$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft File: 6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft (raw, json) Hash identifier: 1ALGx5TzW/xK0M9ublmRfptEkyglSV3x5Nz6uxJB8+w= Subject key identifier: 22:96:2A:B3:8B:10:F4:93:25:AD:66:EF:5F:90:F9:A7:00:04:C0:6D Authority key identifier: 6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8 Certificate issuer: /CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8 Certificate serial: 59B552AF82A561672EF7404BB7804EA35E3A1BE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft Manifest number: A0 Signing time: Sat 18 Oct 2025 19:31:25 +0000 Manifest this update: Sat 18 Oct 2025 19:26:25 +0000 Manifest next update: Tue 21 Oct 2025 20:51:25 +0000 Files and hashes: 1: 6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl (hash: s0iS64xjCAsTueE3oDsLnUwjdhdZAtlar9UOo22IThI=) 2: 323030313a6466343a353663303a3a2f34382d3438203d3e20313533313231.roa (hash: EZ7jR9+lQhRaaJFDwK6y0EbEgy21NUoqJfk8uRlaKvI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:b5:52:af:82:a5:61:67:2e:f7:40:4b:b7:80:4e:a3:5e:3a:1b:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8 Validity Not Before: Oct 18 19:26:25 2025 GMT Not After : Oct 21 20:51:25 2025 GMT Subject: CN=22962AB38B10F49325AD66EF5F90F9A70004C06D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5f:60:93:8c:63:9c:22:06:4d:67:1e:68:1b: 60:15:16:e3:e7:0a:7b:85:d8:a4:31:b8:61:77:1a: 4e:48:25:dd:50:6a:09:be:cf:28:1f:78:cb:3e:dc: 5e:b8:e3:90:9e:15:68:7f:aa:94:07:d3:cc:5b:dc: 9f:11:1a:5d:78:1a:bf:ab:b2:7e:fc:b0:b8:02:e6: 39:6b:7b:fb:29:47:b8:a9:25:a1:13:e1:48:67:fe: 8d:31:88:92:2b:39:2b:48:9e:7a:63:a9:cb:c8:07: a4:7a:78:f4:29:05:14:81:de:98:be:1a:ed:22:31: 71:ce:4e:11:9e:59:01:b1:7f:90:09:15:f4:f3:da: 32:a5:2b:ba:80:8e:e8:b8:4f:2b:5d:28:7e:ae:e8: c3:e6:31:fd:28:fa:ef:58:2e:8f:c4:83:c5:0a:43: 56:ff:99:76:a4:eb:ba:37:7e:47:a1:14:92:7b:b5: 96:52:d1:c4:4e:54:a7:7b:7f:84:5b:f4:a2:bc:b6: 83:14:19:93:a2:c1:90:a2:f4:1a:be:8c:75:29:a9: 72:0a:6a:d8:f3:2d:49:0a:7e:81:41:1d:6e:aa:29: f0:26:8a:f9:51:77:df:f3:0b:bb:10:30:52:88:3c: c2:ff:8e:e9:b7:0a:90:9e:9d:38:36:73:53:2f:6c: 32:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:96:2A:B3:8B:10:F4:93:25:AD:66:EF:5F:90:F9:A7:00:04:C0:6D X509v3 Authority Key Identifier: keyid:6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:ea:74:71:5a:5c:4e:ca:4e:c7:9e:c9:57:9c:8f:9b:2e:14: 