$ rpki-client -vvf repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft File: 6A755F0ECD114936B4C154BE153030E6BFE42025.mft (raw, json) Hash identifier: Qao2dV2dOHjTbV68pyFwOCMti1Isp2ewECsfkPUzI88= Subject key identifier: 11:1E:8E:55:69:9B:C9:A6:A2:13:22:30:6D:C8:6C:5C:F5:88:61:0C Authority key identifier: 6A:75:5F:0E:CD:11:49:36:B4:C1:54:BE:15:30:30:E6:BF:E4:20:25 Certificate issuer: /CN=6A755F0ECD114936B4C154BE153030E6BFE42025 Certificate serial: 6F5825C988E5697F73F5665A21CEECFC12BE8629 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft Manifest number: A1 Signing time: Sun 19 Oct 2025 20:12:20 +0000 Manifest this update: Sun 19 Oct 2025 20:07:20 +0000 Manifest next update: Wed 22 Oct 2025 22:27:20 +0000 Files and hashes: 1: 3136302e32352e3234342e302f32342d3234203d3e20313533313131.roa (hash: A2Vq9Yncnmn+HCdrfAMlHCZ48WUhBd0oYQDCWKly81I=) 2: 6A755F0ECD114936B4C154BE153030E6BFE42025.crl (hash: u4+Gox4R60BC5df5y72lPMhxm+JOpw3he5ldEVO34Gg=) 3: 3136302e32352e3234352e302f32342d3234203d3e20313533313131.roa (hash: e8ZJYzkvKx8Yk6VtEAAoJxN88Qmgg4lnk8IMQAGn/JE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.crl rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 22:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:58:25:c9:88:e5:69:7f:73:f5:66:5a:21:ce:ec:fc:12:be:86:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A755F0ECD114936B4C154BE153030E6BFE42025 Validity Not Before: Oct 19 20:07:20 2025 GMT Not After : Oct 22 22:27:20 2025 GMT Subject: CN=111E8E55699BC9A6A21322306DC86C5CF588610C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8f:cc:99:94:58:ab:7d:80:84:91:e2:35:f0: d6:3d:33:fa:8c:86:b4:98:26:4c:e4:a9:eb:35:19: c3:2f:d4:2a:04:34:37:ec:0c:29:d8:3a:e6:46:02: 74:10:56:7b:c1:7a:a3:81:2d:9b:ba:37:8e:37:1a: d6:dc:16:54:72:ad:d9:21:5c:3e:d8:8c:56:5d:b7: 76:fa:3b:c3:21:e3:1f:55:7f:51:d1:45:1f:f2:84: 9c:53:8b:a4:6a:dd:77:9b:a0:2f:2b:8b:ae:3a:e4: df:2a:c1:31:87:b0:86:2d:7c:6c:12:91:a1:38:24: 3b:13:59:08:ed:70:9e:20:c4:54:89:af:63:82:4a: 04:8e:a7:9d:dc:05:29:71:4f:f4:f2:f3:a7:cc:c4: f2:80:b1:c8:09:fa:af:50:e6:49:20:fe:51:65:5b: bd:08:79:0f:01:72:4b:95:a3:a3:9f:83:70:17:9a: d7:08:dd:ee:6e:17:11:44:3e:2a:7a:d2:18:8c:0b: 12:e5:5d:49:ff:2a:71:b3:e0:e2:e9:04:b7:42:88: 0d:cc:82:47:90:ed:4f:9b:3a:f2:09:bb:0e:ea:96: 43:d8:8b:89:43:09:3e:98:03:12:9f:7f:16:72:54: 9a:00:29:33:28:40:04:39:b7:70:11:a3:af:9b:03: e5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:1E:8E:55:69:9B:C9:A6:A2:13:22:30:6D:C8:6C:5C:F5:88:61:0C X509v3 Authority Key Identifier: keyid:6A:75:5F:0E:CD:11:49:36:B4:C1:54:BE:15:30:30:E6:BF:E4:20:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:df:78:3d:c1:55:41:a8:8f:be:d6:96:ab:50:79:bb:ad:da: 52:87:c5:b9:d9:12:3a:95:cf:33:0e:07:3e:03:e8:5c:8d:8f: 36:31:f9:99:65:7f:4c:80:72:e9:f5:7f:31:13:5d:97:3f:59: 3d:1e:36:79:b6:d4:1a:ce:d4:05:85:dc:5d:50:bd:cd:1f:da: f4:85:a4:71:f9:4e:d6:0a:6d:b6:ef:e5:0e:2d:75:83:e7:7c: 1b:d6:19:cd:89:6d:fd:fa:60:c7:71:77:b3:fa:19:dd:42:88: e8:45:2c:e2:ab:3e:3a:98:cd:fe:bd:04:d1:81:a8:a3:d9:db: 03:b9:9e:d7:8b:37:85:45:e2:50:d3:d0:a0:34:5b:c8:d2:a8: 6f:26:b0:3e:f0:f2:2e:74:f2:8a:ee:ee:c6:09:08:5d:0a:51: 25:a8:0c:f2:44:d7:c8:40:03:c0:6c:fe:10:d1:f8:17:a7:d2: 75:b6:7d:24:95:ab:61:56:38:10:87:ea:04:dc:52:18:a0:f6: e8:95:0f:9b:e6:df:ed:fa:d9:27:c2:87:70:b8:77:71:12:a4: 30:91:7e:ad:ee:eb:6a:5f:5f:b3:45:d1:ce:4c:33:4a:f7:ee: 20:21:5c:b5:aa:c2:09:66:b0:af:7c:ed:3a:59:69:92:4c:06: 09:d2:44:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb1glyYjlaX9z9WZaIc7s/BK+hikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE3NTVGMEVDRDExNDkzNkI0QzE1NEJFMTUzMDMwRTZC RkU0MjAyNTAeFw0yNTEwMTkyMDA3MjBaFw0yNTEwMjIyMjI3MjBaMDMxMTAvBgNV BAMTKDExMUU4RTU1Njk5QkM5QTZBMjEzMjIzMDZEQzg2QzVDRjU4ODYxMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDj8yZlFirfYCEkeI18NY9M/qM hrSYJkzkqes1GcMv1CoENDfsDCnYOuZGAnQQVnvBeqOBLZu6N443GtbcFlRyrdkh XD7YjFZdt3b6O8Mh4x9Vf1HRRR/yhJxTi6Rq3XeboC8ri6465N8qwTGHsIYtfGwS kaE4JDsTWQjtcJ4gxFSJr2OCSgSOp53cBSlxT/Ty86fMxPKAscgJ+q9Q5kkg/lFl W70IeQ8BckuVo6Ofg3AXmtcI3e5uFxFEPip60hiMCxLlXUn/KnGz4OLpBLdCiA3M gkeQ7U+bOvIJuw7qlkPYi4lDCT6YAxKffxZyVJoAKTMoQAQ5t3ARo6+bA+UNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUER6OVWmbyaaiEyIwbchsXPWIYQwwHwYDVR0j BBgwFoAUanVfDs0RSTa0wVS+FTAw5r/kICUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGNjMWM3ZS1kYTc0LTRiMTEtYjY3YS1kNWYyN2Q5ODE3NTcvMC82QTc1NUYwRUNE MTE0OTM2QjRDMTU0QkUxNTMwMzBFNkJGRTQyMDI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkE3NTVGMEVDRDExNDkzNkI0QzE1NEJFMTUzMDMwRTZCRkU0 MjAyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhjYzFjN2UtZGE3NC00YjExLWI2 N2EtZDVmMjdkOTgxNzU3LzAvNkE3NTVGMEVDRDExNDkzNkI0QzE1NEJFMTUzMDMw RTZCRkU0MjAyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADffeD3BVUGoj77WlqtQebut2lKHxbnZEjqV zzMOBz4D6FyNjzYx+Zllf0yAcun1fzETXZc/WT0eNnm21BrO1AWF3F1Qvc0f2vSF pHH5TtYKbbbv5Q4tdYPnfBvWGc2Jbf36YMdxd7P6Gd1CiOhFLOKrPjqYzf69BNGB qKPZ2wO5nteLN4VF4lDT0KA0W8jSqG8msD7w8i508oru7sYJCF0KUSWoDPJE18hA A8Bs/hDR+Ben0nW2fSSVq2FWOBCH6gTcUhig9uiVD5vm3+362SfCh3C4d3ESpDCR fq3u62pfX7NF0c5MM0r37iAhXLWqwglmsK987TpZaZJMBgnSROU= -----END CERTIFICATE-----Generated at Tue Oct 21 02:31:22 2025 by rpki-client