$ rpki-client -vvf repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft File: 6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft (raw, json) Hash identifier: ButLhQED1Azi2gxYEAKo+dL8B59vMDf3aQ/IAkvmK28= Subject key identifier: 03:0F:60:45:77:EF:92:B8:BD:8B:B6:A0:5F:C1:E8:83:56:B4:FE:34 Authority key identifier: 6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87 Certificate issuer: /CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187 Certificate serial: 25D972231B41E72ED4DE73839CC0D981D7E1A342 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft Manifest number: 019B Signing time: Mon 20 Oct 2025 05:41:08 +0000 Manifest this update: Mon 20 Oct 2025 05:36:08 +0000 Manifest next update: Thu 23 Oct 2025 08:29:08 +0000 Files and hashes: 1: 3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa (hash: +wBbu1cMZCAeulSyWUHjp9S6buaiwbJ9EYT932oWUfk=) 2: 6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl (hash: gl0l4WqHeMXbEzErZTZjDTQzi0nhtYMPh2ksE+J8qns=) 3: 3130332e3234352e3232352e302f32342d3234203d3e20313331373635.roa (hash: /abYrA5yp8Nre7zAYDHYwFsGgEom3ZQxvMGjfmSiyZM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 08:29:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:d9:72:23:1b:41:e7:2e:d4:de:73:83:9c:c0:d9:81:d7:e1:a3:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187 Validity Not Before: Oct 20 05:36:08 2025 GMT Not After : Oct 23 08:29:08 2025 GMT Subject: CN=030F604577EF92B8BD8BB6A05FC1E88356B4FE34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:94:06:cd:c0:aa:bb:6e:14:52:94:16:39:3d: 04:84:89:4e:36:2c:8d:28:b2:22:bf:67:8c:08:aa: 36:47:85:82:e9:ea:6c:3c:ec:de:da:86:1e:8d:00: c5:39:a2:9e:ec:25:51:b6:31:68:63:fd:0e:eb:ef: e1:07:52:52:cd:38:98:67:c9:7d:10:2f:11:5b:72: 08:42:05:9d:bc:7b:7c:cb:f6:ae:ea:b8:47:4a:57: 4d:80:32:b4:b1:d2:4b:bb:34:f3:a5:2d:45:28:57: 6c:fe:97:b7:fa:2f:74:e1:42:18:67:f3:fb:a2:9d: 3b:15:6d:1b:25:67:1c:e7:34:5a:19:ea:13:ef:ff: 83:d2:2b:bc:01:aa:0a:ff:e0:e9:f6:0b:f5:a3:83: 3f:5c:71:46:6b:3d:cb:43:6d:54:78:e9:96:0a:4a: a7:2d:42:a1:35:d1:ef:10:bf:bb:4b:8c:16:34:a2: 37:19:33:95:ba:ad:18:2c:ae:9b:f0:ae:e4:d0:6d: 62:2a:59:91:eb:57:8f:ff:a9:66:d1:c9:dc:1c:42: db:3c:49:4f:63:6a:42:48:8e:ca:fd:85:81:4d:21: d6:47:45:35:b9:d6:1f:8b:ba:c7:aa:54:d4:2d:af: b2:ca:df:4e:d7:54:72:46:ee:83:25:0f:20:79:cf: dd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0F:60:45:77:EF:92:B8:BD:8B:B6:A0:5F:C1:E8:83:56:B4:FE:34 X509v3 Authority Key Identifier: