$ rpki-client -vvf repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft File: 06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft (raw, json) Hash identifier: IpVDifZTrol732c2x2s2d+ipIq6CpE/ls8zj9ZeVukM= Subject key identifier: 71:5F:01:57:AA:AD:18:F0:99:1C:CF:CB:F4:DE:3C:FF:08:67:55:70 Authority key identifier: 06:A0:35:96:D6:FA:10:E3:F5:08:10:F5:86:E3:F6:3A:EE:96:F9:8E Certificate issuer: /CN=06A03596D6FA10E3F50810F586E3F63AEE96F98E Certificate serial: 7789F7C0E110D2AF4B125E6EFB15C6EC245CA790 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft Manifest number: FC Signing time: Mon 20 Oct 2025 10:41:03 +0000 Manifest this update: Mon 20 Oct 2025 10:36:03 +0000 Manifest next update: Thu 23 Oct 2025 22:01:03 +0000 Files and hashes: 1: 06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl (hash: iC30JeiIw/Ov49QCz9nWdOOWVr6qK1QxOy2wBeWreog=) 2: 3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa (hash: c4zKb4BC8Sb0059Tmuc8jeyTEWO85EjEdef3ktgt6EU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:89:f7:c0:e1:10:d2:af:4b:12:5e:6e:fb:15:c6:ec:24:5c:a7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06A03596D6FA10E3F50810F586E3F63AEE96F98E Validity Not Before: Oct 20 10:36:03 2025 GMT Not After : Oct 23 22:01:03 2025 GMT Subject: CN=715F0157AAAD18F0991CCFCBF4DE3CFF08675570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ca:ea:45:2d:33:3f:e0:a7:7a:ff:7e:f6:13: 85:80:8e:99:f2:d2:bf:5d:05:30:88:f2:2a:42:b6: dc:ed:02:8c:c6:8c:96:5f:c1:3d:de:60:57:75:ee: 0a:47:c1:98:5a:da:2c:dd:c8:92:c6:1a:68:72:c2: de:88:83:f6:98:24:b3:d4:30:3f:48:98:c8:0b:74: 72:57:86:43:eb:b6:7b:06:09:c1:c4:35:cd:cf:47: 08:88:93:8b:2d:1e:4d:2d:e5:62:7c:00:15:6b:84: f3:7e:73:88:4f:7b:5b:7f:ed:9a:ff:f9:78:af:8e: f6:50:3a:c3:db:a4:14:e0:b6:0c:20:b6:46:b0:d6: 50:08:a9:98:57:ce:82:7b:12:06:75:2c:b7:ce:f5: 25:fd:27:d3:23:d5:fe:cf:01:90:0d:5e:27:7a:d2: 27:66:92:ef:10:a9:67:c4:dc:0e:1a:6a:f6:fb:86: 80:8b:0f:ac:6c:3b:86:02:e0:e5:ff:1d:bb:ba:6f: e2:60:78:2b:6e:ac:91:a3:37:31:82:98:c8:e4:cd: 45:40:f2:88:98:47:4e:ed:a1:dd:02:6b:5d:2b:92: 4d:25:0b:6e:f8:5e:4a:ae:08:18:05:3f:c6:20:a3: c3:8b:a3:62:12:ec:10:7d:ab:02:92:4b:72:cd:31: c2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5F:01:57:AA:AD:18:F0:99:1C:CF:CB:F4:DE:3C:FF:08:67:55:70 X509v3 Authority Key Identifier: keyid:06:A0:35:96:D6:FA:10:E3:F5:08:10:F5:86:E3:F6:3A:EE:96:F9:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:b1:a4:91:c5:81:09:af:38:4d:68:43:e2:0e:be:3d:49:c1: 