$ rpki-client -vvf repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft File: 6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft (raw, json) Hash identifier: auUE1tBoTf62MhnmD3xWvZjDD/QdH42RqTLahfQ+5HU= Subject key identifier: B7:0A:ED:5F:AC:65:C2:8D:6C:52:DC:F7:79:6C:17:4E:62:A8:46:00 Authority key identifier: 6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B Certificate issuer: /CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B Certificate serial: 565EE6136AE9880BA481A3BC3FE3BF71BD3CFD84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft Manifest number: 01A5 Signing time: Sun 19 Oct 2025 11:11:46 +0000 Manifest this update: Sun 19 Oct 2025 11:06:46 +0000 Manifest next update: Wed 22 Oct 2025 11:27:46 +0000 Files and hashes: 1: 3130332e3232332e322e302f32332d3233203d3e20313335343435.roa (hash: 1514IP+F3fs/wWPY76J3M+VGkLwDN+TVOPCGmIn0YeI=) 2: 3130332e3232332e322e302f32342d3234203d3e20313335343435.roa (hash: kiwAboKBcY+KUfdKJ8QPyYYmhUR1O0Z8PHji6TPQSyQ=) 3: 6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl (hash: oqCpaILzt3F4vNSapJWXvlaAVZxdEL8XtG4w7c9QHY0=) 4: 3130332e3232332e332e302f32342d3234203d3e20313335343435.roa (hash: 3ivbK9KpjZVb/XVJskMLhHcZHY/PxWUUM4YeUyN+bNw=) 5: 3130332e3232332e302e302f32322d3232203d3e20313335343435.roa (hash: Gp+3hoUQHoSs7BqoZ98uo/JPIvevE7xLEnrTa4hmSmU=) 6: 3130332e3232332e312e302f32342d3234203d3e20313335343435.roa (hash: Meqto9gp7Tw3/wVHdB4HIOhRI0iUBfsDLYkbvujxqHk=) 7: 3130332e3232332e302e302f32342d3234203d3e20313335343435.roa (hash: Ysc9Qtc/MJl5dYJb0Qhr9xILFagM64+bvGrjMt7zT9k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 11:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:5e:e6:13:6a:e9:88:0b:a4:81:a3:bc:3f:e3:bf:71:bd:3c:fd:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B Validity Not Before: Oct 19 11:06:46 2025 GMT Not After : Oct 22 11:27:46 2025 GMT Subject: CN=B70AED5FAC65C28D6C52DCF7796C174E62A84600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:61:87:f5:a5:94:0d:b2:17:e2:bf:c5:ee:1b: 91:90:79:b3:53:87:46:f6:58:28:84:3d:32:50:93: 04:4a:05:fb:29:11:ff:cb:80:e7:02:cf:cb:70:72: 36:73:fb:a2:22:3b:ae:0a:71:6e:4b:7a:04:ec:cf: 48:69:77:ed:65:24:fc:3c:08:98:40:01:bc:8d:d2: 93:ef:16:09:d2:d1:6d:12:93:1d:db:1f:6e:19:8d: 25:bb:ed:5f:87:35:74:85:ef:e5:5c:74:4b:5e:8f: 9c:7f:f6:5e:9c:6d:e1:91:a6:19:35:50:de:90:57: fa:47:b6:ac:83:07:65:21:3a:fd:ec:d4:a5:35:47: 00:73:b2:4a:2b:d4:29:b7:a7:dc:d2:f3:7d:7e:18: 16:93:5e:1c:58:f0:0b:03:48:12:7e:25:83:d3:bc: 9a:25:53:e0:ee:3e:71:fb:d6:cb:d5:ad:51:aa:83: 28:fc:dd:fa:35:2b:76:4f:ce:5b:26:cf:f7:04:75: 9f:90:29:a4:b4:04:25:12:f9:b2:54:96:de:ce:32: 4e:1c:99:b2:27:ed:13:75:56:59:b5:03:ee:7c:51: 51:35:47:63:65:ce:25:22:d3:39:1d:59:74:7f:97: 