$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft File: 6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft (raw, json) Hash identifier: TPOT5UjQGmqQhCL6Ye4PA80Popsppj8tbvnc9QO6h1U= Subject key identifier: B6:F7:C2:26:9D:28:2F:A7:5B:B6:B8:AD:B5:63:FD:B1:1E:45:95:14 Authority key identifier: 6F:29:B5:AE:A0:FD:7E:C5:68:AA:45:A1:72:1D:8E:5D:EA:92:6C:0F Certificate issuer: /CN=6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F Certificate serial: 01BA27718D58528623ADCDB63016035FF410F9D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft Manifest number: E4 Signing time: Sat 18 Oct 2025 15:31:10 +0000 Manifest this update: Sat 18 Oct 2025 15:26:10 +0000 Manifest next update: Tue 21 Oct 2025 18:25:10 +0000 Files and hashes: 1: 6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl (hash: aqWK1fcwclaN8XQAG5S9jw5XGnd2wrPYNBK1ZvQ9esw=) 2: 323030313a6466333a636634303a3a2f34382d3438203d3e20313532373536.roa (hash: EPGT5ryhDc35QQ+8DPj3Jot3CoQO1ERUPuwysJ3MS7U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 18:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ba:27:71:8d:58:52:86:23:ad:cd:b6:30:16:03:5f:f4:10:f9:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F Validity Not Before: Oct 18 15:26:10 2025 GMT Not After : Oct 21 18:25:10 2025 GMT Subject: CN=B6F7C2269D282FA75BB6B8ADB563FDB11E459514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f7:83:1b:aa:24:a9:ee:28:3a:c9:8f:ed:1a: 45:b6:5c:63:d3:87:da:ea:57:fd:fa:a8:38:35:5c: d4:ef:b0:d0:d6:00:6e:9c:cc:e3:ad:31:5b:90:5a: 07:0b:70:7b:5f:3b:3c:f9:35:12:c9:44:fa:69:4f: 37:3b:d4:75:63:07:80:86:47:d4:f1:2f:8c:3f:86: fa:18:a8:eb:7e:b6:3e:f1:b3:d2:49:51:4d:d9:cd: 2a:a2:0b:fb:f1:97:9c:33:ca:36:32:b3:f3:f2:bf: aa:a2:43:77:a0:ba:29:7d:41:e5:b2:5b:81:3e:80: c3:4a:d1:b7:18:f0:26:ec:f2:10:22:05:c5:6b:2d: 74:93:74:2d:5f:b1:7b:ec:76:55:91:36:42:4b:fd: b1:81:7c:47:32:e5:c0:db:6b:d2:e2:a9:b0:2b:3a: 9c:7b:1f:58:33:8f:75:dc:55:06:96:ff:d4:b2:7c: 8d:fa:5f:79:d3:f6:6d:59:e8:88:ff:0e:ad:26:8c: a5:df:04:2e:65:f5:9c:a8:ff:8b:2f:37:c0:f7:66: fa:9d:77:66:db:db:44:89:76:c5:d5:5b:c4:d7:d0: 72:be:a8:d0:04:20:9a:a9:95:60:b3:d7:cc:be:b9: 60:1a:75:fe:eb:3a:4d:df:e4:06:21:9e:89:76:59: da:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F7:C2:26:9D:28:2F:A7:5B:B6:B8:AD:B5:63:FD:B1:1E:45:95:14 X509v3 Authority Key Identifier: keyid:6F:29:B5:AE:A0:FD:7E:C5:68:AA:45:A1:72:1D:8E:5D:EA:92:6C:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:9b:fb:72:03:d5:c5:a6:d9:92:dc:eb:96:a8:2d:09:61:f4: