$ rpki-client -vvf repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft File: 6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft (raw, json) Hash identifier: lY+lci8VoTl8HNYCKFuK7TtXvkxtxfdPeRfkqMhwCPk= Subject key identifier: 63:F4:59:A5:A3:9B:83:78:C1:13:16:6D:1C:19:C8:4E:03:2E:CB:2A Authority key identifier: 6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9 Certificate issuer: /CN=6A75F95EA11C3F984C5C610FE9222026394BA8E9 Certificate serial: 2D1EF66BE4249CAA53412054F97F543F092D11ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft Manifest number: 0516 Signing time: Mon 20 Oct 2025 06:40:40 +0000 Manifest this update: Mon 20 Oct 2025 06:35:40 +0000 Manifest next update: Thu 23 Oct 2025 09:14:40 +0000 Files and hashes: 1: 323030313a6466333a623838303a3a2f34382d3438203d3e203137353338.roa (hash: UN/a2XRTw8081uL/ZY93JqlCc8U4ClmN/ji+ij6yORg=) 2: 3130332e3135312e39352e302f32342d3234203d3e203137353338.roa (hash: GwFAfVLpG/ugaQYqpWQY09MQmCe9PdpSsGdhvKfZQm0=) 3: 3130332e3135312e39342e302f32342d3234203d3e203137353338.roa (hash: g0wg8Deehkfr6iJjF1icldun4thvTysDD1uiOyWBYM4=) 4: 6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl (hash: rLbvt8+IVbYfWiKNSr8DA/iCVMZyJEEslcXQVpkNuo8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 09:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:1e:f6:6b:e4:24:9c:aa:53:41:20:54:f9:7f:54:3f:09:2d:11:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A75F95EA11C3F984C5C610FE9222026394BA8E9 Validity Not Before: Oct 20 06:35:40 2025 GMT Not After : Oct 23 09:14:40 2025 GMT Subject: CN=63F459A5A39B8378C113166D1C19C84E032ECB2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:76:5c:7e:25:1d:f8:cf:10:2e:5f:a9:fc:14: 7e:8e:82:59:2a:9d:c3:2f:c5:53:11:14:36:89:8d: b7:33:06:69:05:72:e1:aa:00:fc:36:ce:46:23:99: 5b:33:84:19:60:b6:e6:c3:b4:4b:14:bf:bc:89:87: a7:eb:6d:27:49:f8:a9:73:bd:47:9d:4c:fe:0c:72: 8d:31:33:bf:a9:56:b2:95:b8:11:7b:b4:60:8b:26: f8:04:a4:91:77:58:6c:31:1a:57:9d:b0:b5:b2:e8: 81:e2:79:ed:7b:2f:03:24:f1:9a:ff:6f:85:93:8a: bf:66:69:f6:d3:d6:78:2c:55:31:b4:e4:b8:ac:cb: fc:e3:f4:bf:1a:c1:29:4b:f0:ca:59:c1:e2:f8:7c: ee:c9:cb:1a:a6:1f:74:2e:ad:98:88:c0:d1:ba:46: ad:fc:a3:3d:a8:96:e7:b8:b2:f1:a4:41:ea:d8:0d: 0f:c9:42:39:57:54:27:00:13:62:4d:ba:f7:4d:76: c4:0f:7c:cf:1d:87:eb:4c:8e:16:3d:a0:f0:fa:a2: e7:46:1c:ff:23:1e:2e:de:a8:6b:23:2a:ef:92:06: 2d:45:be:d0:de:9f:d3:08:86:94:cf:3c:39:74:07: ff:be:fa:f6:73:0f:b1:f1:a0:4e:7c:62:a5:06:8d: ae:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F4:59:A5:A3:9B:83:78:C1:13:16:6D:1C:19:C8:4E:03:2E:CB:2A X509v3 Authority Key