$ rpki-client -vvf repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft File: 6D958AAEBD8946E47C968284B2652E02A2017E9E.mft (raw, json) Hash identifier: vktfHyVPHNT+oSAwqFCi4WKcWb70qpoRCHCCXnkK3SA= Subject key identifier: 67:21:A8:C1:A7:3E:3A:0C:B0:96:83:5E:A3:D5:22:6A:CA:5F:59:59 Authority key identifier: 6D:95:8A:AE:BD:89:46:E4:7C:96:82:84:B2:65:2E:02:A2:01:7E:9E Certificate issuer: /CN=6D958AAEBD8946E47C968284B2652E02A2017E9E Certificate serial: 3B5769C192BBBEA1DB60FBB04D4CB965DB88B345 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft Manifest number: 01AF Signing time: Sun 19 Oct 2025 23:40:04 +0000 Manifest this update: Sun 19 Oct 2025 23:35:04 +0000 Manifest next update: Thu 23 Oct 2025 09:57:04 +0000 Files and hashes: 1: 3130332e3136372e3135362e302f32342d3234203d3e20313530353534.roa (hash: 80t5eYSm2/YNhAieXcls0z7n1huVJvGeox5Fv2BAMW4=) 2: 6D958AAEBD8946E47C968284B2652E02A2017E9E.crl (hash: DMTX1TUI57aZGZoziEI4t2LtPjVwNNQl071W6rt949Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.crl rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 09:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:57:69:c1:92:bb:be:a1:db:60:fb:b0:4d:4c:b9:65:db:88:b3:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D958AAEBD8946E47C968284B2652E02A2017E9E Validity Not Before: Oct 19 23:35:04 2025 GMT Not After : Oct 23 09:57:04 2025 GMT Subject: CN=6721A8C1A73E3A0CB096835EA3D5226ACA5F5959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a2:f8:bc:80:0f:4b:5b:20:12:8f:16:7b:29: 6a:d9:c0:66:e1:6c:a6:eb:b3:5b:66:f4:50:73:c6: 96:d6:90:69:bc:9e:e8:41:d1:70:53:fc:e2:7e:80: 7e:0d:3d:12:fc:ea:ae:ca:ce:7c:28:8b:c7:c5:43: 13:35:f8:01:4d:33:91:00:80:2f:7e:f1:e1:04:a5: 52:ca:6a:e3:f2:09:20:42:5e:0f:39:ff:b3:16:a3: af:0e:ee:5b:04:7a:73:34:43:62:9e:07:1d:c9:78: e2:ae:5c:ea:be:ea:f7:68:5a:9e:f9:e3:68:54:44: 27:bc:20:6f:79:5a:04:8c:29:05:0f:8c:b4:32:7b: 6c:98:39:0d:59:c7:f7:48:7a:35:1a:3e:67:9e:8b: f3:88:6a:f6:a8:fa:86:10:59:5b:23:c8:5c:4c:67: f8:e4:5b:e2:51:6e:36:ce:fb:18:02:73:43:6f:e4: 82:a3:4e:d5:e7:a2:2c:8c:b5:48:be:ec:db:f0:40: 98:2f:1a:57:f2:18:33:56:90:44:2e:21:d4:98:e3: 95:ee:79:fc:db:07:f4:c8:d2:9e:d4:bf:b9:4a:9a: f0:65:12:dd:ae:56:23:2d:85:3b:95:83:82:30:80: e7:db:78:97:6b:62:71:da:47:95:a3:5a:fc:db:71: 00:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:21:A8:C1:A7:3E:3A:0C:B0:96:83:5E:A3:D5:22:6A:CA:5F:59:59 X509v3 Authority Key Identifier: