$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft File: 6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft (raw, json) Hash identifier: tfoIauHd/UnAmhnCg9POJYVITQ7jwnp1o+n+cB/ZX0o= Subject key identifier: D8:21:27:4C:53:8E:E2:08:AD:8F:D0:A5:49:9F:EC:17:99:7C:6D:0F Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Certificate serial: 05E4EB8ED201930E5E91FFF975F184C5E884F8AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft Manifest number: 05BE Signing time: Mon 20 Oct 2025 16:01:34 +0000 Manifest this update: Mon 20 Oct 2025 15:56:34 +0000 Manifest next update: Thu 23 Oct 2025 23:35:34 +0000 Files and hashes: 1: AS138885.roa (hash: /n3QwdVfZD0QCe9dNF/CT2sxuwEtNa1/FhrwvyPZKsA=) 2: AS135457.roa (hash: Laio/RIOlqnhOFofbIiXLzFmTpeQDF+7GIIdTet4ZB8=) 3: AS137346.roa (hash: PdCcl7m4oX+SJS93oiHUxTuOW/ltjw+gLpTGiEDO7T8=) 4: AS38755.roa (hash: js+OcGH/znL82r1Bq/i751nV9v0ky8Qg2sTbyo8OyDQ=) 5: AS24520.roa (hash: /X2OowKvSum0rz+umcdT3kPQkSHfCFlWzy8KzFiLuzk=) 6: AS38496.roa (hash: hnS3ZSoX0phLGwoHdG0C5h9+644LISrLfUDeK/ON/To=) 7: AS140421.roa (hash: RfoESpxBfC9xRwHZO2fU/8RUGYVevfom5f/XSg00ECU=) 8: 6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl (hash: SbEy9hNaHKZaZaHNaDIPx3XgDnQgprwYmevHGUnr3UE=) 9: AS38768.roa (hash: 1MWEV5tgHs2Zer2TXzzjNIdBv6VOof5lbDzM+kS3Zcs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:e4:eb:8e:d2:01:93:0e:5e:91:ff:f9:75:f1:84:c5:e8:84:f8:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Validity Not Before: Oct 20 15:56:34 2025 GMT Not After : Oct 23 23:35:34 2025 GMT Subject: CN=D821274C538EE208AD8FD0A5499FEC17997C6D0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:44:d8:a6:7a:3f:57:f7:d4:0b:29:e6:79:a2: a3:7c:48:99:86:cd:90:2f:7a:37:4b:32:9e:dd:42: 1a:2b:ac:8c:1c:f8:bf:2a:ba:3d:f1:2c:c2:70:45: 04:b0:04:5e:78:ae:05:aa:0b:b1:94:ac:cb:51:77: 54:d9:ed:f7:80:cb:ec:c0:14:fa:2b:2c:d8:d6:67: ab:d8:67:1a:e8:c0:48:85:fc:74:ec:f6:ed:f7:6a: 1e:08:8c:df:fe:ee:a8:d5:05:23:74:35:6f:89:52: f9:6c:6f:26:e3:0f:df:73:aa:6b:32:a2:dc:4d:d1: a8:64:fb:40:84:4f:18:d4:d3:82:39:e5:49:f2:8a: f6:22:c9:03:ef:da:17:4d:03:6b:f6:5b:09:47:e3: e9:57:8b:4b:bb:cf:71:65:db:45:a5:89:4c:a5:ee: 42:87:12:1b:8e:03:41:f4:72:7a:7e:85:a8:d6:be: 89:7e:ee:22:cc:eb:5c:6b:74:59:0a:1e:5d:27:a8: d2:02:37:6d:c3:3b:ab:3c:fc:50:5d:ae:ba:3a:37: 7b:0b:02:a2:42:2c:7f:92:1c:b8:bd:21:b3:08:01: 2d:11:52:2c:ed:21:7e:0e:91:b0:35:7f:85:a7:c5: d9:a9:27:5e:1c:3f:96:09:b1:24:d7:72:57:d4:a9: 24:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:21:27:4C:53:8E:E2:08:AD:8F:D0:A5:49:9F:EC:17:99:7C:6D:0F X509v3 Authority Key Identifier: keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:16:1a:db:7f:33:97:f5:a9:8e:27:9e:db:e4:bf:2e:46:78: 8a:39:f2:6a:cf:64:bf:86:68:08:c0:bf:99:86:d6:8f:a4:b8: 33:56:39:3a:93:10:40:7b:45:a6:7a:63:c9:dc:ac:95:77:ef: 77:d2:87:e2:e2:6c:3b:04:d1:7b:5b:82:8e:2a:3e:42:4a:e8: 08:85:34:eb:b0:ab:1b:58:f7:89:d0:1a:b3:e2:ba:3f:5f:ff: f6:3e:85:0b:2e:a0:ee:df:51:62:71:b9:7c:16:e5:79:78:87: b7:0c:2b:e0:56:5b:e4:dd:2a:cf:ad:a2:b5:77:6a:4f:0e:11: b9:c2:ee:50:ad:e4:fe:00:77:6f:ce:71:17:2d:a6:ca:2b:b3: 1e:be:93:34:cd:17:a3:5e:77:64:aa:82:70:5d:cb:2a:19:a4: 41:a3:41:47:12:2e:7c:30:59:87:00:5d:57:8a:ea:74:f6:be: b2:b9:f5:97:d6:61:0f:07:f9:77:da:c9:7b:dd:79:d6:bb:a3: 10:b7:5c:b5:2c:d6:d0:52:9e:97:bb:6b:09:6b:2d:b0:ce:c2: 1d:0d:17:5b:d7:fd:94:55:da:9b:e8:38:51:54:8c:78:f4:97: 6d:12:a2:e1:aa:e7:d3:30:ea:56:c9:e1:49:c8:3f:6b:c1:b3: 7e:3f:71:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBeTrjtIBkw5ekf/5dfGExeiE+K0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG OEZDMDZFQzAeFw0yNTEwMjAxNTU2MzRaFw0yNTEwMjMyMzM1MzRaMDMxMTAvBgNV BAMTKEQ4MjEyNzRDNTM4RUUyMDhBRDhGRDBBNTQ5OUZFQzE3OTk3QzZEMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuRNimej9X99QLKeZ5oqN8SJmG zZAvejdLMp7dQhorrIwc+L8quj3xLMJwRQSwBF54rgWqC7GUrMtRd1TZ7feAy+zA FPorLNjWZ6vYZxrowEiF/HTs9u33ah4IjN/+7qjVBSN0NW+JUvlsbybjD99zqmsy otxN0ahk+0CETxjU04I55UnyivYiyQPv2hdNA2v2WwlH4+lXi0u7z3Fl20WliUyl 7kKHEhuOA0H0cnp+hajWvol+7iLM61xrdFkKHl0nqNICN23DO6s8/FBdrro6N3sL AqJCLH+SHLi9IbMIAS0RUiztIX4OkbA1f4WnxdmpJ14cP5YJsSTXclfUqSTJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2CEnTFOO4gitj9ClSZ/sF5l8bQ8wHwYDVR0j BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2 QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD MDZFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTg3MzQ5ZmItNDY1ZS00ZThiLWE5 NzQtOTBlOTM5YmNiMGZiLzAvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZE NTFGOEZDMDZFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALEWGtt/M5f1qY4nntvkvy5GeIo58mrPZL+G aAjAv5mG1o+kuDNWOTqTEEB7RaZ6Y8ncrJV373fSh+LibDsE0Xtbgo4qPkJK6AiF NOuwqxtY94nQGrPiuj9f//Y+hQsuoO7fUWJxuXwW5Xl4h7cMK+BWW+TdKs+torV3 ak8OEbnC7lCt5P4Ad2/OcRctpsorsx6+kzTNF6Ned2SqgnBdyyoZpEGjQUcSLnww WYcAXVeK6nT2vrK59ZfWYQ8H+XfayXvdeda7oxC3XLUs1tBSnpe7awlrLbDOwh0N F1vX/ZRV2pvoOFFUjHj0l20SouGq59Mw6lbJ4UnIP2vBs34/cT8= -----END CERTIFICATE-----Generated at Mon Oct 20 22:46:49 2025 by rpki-client