$ rpki-client -vvf repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft File: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft (raw, json) Hash identifier: B2asBGjUyeIRVg6EUiXkHmdEbDkLYcws9GTD8HjIyPk= Subject key identifier: 09:5B:0A:09:BE:CB:BE:B7:E0:25:48:B8:E1:1C:EF:79:0E:4D:1F:67 Authority key identifier: 62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 Certificate issuer: /CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Certificate serial: 198A0435713E675E197BA16CD0F87BB2598D1506 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft Manifest number: 96 Signing time: Mon 20 Oct 2025 11:03:48 +0000 Manifest this update: Mon 20 Oct 2025 10:58:48 +0000 Manifest next update: Thu 23 Oct 2025 18:00:48 +0000 Files and hashes: 1: 3136302e3139312e3138312e302f32342d3234203d3e20313533313530.roa (hash: R1Eo64irF2fqBU24QMOkIR4K/Db3F6prGasQKdzareI=) 2: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl (hash: 1ue6AYsTFd5b3Zc4QVsgNr9a2FXty+RKd7lSoZnfuBg=) 3: 3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa (hash: lqWm7H1VLaNogQYDvPWFxyEVAtvNrhxj3L3hhsj87j0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:8a:04:35:71:3e:67:5e:19:7b:a1:6c:d0:f8:7b:b2:59:8d:15:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Validity Not Before: Oct 20 10:58:48 2025 GMT Not After : Oct 23 18:00:48 2025 GMT Subject: CN=095B0A09BECBBEB7E02548B8E11CEF790E4D1F67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:88:a7:07:9c:fd:5b:70:5a:84:0d:82:21:15: d1:fa:49:da:e2:d2:c3:1c:4f:18:58:4b:c7:99:3a: 3c:13:d9:ed:2a:19:14:9c:ae:04:22:63:33:b0:e1: 87:6f:cc:0c:71:89:5d:75:e4:f5:22:34:50:b0:12: 18:d8:fa:36:2a:e2:f7:b8:37:18:3d:44:6b:5f:c1: e8:b3:05:10:36:9f:c5:6a:51:22:41:a0:19:e2:12: 62:cf:54:fc:63:13:7e:53:2e:67:03:26:86:46:b0: 34:26:eb:ee:70:3c:54:be:79:8a:23:89:ca:f9:8e: 83:7a:fb:fe:4e:0b:98:7b:ce:ee:dd:0c:35:77:f2: 62:f0:e3:4f:d7:a4:72:21:07:66:9e:8f:06:d1:24: 78:05:33:8d:65:bd:9c:60:4a:90:e5:91:5a:44:61: 6e:b7:eb:f1:82:61:4b:75:58:35:22:de:6d:61:d8: 99:08:a2:5f:38:0b:47:66:77:85:a3:a1:9c:3c:6a: 42:be:ae:da:9c:7d:1d:f3:e7:c9:16:e2:9f:48:f1: f5:7e:f8:95:2b:e7:ae:a7:1e:5a:10:eb:5a:4b:9a: 3e:a4:1b:d0:99:82:6d:f9:9a:f0:f3:01:8e:d4:b9: 95:13:9d:78:30:50:4b:89:02:4e:b6:f5:df:f8:85: b7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5B:0A:09:BE:CB:BE:B7:E0:25:48:B8:E1:1C:EF:79:0E:4D:1F:67 X509v3 Authority Key Identifier: keyid:62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption eb:92:f7:81:15:9a:f4:da:c6:18:18:0c:39:e7:bc:bd:b8:a5: 5d:00:1f:18:f5:62:5b:11:8a:e3:27:37:c4:bf:fd:36:8f:dc: 15:f2:f0:93:41:ff:c1:de:d7:f5:0d:3b:4d:b5:07:87:e9:ff: 92:30:cd:ef:2c:60:35:7a:68:d0:2c:72:98:9f:75:d4:fd:20: 62:d5:72:66:3e:ce:15:75:79:3c:6c:6e:1b:ce:d7:d3:58:f5: fa:6e:da:07:bf:54:c6:7c:77:25:5d:b3:e0:3c:47:7b:21:1a: 54:a9:e8:6d:22:a7:e7:9d:e7:43:75:98:ca:8d:40:11:7b:fa: 7a:ff:27:9e:cf:00:b9:54:7f:9c:ea:ad:6b:8e:62:2b:8a:2a: d5:74:cb:65:ae:be:4b:fc:c0:6d:ff:f8:52:ea:c9:cf:fb:7a: b1:0b:55:77:85:9a:11:ab:99:5e:96:56:5a:73:26:6b:54:cf: 5e:1d:48:c1:fc:f5:92:29:89:25:1b:69:5b:ff:34:41:c9:92: 65:5e:0c:66:4a:08:d5:88:05:96:d4:ab:a1:9d:6a:72:9b:5f: 28:4e:ee:44:2b:a6:7a:5e:22:14:bb:e5:f0:e3:94:a7:d9:a8: 91:0f:41:ad:28:c4:9c:3c:8c:e3:13:83:86:ee:bb:f4:7e:05: bf:ec:c5:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGYoENXE+Z14Ze6Fs0Ph7slmNFQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAw Qjk0RjhBNDAeFw0yNTEwMjAxMDU4NDhaFw0yNTEwMjMxODAwNDhaMDMxMTAvBgNV BAMTKDA5NUIwQTA5QkVDQkJFQjdFMDI1NDhCOEUxMUNFRjc5MEU0RDFGNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDiKcHnP1bcFqEDYIhFdH6Sdri 0sMcTxhYS8eZOjwT2e0qGRScrgQiYzOw4YdvzAxxiV115PUiNFCwEhjY+jYq4ve4 Nxg9RGtfweizBRA2n8VqUSJBoBniEmLPVPxjE35TLmcDJoZGsDQm6+5wPFS+eYoj icr5joN6+/5OC5h7zu7dDDV38mLw40/XpHIhB2aejwbRJHgFM41lvZxgSpDlkVpE YW636/GCYUt1WDUi3m1h2JkIol84C0dmd4WjoZw8akK+rtqcfR3z58kW4p9I8fV+ +JUr566nHloQ61pLmj6kG9CZgm35mvDzAY7UuZUTnXgwUEuJAk629d/4hbc9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCVsKCb7LvrfgJUi44RzveQ5NH2cwHwYDVR0j BBgwFoAUYkfRqvOxW1DTpz5E5Z4sAAuU+KQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTk2MTJhMi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMC82MjQ3RDFBQUYz QjE1QjUwRDNBNzNFNDRFNTlFMkMwMDBCOTRGOEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAwQjk0 RjhBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzAvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJD MDAwQjk0RjhBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOuS94EVmvTaxhgYDDnnvL24pV0AHxj1YlsR iuMnN8S//TaP3BXy8JNB/8He1/UNO021B4fp/5Iwze8sYDV6aNAscpifddT9IGLV cmY+zhV1eTxsbhvO19NY9fpu2ge/VMZ8dyVds+A8R3shGlSp6G0ip+ed50N1mMqN QBF7+nr/J57PALlUf5zqrWuOYiuKKtV0y2Wuvkv8wG3/+FLqyc/7erELVXeFmhGr mV6WVlpzJmtUz14dSMH89ZIpiSUbaVv/NEHJkmVeDGZKCNWIBZbUq6GdanKbXyhO 7kQrpnpeIhS75fDjlKfZqJEPQa0oxJw8jOMTg4buu/R+Bb/sxRM= -----END CERTIFICATE-----Generated at Tue Oct 21 07:55:12 2025 by rpki-client