$ rpki-client -vvf repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft File: 6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft (raw, json) Hash identifier: Zm52dwiEBDch+9NhDxcJDYwemt3vAF+VQhDcjfSYnO0= Subject key identifier: F0:E0:54:36:FF:A7:5C:07:0E:5B:3C:51:A1:1C:38:80:F4:27:99:17 Authority key identifier: 6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 Certificate issuer: /CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Certificate serial: 58D3DE929444450E330F4F19FB6641C253D86549 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft Manifest number: 0374 Signing time: Fri 31 Oct 2025 12:21:32 +0000 Manifest this update: Fri 31 Oct 2025 12:16:32 +0000 Manifest next update: Mon 03 Nov 2025 20:52:32 +0000 Files and hashes: 1: 3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa (hash: QReThr3L/8y8L/3AEdob8H7epOdOKEjss3T3HzyvfMI=) 2: 3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa (hash: lkrHej4FZPJ4f2E40DosArf8hhkwpkjiPyYFXEzD3uU=) 3: 6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl (hash: Up5y2W1hWZj3EmBd7wNa1Zm9o95P38JR4nP4Z9mpu+4=) 4: 3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa (hash: G1U9gODI47ty2yrLIvmBDS+xG1WkgDbqidFt5qR0lew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 20:52:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:d3:de:92:94:44:45:0e:33:0f:4f:19:fb:66:41:c2:53:d8:65:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Validity Not Before: Oct 31 12:16:32 2025 GMT Not After : Nov 3 20:52:32 2025 GMT Subject: CN=F0E05436FFA75C070E5B3C51A11C3880F4279917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5c:e1:cc:45:0a:46:58:49:40:5d:56:58:f7: e6:ff:01:65:dd:b9:b7:fc:b8:c2:13:5e:66:e3:ed: da:7f:40:f0:8e:0c:94:fd:c0:b3:a3:a5:2d:e7:d8: 6a:b8:3f:25:84:17:78:4e:bf:90:a3:58:bf:d3:6d: e5:c5:a8:c3:01:6b:ef:8e:5e:a9:40:ac:56:a6:5a: fc:cd:fb:26:af:d1:1a:a9:c6:11:90:8e:fb:82:1b: e4:89:9d:11:eb:27:2f:24:b7:17:60:de:11:f1:84: 07:e2:d9:e9:f0:da:1a:14:9d:ba:09:c5:f3:93:21: f5:11:4b:1a:4a:59:ee:58:f0:f1:b6:16:d8:1f:16: e6:0c:c2:b3:4c:15:b1:00:d7:3f:1e:77:a8:cb:94: 14:f8:aa:e9:c1:5b:86:9e:36:6e:90:93:96:c5:b6: 00:f1:6b:8d:29:34:fc:ff:c4:a0:d8:e2:b1:c3:1a: b0:c0:9c:a9:ef:32:24:0e:ed:85:9b:aa:f0:04:84: a2:66:b5:ed:d1:09:a6:28:2a:69:62:95:d2:a7:55: 8f:0c:f0:d1:03:40:65:2f:d1:92:36:da:22:48:93: fd:f5:f2:0b:11:b7:da:24:f2:f2:dc:b3:e9:d6:14: 6f:bd:21:74:de:53:f3:c2:f9:0b:c7:42:02:e4:3b: 9c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E0:54:36:FF:A7:5C:07:0E:5B:3C:51:A1:1C:38:80:F4:27:99:17 X509v3 