$ rpki-client -vvf repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft File: 6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft (raw, json) Hash identifier: U1f0r300F2/fLahT2Z++bg1Z4OvLS9aBD7kokQLYLj4= Subject key identifier: 93:AE:4D:32:D5:9C:C8:DD:45:AC:5B:DE:4D:3A:06:21:32:FD:2E:53 Authority key identifier: 6C:F6:DF:7E:65:16:A6:AB:F5:39:F0:39:6C:B6:C0:D4:DB:50:F4:D8 Certificate issuer: /CN=6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8 Certificate serial: 392AF923985003325FC0211757D29F9520B07128 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft Manifest number: 0211 Signing time: Sun 19 Oct 2025 17:51:52 +0000 Manifest this update: Sun 19 Oct 2025 17:46:52 +0000 Manifest next update: Thu 23 Oct 2025 03:47:52 +0000 Files and hashes: 1: 3130332e3139312e3134382e302f32332d3234203d3e2034383030.roa (hash: LB25lzl1k2b8wSXRCoswASZkgaqBVFdROFOv1MVYW7s=) 2: 6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl (hash: 2z8rKqbbgWspY0JgHMU5UmrfPS7aIDrC2qpfs5Nbc/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:2a:f9:23:98:50:03:32:5f:c0:21:17:57:d2:9f:95:20:b0:71:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8 Validity Not Before: Oct 19 17:46:52 2025 GMT Not After : Oct 23 03:47:52 2025 GMT Subject: CN=93AE4D32D59CC8DD45AC5BDE4D3A062132FD2E53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:76:ae:5c:2e:9d:67:f5:80:73:71:45:96:1b: 7b:43:7e:49:fe:f3:83:07:28:47:ca:de:23:2a:72: e9:a4:db:b1:89:f1:43:00:11:a6:2c:32:19:91:a6: 04:00:35:31:90:bf:9e:76:00:6a:48:be:77:2a:66: 64:0b:5f:ae:f3:12:24:05:cc:a8:95:16:49:19:61: c6:46:c6:c8:49:2a:05:60:6a:07:4e:ac:e6:ad:8d: 8b:7c:bc:dd:09:68:a2:53:71:ff:9f:53:b6:55:75: cc:59:0c:5c:31:0c:d3:01:1d:90:e5:e8:23:39:fe: cb:99:d5:5b:3c:fd:b0:59:3d:c0:7f:bd:cd:aa:ed: e3:d0:c0:85:89:8b:06:b5:c0:a7:c2:bf:24:9b:e0: e2:5f:42:e8:1a:f5:c8:98:12:8b:0d:2a:7e:52:1c: f6:70:63:5e:c2:d3:c7:db:79:20:22:ab:11:9d:99: 81:69:0c:dd:28:64:3f:d4:29:a0:65:aa:ae:9c:6e: 66:7a:a8:a0:c2:c7:a8:67:a8:6a:22:2c:79:1d:5b: c8:ef:7a:31:5d:ac:ee:bb:3b:cd:bf:69:43:5e:00: b7:05:09:69:1f:f9:d7:b3:fb:7d:b7:21:81:c5:ea: da:a7:47:41:68:0e:93:82:d9:39:75:38:ac:cc:b6: 59:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:AE:4D:32:D5:9C:C8:DD:45:AC:5B:DE:4D:3A:06:21:32:FD:2E:53 X509v3 Authority Key Identifier: keyid:6C:F6:DF:7E:65:16:A6:AB:F5:39:F0:39:6C:B6:C0:D4:DB:50:F4:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:3a:62:f8:37:03:dd:09:48:49:35:28:3e:88:95:6f:04:ac: b4:1d:fc:01:fb:8c:68:c7:c9:c8:39:84:90:54:dc:0d:76:1c: bf:73:27:ef:d5:b4:f9:e7:e5:e2:e8:bd:31:a8:a7:55:93:d5: c9:8c:f2:d3:67:2b:2e:f8:a4:cb:06:10:1f:0f:27:26:66:fa: ff:3c:a3:b3:16:7a:00:86:32:90:e4:2c:d7:81:32:a6:00:7d: 72:a5:fa:d9:7c:b3:80:24:9f:30:e5:28:a9:f9:ea:5c:80:f0: e1:d4:6d:c9:62:d2:a2:b7:40:12:35:17:36:b7:5c:86:2b:32: 4e:c0:8a:86:5e:89:5d:d9:56:5a:61:52:4b:a0:51:5c:7d:d8: b0:d5:ba:4c:bf:e7:15:52:07:95:7f:ae:a4:7e:ac:eb:44:7c: 41:67:c8:90:c4:18:3c:f3:72:18:6d:17:9b:c7:2f:05:95:61: ee:68:5c:a0:be:7a:04:7d:5a:80:9c:a7:a4:09:25:9f:ab:99: cf:be:02:b7:8f:a8:87:e5:e4:ce:e9:aa:4c:da:07:62:5f:d6: d6:98:b6:26:0c:45:cd:f8:21:b9:4f:44:04:ca:3a:31:64:eb: 02:a8:b1:b9:3a:59:a7:80:b4:5b:ec:cc:0f:e1:a1:74:c4:7c: a0:1d:6f:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOSr5I5hQAzJfwCEXV9KflSCwcSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMwRDRE QjUwRjREODAeFw0yNTEwMTkxNzQ2NTJaFw0yNTEwMjMwMzQ3NTJaMDMxMTAvBgNV BAMTKDkzQUU0RDMyRDU5Q0M4REQ0NUFDNUJERTREM0EwNjIxMzJGRDJFNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEdq5cLp1n9YBzcUWWG3tDfkn+ 84MHKEfK3iMqcumk27GJ8UMAEaYsMhmRpgQANTGQv552AGpIvncqZmQLX67zEiQF zKiVFkkZYcZGxshJKgVgagdOrOatjYt8vN0JaKJTcf+fU7ZVdcxZDFwxDNMBHZDl 6CM5/suZ1Vs8/bBZPcB/vc2q7ePQwIWJiwa1wKfCvySb4OJfQuga9ciYEosNKn5S HPZwY17C08fbeSAiqxGdmYFpDN0oZD/UKaBlqq6cbmZ6qKDCx6hnqGoiLHkdW8jv ejFdrO67O82/aUNeALcFCWkf+dez+323IYHF6tqnR0FoDpOC2Tl1OKzMtln1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk65NMtWcyN1FrFveTToGITL9LlMwHwYDVR0j BBgwFoAUbPbffmUWpqv1OfA5bLbA1NtQ9NgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDkwNmZjMC00MzYzLTRmNDYtOWIxNC01YzFhYjgyNWEzMzUvMC82Q0Y2REY3RTY1 MTZBNkFCRjUzOUYwMzk2Q0I2QzBENERCNTBGNEQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMwRDREQjUw RjREOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ5MDZmYzAtNDM2My00ZjQ2LTli MTQtNWMxYWI4MjVhMzM1LzAvNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMw RDREQjUwRjREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJc6Yvg3A90JSEk1KD6IlW8ErLQd/AH7jGjH ycg5hJBU3A12HL9zJ+/VtPnn5eLovTGop1WT1cmM8tNnKy74pMsGEB8PJyZm+v88 o7MWegCGMpDkLNeBMqYAfXKl+tl8s4AknzDlKKn56lyA8OHUbcli0qK3QBI1Fza3 XIYrMk7AioZeiV3ZVlphUkugUVx92LDVuky/5xVSB5V/rqR+rOtEfEFnyJDEGDzz chhtF5vHLwWVYe5oXKC+egR9WoCcp6QJJZ+rmc++ArePqIfl5M7pqkzaB2Jf1taY tiYMRc34IblPRATKOjFk6wKosbk6WaeAtFvszA/hoXTEfKAdb2Q= -----END CERTIFICATE-----Generated at Mon Oct 20 18:42:35 2025 by rpki-client