3d:b8:d6:fe:ee:ac:8f:0b:0b:3c:d9:f2:37:e5:ad:a4:90:3b: c5:de:92:c6:30:61:95:b4:ee:8e:a8:55:48:27:5a:85:c5:55: de:bb:b8:a2:f7:38:f4:de:23:8f:b2:e8:11:5d:5e:ca:98:4f: 41:c9:56:0d:c9:2f:4f:7f:94:72:cc:e3:4d:9b:e7:bf:c9:a7: 75:db:eb:81:5c:c0:3f:65:d1:49:26:ed:4e:cd:01:24:40:f9: 59:08:21:1f:32:ba:1c:57:5d:83:b3:b0:be:2a:f1:20:40:f2: f2:89:f6:ef:64:48:6f:ca:d1:d8:73:0d:b4:53:35:1d:c2:32: 4b:e7:35:1f:18:7b:8f:6a:05:43:4e:53:2e:b6:e2:d6:28:ef: 1e:e1:c1:cd:04:01:bc:68:eb:db:4c:6e:fc:15:61:61:26:15: 1a:ed:88:8a:7f:ac:7b:d0:0e:5a:02:43:1e:db:50:9d:37:60: ec:e3:f6:71:99:96:61:d4:d2:02:f1:16:cc:9b:71:f0:57:a7: 98:6e:56:02:fe:b1:5a:7f:b4:98:da:4c:6d:59:9e:66:6a:3c: 15:27:b8:1d:28:a3:91:0c:8f:48:a0:7f:c8:d7:ea:b0:eb:d4: 54:80:43:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWbVSr4KlYWcu90BLt4BOo146G+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEzOTk2QUZFMTEzODIzODUzMEMyRkM5MkIyQUI2NzVG Q0QyMThDODAeFw0yNTEwMTgxOTI2MjVaFw0yNTEwMjEyMDUxMjVaMDMxMTAvBgNV BAMTKDIyOTYyQUIzOEIxMEY0OTMyNUFENjZFRjVGOTBGOUE3MDAwNEMwNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/X2CTjGOcIgZNZx5oG2AVFuPn CnuF2KQxuGF3Gk5IJd1Qagm+zygfeMs+3F6445CeFWh/qpQH08xb3J8RGl14Gr+r sn78sLgC5jlre/spR7ipJaET4Uhn/o0xiJIrOStInnpjqcvIB6R6ePQpBRSB3pi+ Gu0iMXHOThGeWQGxf5AJFfTz2jKlK7qAjui4TytdKH6u6MPmMf0o+u9YLo/Eg8UK Q1b/mXak67o3fkehFJJ7tZZS0cROVKd7f4Rb9KK8toMUGZOiwZCi9Bq+jHUpqXIK atjzLUkKfoFBHW6qKfAmivlRd9/zC7sQMFKIPML/jum3CpCenTg2c1MvbDJ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIpYqs4sQ9JMlrWbvX5D5pwAEwG0wHwYDVR0j BBgwFoAUajmWr+ETgjhTDC/JKyq2dfzSGMgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTg5YjdkZC05OWE3LTQ1MGUtYmU4NC1iM2JmYzczNDBmMWYvMS82QTM5OTZBRkUx MTM4MjM4NTMwQzJGQzkyQjJBQjY3NUZDRDIxOEM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEzOTk2QUZFMTEzODIzODUzMEMyRkM5MkIyQUI2NzVGQ0Qy MThDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzEvNkEzOTk2QUZFMTEzODIzODUzMEMyRkM5MkIyQUI2 NzVGQ0QyMThDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfqdHFaXE7KTseeyVecj5suFD241v7urI8L CzzZ8jflraSQO8XeksYwYZW07o6oVUgnWoXFVd67uKL3OPTeI4+y6BFdXsqYT0HJ Vg3JL09/lHLM402b57/Jp3Xb64FcwD9l0Ukm7U7NASRA+VkIIR8yuhxXXYOzsL4q 8SBA8vKJ9u9kSG/K0dhzDbRTNR3CMkvnNR8Ye49qBUNOUy624tYo7x7hwc0EAbxo 69tMbvwVYWEmFRrtiIp/rHvQDloCQx7bUJ03YOzj9nGZlmHU0gLxFsybcfBXp5hu VgL+sVp/tJjaTG1ZnmZqPBUnuB0oo5EMj0igf8jX6rDr1FSAQ80= -----END CERTIFICATE-----Generated at Mon Oct 20 09:46:31 2025 by rpki-client