keyid:6D:95:8A:AE:BD:89:46:E4:7C:96:82:84:B2:65:2E:02:A2:01:7E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:ad:01:68:db:99:ac:93:17:f9:6e:7a:be:98:af:02:b4:cc: 50:fd:ca:e1:28:3a:c2:06:c2:a8:ae:f6:e1:e3:85:84:aa:42: 0f:d1:79:5c:6e:16:d7:72:68:32:95:52:54:ae:74:da:4d:de: bf:e5:b5:aa:c9:9a:33:30:b1:f9:da:0c:7b:2c:ad:2c:ef:52: 43:87:fa:e1:85:fc:8f:6e:c8:a7:7e:1c:aa:f1:9f:02:12:27: 09:5f:7c:b1:ef:63:48:a1:08:8a:1a:b3:4d:45:60:c9:28:35: dd:b7:be:30:4f:13:e6:a6:71:93:cd:d8:e7:12:93:ad:1a:5c: be:86:9b:3a:b3:f8:77:15:82:69:7f:74:21:b1:5d:86:47:73: 62:fb:e4:14:3a:bd:91:bf:dd:36:ec:62:63:cd:4e:a3:45:e5: 29:9b:f1:7c:85:77:49:ee:df:a1:9a:0d:f3:0a:ed:7f:da:aa: 59:ff:6e:22:1b:50:9f:31:82:a6:6b:0f:62:6e:8b:e1:d1:ca: e1:67:14:13:8f:7e:ed:41:74:03:e3:57:60:76:bc:07:d9:9c: 92:fa:db:a1:e0:5c:02:d5:19:7c:fb:65:28:7a:f6:14:54:5f: 6f:fb:2e:49:a7:3c:7c:3a:0e:80:9f:98:33:35:f4:16:02:ed: e5:41:a8:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO1dpwZK7vqHbYPuwTUy5ZduIs0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJFMDJB MjAxN0U5RTAeFw0yNTEwMTkyMzM1MDRaFw0yNTEwMjMwOTU3MDRaMDMxMTAvBgNV BAMTKDY3MjFBOEMxQTczRTNBMENCMDk2ODM1RUEzRDUyMjZBQ0E1RjU5NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLovi8gA9LWyASjxZ7KWrZwGbh bKbrs1tm9FBzxpbWkGm8nuhB0XBT/OJ+gH4NPRL86q7Kznwoi8fFQxM1+AFNM5EA gC9+8eEEpVLKauPyCSBCXg85/7MWo68O7lsEenM0Q2KeBx3JeOKuXOq+6vdoWp75 42hURCe8IG95WgSMKQUPjLQye2yYOQ1Zx/dIejUaPmeei/OIavao+oYQWVsjyFxM Z/jkW+JRbjbO+xgCc0Nv5IKjTtXnoiyMtUi+7NvwQJgvGlfyGDNWkEQuIdSY45Xu efzbB/TI0p7Uv7lKmvBlEt2uViMthTuVg4IwgOfbeJdrYnHaR5WjWvzbcQDpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZyGowac+OgywloNeo9UiaspfWVkwHwYDVR0j BBgwFoAUbZWKrr2JRuR8loKEsmUuAqIBfp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTgwMzEyNS1kNzc3LTQwNTYtODQ0ZC04ZDFiZWZkMDE2M2QvMC82RDk1OEFBRUJE ODk0NkU0N0M5NjgyODRCMjY1MkUwMkEyMDE3RTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJFMDJBMjAx N0U5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE4MDMxMjUtZDc3Ny00MDU2LTg0 NGQtOGQxYmVmZDAxNjNkLzAvNkQ5NThBQUVCRDg5NDZFNDdDOTY4Mjg0QjI2NTJF MDJBMjAxN0U5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJitAWjbmayTF/luer6YrwK0zFD9yuEoOsIG wqiu9uHjhYSqQg/ReVxuFtdyaDKVUlSudNpN3r/ltarJmjMwsfnaDHssrSzvUkOH +uGF/I9uyKd+HKrxnwISJwlffLHvY0ihCIoas01FYMkoNd23vjBPE+amcZPN2OcS k60aXL6Gmzqz+HcVgml/dCGxXYZHc2L75BQ6vZG/3TbsYmPNTqNF5Smb8XyFd0nu 36GaDfMK7X/aqln/biIbUJ8xgqZrD2Jui+HRyuFnFBOPfu1BdAPjV2B2vAfZnJL6 26HgXALVGXz7ZSh69hRUX2/7LkmnPHw6DoCfmDM19BYC7eVBqN4= -----END CERTIFICATE-----Generated at Mon Oct 20 10:14:15 2025 by rpki-client