50:48:f7:1e:d0:17:53:71:49:8d:ec:f5:63:b2:6f: 90:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0A:ED:5F:AC:65:C2:8D:6C:52:DC:F7:79:6C:17:4E:62:A8:46:00 X509v3 Authority Key Identifier: keyid:6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d1:27:85:5b:9d:6b:7d:51:c0:c9:7e:15:9f:7b:41:72:f0: 1c:56:d2:eb:e5:dd:3b:dd:3e:2f:61:c1:70:c9:71:19:2d:3c: be:f6:58:fa:a1:d1:e9:41:38:04:38:93:3f:ca:2a:b0:54:2b: 29:bc:11:e5:6c:5e:d4:7b:0e:92:33:fe:2f:bd:9b:8f:41:14: 13:dd:c0:ef:69:84:82:0a:d7:9a:4e:b7:36:39:e8:f4:63:48: 9d:41:af:84:b9:0f:98:17:08:4b:0b:78:96:03:0f:bb:40:cd: a2:96:b4:34:a6:0a:05:c1:c1:4f:a1:29:e7:e8:f0:5f:ad:3f: 13:b1:01:1f:bb:8a:ac:b1:79:70:84:37:8a:8a:2b:74:2e:ca: 38:a0:c5:d4:0e:29:a8:88:f4:45:30:a7:2b:3d:be:e5:af:72: 24:14:1b:0c:c2:d4:dd:36:53:78:ab:55:06:15:3c:6a:34:ba: 01:57:be:f7:a8:b2:aa:5c:8a:21:3b:d9:c0:37:38:f0:49:0c: bd:02:0f:42:0c:16:0c:ee:91:b2:b5:8c:88:1f:8c:96:aa:94: ed:f8:91:a9:06:7e:98:e6:04:c0:ee:ce:95:92:8d:d6:f5:5b: ca:0b:1e:6e:58:7c:2a:92:da:60:31:12:09:12:02:9f:71:43: 3d:4a:0c:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVl7mE2rpiAukgaO8P+O/cb08/YQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI0RDE0RkM2RDM3NEFGQ0NBQjE5MEM1NERERjNBMUE5 RDREOTMwQjAeFw0yNTEwMTkxMTA2NDZaFw0yNTEwMjIxMTI3NDZaMDMxMTAvBgNV BAMTKEI3MEFFRDVGQUM2NUMyOEQ2QzUyRENGNzc5NkMxNzRFNjJBODQ2MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEYYf1pZQNshfiv8XuG5GQebNT h0b2WCiEPTJQkwRKBfspEf/LgOcCz8twcjZz+6IiO64KcW5LegTsz0hpd+1lJPw8 CJhAAbyN0pPvFgnS0W0Skx3bH24ZjSW77V+HNXSF7+VcdEtej5x/9l6cbeGRphk1 UN6QV/pHtqyDB2UhOv3s1KU1RwBzskor1Cm3p9zS831+GBaTXhxY8AsDSBJ+JYPT vJolU+DuPnH71svVrVGqgyj83fo1K3ZPzlsmz/cEdZ+QKaS0BCUS+bJUlt7OMk4c mbIn7RN1Vlm1A+58UVE1R2NlziUi0zkdWXR/l1BI9x7QF1NxSY3s9WOyb5AJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtwrtX6xlwo1sUtz3eWwXTmKoRgAwHwYDVR0j BBgwFoAUa00U/G03SvzKsZDFTd86Gp1NkwswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzU0NWI4NS05Mjc0LTQ3MGEtYWQyNy0yNDY5ZTlkMTU1YmMvMC82QjREMTRGQzZE Mzc0QUZDQ0FCMTkwQzU0RERGM0ExQTlENEQ5MzBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkI0RDE0RkM2RDM3NEFGQ0NBQjE5MEM1NERERjNBMUE5RDRE OTMwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjc1NDViODUtOTI3NC00NzBhLWFk MjctMjQ2OWU5ZDE1NWJjLzAvNkI0RDE0RkM2RDM3NEFGQ0NBQjE5MEM1NERERjNB MUE5RDREOTMwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrRJ4VbnWt9UcDJfhWfe0Fy8BxW0uvl3Tvd Pi9hwXDJcRktPL72WPqh0elBOAQ4kz/KKrBUKym8EeVsXtR7DpIz/i+9m49BFBPd wO9phIIK15pOtzY56PRjSJ1Br4S5D5gXCEsLeJYDD7tAzaKWtDSmCgXBwU+hKefo 8F+tPxOxAR+7iqyxeXCEN4qKK3QuyjigxdQOKaiI9EUwpys9vuWvciQUGwzC1N02 U3irVQYVPGo0ugFXvveosqpciiE72cA3OPBJDL0CD0IMFgzukbK1jIgfjJaqlO34 kakGfpjmBMDuzpWSjdb1W8oLHm5YfCqS2mAxEgkSAp9xQz1KDKg= -----END CERTIFICATE-----Generated at Mon Oct 20 21:32:12 2025 by rpki-client