$ rpki-client -vvf repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft File: 6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft (raw, json) Hash identifier: XjNYQdehjD9KULAKVRDtvsgRsqfiafnZF/F1cSAJcZ0= Subject key identifier: 39:90:86:33:FC:91:3E:AE:EC:8E:A1:A1:82:13:F7:E8:4F:3E:A8:C3 Authority key identifier: 6B:3B:A2:8F:EC:36:89:C8:F8:8C:E4:13:7A:3D:64:5A:51:FE:6D:32 Certificate issuer: /CN=6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32 Certificate serial: 20D884233CA7C2125CEB0CE8431E0171ABF19E2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft Manifest number: 0139 Signing time: Sun 19 Oct 2025 07:12:19 +0000 Manifest this update: Sun 19 Oct 2025 07:07:19 +0000 Manifest next update: Wed 22 Oct 2025 08:39:19 +0000 Files and hashes: 1: 3130332e3234352e3136392e302f32342d3234203d3e20313531353333.roa (hash: F8gVzqK4Hbz0Z6s+Ltl0BOnl1HF8YZ7ceJ/yBja8KLc=) 2: 6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl (hash: JFPA9dw81tlRE2mIWR5itc3W8ZLK90eX7uypJTgQ6wM=) 3: 3130332e3234352e3136382e302f32342d3234203d3e20313531353333.roa (hash: kI4GK1miuL8zvjM4rLASPraKVyslKl4McqJeefiMXSg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 08:39:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:d8:84:23:3c:a7:c2:12:5c:eb:0c:e8:43:1e:01:71:ab:f1:9e:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32 Validity Not Before: Oct 19 07:07:19 2025 GMT Not After : Oct 22 08:39:19 2025 GMT Subject: CN=39908633FC913EAEEC8EA1A18213F7E84F3EA8C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:49:06:ae:8a:09:db:55:71:8e:a7:9a:06:12: ec:bc:c3:54:94:b9:f2:bb:d6:04:a8:d6:de:d4:75: 11:3c:a9:a1:92:c0:22:aa:8a:d9:50:d9:1e:f1:1e: f3:49:83:29:06:4d:7c:ba:94:8b:09:14:57:97:94: a3:c5:cc:60:5c:95:41:5d:e5:13:ca:fa:8b:cc:73: e5:04:3c:2a:14:e6:77:8c:16:26:88:f9:03:02:00: bf:b3:e2:ba:86:f8:71:a6:73:24:c1:bc:a9:c4:8a: e3:a4:8f:40:28:c2:8f:00:48:fc:20:e0:3e:ba:af: e1:bf:4e:f8:a4:00:8d:3c:2b:4d:5f:1b:17:8d:21: c0:8b:8b:fb:81:d4:7c:b4:43:04:3c:3b:62:9f:cd: b2:68:02:a8:b5:ad:20:10:bc:cb:a2:7a:20:f2:8c: 73:b5:58:67:e8:2e:54:5b:8d:73:64:1b:90:f9:81: 30:fd:4e:63:20:5b:6a:c0:bf:e9:05:08:06:0c:b0: 86:f2:4e:3e:07:39:42:4d:09:4b:c2:83:7d:3d:e3: 23:91:65:df:fb:a5:b7:72:52:63:d6:71:27:2d:42: 0f:4a:01:87:ef:ed:a3:55:c1:9c:b7:6c:cc:83:46: 9c:6a:f5:0b:3c:cc:e2:28:ba:fd:b0:ca:fa:6a:9c: 4a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:90:86:33:FC:91:3E:AE:EC:8E:A1:A1:82:13:F7:E8:4F:3E:A8:C3 X509v3 Authority Key Identifier: keyid:6B:3B:A2:8F:EC:36:89:C8:F8:8C:E4:13:7A:3D:64:5A:51:FE:6D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c4:65:52:8e:49:d7:f1:fd:43:13:78:90:e1:11:ca:95:85: 48:8a:5f:d1:76:4b:86:ff:25:a8:99:69:5c:c0:17:76:62:7b: 18:4a:6b:af:24:2f:a8:0f:5f:3a:ec:78:55:42:da:60:3d:a0: 55:04:65:6e:12:0f:fd:d1:25:8e:c3:36:b9:61:7d:fd:0e:63: 9b:3a:1e:8a:5a:88:33:97:00:02:cf:61:53:65:48:26:ae:5b: 5f:0d:2b:96:c6:26:ed:8a:86:89:4d:1b:16:8e:85:69:cc:ce: 03:a4:04:65:ce:19:ce:36:90:08:2a:73:f8:ab:77:a2:ad:f9: de:85:96:cb:31:a9:69:1b:d2:d6:27:95:2f:c2:ba:95:14:2d: 72:25:e9:70:87:b3:76:6b:8d:44:50:b7:6e:88:b2:b4:e8:bf: 2c:f2:5f:be:48:ba:dc:a2:da:d6:92:93:c1:7a:1f:70:2e:4d: 28:ab:d6:85:97:7c:a2:57:9d:51:e3:dd:f6:f7:e4:3a:dc:ec: f7:ce:df:59:62:01:e3:79:0f:2a:61:6d:8f:95:bb:5d:5f:5f: 60:b7:8b:bc:5b:c9:56:0a:c8:a5:85:f9:f5:b4:89:a1:a6:07: 34:16:ca:2a:1c:2b:15:92:b3:74:5c:6d:a5:77:1e:4b:56:17: 4c:0b:95:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUINiEIzynwhJc6wzoQx4BcavxniswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzQkEyOEZFQzM2ODlDOEY4OENFNDEzN0EzRDY0NUE1 MUZFNkQzMjAeFw0yNTEwMTkwNzA3MTlaFw0yNTEwMjIwODM5MTlaMDMxMTAvBgNV BAMTKDM5OTA4NjMzRkM5MTNFQUVFQzhFQTFBMTgyMTNGN0U4NEYzRUE4QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCySQauignbVXGOp5oGEuy8w1SU ufK71gSo1t7UdRE8qaGSwCKqitlQ2R7xHvNJgykGTXy6lIsJFFeXlKPFzGBclUFd 5RPK+ovMc+UEPCoU5neMFiaI+QMCAL+z4rqG+HGmcyTBvKnEiuOkj0Aowo8ASPwg 4D66r+G/TvikAI08K01fGxeNIcCLi/uB1Hy0QwQ8O2KfzbJoAqi1rSAQvMuieiDy jHO1WGfoLlRbjXNkG5D5gTD9TmMgW2rAv+kFCAYMsIbyTj4HOUJNCUvCg3094yOR Zd/7pbdyUmPWcSctQg9KAYfv7aNVwZy3bMyDRpxq9Qs8zOIouv2wyvpqnEqzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOZCGM/yRPq7sjqGhghP36E8+qMMwHwYDVR0j BBgwFoAUazuij+w2icj4jOQTej1kWlH+bTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTFkZWI5My1jMTkwLTQ2ZWUtYmE4My0yZDkxOTMwYTQzOTUvMC82QjNCQTI4RkVD MzY4OUM4Rjg4Q0U0MTM3QTNENjQ1QTUxRkU2RDMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkIzQkEyOEZFQzM2ODlDOEY4OENFNDEzN0EzRDY0NUE1MUZF NkQzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2UxZGViOTMtYzE5MC00NmVlLWJh ODMtMmQ5MTkzMGE0Mzk1LzAvNkIzQkEyOEZFQzM2ODlDOEY4OENFNDEzN0EzRDY0 NUE1MUZFNkQzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLEZVKOSdfx/UMTeJDhEcqVhUiKX9F2S4b/ JaiZaVzAF3ZiexhKa68kL6gPXzrseFVC2mA9oFUEZW4SD/3RJY7DNrlhff0OY5s6 HopaiDOXAALPYVNlSCauW18NK5bGJu2KholNGxaOhWnMzgOkBGXOGc42kAgqc/ir d6Kt+d6FlssxqWkb0tYnlS/CupUULXIl6XCHs3ZrjURQt26IsrTovyzyX75Iutyi 2taSk8F6H3AuTSir1oWXfKJXnVHj3fb35Drc7PfO31liAeN5DyphbY+Vu11fX2C3 i7xbyVYKyKWF+fW0iaGmBzQWyiocKxWSs3RcbaV3HktWF0wLlcM= -----END CERTIFICATE-----Generated at Mon Oct 20 18:38:43 2025 by rpki-client