c5:2a:b7:92:59:83:bc:c4:3a:d3:34:ee:76:51:13:27:84:21: f3:b9:fc:b7:ad:ff:73:6e:17:da:19:8c:b3:eb:33:85:f4:d8: ec:7f:be:38:32:be:86:40:de:32:23:66:0e:7c:1f:92:4d:8e: 68:b6:0e:15:ec:6d:18:41:1a:fa:52:e4:93:21:39:8f:b3:74: 82:c2:74:70:b7:ad:2d:e8:fa:48:4d:30:b0:24:69:eb:cd:56: 54:18:ac:0c:8c:a5:25:16:d0:17:9f:d2:0e:a9:b1:4b:e2:a6: f7:5d:b8:6a:66:9a:34:45:ca:a2:74:84:3e:35:33:88:eb:d5: 72:b2:5c:51:b5:ff:ef:e5:a3:02:41:d8:e3:70:c0:33:b2:6c: 13:c1:2f:97:20:c2:99:08:df:f4:0f:3f:17:31:2d:3b:de:60: 60:fe:a6:12:35:cf:dc:bc:19:4d:85:d8:08:2d:42:03:9f:9d: 71:2c:0a:39:e0:6f:e6:2d:93:db:01:24:e2:87:ab:8b:26:50: 3f:f8:ef:23:18:8e:3d:d2:77:b8:9e:03:65:12:b9:20:5d:1c: 52:a2:7d:eb:60:9a:7e:9f:cd:5e:cc:6a:ab:9d:6a:5a:16:b6: 41:29:a9:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAboncY1YUoYjrc22MBYDX/QQ+dYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkYyOUI1QUVBMEZEN0VDNTY4QUE0NUExNzIxRDhFNURF QTkyNkMwRjAeFw0yNTEwMTgxNTI2MTBaFw0yNTEwMjExODI1MTBaMDMxMTAvBgNV BAMTKEI2RjdDMjI2OUQyODJGQTc1QkI2QjhBREI1NjNGREIxMUU0NTk1MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH94MbqiSp7ig6yY/tGkW2XGPT h9rqV/36qDg1XNTvsNDWAG6czOOtMVuQWgcLcHtfOzz5NRLJRPppTzc71HVjB4CG R9TxL4w/hvoYqOt+tj7xs9JJUU3ZzSqiC/vxl5wzyjYys/Pyv6qiQ3eguil9QeWy W4E+gMNK0bcY8Cbs8hAiBcVrLXSTdC1fsXvsdlWRNkJL/bGBfEcy5cDba9LiqbAr Opx7H1gzj3XcVQaW/9SyfI36X3nT9m1Z6Ij/Dq0mjKXfBC5l9Zyo/4svN8D3Zvqd d2bb20SJdsXVW8TX0HK+qNAEIJqplWCz18y+uWAadf7rOk3f5AYhnol2Wdr5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtvfCJp0oL6dbtrittWP9sR5FlRQwHwYDVR0j BBgwFoAUbym1rqD9fsVoqkWhch2OXeqSbA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWI0ZTE0ZC0wMjFkLTQwZGMtOTIzYS1jMTJkMWFmNDQzYjUvMS82RjI5QjVBRUEw RkQ3RUM1NjhBQTQ1QTE3MjFEOEU1REVBOTI2QzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkYyOUI1QUVBMEZEN0VDNTY4QUE0NUExNzIxRDhFNURFQTky NkMwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky M2EtYzEyZDFhZjQ0M2I1LzEvNkYyOUI1QUVBMEZEN0VDNTY4QUE0NUExNzIxRDhF NURFQTkyNkMwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABub+3ID1cWm2ZLc65aoLQlh9MUqt5JZg7zE OtM07nZREyeEIfO5/Let/3NuF9oZjLPrM4X02Ox/vjgyvoZA3jIjZg58H5JNjmi2 DhXsbRhBGvpS5JMhOY+zdILCdHC3rS3o+khNMLAkaevNVlQYrAyMpSUW0Bef0g6p sUvipvdduGpmmjRFyqJ0hD41M4jr1XKyXFG1/+/lowJB2ONwwDOybBPBL5cgwpkI 3/QPPxcxLTveYGD+phI1z9y8GU2F2AgtQgOfnXEsCjngb+Ytk9sBJOKHq4smUD/4 7yMYjj3Sd7ieA2USuSBdHFKifetgmn6fzV7MaqudaloWtkEpqZ0= -----END CERTIFICATE-----Generated at Mon Oct 20 17:36:56 2025 by rpki-client