$ rpki-client -vvf repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft File: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft (raw, json) Hash identifier: 5MGmjC+JdfZ3HaR0/zzwrIK3Pc2iMnCeMemEN3j2wH8= Subject key identifier: BA:9F:0F:7F:2C:EC:1A:7F:8A:5C:92:B9:14:A0:42:38:86:E0:D9:4E Authority key identifier: 6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21 Certificate issuer: /CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121 Certificate serial: 66CCF4BD6942DD79F6E6A11E5E1F1086B60D8998 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft Manifest number: 0521 Signing time: Thu 06 Nov 2025 21:20:52 +0000 Manifest this update: Thu 06 Nov 2025 21:15:52 +0000 Manifest next update: Mon 10 Nov 2025 08:17:52 +0000 Files and hashes: 1: 3130332e35302e32372e302f32342d3234203d3e203633383639.roa (hash: CMxLGqk+5iIxSLstgSUEPMheQZBFi/aQaQ40AR/6xck=) 2: 3130332e35302e32342e302f32342d3234203d3e203633383639.roa (hash: pjDRNdkxVNQAonOH/ajeQNBbErsBzCB65TjYTm/AV04=) 3: 3130332e35302e32362e302f32342d3234203d3e203633383639.roa (hash: XC5DYejk2ouXNggePM7faKlSdJX+qPYu8hQvOlxyDok=) 4: 3130332e35302e32352e302f32342d3234203d3e203633383639.roa (hash: JbxABL76MkkqswIqSBjIy3QFwClw0Z/ylcfelmeq75g=) 5: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl (hash: JARKzKUymbV0iW0d7nTNsSpcWyaL0MzaVaqR41kc5Ik=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:17:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:cc:f4:bd:69:42:dd:79:f6:e6:a1:1e:5e:1f:10:86:b6:0d:89:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121 Validity Not Before: Nov 6 21:15:52 2025 GMT Not After : Nov 10 08:17:52 2025 GMT Subject: CN=BA9F0F7F2CEC1A7F8A5C92B914A0423886E0D94E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6f:56:b2:db:74:50:fe:85:69:42:8e:a9:a4: 56:8d:23:d0:6d:ec:0a:bf:27:99:55:30:fb:a5:40: ee:7f:13:a2:86:de:82:83:56:5f:be:26:e2:4e:a7: 79:8d:65:35:12:33:17:53:01:94:d7:27:58:d4:95: 2c:a5:0c:a0:25:72:9a:79:ac:89:bb:e9:fc:57:5e: 30:b8:2d:83:bf:de:c0:0d:a6:40:45:17:b8:ab:57: 6a:c3:6a:f4:14:35:cb:2e:8c:7b:8c:7a:b7:b6:fb: bd:f0:07:75:5a:56:91:03:ff:2a:19:a6:5a:36:55: 94:32:f6:01:72:15:83:1a:2e:0a:6e:b0:11:06:51: 5d:29:fb:8c:6e:b8:5f:63:11:6c:c5:ac:fe:e6:42: 0b:fd:09:04:96:a3:ed:c9:39:de:dd:2b:7b:c5:58: b5:47:0a:eb:c8:7a:a0:0c:2c:8c:2f:36:e8:4b:d4: 50:be:00:56:48:66:ac:fb:c2:d0:bc:8d:39:97:8e: 19:16:4c:61:06:34:ce:7a:8e:19:79:27:76:03:46: c2:d5:c4:c6:e8:e3:34:5f:bb:8b:e2:f9:b3:f9:4f: 77:ea:c8:36:6b:16:cb:bc:cc:c6:0f:a0:46:09:e6: 07:64:01:7d:30:1e:3d:9b:ff:fa:97:62:02:5f:b6: 80:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9F:0F:7F:2C:EC:1A:7F:8A:5C:92:B9:14:A0:42:38:86:E0:D9:4E