$ rpki-client -vvf repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft File: 6862B9697E607C0C4861E56917A18D87AC33A721.mft (raw, json) Hash identifier: PHrZhQ1wiViEt+9iTCumAybVk0RWmJZlZG7gficCuHg= Subject key identifier: 3C:B9:13:1C:EB:D0:44:4B:8F:70:1F:B7:34:37:AF:B9:0D:D6:3A:EA Authority key identifier: 68:62:B9:69:7E:60:7C:0C:48:61:E5:69:17:A1:8D:87:AC:33:A7:21 Certificate issuer: /CN=6862B9697E607C0C4861E56917A18D87AC33A721 Certificate serial: 63A6DD15BF91151A6CD7F3C88A10F566E4031894 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer Subject info access: rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft Manifest number: 01CA Signing time: Sun 19 Oct 2025 13:42:11 +0000 Manifest this update: Sun 19 Oct 2025 13:37:11 +0000 Manifest next update: Thu 23 Oct 2025 00:50:11 +0000 Files and hashes: 1: 6862B9697E607C0C4861E56917A18D87AC33A721.crl (hash: lTOjBUQPM2kzz5fxKUoUcdN1TZ5UavNfFSVJqdTH2P0=) 2: 3130332e36302e3233332e302f32342d3234203d3e20313530353034.roa (hash: dF+8Wtg6B9yArRChkZjRjTgsTdgcRkNXBMlkqZFq73s=) 3: 3130332e36302e3233322e302f32342d3234203d3e20313530353034.roa (hash: mAaFNkz4VS/8CUTW6nLj8oCW6VaOOiFXLJeViPHtvE4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.crl rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 00:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:a6:dd:15:bf:91:15:1a:6c:d7:f3:c8:8a:10:f5:66:e4:03:18:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6862B9697E607C0C4861E56917A18D87AC33A721 Validity Not Before: Oct 19 13:37:11 2025 GMT Not After : Oct 23 00:50:11 2025 GMT Subject: CN=3CB9131CEBD0444B8F701FB73437AFB90DD63AEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f0:0a:7e:cd:ae:aa:24:95:db:de:7f:ad:dc: 86:32:26:2a:5d:9d:a1:f7:f8:19:df:07:98:ad:b3: 4e:bc:6b:cd:9a:4a:ec:71:90:c6:7d:54:de:7a:7c: f1:ea:ed:f0:b1:a3:8d:3c:96:c9:79:e0:6f:58:8a: 55:ee:51:e9:96:b5:6c:c2:4e:67:54:89:4d:da:ce: aa:84:31:66:a5:47:cb:15:3f:21:2d:81:d6:7d:96: e2:9c:7b:7e:33:80:2a:da:7e:4a:9a:31:58:fe:5f: 87:d1:6d:75:3d:52:1f:b2:13:ac:7e:2c:c2:b3:6c: d2:48:0a:dc:de:a7:ee:de:78:99:71:37:35:1e:1d: a3:35:00:dd:c1:69:3b:63:80:dc:2a:4a:11:91:0e: f5:99:fd:c2:6a:e1:5d:d2:29:8f:6a:55:ab:97:7f: 99:6b:77:ae:74:3d:f4:67:b5:e4:d3:94:5f:5a:25: e9:e1:c3:b2:86:d6:96:f7:af:fd:5d:8c:a1:67:2e: 12:1e:e9:42:0a:3b:33:bf:f4:27:d1:30:b1:ac:77: bb:fb:34:b7:f4:da:d2:7e:85:db:f6:fa:24:7f:71: 9b:f6:0f:7b:ed:f2:27:62:1b:f5:b7:3c:9c:2b:40: e0:18:c4:5f:b2:db:55:6e:7f:0b:a5:bb:6b:68:e8: 71:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B9:13:1C:EB:D0:44:4B:8F:70:1F:B7:34:37:AF:B9:0D:D6:3A:EA X509v3 Authority Key Identifier: keyid:68:62:B9:69:7E:60:7C:0C:48:61:E5:69:17:A1:8D:87:AC:33:A7:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:3c:f5:f5:fd:cc:94:15:60:a5:fa:d5:5d:a5:a1:b0:46:1b: e3:06:af:c4:38:64:43:0e:61:46:7c:f1:bf:66:7e:6e:b9:1b: 45:8d:a6:b4:63:6f:d9:6b:6c:d1:5b:42:47:fd:1c:12:2f:a5: 4c:0b:4d:0e:17:bb:1a:4b:51:a7:47:cb:d9:c8:55:84:4f:1c: a5:7a:6d:36:4d:18:2f:89:62:30:f4:97:95:01:4f:09:3e:19: f6:f3:fe:4b:e7:ee:ce:fc:55:27:89:20:50:06:f3:d4:df:c0: a8:53:ec:84:23:ff:4b:3d:1b:52:c7:ce:a5:58:68:05:27:dd: 92:ce:e0:74:39:09:7f:4a:13:50:5e:10:02:47:c1:ae:75:8d: 11:16:e1:96:8b:81:81:48:19:af:22:0a:e0:55:0d:7c:ae:14: 52:4e:5f:55:97:b2:13:85:83:b5:14:a9:e2:bc:2d:06:5d:22: b1:23:cc:3d:72:b8:9c:1e:a2:6b:b4:ec:78:2b:55:67:eb:65: c8:5b:fb:d4:f6:c2:a5:13:04:cd:11:9c:35:6c:07:2d:c7:2b: 93:ed:29:dc:cd:d8:4b:7f:de:bc:3a:07:58:20:5f:6c:f2:35: d6:b9:a1:73:45:d6:2c:d8:25:fb:49:4c:20:14:9e:fb:41:34: ee:ed:d2:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY6bdFb+RFRps1/PIihD1ZuQDGJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg2MkI5Njk3RTYwN0MwQzQ4NjFFNTY5MTdBMThEODdB QzMzQTcyMTAeFw0yNTEwMTkxMzM3MTFaFw0yNTEwMjMwMDUwMTFaMDMxMTAvBgNV BAMTKDNDQjkxMzFDRUJEMDQ0NEI4RjcwMUZCNzM0MzdBRkI5MERENjNBRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC48Ap+za6qJJXb3n+t3IYyJipd naH3+BnfB5its068a82aSuxxkMZ9VN56fPHq7fCxo408lsl54G9YilXuUemWtWzC TmdUiU3azqqEMWalR8sVPyEtgdZ9luKce34zgCrafkqaMVj+X4fRbXU9Uh+yE6x+ LMKzbNJICtzep+7eeJlxNzUeHaM1AN3BaTtjgNwqShGRDvWZ/cJq4V3SKY9qVauX f5lrd650PfRnteTTlF9aJenhw7KG1pb3r/1djKFnLhIe6UIKOzO/9CfRMLGsd7v7 NLf02tJ+hdv2+iR/cZv2D3vt8idiG/W3PJwrQOAYxF+y21Vufwulu2to6HHLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPLkTHOvQREuPcB+3NDevuQ3WOuowHwYDVR0j BBgwFoAUaGK5aX5gfAxIYeVpF6GNh6wzpyEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjVlODhiZC03NWUyLTQ1ZGYtODg2Ny00NTQwMmZjN2M0YjEvMC82ODYyQjk2OTdF NjA3QzBDNDg2MUU1NjkxN0ExOEQ4N0FDMzNBNzIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg2MkI5Njk3RTYwN0MwQzQ4NjFFNTY5MTdBMThEODdBQzMz QTcyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI1ZTg4YmQtNzVlMi00NWRmLTg4 NjctNDU0MDJmYzdjNGIxLzAvNjg2MkI5Njk3RTYwN0MwQzQ4NjFFNTY5MTdBMThE ODdBQzMzQTcyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAM89fX9zJQVYKX61V2lobBGG+MGr8Q4ZEMO YUZ88b9mfm65G0WNprRjb9lrbNFbQkf9HBIvpUwLTQ4XuxpLUadHy9nIVYRPHKV6 bTZNGC+JYjD0l5UBTwk+Gfbz/kvn7s78VSeJIFAG89TfwKhT7IQj/0s9G1LHzqVY aAUn3ZLO4HQ5CX9KE1BeEAJHwa51jREW4ZaLgYFIGa8iCuBVDXyuFFJOX1WXshOF g7UUqeK8LQZdIrEjzD1yuJweomu07HgrVWfrZchb+9T2wqUTBM0RnDVsBy3HK5Pt KdzN2Et/3rw6B1ggX2zyNda5oXNF1izYJftJTCAUnvtBNO7t0t8= -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:36 2025 by rpki-client