keyid:6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:c2:73:4c:83:06:bf:20:b1:ed:43:dc:fa:c5:27:83:67:26: f0:5f:ea:06:43:2d:76:07:c7:14:5c:a5:82:cd:05:bf:5f:be: 1e:b7:3e:b8:0c:48:ac:67:0b:f8:39:2c:c9:83:92:68:8a:98: 3f:e6:a8:0d:52:c9:ae:dc:8b:88:08:ab:cd:43:a3:23:5d:d6: ac:e6:a9:9e:2e:85:de:b8:4d:ab:79:e6:8a:52:e7:5b:45:6c: 13:28:8d:bb:34:a3:f0:3a:9a:28:21:b3:b7:b5:e0:6e:55:73: 72:ec:ef:d8:59:89:3b:56:a6:03:fa:38:08:d2:84:b3:1a:61: 8b:9c:fa:86:40:52:ad:d3:5d:5e:ab:ff:f0:65:86:f7:3d:be: ec:53:51:7c:83:03:d3:69:15:73:78:0c:aa:54:be:07:65:ce: f0:a2:07:9e:c6:cd:75:b6:f6:40:65:88:0f:8e:d2:3a:76:d1: 52:d3:50:11:c2:f1:6f:f9:00:28:d5:08:f8:ee:fd:fb:5a:6b: d5:53:ff:62:f9:10:b1:63:7f:8b:1c:70:91:e2:b4:21:34:34: 6d:47:d4:57:49:bb:57:52:20:65:02:b2:17:c2:19:ae:61:8f: d8:f6:e1:25:d7:bf:05:58:f9:21:09:81:54:33:26:ee:9e:a1: d2:47:cd:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJdlyIxtB5y7U3nODnMDZgdfho0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkzMzIz MkVDMjE4NzAeFw0yNTEwMjAwNTM2MDhaFw0yNTEwMjMwODI5MDhaMDMxMTAvBgNV BAMTKDAzMEY2MDQ1NzdFRjkyQjhCRDhCQjZBMDVGQzFFODgzNTZCNEZFMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTlAbNwKq7bhRSlBY5PQSEiU42 LI0osiK/Z4wIqjZHhYLp6mw87N7ahh6NAMU5op7sJVG2MWhj/Q7r7+EHUlLNOJhn yX0QLxFbcghCBZ28e3zL9q7quEdKV02AMrSx0ku7NPOlLUUoV2z+l7f6L3ThQhhn 8/uinTsVbRslZxznNFoZ6hPv/4PSK7wBqgr/4On2C/Wjgz9ccUZrPctDbVR46ZYK SqctQqE10e8Qv7tLjBY0ojcZM5W6rRgsrpvwruTQbWIqWZHrV4//qWbRydwcQts8 SU9jakJIjsr9hYFNIdZHRTW51h+LuseqVNQtr7LK307XVHJG7oMlDyB5z90pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAw9gRXfvkri9i7agX8Hog1a0/jQwHwYDVR0j BBgwFoAUb7Ta52sSygDgc0Sk3S+TMjLsIYcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmQ3MDM0Ni01YmRmLTQ5NjEtYTc0Zi01NWFlODU1NjcyYTEvMC82RkI0REFFNzZC MTJDQTAwRTA3MzQ0QTRERDJGOTMzMjMyRUMyMTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkzMzIzMkVD MjE4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkNzAzNDYtNWJkZi00OTYxLWE3 NGYtNTVhZTg1NTY3MmExLzAvNkZCNERBRTc2QjEyQ0EwMEUwNzM0NEE0REQyRjkz MzIzMkVDMjE4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAnCc0yDBr8gse1D3PrFJ4NnJvBf6gZDLXYH xxRcpYLNBb9fvh63PrgMSKxnC/g5LMmDkmiKmD/mqA1Sya7ci4gIq81DoyNd1qzm qZ4uhd64Tat55opS51tFbBMojbs0o/A6mighs7e14G5Vc3Ls79hZiTtWpgP6OAjS hLMaYYuc+oZAUq3TXV6r//Blhvc9vuxTUXyDA9NpFXN4DKpUvgdlzvCiB57GzXW2 9kBliA+O0jp20VLTUBHC8W/5ACjVCPju/ftaa9VT/2L5ELFjf4sccJHitCE0NG1H 1FdJu1dSIGUCshfCGa5hj9j24SXXvwVY+SEJgVQzJu6eodJHzdE= -----END CERTIFICATE-----Generated at Mon Oct 20 19:04:46 2025 by rpki-client