$ rpki-client -vvf repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft File: 6DA2B28F4391C01434B7229FD4D68E661BF13061.mft (raw, json) Hash identifier: KwmzBcyYIWkur6CVuSDT9AjjUwsd9r1RaCuKgumIviA= Subject key identifier: 2A:1E:0D:1D:4B:24:7B:37:70:48:6E:DA:52:D9:B0:C5:24:1C:CC:D7 Authority key identifier: 6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61 Certificate issuer: /CN=6DA2B28F4391C01434B7229FD4D68E661BF13061 Certificate serial: 61A865DD9449AD78C801D470292B27FC0DB21AAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft Manifest number: 0289 Signing time: Sun 19 Oct 2025 04:11:27 +0000 Manifest this update: Sun 19 Oct 2025 04:06:27 +0000 Manifest next update: Wed 22 Oct 2025 09:29:27 +0000 Files and hashes: 1: 34392e3233362e3232322e302f32342d3234203d3e203535363638.roa (hash: kIaQGWL5YUwAplbYF3rxqdRNmuWMqoQK88/zSxpS0Qk=) 2: 34392e3233362e3231372e302f32342d3234203d3e203535363638.roa (hash: +1/NKTo1zjk1P1ZAkPLDaaCsjoolxhbaib5j0otnVl8=) 3: 34392e3233362e3232332e302f32342d3234203d3e203535363638.roa (hash: fJ4g0K772WVp53tZH6Cr6nPqsZvGnVS3VfLvicif+Ms=) 4: 34392e3233362e3232312e302f32342d3234203d3e203535363638.roa (hash: M2pyi/IMF/9bDLHyO64naWXcT6UxKr+6hMI7b6iDcRY=) 5: 34392e3233362e3231382e302f32342d3234203d3e203535363638.roa (hash: IuWeKhHtePe16+Mo0GNe9sNi8Di/hp1hWH17ol9RuOY=) 6: 34392e3233362e3231362e302f32342d3234203d3e203535363638.roa (hash: PpAfKuTLC2LZflDGFc6yX8hZy8hNL9DWJF0ArhdPsJs=) 7: 34392e3233362e3231392e302f32342d3234203d3e203535363638.roa (hash: WONaTaogHxZR78zw31IvprtisGRNqNJsbh6kYGrgZG4=) 8: 6DA2B28F4391C01434B7229FD4D68E661BF13061.crl (hash: HdCP+JtF+FbIYYLrsRQeeA3oYnx1gpfwlmbHRiBeszo=) 9: 34392e3233362e3232302e302f32342d3234203d3e203535363638.roa (hash: 7skPXD0GcBP0y8K0CJN6k0vAhi8+IRcH6Kcm8uU8vVs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 09:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:a8:65:dd:94:49:ad:78:c8:01:d4:70:29:2b:27:fc:0d:b2:1a:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DA2B28F4391C01434B7229FD4D68E661BF13061 Validity Not Before: Oct 19 04:06:27 2025 GMT Not After : Oct 22 09:29:27 2025 GMT Subject: CN=2A1E0D1D4B247B3770486EDA52D9B0C5241CCCD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:46:fa:a6:4e:7e:5d:43:85:df:81:30:df:27: a1:7d:52:ef:c7:89:bd:91:61:04:f9:67:77:36:b4: 99:4e:9a:f9:2a:a8:07:3b:ce:ab:ed:f8:4c:73:cb: 7b:cf:99:f7:09:ed:ef:32:73:76:b5:fb:84:35:fb: 9b:e9:95:f6:57:69:9e:01:7a:43:48:35:de:3f:44: 2a:c1:fa:43:cc:16:de:f5:21:e6:df:a9:6b:6e:65: 6e:57:6a:c2:78:87:41:20:30:69:76:e9:b4:45:72: fd:a6:3a:c4:86:69:3f:cb:ac:2e:8e:8a:d2:76:d4: e4:7e:3e:a4:75:be:f7:89:a7:3a:84:bc:c0:01:39: 2a:06:48:b9:43:5f:88:52:7f:81:37:26:92:97:7f: 72:66:32:30:32:c9:62:ab:31:2d:06:d2:d8:f1:38: d5:a5:95:f2:b9:20:a2:8f:c4:e3:62:65:7e:79:88: b4:58:db:74:6c:40:45:2b:94:23:d2:49:bf:46:e0: 