$ rpki-client -vvf repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft File: 6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft (raw, json) Hash identifier: ZPnFBhcC96YuAvA2fozyR+KN+RJAEmmdANCBv6ewveM= Subject key identifier: B9:F4:BC:B1:BF:3F:FA:7A:F5:B6:F1:21:03:A0:68:A7:0E:78:3F:BA Authority key identifier: 6B:FD:65:6A:9F:A6:3F:B8:98:16:B1:7C:CE:D2:83:2B:43:FE:41:CD Certificate issuer: /CN=6BFD656A9FA63FB89816B17CCED2832B43FE41CD Certificate serial: 576BCD1550A43843CA1E6E6C862C9C900EE2BD80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft Manifest number: 0120 Signing time: Sat 18 Oct 2025 13:31:26 +0000 Manifest this update: Sat 18 Oct 2025 13:26:26 +0000 Manifest next update: Wed 22 Oct 2025 00:13:26 +0000 Files and hashes: 1: 6BFD656A9FA63FB89816B17CCED2832B43FE41CD.crl (hash: 7ELywC7rfTFvuWmAivHmjYOAyOKSNV3oMgy/Yrkxj3g=) 2: 323030313a6466333a356334303a3a2f34382d3438203d3e20313431313236.roa (hash: QBBO/FoYTyAYgTzseCUJPqnk8CnediRAVVQ9iko63Nk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.crl rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 00:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:6b:cd:15:50:a4:38:43:ca:1e:6e:6c:86:2c:9c:90:0e:e2:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6BFD656A9FA63FB89816B17CCED2832B43FE41CD Validity Not Before: Oct 18 13:26:26 2025 GMT Not After : Oct 22 00:13:26 2025 GMT Subject: CN=B9F4BCB1BF3FFA7AF5B6F12103A068A70E783FBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:14:48:91:08:13:b2:bf:1c:6e:9b:98:f7:e9: 4f:1b:97:16:6f:11:2f:a7:ac:65:46:02:32:64:ff: 46:b6:49:ba:a1:58:84:87:67:43:af:8f:0a:a8:e7: f0:45:cc:f2:d1:c1:2b:92:e1:77:95:7d:7e:88:fc: 07:be:ab:2c:17:dc:c3:39:ec:7f:46:a9:6d:72:3b: ec:d9:76:10:0f:e5:28:4f:26:98:06:40:84:44:23: 3f:e9:41:df:ba:41:78:f3:44:39:c8:f9:c6:ea:f9: 91:76:34:31:1f:f5:c7:6b:80:64:69:ab:ac:e7:38: ba:5c:23:03:b2:42:d5:a3:48:0f:d5:be:73:d3:fe: 4c:65:e9:8e:fa:9e:bf:f5:2d:cb:90:03:04:57:53: a8:58:ee:69:48:b8:42:4b:c0:00:58:cd:4c:a7:40: 15:47:03:82:48:45:c7:4d:7d:97:f4:fb:98:6d:af: 7d:3e:af:cf:8e:8f:c4:59:88:9e:7d:a7:68:61:af: 4a:be:f5:58:ff:54:ae:5a:02:9d:e5:e3:2f:99:1f: 32:a0:19:27:15:8f:1a:8d:0c:24:7c:2f:f3:6c:bd: 79:b9:7f:06:5e:85:1b:87:1c:93:93:96:45:53:c1: 69:66:47:f5:3e:4f:9c:df:5c:26:35:00:91:62:af: 90:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F4:BC:B1:BF:3F:FA:7A:F5:B6:F1:21:03:A0:68:A7:0E:78:3F:BA X509v3 Authority Key Identifier: keyid:6B:FD:65:6A:9F:A6:3F:B8:98:16:B1:7C:CE:D2:83:2B:43:FE:41:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/6BFD656A9FA63FB89816B17CCED2832B43FE41CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:34:90:95:2d:ad:24:34:a0:c9:33:0a:0e:58:55:4d:6b:01: 