X509v3 Authority Key Identifier: keyid:6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:fd:83:a9:41:df:6a:46:18:d2:13:33:d2:ba:6c:fa:54:b9: 89:63:d7:ee:09:3e:a4:2d:ff:67:79:b0:1c:9c:a7:87:dc:7d: fc:24:8e:64:39:dc:83:a1:fd:c3:b3:60:5c:03:c9:c7:f6:b6: 48:c9:f2:79:8d:40:fa:9a:16:2e:33:ea:20:70:25:fb:b3:74: 6a:8e:55:b7:03:b2:42:6e:05:8a:49:ed:f4:68:a5:2b:ac:13: 3f:9c:b0:ff:4f:00:a6:57:c9:50:44:b7:9a:6c:3d:99:72:18: a8:cd:0d:6d:b3:e1:c5:ba:86:6b:b9:b5:88:30:d3:da:04:68: 3f:81:cf:7b:51:49:f7:be:e9:a5:16:9c:74:8a:ba:81:1c:70: 4a:28:65:fa:a4:73:73:ef:71:53:aa:c6:50:07:3f:31:78:65: 92:e2:46:86:44:13:24:89:d6:f4:8b:a7:0a:63:dc:18:c0:1a: c8:15:51:36:c4:17:bb:ed:7a:ee:fb:7e:8d:64:74:9c:3a:9f: d3:c5:e1:ba:2b:95:c0:2a:09:ba:03:7d:5c:70:ed:c9:52:94: ff:d0:3e:9f:31:96:3d:14:86:d2:bf:cb:48:ba:41:3f:c2:4c: cb:bc:e9:15:43:ff:ce:18:b5:9f:c0:16:d6:13:fd:ad:d6:36: ab:61:d3:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZsz0vWlC3Xn25qEeXh8QhrYNiZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3 MUQyRDEyMTAeFw0yNTExMDYyMTE1NTJaFw0yNTExMTAwODE3NTJaMDMxMTAvBgNV BAMTKEJBOUYwRjdGMkNFQzFBN0Y4QTVDOTJCOTE0QTA0MjM4ODZFMEQ5NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2b1ay23RQ/oVpQo6ppFaNI9Bt 7Aq/J5lVMPulQO5/E6KG3oKDVl++JuJOp3mNZTUSMxdTAZTXJ1jUlSylDKAlcpp5 rIm76fxXXjC4LYO/3sANpkBFF7irV2rDavQUNcsujHuMere2+73wB3VaVpED/yoZ plo2VZQy9gFyFYMaLgpusBEGUV0p+4xuuF9jEWzFrP7mQgv9CQSWo+3JOd7dK3vF WLVHCuvIeqAMLIwvNuhL1FC+AFZIZqz7wtC8jTmXjhkWTGEGNM56jhl5J3YDRsLV xMbo4zRfu4vi+bP5T3fqyDZrFsu8zMYPoEYJ5gdkAX0wHj2b//qXYgJftoC/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUup8PfyzsGn+KXJK5FKBCOIbg2U4wHwYDVR0j BBgwFoAUbBWXYHoMPqw+MM9I/zG6/XHS0SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzY2ODU0MS1kNmM2LTQwOWUtOGFkMS01ZTg5YTRiMjg1MGUvMC82QzE1OTc2MDdB MEMzRUFDM0UzMENGNDhGRjMxQkFGRDcxRDJEMTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3MUQy RDEyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc2Njg1NDEtZDZjNi00MDllLThh ZDEtNWU4OWE0YjI4NTBlLzAvNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJB RkQ3MUQyRDEyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACT9g6lB32pGGNITM9K6bPpUuYlj1+4JPqQt /2d5sBycp4fcffwkjmQ53IOh/cOzYFwDycf2tkjJ8nmNQPqaFi4z6iBwJfuzdGqO VbcDskJuBYpJ7fRopSusEz+csP9PAKZXyVBEt5psPZlyGKjNDW2z4cW6hmu5tYgw 09oEaD+Bz3tRSfe+6aUWnHSKuoEccEooZfqkc3PvcVOqxlAHPzF4ZZLiRoZEEySJ 1vSLpwpj3BjAGsgVUTbEF7vteu77fo1kdJw6n9PF4borlcAqCboDfVxw7clSlP/Q Pp8xlj0UhtK/y0i6QT/CTMu86RVD/84YtZ/AFtYT/a3WNqth01s= -----END CERTIFICATE-----Generated at Sat Nov 8 20:23:57 2025 by rpki-client