$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft File: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft (raw, json) Hash identifier: xBgq95zywxRsT7b/Qpn+7WPiepJq+akiXHAnT/GToyQ= Subject key identifier: 69:37:DE:B5:DF:76:DB:20:90:95:CD:10:45:02:5E:5A:D4:32:44:53 Authority key identifier: 69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E Certificate issuer: /CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Certificate serial: 012551EA9849D697EDCF85FA3BFD91E8D75B56D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft Manifest number: 020B Signing time: Sat 18 Oct 2025 03:10:06 +0000 Manifest this update: Sat 18 Oct 2025 03:05:06 +0000 Manifest next update: Tue 21 Oct 2025 09:30:06 +0000 Files and hashes: 1: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl (hash: vJBYUoGcVWaZ0lXPZpj75gGvVWfNJblL6qDXC/Xb1u4=) 2: 3130312e302e342e302f32322d3234203d3e203535363730.roa (hash: 7ECSmeZAaiWw7xemuyw220yGHio1fDg8eukqs4CuhkU=) 3: 3130332e31322e32382e302f32322d3234203d3e203535363730.roa (hash: 56/u0yMrkC94FdPOEf+mn1+2joJi+oVC5l6/K3alTgQ=) 4: 323430303a666230303a3a2f33322d3438203d3e203535363730.roa (hash: FVA48wGL4/cskX5JvDPv5QyssORBEsld3N+rmhCU4Gc=) 5: 3130332e31322e32382e302f32322d3234203d3e203438343635.roa (hash: hq6fcTyLZ0Befnc7SCHGWV/VgoDOfnIfMb9/pRr7Usc=) 6: 3130312e302e342e302f32322d3234203d3e203438343635.roa (hash: 0Vbzbdds4DlTIQ/frtEsWuiBQ6OCjLTHiqaNJsXbu/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 09:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:25:51:ea:98:49:d6:97:ed:cf:85:fa:3b:fd:91:e8:d7:5b:56:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Validity Not Before: Oct 18 03:05:06 2025 GMT Not After : Oct 21 09:30:06 2025 GMT Subject: CN=6937DEB5DF76DB209095CD1045025E5AD4324453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8a:1c:19:be:6e:e0:40:5c:1c:77:b1:1b:9a: cf:5a:1d:aa:38:40:50:9d:17:e1:8f:1c:89:29:90: 37:12:2d:de:81:a9:3f:0c:c6:7f:93:ff:08:ca:0b: 53:09:a1:28:aa:b4:8a:83:81:df:b3:90:e3:99:5d: 32:72:6b:54:bc:9b:ff:92:af:f8:f2:96:9c:6e:e3: f5:57:0d:8a:b9:1e:24:28:e1:00:e2:61:4a:64:82: 92:a2:e1:4f:99:3a:15:01:75:9f:20:58:d7:43:c3: 66:d8:84:0f:9f:62:b1:5a:d8:45:c0:14:c0:97:bc: 74:f6:83:52:80:50:84:0d:e6:49:57:de:62:d0:e1: 69:ac:c3:5e:a2:3c:9b:ce:d9:6a:5a:6c:b4:ac:3c: 30:7e:c2:a8:b9:94:25:73:d8:3f:20:6a:f7:04:c5: b6:55:88:fa:88:51:f1:0f:92:bb:f5:ca:21:bc:bd: 57:12:52:1b:6d:dc:c4:37:a3:4e:d5:07:1c:0c:e7: 09:3e:a6:5d:42:ce:c3:e6:58:35:78:fc:69:4f:1e: 0e:79:33:1c:ea:ec:bd:ef:2d:3f:60:45:45:19:3b: 05:2f:9a:67:d1:40:45:c3:1d:0a:ed:11:fa:65:44: 0a:61:c3:92:fc:83:9b:48:9c:f1:50:48:cd:0d:1c: 78:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:37:DE:B5:DF:76:DB:20:90:95:CD:10:45:02:5E:5A:D4:32:44:53 X509v3 Authority Key Identifier: keyid:69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:50:b5:29:c0:1a:b7:ae:71:be:03:2f:d0:51:43:0e:c2:46: 68:6b:e7:ff:53:ec:db:7f:11:6e:5e:dd:a9:07:c2:77:5b:74: 9e:10:16:ae:56:4a:05:d7:6c:bc:2b:ad:0d:d9:70:51:24:56: 92:d2:de:3b:fb:32:32:30:79:cb:f6:e1:85:94:40:bc:01:9e: 8d:c4:4c:c5:f1:06:1e:62:20:db:a7:8e:c3:68:cf:70:58:7c: a0:58:59:1e:99:8f:50:9b:a6:20:fa:56:d9:68:d0:f6:bd:96: c9:0d:d3:94:07:8d:38:32:ac:e0:8e:49:4b:44:d6:e9:ec:2c: 9f:ce:2c:47:b6:08:f5:81:3c:59:05:2f:82:68:b2:7d:f5:37: 90:e7:fc:cd:e4:91:0b:ad:a4:d4:16:f5:b1:a7:81:c3:19:e6: 80:b3:32:9d:96:d0:a1:59:17:8a:fc:d0:c5:27:17:39:0b:9b: 6b:50:14:ee:b7:b2:59:a8:fb:25:f0:3e:e9:8f:ce:f8:d6:18: 5a:5a:96:5a:f3:79:67:8f:80:39:a5:4f:fc:a4:5d:4e:3c:c2: 4e:a2:7b:1b:8c:c0:30:ac:59:01:a9:b7:e3:5a:4e:0e:3e:b1: 67:12:fc:ad:19:c1:aa:3d:46:89:52:77:af:37:26:3e:85:19: 8f:6d:a0:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUASVR6phJ1pftz4X6O/2R6NdbVtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVG RTNFN0MzRTAeFw0yNTEwMTgwMzA1MDZaFw0yNTEwMjEwOTMwMDZaMDMxMTAvBgNV BAMTKDY5MzdERUI1REY3NkRCMjA5MDk1Q0QxMDQ1MDI1RTVBRDQzMjQ0NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxihwZvm7gQFwcd7Ebms9aHao4 QFCdF+GPHIkpkDcSLd6BqT8Mxn+T/wjKC1MJoSiqtIqDgd+zkOOZXTJya1S8m/+S r/jylpxu4/VXDYq5HiQo4QDiYUpkgpKi4U+ZOhUBdZ8gWNdDw2bYhA+fYrFa2EXA FMCXvHT2g1KAUIQN5klX3mLQ4Wmsw16iPJvO2WpabLSsPDB+wqi5lCVz2D8gavcE xbZViPqIUfEPkrv1yiG8vVcSUhtt3MQ3o07VBxwM5wk+pl1CzsPmWDV4/GlPHg55 Mxzq7L3vLT9gRUUZOwUvmmfRQEXDHQrtEfplRAphw5L8g5tInPFQSM0NHHgpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaTfetd922yCQlc0QRQJeWtQyRFMwHwYDVR0j BBgwFoAUaWcBLvykNpjo4bckuR38Xv4+fD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDZlYTdmYS05NGQyLTRkZGMtYThlNi01ZGM2MjZjMjkxZDQvMC82OTY3MDEyRUZD QTQzNjk4RThFMUI3MjRCOTFERkM1RUZFM0U3QzNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVGRTNF N0MzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4 ZTYtNWRjNjI2YzI5MWQ0LzAvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZD NUVGRTNFN0MzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMJQtSnAGreucb4DL9BRQw7CRmhr5/9T7Nt/ EW5e3akHwndbdJ4QFq5WSgXXbLwrrQ3ZcFEkVpLS3jv7MjIwecv24YWUQLwBno3E TMXxBh5iINunjsNoz3BYfKBYWR6Zj1CbpiD6Vtlo0Pa9lskN05QHjTgyrOCOSUtE 1unsLJ/OLEe2CPWBPFkFL4Josn31N5Dn/M3kkQutpNQW9bGngcMZ5oCzMp2W0KFZ F4r80MUnFzkLm2tQFO63slmo+yXwPumPzvjWGFpallrzeWePgDmlT/ykXU48wk6i exuMwDCsWQGpt+NaTg4+sWcS/K0Zwao9RolSd683Jj6FGY9toJU= -----END CERTIFICATE-----Generated at Mon Oct 20 09:47:34 2025 by rpki-client