Authority Key Identifier: keyid:6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:62:5b:18:92:c9:99:01:5f:73:4b:db:54:11:96:15:de:fc: d2:c5:2e:62:43:ff:6b:87:f5:ce:d3:de:6f:68:e4:64:51:f0: 35:fb:b9:30:a8:c3:42:18:5c:41:f4:7d:68:22:09:d9:76:77: 05:4d:56:de:b5:1c:5a:44:e2:5d:ec:fe:99:28:f7:bf:d5:8c: 16:63:11:c0:5c:b6:ad:cd:a4:69:3f:58:9e:ec:bf:cf:45:a2: a3:fb:76:e9:05:4b:fb:5e:4c:d6:f0:24:22:64:77:99:4d:36: 52:61:5e:5d:39:fb:f3:72:87:80:64:6e:a9:46:88:7c:70:c1: 0c:9f:a1:ca:dd:9a:c7:9b:3a:11:c5:45:9a:93:7c:11:5c:81: 9a:ec:fe:04:30:42:e3:9b:1b:8f:56:b3:4d:b8:97:30:e4:0f: 6f:96:83:d1:e2:d4:10:00:54:22:b2:df:c2:0d:2b:a9:26:cd: 81:de:39:8d:d5:9a:41:45:3f:d6:7f:58:df:91:1d:c9:a1:df: 81:19:c9:1d:c8:40:59:30:b4:07:34:5d:03:2c:59:7c:92:31: 32:5c:6e:47:cd:72:e6:6c:f9:c6:8d:26:39:a0:fb:1b:25:8b: 3f:b2:8e:dd:c6:4c:51:66:9a:e6:64:86:f1:ab:01:45:e9:6e: 8c:e5:52:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWNPekpRERQ4zD08Z+2ZBwlPYZUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlD MEYyRTNGNzAeFw0yNTEwMzExMjE2MzJaFw0yNTExMDMyMDUyMzJaMDMxMTAvBgNV BAMTKEYwRTA1NDM2RkZBNzVDMDcwRTVCM0M1MUExMUMzODgwRjQyNzk5MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbXOHMRQpGWElAXVZY9+b/AWXd ubf8uMITXmbj7dp/QPCODJT9wLOjpS3n2Gq4PyWEF3hOv5CjWL/TbeXFqMMBa++O XqlArFamWvzN+yav0RqpxhGQjvuCG+SJnRHrJy8ktxdg3hHxhAfi2enw2hoUnboJ xfOTIfURSxpKWe5Y8PG2FtgfFuYMwrNMFbEA1z8ed6jLlBT4qunBW4aeNm6Qk5bF tgDxa40pNPz/xKDY4rHDGrDAnKnvMiQO7YWbqvAEhKJmte3RCaYoKmlildKnVY8M 8NEDQGUv0ZI22iJIk/318gsRt9ok8vLcs+nWFG+9IXTeU/PC+QvHQgLkO5zlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8OBUNv+nXAcOWzxRoRw4gPQnmRcwHwYDVR0j BBgwFoAUagLcEPQfzg60l5jdvPMfycDy4/cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTQ2YmRhZC1mMTMwLTQ4YTktODUzNC01NGJhM2U4ZWQ2MWYvMC82QTAyREMxMEY0 MUZDRTBFQjQ5Nzk4RERCQ0YzMUZDOUMwRjJFM0Y3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlDMEYy RTNGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE0NmJkYWQtZjEzMC00OGE5LTg1 MzQtNTRiYTNlOGVkNjFmLzAvNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFG QzlDMEYyRTNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZiWxiSyZkBX3NL21QRlhXe/NLFLmJD/2uH 9c7T3m9o5GRR8DX7uTCow0IYXEH0fWgiCdl2dwVNVt61HFpE4l3s/pko97/VjBZj EcBctq3NpGk/WJ7sv89FoqP7dukFS/teTNbwJCJkd5lNNlJhXl05+/Nyh4BkbqlG iHxwwQyfocrdmsebOhHFRZqTfBFcgZrs/gQwQuObG49Ws024lzDkD2+Wg9Hi1BAA VCKy38INK6kmzYHeOY3VmkFFP9Z/WN+RHcmh34EZyR3IQFkwtAc0XQMsWXySMTJc bkfNcuZs+caNJjmg+xsliz+yjt3GTFFmmuZkhvGrAUXpbozlUlY= -----END CERTIFICATE-----Generated at Sun Nov 2 04:56:45 2025 by rpki-client