$ rpki-client -vvf repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft File: 6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft (raw, json) Hash identifier: uU14orqBTVpE+wJkWbQguwp8kkes5uAZUF5h98eDCq4= Subject key identifier: 96:9A:8D:0A:57:B9:9A:E0:88:82:C3:E9:E5:82:61:1C:ED:F2:13:D8 Authority key identifier: 6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 Certificate issuer: /CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31 Certificate serial: 1E5E78D290D65CF1FDC4C57F98A6EFDE0C3CDF32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft Manifest number: D2 Signing time: Sat 18 Oct 2025 11:30:47 +0000 Manifest this update: Sat 18 Oct 2025 11:25:47 +0000 Manifest next update: Tue 21 Oct 2025 18:51:47 +0000 Files and hashes: 1: 6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl (hash: csDOgjxsYRu7BnDfQpz2r6TOCBqWMLTRfrUxngivjrY=) 2: 3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa (hash: hNrDFdJZIJVijEPlIae7oRd0LDEkkVmTrltcwdQNZWQ=) 3: 3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa (hash: nPtUGKaHPiIgcmd7zVYYYWB0FNbLMK1i/rlw7h+2X4I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 18:51:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:5e:78:d2:90:d6:5c:f1:fd:c4:c5:7f:98:a6:ef:de:0c:3c:df:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31 Validity Not Before: Oct 18 11:25:47 2025 GMT Not After : Oct 21 18:51:47 2025 GMT Subject: CN=969A8D0A57B99AE08882C3E9E582611CEDF213D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a2:eb:e4:dc:00:28:b6:37:4f:dd:5a:7e:97: 70:ba:34:1a:48:02:3f:f6:02:3a:16:a2:9e:51:85: ba:fe:b6:af:cc:21:1a:ec:c2:8c:1e:21:0f:fb:c0: 83:5b:b1:a8:5d:b5:71:df:68:a2:67:2c:00:43:bc: 24:47:01:59:4c:b5:f1:58:3e:39:92:b4:6d:03:40: 69:bb:44:cf:28:7c:10:cd:2c:1b:97:87:89:93:c8: 07:65:69:20:e0:33:bf:89:00:47:41:65:05:e7:f6: 56:32:e7:0d:17:1a:89:f4:79:f4:9f:16:b6:32:e9: 20:a3:89:90:c3:06:9f:2b:7a:cb:0f:d4:0d:a6:33: 4e:3c:5a:49:e2:9d:91:0b:d9:7b:98:dd:6b:bb:32: 3a:7a:5b:57:02:cc:99:4d:86:30:80:2c:3b:83:24: 59:34:5b:17:93:66:9b:6b:23:69:9e:a0:4f:57:e7: 7e:d1:ab:21:7a:87:b9:06:35:6b:f0:9f:ad:12:c7: 32:cc:e3:9c:0f:54:f6:a8:c6:23:cc:d0:07:a6:a5: ff:16:ae:a4:09:e1:eb:57:5f:85:28:41:d5:2c:fd: 10:de:bd:59:a8:ed:7d:a2:07:e2:6e:eb:57:53:c7: 5a:f5:58:c8:44:e1:26:34:df:5c:28:40:7d:8a:d6: 9a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9A:8D:0A:57:B9:9A:E0:88:82:C3:E9:E5:82:61:1C:ED:F2:13:D8 X509v3 Authority Key Identifier: