$ rpki-client -vvf repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft File: D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft (raw, json) Hash identifier: e2fba0SBelh0e52aleBHQS7x/fXcsN9lQc9HSYGIsr4= Subject key identifier: F6:9C:C9:34:5E:21:BC:75:7F:0A:42:97:EC:E7:7C:C4:BE:3F:62:DF Authority key identifier: D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 Certificate issuer: /CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Certificate serial: 419CFCC794A987B9560FE9B182BD706F494720C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft Manifest number: 02E2 Signing time: Mon 20 Oct 2025 05:10:01 +0000 Manifest this update: Mon 20 Oct 2025 05:05:00 +0000 Manifest next update: Thu 23 Oct 2025 13:50:00 +0000 Files and hashes: 1: D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl (hash: wKfBSckpwv7KQE1acMV20hOWtN+m9H8+bQxomrSTgog=) 2: 3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa (hash: EWRSldncuijDwUH5kmTIxzgLmknYFLpjI5NK+K1R4Fw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:9c:fc:c7:94:a9:87:b9:56:0f:e9:b1:82:bd:70:6f:49:47:20:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Validity Not Before: Oct 20 05:05:00 2025 GMT Not After : Oct 23 13:50:00 2025 GMT Subject: CN=F69CC9345E21BC757F0A4297ECE77CC4BE3F62DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fd:f1:6d:48:b9:54:3d:ff:48:54:2e:d2:3d: d7:6d:2b:81:e6:5a:cc:4d:6b:05:d6:ca:53:41:b0: 03:35:4b:e0:69:f5:0c:76:30:38:b9:51:30:da:41: 03:71:52:05:e0:0b:bb:25:43:20:a4:7d:d8:7b:4c: d6:d9:d2:14:82:d0:7e:a9:65:2d:47:77:ee:b5:82: 06:0e:96:ad:97:96:8d:56:d9:50:65:68:5a:9f:c1: 2d:c6:2c:bc:b7:e7:bf:84:9b:39:ba:fa:1f:7b:c9: 5f:24:5c:d9:fd:82:af:b0:d5:50:56:e0:f1:23:80: 95:45:b3:8f:41:86:15:29:eb:0a:03:1e:10:7a:8f: 35:b0:29:6a:aa:20:9b:0b:35:9a:8b:09:b4:6a:0d: a3:d9:c0:a0:1e:51:e7:b5:97:0f:b8:e0:b2:45:e3: 1e:19:51:55:54:f1:be:9f:1c:2f:c0:4f:96:9c:29: 24:b3:78:b1:0b:00:22:35:08:59:e0:16:c4:28:72: e8:bf:4c:b6:ca:0f:0f:8c:3e:65:46:71:c0:f7:02: 69:bd:e0:cc:41:da:5b:1c:d5:2f:39:ca:85:3f:d4: 90:24:93:f1:d6:1a:c6:f6:8e:92:6c:e8:9e:28:ad: ac:62:7e:9d:cc:db:80:0d:a4:fa:0f:53:ae:d2:8f: 70:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9C:C9:34:5E:21:BC:75:7F:0A:42:97:EC:E7:7C:C4:BE:3F:62:DF X509v3 Authority Key Identifier: keyid:D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:86:01:ac:21:7a:9c:c9:f6:49:0e:b3:5c:dd:92:ab:51:cb: a2:56:14:56:97:97:71:03:40:20:e4:5b:20:77:63:b7:f5:19: 12:53:cd:49:02:48:f4:d7:2a:f7:29:7f:43:87:5e:df:42:5f: 76:75:09:bb:99:22:ee:6f:d0:f5:88:49:23:2e:d7:ca:59:af: cc:65:56:f9:03:d1:29:31:50:d7:bc:01:81:17:69:cf:80:b7: 06:44:bb:3e:2c:86:31:ab:10:62:e2:16:a2:39:f9:bc:0b:74: ea:87:22:ce:cc:c2:f3:d6:21:2f:99:3b:35:5e:75:38:5d:ea: b7:1d:6b:8f:12:d4:98:51:11:de:01:0f:d0:db:60:b3:ae:b4: 98:bd:31:7e:c8:cf:eb:32:18:d9:f9:9c:15:83:c1:2a:85:1d: a0:24:c8:a5:25:21:08:48:37:da:83:d9:57:db:d4:89:f8:c3: 9d:70:44:67:15:f1:fa:14:52:ba:01:55:b1:9f:c6:c8:8a:b3: 47:00:5f:07:a7:2a:8f:17:71:d7:dc:94:68:cb:15:ff:94:51: 31:f5:5b:68:f8:82:69:c3:7c:5e:35:19:5f:ff:73:18:9c:96: 7f:83:a7:68:19:6d:d4:ff:fc:6e:64:95:54:94:ab:17:34:d1: 55:78:0f:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQZz8x5Sph7lWD+mxgr1wb0lHIMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVB M0ZDRUI2NjAeFw0yNTEwMjAwNTA1MDBaFw0yNTEwMjMxMzUwMDBaMDMxMTAvBgNV BAMTKEY2OUNDOTM0NUUyMUJDNzU3RjBBNDI5N0VDRTc3Q0M0QkUzRjYyREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ/fFtSLlUPf9IVC7SPddtK4Hm WsxNawXWylNBsAM1S+Bp9Qx2MDi5UTDaQQNxUgXgC7slQyCkfdh7TNbZ0hSC0H6p ZS1Hd+61ggYOlq2Xlo1W2VBlaFqfwS3GLLy357+Emzm6+h97yV8kXNn9gq+w1VBW 4PEjgJVFs49BhhUp6woDHhB6jzWwKWqqIJsLNZqLCbRqDaPZwKAeUee1lw+44LJF 4x4ZUVVU8b6fHC/AT5acKSSzeLELACI1CFngFsQocui/TLbKDw+MPmVGccD3Amm9 4MxB2lsc1S85yoU/1JAkk/HWGsb2jpJs6J4oraxifp3M24ANpPoPU67Sj3AXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9pzJNF4hvHV/CkKX7Od8xL4/Yt8wHwYDVR0j BBgwFoAU1sHxPGfNAlRd66qEbrKPbqP862YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2EyZTBkYi1lMjkzLTQxYzUtODU4My0zODAxNTc1ODQyMWMvMC9ENkMxRjEzQzY3 Q0QwMjU0NURFQkFBODQ2RUIyOEY2RUEzRkNFQjY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVBM0ZD RUI2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NhMmUwZGItZTI5My00MWM1LTg1 ODMtMzgwMTU3NTg0MjFjLzAvRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhG NkVBM0ZDRUI2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2GAawhepzJ9kkOs1zdkqtRy6JWFFaXl3ED QCDkWyB3Y7f1GRJTzUkCSPTXKvcpf0OHXt9CX3Z1CbuZIu5v0PWISSMu18pZr8xl VvkD0SkxUNe8AYEXac+AtwZEuz4shjGrEGLiFqI5+bwLdOqHIs7MwvPWIS+ZOzVe dThd6rcda48S1JhREd4BD9DbYLOutJi9MX7Iz+syGNn5nBWDwSqFHaAkyKUlIQhI N9qD2Vfb1In4w51wRGcV8foUUroBVbGfxsiKs0cAXwenKo8XcdfclGjLFf+UUTH1 W2j4gmnDfF41GV//cxicln+Dp2gZbdT//G5klVSUqxc00VV4D1s= -----END CERTIFICATE-----Generated at Mon Oct 20 21:30:54 2025 by rpki-client