19:0f:d4:70:9e:99:29:c9:10:c2:e0:b9:55:9b:26:a7:80:79: a1:ad:8e:49:50:45:1f:7a:52:c0:66:7a:23:25:75:ae:cb:fe: ed:31:34:d6:a1:23:3c:70:97:c6:03:af:9c:73:fe:32:8d:1f: 8e:95:c8:dd:4f:51:27:09:11:ad:c7:79:2d:9d:72:f0:b1:5a: 5f:10:a1:fa:d7:31:a3:ad:ae:2b:66:a0:c4:eb:cc:6f:24:12: 80:83:ef:6f:16:4c:38:b2:08:da:45:c5:f2:6d:c8:bf:6a:5d: 78:27:e1:cf:5e:cd:bd:97:4f:86:41:1f:e9:c2:e1:dc:0f:3b: dc:79:38:f7:99:7c:fa:12:df:8c:57:88:0c:23:42:a3:9d:1f: 39:3c:72:c3:85:db:f5:1f:07:5b:a8:1b:d2:72:1b:ce:0c:1b: b0:b5:1b:6a:3d:cd:09:15:e8:11:d1:41:15:d5:8c:47:d9:d1: d0:55:c5:55:cf:19:a0:16:36:bd:f9:b7:a7:9e:92:da:4f:43: 4b:e8:83:59:88:50:84:22:b7:3f:3f:d8:3e:7a:f8:10:64:08: 6f:5f:15:bd:14:a7:53:32:9d:4b:fd:7a:b9:f6:a0:26:05:37: a3:2d:16:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd4n3wOEQ0q9LEl5u+xXG7CRcp5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2M0FF RTk2Rjk4RTAeFw0yNTEwMjAxMDM2MDNaFw0yNTEwMjMyMjAxMDNaMDMxMTAvBgNV BAMTKDcxNUYwMTU3QUFBRDE4RjA5OTFDQ0ZDQkY0REUzQ0ZGMDg2NzU1NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIyupFLTM/4Kd6/372E4WAjpny 0r9dBTCI8ipCttztAozGjJZfwT3eYFd17gpHwZha2izdyJLGGmhywt6Ig/aYJLPU MD9ImMgLdHJXhkPrtnsGCcHENc3PRwiIk4stHk0t5WJ8ABVrhPN+c4hPe1t/7Zr/ +XivjvZQOsPbpBTgtgwgtkaw1lAIqZhXzoJ7EgZ1LLfO9SX9J9Mj1f7PAZANXid6 0idmku8QqWfE3A4aavb7hoCLD6xsO4YC4OX/Hbu6b+JgeCturJGjNzGCmMjkzUVA 8oiYR07tod0Ca10rkk0lC274XkquCBgFP8Ygo8OLo2IS7BB9qwKSS3LNMcKJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcV8BV6qtGPCZHM/L9N48/whnVXAwHwYDVR0j BBgwFoAUBqA1ltb6EOP1CBD1huP2Ou6W+Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGY3Yzc5MC03NmI1LTQ5NjctYjZmZi0xMmRjNzU2YmJmN2QvMC8wNkEwMzU5NkQ2 RkExMEUzRjUwODEwRjU4NkUzRjYzQUVFOTZGOThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2M0FFRTk2 Rjk4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmN2M3OTAtNzZiNS00OTY3LWI2 ZmYtMTJkYzc1NmJiZjdkLzAvMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2 M0FFRTk2Rjk4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWxpJHFgQmvOE1oQ+IOvj1JwRkP1HCemSnJ EMLguVWbJqeAeaGtjklQRR96UsBmeiMlda7L/u0xNNahIzxwl8YDr5xz/jKNH46V yN1PUScJEa3HeS2dcvCxWl8QofrXMaOtritmoMTrzG8kEoCD728WTDiyCNpFxfJt yL9qXXgn4c9ezb2XT4ZBH+nC4dwPO9x5OPeZfPoS34xXiAwjQqOdHzk8csOF2/Uf B1uoG9JyG84MG7C1G2o9zQkV6BHRQRXVjEfZ0dBVxVXPGaAWNr35t6eektpPQ0vo g1mIUIQitz8/2D56+BBkCG9fFb0Up1MynUv9ern2oCYFN6MtFl0= -----END CERTIFICATE-----Generated at Tue Oct 21 10:58:53 2025 by rpki-client