91:4b:fd:13:3e:08:f5:5b:ce:a2:f1:d4:50:f8:29:9a:59:ca: 14:95:61:e5:8f:92:8f:9f:5f:c5:38:fd:fa:bc:ae:b9:12:a4: 39:3c:8b:5d:57:eb:e9:f6:40:be:6d:83:ba:e6:17:c1:83:32: 3e:94:7e:7b:70:10:6b:db:36:17:16:9b:93:27:4b:d2:55:d8: e4:c0:40:98:b8:24:e9:1f:11:58:15:5c:1f:29:ff:fc:df:90: a4:66:cc:07:fe:fe:32:93:78:28:d2:ed:5f:77:7d:16:8d:17: 48:6e:17:06:a4:05:a4:7d:f9:1b:00:69:dc:29:34:ef:1c:46: 6b:50:91:fb:23:b0:bc:20:89:71:e7:80:39:43:cc:f7:8a:80: 3f:d6:dd:a8:39:96:96:7e:26:aa:03:f7:db:0b:ac:0a:29:54: b5:0f:04:bf:d0:40:5a:e9:47:0e:57:9e:0f:fe:64:08:9b:56: 7f:3a:d1:96:4d:d6:d7:50:02:35:cc:44:00:7e:89:53:87:de: 74:de:c8:cb:48:b4:3c:8c:fe:24:05:9c:b1:c7:8b:66:21:9d: 5e:82:5f:09:b5:21:18:cf:33:8e:ba:5f:ef:ef:05:b8:ae:6c: 88:97:1f:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV2vNFVCkOEPKHm5shiyckA7ivYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkJGRDY1NkE5RkE2M0ZCODk4MTZCMTdDQ0VEMjgzMkI0 M0ZFNDFDRDAeFw0yNTEwMTgxMzI2MjZaFw0yNTEwMjIwMDEzMjZaMDMxMTAvBgNV BAMTKEI5RjRCQ0IxQkYzRkZBN0FGNUI2RjEyMTAzQTA2OEE3MEU3ODNGQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRFEiRCBOyvxxum5j36U8blxZv ES+nrGVGAjJk/0a2SbqhWISHZ0Ovjwqo5/BFzPLRwSuS4XeVfX6I/Ae+qywX3MM5 7H9GqW1yO+zZdhAP5ShPJpgGQIREIz/pQd+6QXjzRDnI+cbq+ZF2NDEf9cdrgGRp q6znOLpcIwOyQtWjSA/VvnPT/kxl6Y76nr/1LcuQAwRXU6hY7mlIuEJLwABYzUyn QBVHA4JIRcdNfZf0+5htr30+r8+Oj8RZiJ59p2hhr0q+9Vj/VK5aAp3l4y+ZHzKg GScVjxqNDCR8L/NsvXm5fwZehRuHHJOTlkVTwWlmR/U+T5zfXCY1AJFir5AVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUufS8sb8/+nr1tvEhA6Bopw54P7owHwYDVR0j BBgwFoAUa/1lap+mP7iYFrF8ztKDK0P+Qc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTBjYjYzMC02MzZhLTRiNmEtOTNkZi1iNWQ5MDhmZTZlZTcvMC82QkZENjU2QTlG QTYzRkI4OTgxNkIxN0NDRUQyODMyQjQzRkU0MUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkJGRDY1NkE5RkE2M0ZCODk4MTZCMTdDQ0VEMjgzMkI0M0ZF NDFDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmUwY2I2MzAtNjM2YS00YjZhLTkz ZGYtYjVkOTA4ZmU2ZWU3LzAvNkJGRDY1NkE5RkE2M0ZCODk4MTZCMTdDQ0VEMjgz MkI0M0ZFNDFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACo0kJUtrSQ0oMkzCg5YVU1rAZFL/RM+CPVb zqLx1FD4KZpZyhSVYeWPko+fX8U4/fq8rrkSpDk8i11X6+n2QL5tg7rmF8GDMj6U fntwEGvbNhcWm5MnS9JV2OTAQJi4JOkfEVgVXB8p//zfkKRmzAf+/jKTeCjS7V93 fRaNF0huFwakBaR9+RsAadwpNO8cRmtQkfsjsLwgiXHngDlDzPeKgD/W3ag5lpZ+ JqoD99sLrAopVLUPBL/QQFrpRw5Xng/+ZAibVn860ZZN1tdQAjXMRAB+iVOH3nTe yMtItDyM/iQFnLHHi2YhnV6CXwm1IRjPM466X+/vBbiubIiXH24= -----END CERTIFICATE-----Generated at Mon Oct 20 09:45:22 2025 by rpki-client