keyid:6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:61:2f:d6:d1:54:af:1c:60:19:7d:78:e2:97:d4:b1:88:a2: a2:3d:b9:79:76:bd:df:fb:d5:7d:ad:c6:5e:d0:3d:e4:2f:44: f3:c5:50:ab:ed:b3:33:7d:2b:77:39:6b:96:3e:38:a3:64:66: 6b:d6:01:de:19:6d:d8:9f:41:ac:46:e6:25:b4:c2:6a:cf:80: f7:ac:c4:23:e7:03:1a:d4:56:97:df:b0:05:6c:f9:d3:35:b7: 21:25:14:9c:6f:d0:aa:05:f8:44:02:3b:26:00:a9:22:df:5c: d5:0f:3a:dc:1d:60:8b:76:6c:a3:30:db:2d:7c:31:02:b4:4f: 2d:ba:49:1f:8a:e7:10:97:1a:77:a8:ea:27:18:2e:8e:a3:a8: cf:77:49:ad:03:31:75:fd:d2:31:71:20:27:50:96:66:e5:a8: 40:df:f3:89:92:95:71:85:78:a7:0e:4a:8e:37:b7:d6:d5:36: 5d:ad:80:5d:b2:17:be:9a:d7:69:df:ab:45:d1:71:4b:23:f9: c7:ff:ce:bf:04:c1:99:0e:c9:49:37:07:f6:0a:67:cd:46:5f: 9f:2d:ef:2f:6d:2b:0a:86:24:1d:27:24:0c:1d:2e:e7:0d:ce: 49:7b:6b:9f:68:a8:b4:c3:0b:2f:63:c5:9b:e6:3c:f2:b1:c1: f2:c4:f2:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHl540pDWXPH9xMV/mKbv3gw83zIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFBRTlF M0QxOEQzMTAeFw0yNTEwMTgxMTI1NDdaFw0yNTEwMjExODUxNDdaMDMxMTAvBgNV BAMTKDk2OUE4RDBBNTdCOTlBRTA4ODgyQzNFOUU1ODI2MTFDRURGMjEzRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkouvk3AAotjdP3Vp+l3C6NBpI Aj/2AjoWop5Rhbr+tq/MIRrswoweIQ/7wINbsahdtXHfaKJnLABDvCRHAVlMtfFY PjmStG0DQGm7RM8ofBDNLBuXh4mTyAdlaSDgM7+JAEdBZQXn9lYy5w0XGon0efSf FrYy6SCjiZDDBp8ressP1A2mM048WkninZEL2XuY3Wu7Mjp6W1cCzJlNhjCALDuD JFk0WxeTZptrI2meoE9X537RqyF6h7kGNWvwn60SxzLM45wPVPaoxiPM0Aempf8W rqQJ4etXX4UoQdUs/RDevVmo7X2iB+Ju61dTx1r1WMhE4SY031woQH2K1po3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlpqNCle5muCIgsPp5YJhHO3yE9gwHwYDVR0j BBgwFoAUaizJ08cxSOJl6ZZhkpwa6ePRjTEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjJhOTE2YS1hZDIyLTQ5NzktYmU0My05NTFjNzZmMmY5MjAvMC82QTJDQzlEM0M3 MzE0OEUyNjVFOTk2NjE5MjlDMUFFOUUzRDE4RDMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFBRTlFM0Qx OEQzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2IyYTkxNmEtYWQyMi00OTc5LWJl NDMtOTUxYzc2ZjJmOTIwLzAvNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFB RTlFM0QxOEQzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChhL9bRVK8cYBl9eOKX1LGIoqI9uXl2vd/7 1X2txl7QPeQvRPPFUKvtszN9K3c5a5Y+OKNkZmvWAd4ZbdifQaxG5iW0wmrPgPes xCPnAxrUVpffsAVs+dM1tyElFJxv0KoF+EQCOyYAqSLfXNUPOtwdYIt2bKMw2y18 MQK0Ty26SR+K5xCXGneo6icYLo6jqM93Sa0DMXX90jFxICdQlmblqEDf84mSlXGF eKcOSo43t9bVNl2tgF2yF76a12nfq0XRcUsj+cf/zr8EwZkOyUk3B/YKZ81GX58t 7y9tKwqGJB0nJAwdLucNzkl7a59oqLTDCy9jxZvmPPKxwfLE8n8= -----END CERTIFICATE-----Generated at Mon Oct 20 11:14:49 2025 by rpki-client