Identifier: keyid:6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:0e:96:c9:13:92:a0:5b:17:c4:b0:13:42:40:18:aa:6b:64: 78:35:c7:0f:b2:b9:91:ee:e9:d5:83:48:5a:87:68:66:06:54: 76:65:d8:32:89:73:f4:80:db:fa:94:02:98:bf:bc:8d:d8:59: 92:b7:6e:8c:1d:7f:f9:77:63:89:16:3f:55:bb:dc:e9:51:36: dd:23:d7:4f:50:3e:ce:2f:b3:f6:f9:11:44:2e:d2:29:62:58: 94:56:8c:3c:93:e7:96:34:88:16:f2:d9:30:7b:fc:8d:89:ed: de:fa:b3:56:ac:e2:5d:23:69:b9:f9:7d:ae:5a:39:fd:64:d9: be:87:c3:47:e0:ee:72:0e:e6:54:1f:52:09:d3:2d:9e:14:d0: 2e:b1:ee:b9:2d:2f:01:58:90:ff:bb:a1:c2:2e:e6:60:67:87: 21:4b:46:3f:84:99:3a:55:f1:78:46:32:f5:c4:1f:bd:79:97: 64:df:ef:ad:10:64:cc:3b:3c:82:6f:e4:aa:59:bf:a3:d1:a5: 39:a3:14:a6:ce:8e:a5:51:ac:70:59:f8:91:3a:62:be:66:33: 76:4c:79:20:d3:6f:f2:90:c9:0b:4d:26:e8:ed:14:ff:f9:07: 85:b2:15:ca:a6:31:93:43:93:47:8c:05:99:d6:6e:76:b0:65: b8:8e:17:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULR72a+QknKpTQSBU+X9UPwktEe0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE3NUY5NUVBMTFDM0Y5ODRDNUM2MTBGRTkyMjIwMjYz OTRCQThFOTAeFw0yNTEwMjAwNjM1NDBaFw0yNTEwMjMwOTE0NDBaMDMxMTAvBgNV BAMTKDYzRjQ1OUE1QTM5QjgzNzhDMTEzMTY2RDFDMTlDODRFMDMyRUNCMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3dlx+JR34zxAuX6n8FH6Oglkq ncMvxVMRFDaJjbczBmkFcuGqAPw2zkYjmVszhBlgtubDtEsUv7yJh6frbSdJ+Klz vUedTP4Mco0xM7+pVrKVuBF7tGCLJvgEpJF3WGwxGledsLWy6IHiee17LwMk8Zr/ b4WTir9mafbT1ngsVTG05Lisy/zj9L8awSlL8MpZweL4fO7JyxqmH3QurZiIwNG6 Rq38oz2olue4svGkQerYDQ/JQjlXVCcAE2JNuvdNdsQPfM8dh+tMjhY9oPD6oudG HP8jHi7eqGsjKu+SBi1FvtDen9MIhpTPPDl0B/+++vZzD7HxoE58YqUGja6jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY/RZpaObg3jBExZtHBnITgMuyyowHwYDVR0j BBgwFoAUanX5XqEcP5hMXGEP6SIgJjlLqOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTQzMzkzNC0zODQ0LTQ2NTMtOGZhYy0xODU4YjI4MjNkMWMvMC82QTc1Rjk1RUEx MUMzRjk4NEM1QzYxMEZFOTIyMjAyNjM5NEJBOEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE3NUY5NUVBMTFDM0Y5ODRDNUM2MTBGRTkyMjIwMjYzOTRC QThFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE0MzM5MzQtMzg0NC00NjUzLThm YWMtMTg1OGIyODIzZDFjLzAvNkE3NUY5NUVBMTFDM0Y5ODRDNUM2MTBGRTkyMjIw MjYzOTRCQThFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgOlskTkqBbF8SwE0JAGKprZHg1xw+yuZHu 6dWDSFqHaGYGVHZl2DKJc/SA2/qUApi/vI3YWZK3bowdf/l3Y4kWP1W73OlRNt0j 109QPs4vs/b5EUQu0iliWJRWjDyT55Y0iBby2TB7/I2J7d76s1as4l0jabn5fa5a Of1k2b6Hw0fg7nIO5lQfUgnTLZ4U0C6x7rktLwFYkP+7ocIu5mBnhyFLRj+EmTpV 8XhGMvXEH715l2Tf760QZMw7PIJv5KpZv6PRpTmjFKbOjqVRrHBZ+JE6Yr5mM3ZM eSDTb/KQyQtNJujtFP/5B4WyFcqmMZNDk0eMBZnWbnawZbiOF8U= -----END CERTIFICATE-----Generated at Mon Oct 20 16:06:11 2025 by rpki-client