33:31:86:64:d5:4d: fd:c9:10:66:cd:f4:e9:6a:3e:35:1b:bd:a3:7d:2a: 9a:0d:4a:cd:b2:1b:25:e4:a8:96:0d:59:b1:6f:f1: 7e:78:ce:7c:09:30:dc:84:8d:cc:0a:32:f8:78:d3: 57:4f:51:48:36:fa:38:61:3d:3c:ff:34:9b:c9:71: 97:66:7e:25:64:2f:71:86:16:69:97:a0:10:4d:53: 0d:ff:b5:b0:cb:1d:04:95:3b:6f:b2:95:bf:07:50: a3:d6:ef:ff:92:48:57:ac:55:3c:0e:5b:b7:84:e8: e2:83:01:67:c9:3c:ef:b4:27:2b:be:78:b6:2d:79: 17:fb:63:b1:e6:24:8a:a1:3d:52:26:4d:e8:1e:fe: a5:19:0b:38:7b:3c:f4:7b:70:27:95:8b:70:2a:5b: b2:a4:fb:9d:18:db:63:e1:48:ed:b7:52:28:b8:2b: 9b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8D:4A:58:27:14:26:AC:38:5D:44:EC:36:6D:BA:C7:5E:60:43:4F X509v3 Authority Key Identifier: keyid:6C:FA:BB:BC:88:D3:9C:7F:78:09:5D:A7:D3:D3:5D:D3:AA:2E:95:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:dd:97:63:2a:69:49:c2:f8:c6:f6:7e:49:36:dd:59:61:cd: e8:ee:a7:6b:5e:a9:f3:75:d4:4e:cf:40:62:6e:a2:b4:1b:b6: 05:43:2d:36:11:e7:a2:77:7c:78:4f:40:6d:df:43:08:e9:e3: 27:42:65:c8:27:ae:68:ea:7c:2d:19:8a:20:dd:77:54:26:e8: 65:90:e9:00:a5:32:bb:3a:02:28:23:f1:e2:fd:79:af:21:87: c5:67:9a:77:eb:66:23:f1:68:d0:bf:0a:1c:65:8a:ad:6e:f8: 7d:34:33:57:71:c5:66:05:64:15:58:5d:60:b3:c0:29:80:31: bf:56:57:74:99:a9:aa:91:3b:40:56:f8:1f:41:85:88:eb:b2: 1e:94:0d:3d:31:6c:43:5d:be:77:83:1f:9a:fb:a7:5b:ee:1c: cc:15:5a:0e:e3:9e:67:7d:36:d2:aa:ee:f4:18:0e:ac:47:79: fa:74:da:c3:02:32:09:5f:4c:3c:f7:6b:f5:ab:39:8f:06:ca: 03:63:aa:77:c3:a3:6b:ce:22:ff:19:af:80:93:48:aa:a5:03: aa:ec:af:aa:9f:74:cb:f8:02:48:41:02:28:a8:d1:00:5b:21: 47:db:da:f9:38:8a:6e:c3:dc:f7:5c:f0:de:e7:fe:b4:04:98: cf:f2:0d:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVEhZPrwgbpg0ARnx++gUxkp9cSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNGQUJCQkM4OEQzOUM3Rjc4MDk1REE3RDNEMzVERDNB QTJFOTU2NzAeFw0yNTEwMjAwMzA2MTBaFw0yNTEwMjMwNDQwMTBaMDMxMTAvBgNV BAMTKDcwOEQ0QTU4MjcxNDI2QUMzODVENDRFQzM2NkRCQUM3NUU2MDQzNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLI6uChZOi7nNzoD4GpeUJuTj6 Z0joWGRX/j9FSQQrT71lbcPWkk7/w5EAq9UDgs9upREbuY1TuXAuLYghxz9xp6ii F4yFP5nPVLrTH7iVPJA3uzMxhmTVTf3JEGbN9OlqPjUbvaN9KpoNSs2yGyXkqJYN WbFv8X54znwJMNyEjcwKMvh401dPUUg2+jhhPTz/NJvJcZdmfiVkL3GGFmmXoBBN Uw3/tbDLHQSVO2+ylb8HUKPW7/+SSFesVTwOW7eE6OKDAWfJPO+0Jyu+eLYteRf7 Y7HmJIqhPVImTege/qUZCzh7PPR7cCeVi3AqW7Kk+50Y22PhSO23Uii4K5tTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcI1KWCcUJqw4XUTsNm26x15gQ08wHwYDVR0j BBgwFoAUbPq7vIjTnH94CV2n09Nd06oulWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Mzg3NGNmMy1hZGIxLTQ5NDctYTdlNC1hMmQzMmM1NGVkMWYvMC82Q0ZBQkJCQzg4 RDM5QzdGNzgwOTVEQTdEM0QzNUREM0FBMkU5NTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNGQUJCQkM4OEQzOUM3Rjc4MDk1REE3RDNEMzVERDNBQTJF OTU2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzM4NzRjZjMtYWRiMS00OTQ3LWE3 ZTQtYTJkMzJjNTRlZDFmLzAvNkNGQUJCQkM4OEQzOUM3Rjc4MDk1REE3RDNEMzVE RDNBQTJFOTU2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC7dl2MqaUnC+Mb2fkk23Vlhzejup2teqfN1 1E7PQGJuorQbtgVDLTYR56J3fHhPQG3fQwjp4ydCZcgnrmjqfC0ZiiDdd1Qm6GWQ 6QClMrs6Aigj8eL9ea8hh8VnmnfrZiPxaNC/Chxliq1u+H00M1dxxWYFZBVYXWCz wCmAMb9WV3SZqaqRO0BW+B9BhYjrsh6UDT0xbENdvneDH5r7p1vuHMwVWg7jnmd9 NtKq7vQYDqxHefp02sMCMglfTDz3a/WrOY8GygNjqnfDo2vOIv8Zr4CTSKqlA6rs r6qfdMv4AkhBAiio0QBbIUfb2vk4im7D3Pdc8N7n/rQEmM/yDS8= -----END CERTIFICATE-----Generated at Mon Oct 20 12:08:42 2025 by rpki-client