$ rpki-client -vvf repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft File: 067116F928280AE09336BC39D005AAC13695F63C.mft (raw, json) Hash identifier: PdFXgvVl9bpEQEzmDA1jc5B87v0roFHRIYhiBd1zPmU= Subject key identifier: 6B:38:F8:57:D5:F0:EF:3C:F8:56:79:5D:B1:59:58:F1:1A:0C:07:6F Authority key identifier: 06:71:16:F9:28:28:0A:E0:93:36:BC:39:D0:05:AA:C1:36:95:F6:3C Certificate issuer: /CN=067116F928280AE09336BC39D005AAC13695F63C Certificate serial: 0605338635E109B2789BB4744232DC216AEF58DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft Manifest number: 01E2 Signing time: Sun 19 Oct 2025 02:41:35 +0000 Manifest this update: Sun 19 Oct 2025 02:36:35 +0000 Manifest next update: Wed 22 Oct 2025 08:28:35 +0000 Files and hashes: 1: 067116F928280AE09336BC39D005AAC13695F63C.crl (hash: gzf0lWlcnAZhL7mLvUpc0qbDKQYj5dmitqHlCnJ9iYw=) 2: 3130332e38322e3234362e302f32342d3234203d3e20313432333730.roa (hash: vY8WV98Jcmzb4ODBeT1hqvxozKSfqOYtlfGMabwL6vk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.crl rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 08:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:05:33:86:35:e1:09:b2:78:9b:b4:74:42:32:dc:21:6a:ef:58:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=067116F928280AE09336BC39D005AAC13695F63C Validity Not Before: Oct 19 02:36:35 2025 GMT Not After : Oct 22 08:28:35 2025 GMT Subject: CN=6B38F857D5F0EF3CF856795DB15958F11A0C076F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:de:2f:57:2d:bb:79:9c:c3:33:9f:b9:9c:0c: e5:e0:d0:7c:b3:e5:4c:46:50:ed:d0:77:f3:19:38: 08:f8:3d:47:9c:b2:ba:a3:64:a6:cc:e9:66:c8:87: 69:83:f0:9c:f0:52:d3:9f:5d:69:e8:d5:9c:dc:65: 40:a9:57:75:bf:80:af:6f:47:f1:1e:c5:f2:c3:63: 86:16:82:59:45:53:12:ee:3b:7a:7a:3e:f1:4a:ef: fb:38:00:91:d4:e6:3f:b9:b9:52:fe:1a:41:99:8e: 6d:88:60:9a:f9:92:20:d3:b5:21:c1:f8:dc:7d:16: af:7b:ad:9b:5e:dd:0c:72:b9:02:43:fe:0f:fa:e7: 77:65:4a:8e:68:4f:5b:94:ce:ef:f0:36:f5:54:fc: 53:ec:2e:2d:1d:72:2a:89:3b:6d:33:01:86:39:05: db:58:d3:40:79:c4:fe:cf:9c:77:c6:c3:d6:d2:76: 03:20:fa:66:50:49:3a:f7:5e:73:bd:fd:f8:99:77: db:99:55:3a:96:27:bf:09:50:24:30:ac:c6:66:2d: 5d:1e:b5:7f:9b:7c:34:ad:ce:79:fb:ae:f1:dd:66: 52:8a:b2:c6:2c:9c:a7:f4:01:13:cf:99:99:13:ac: 39:8a:84:d6:f9:2e:b7:c5:64:eb:00:e1:44:8a:50: a7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:38:F8:57:D5:F0:EF:3C:F8:56:79:5D:B1:59:58:F1:1A:0C:07:6F X509v3 Authority Key Identifier: keyid:06:71:16:F9:28:28:0A:E0:93:36:BC:39:D0:05:AA:C1:36:95:F6:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:99:41:32:83:47:7c:02:17:0d:2b:c1:bb:ab:9b:2c:fc:91: 17:98:1b:cd:a0:ac:45:5e:4b:4b:7e:6c:2a:19:da:4c:9f:98: da:38:f3:c2:95:78:e0:ef:5a:88:8c:c5:08:22:04:16:54:2d: ce:05:73:47:5e:c7:4d:61:e8:8a:b8:92:72:b8:93:22:71:fa: dc:55:b8:ff:fb:0e:62:14:6e:07:ec:97:c8:9b:30:6f:41:50: da:da:50:15:8d:b9:c4:bb:1a:fc:52:bb:1d:26:79:98:2e:63: b3:77:78:ae:8a:02:e2:78:ad:b5:91:65:96:02:3a:45:b7:59: 5e:36:07:50:b3:75:82:30:23:77:ba:73:9f:96:be:f0:1f:c7: 30:41:98:4d:e6:43:86:94:45:9a:5c:3c:f4:6f:be:7b:64:b4: 72:d9:2c:3d:50:98:a6:5f:ec:84:5c:59:9b:ad:ab:11:8c:ac: 26:30:ff:76:9b:cf:2b:c0:92:59:60:87:bd:40:11:f1:5e:06: 3b:fd:5c:62:45:05:24:95:e2:2d:8a:e1:6d:ee:39:01:5f:aa: 15:08:09:c5:39:50:f9:b5:73:2c:cb:18:e1:9e:3d:56:71:8d: c0:ef:6c:34:fc:bb:84:4c:8b:b3:03:39:30:7c:72:4b:bb:e9: 6b:c3:5f:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBgUzhjXhCbJ4m7R0QjLcIWrvWNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFBQzEz Njk1RjYzQzAeFw0yNTEwMTkwMjM2MzVaFw0yNTEwMjIwODI4MzVaMDMxMTAvBgNV BAMTKDZCMzhGODU3RDVGMEVGM0NGODU2Nzk1REIxNTk1OEYxMUEwQzA3NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT3i9XLbt5nMMzn7mcDOXg0Hyz 5UxGUO3Qd/MZOAj4PUecsrqjZKbM6WbIh2mD8JzwUtOfXWno1ZzcZUCpV3W/gK9v R/EexfLDY4YWgllFUxLuO3p6PvFK7/s4AJHU5j+5uVL+GkGZjm2IYJr5kiDTtSHB +Nx9Fq97rZte3QxyuQJD/g/653dlSo5oT1uUzu/wNvVU/FPsLi0dciqJO20zAYY5 BdtY00B5xP7PnHfGw9bSdgMg+mZQSTr3XnO9/fiZd9uZVTqWJ78JUCQwrMZmLV0e tX+bfDStznn7rvHdZlKKssYsnKf0ARPPmZkTrDmKhNb5LrfFZOsA4USKUKf/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUazj4V9Xw7zz4VnldsVlY8RoMB28wHwYDVR0j BBgwFoAUBnEW+SgoCuCTNrw50AWqwTaV9jwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Y2UwZmU1YS1lNDY4LTQ5ZDktOTMxYi1hYjRiOTI0YTQ1YzIvMC8wNjcxMTZGOTI4 MjgwQUUwOTMzNkJDMzlEMDA1QUFDMTM2OTVGNjNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFBQzEzNjk1 RjYzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmNlMGZlNWEtZTQ2OC00OWQ5LTkz MWItYWI0YjkyNGE0NWMyLzAvMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFB QzEzNjk1RjYzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIiZQTKDR3wCFw0rwburmyz8kReYG82grEVe S0t+bCoZ2kyfmNo488KVeODvWoiMxQgiBBZULc4Fc0dex01h6Iq4knK4kyJx+txV uP/7DmIUbgfsl8ibMG9BUNraUBWNucS7GvxSux0meZguY7N3eK6KAuJ4rbWRZZYC OkW3WV42B1CzdYIwI3e6c5+WvvAfxzBBmE3mQ4aURZpcPPRvvntktHLZLD1QmKZf 7IRcWZutqxGMrCYw/3abzyvAkllgh71AEfFeBjv9XGJFBSSV4i2K4W3uOQFfqhUI CcU5UPm1cyzLGOGePVZxjcDvbDT8u4RMi7MDOTB8cku76WvDX1Y= -----END CERTIFICATE-----Generated at Tue Oct 21 07:04:44 2025 by rpki-client