9a:62:88:b8:c9:ef:ce:49:04:5a:45:95:31:84:38: bb:76:68:9e:ca:e1:71:cd:dc:94:3e:f0:93:e4:56: 8d:7e:89:bc:58:a9:6a:7f:26:da:b4:99:8e:fc:13: 07:0d:6e:86:0a:ab:97:90:92:62:3e:1f:cf:60:50: f0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1E:0D:1D:4B:24:7B:37:70:48:6E:DA:52:D9:B0:C5:24:1C:CC:D7 X509v3 Authority Key Identifier: keyid:6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:70:88:69:fd:06:16:a8:6a:12:95:73:e3:44:08:ed:c1:64: 1e:2b:4a:74:a5:9f:67:a0:dd:f6:36:84:00:c2:1d:1b:43:55: a1:c7:61:29:31:10:72:16:e2:f1:cc:ef:76:71:a7:cb:d9:af: 85:f0:c3:18:46:41:8f:9e:a1:d4:1c:d1:af:b4:99:e7:5c:76: f0:46:3d:07:a7:33:f4:f2:ea:3d:43:88:e7:c6:7f:6f:29:a5: f0:73:ea:79:e6:88:2f:59:b1:8d:39:58:2b:75:d5:e9:8a:62: 34:8b:7d:b3:3b:6a:51:8c:78:91:c8:7b:6f:b7:5c:0d:7f:0d: 3f:7f:97:38:f4:4a:aa:d1:80:ae:83:46:dd:c9:e9:5c:01:be: 2e:7f:74:1e:97:c6:28:18:b9:a0:52:ab:19:91:ac:41:d3:5c: 06:5b:30:43:15:c7:f3:57:0a:c5:14:7f:77:c6:f3:5a:5e:df: 03:63:16:bd:81:a5:b0:eb:aa:a9:7a:d7:bf:b0:f5:07:4d:ef: a4:ad:18:01:77:69:2b:6f:97:e6:9e:c8:81:fe:c7:e1:d8:db: b6:a4:56:1a:c0:54:73:9d:09:8f:42:2d:44:28:77:ba:21:78: 5e:f8:3f:12:a2:40:c9:95:37:0f:91:fa:62:f8:5d:67:0a:fe: 4a:98:76:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYahl3ZRJrXjIAdRwKSsn/A2yGq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhFNjYx QkYxMzA2MTAeFw0yNTEwMTkwNDA2MjdaFw0yNTEwMjIwOTI5MjdaMDMxMTAvBgNV BAMTKDJBMUUwRDFENEIyNDdCMzc3MDQ4NkVEQTUyRDlCMEM1MjQxQ0NDRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6RvqmTn5dQ4XfgTDfJ6F9Uu/H ib2RYQT5Z3c2tJlOmvkqqAc7zqvt+Exzy3vPmfcJ7e8yc3a1+4Q1+5vplfZXaZ4B ekNINd4/RCrB+kPMFt71IebfqWtuZW5XasJ4h0EgMGl26bRFcv2mOsSGaT/LrC6O itJ21OR+PqR1vveJpzqEvMABOSoGSLlDX4hSf4E3JpKXf3JmMjAyyWKrMS0G0tjx ONWllfK5IKKPxONiZX55iLRY23RsQEUrlCPSSb9G4JpiiLjJ785JBFpFlTGEOLt2 aJ7K4XHN3JQ+8JPkVo1+ibxYqWp/Jtq0mY78EwcNboYKq5eQkmI+H89gUPA1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKh4NHUskezdwSG7aUtmwxSQczNcwHwYDVR0j BBgwFoAUbaKyj0ORwBQ0tyKf1NaOZhvxMGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDBmOTljMy1lNTY3LTQxYWUtYWEwMC0yNmNiOTc4MWZiZTkvMC82REEyQjI4RjQz OTFDMDE0MzRCNzIyOUZENEQ2OEU2NjFCRjEzMDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhFNjYxQkYx MzA2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwZjk5YzMtZTU2Ny00MWFlLWFh MDAtMjZjYjk3ODFmYmU5LzAvNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhF NjYxQkYxMzA2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1wiGn9BhaoahKVc+NECO3BZB4rSnSln2eg 3fY2hADCHRtDVaHHYSkxEHIW4vHM73Zxp8vZr4XwwxhGQY+eodQc0a+0medcdvBG PQenM/Ty6j1DiOfGf28ppfBz6nnmiC9ZsY05WCt11emKYjSLfbM7alGMeJHIe2+3 XA1/DT9/lzj0SqrRgK6DRt3J6VwBvi5/dB6XxigYuaBSqxmRrEHTXAZbMEMVx/NX CsUUf3fG81pe3wNjFr2BpbDrqql617+w9QdN76StGAF3aStvl+aeyIH+x+HY27ak VhrAVHOdCY9CLUQod7oheF74PxKiQMmVNw+R+mL4XWcK/kqYdgg= -----END CERTIFICATE-----Generated at Mon Oct 20 09:51:38 2025 by rpki-client