$ rpki-client -vvf repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft File: 6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft (raw, json) Hash identifier: orChW1QN4gnzKBMgLEAEWjYDvzByMUs9wi01I7EAd6U= Subject key identifier: 24:DD:7A:DF:BA:B3:36:E0:D3:18:16:18:D0:DE:85:67:67:7A:C5:D4 Authority key identifier: 6C:FA:BB:BC:88:D3:9C:7F:78:09:5D:A7:D3:D3:5D:D3:AA:2E:95:67 Certificate issuer: /CN=6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567 Certificate serial: 5FA5C5973B96B10AB1F8E5D547B80C2F3C5BE497 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft Manifest number: 02FD Signing time: Fri 31 Oct 2025 10:11:09 +0000 Manifest this update: Fri 31 Oct 2025 10:06:09 +0000 Manifest next update: Mon 03 Nov 2025 12:15:09 +0000 Files and hashes: 1: 6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.crl (hash: Lrd5HRZ8JHMYuVMz3fZ8D43LDiVvmMRTSRE2UbPiYl4=) 2: 3130332e3137352e3135382e302f32332d3234203d3e20313331313131.roa (hash: KlJ7xe9jxJPv2ghljBXv+XqaG+xdsmEYctXqZgRhERI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.crl rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 12:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:a5:c5:97:3b:96:b1:0a:b1:f8:e5:d5:47:b8:0c:2f:3c:5b:e4:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567 Validity Not Before: Oct 31 10:06:09 2025 GMT Not After : Nov 3 12:15:09 2025 GMT Subject: CN=24DD7ADFBAB336E0D3181618D0DE8567677AC5D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:92:99:cf:4c:dc:f7:fc:70:a7:19:94:99:15: e5:49:a5:3c:74:bd:15:8a:a6:92:1d:87:ed:38:a1: 64:ed:c6:d0:8a:2f:f9:6b:99:34:6e:74:78:b1:db: 9d:96:61:97:ac:95:25:b4:5b:bf:d4:38:7d:a5:04: 74:f7:67:19:c2:28:2d:19:33:db:b4:70:2e:00:27: b5:43:21:5b:3d:c3:60:ba:f6:c9:ba:4f:7d:8f:36: 25:66:8d:a1:8c:4b:0e:f2:d1:8b:9a:6d:1b:87:d4: 6b:07:87:16:ad:87:06:c6:21:74:00:f4:65:c5:a8: 75:6f:b1:e0:2d:b5:84:cd:c4:53:14:60:e8:e0:64: 43:c8:dd:c4:36:ec:ad:27:90:7c:30:9d:61:63:01: 36:c1:b5:b1:49:6f:89:99:fd:de:07:a2:fa:29:6d: 35:80:66:f1:31:c2:bc:87:2e:bf:da:51:d5:bf:7e: eb:da:2d:e0:82:55:3a:5b:5c:13:bf:9c:36:10:6e: 79:ed:05:68:56:0b:a8:e8:90:ec:9a:5c:0b:e5:8d: 85:07:db:c0:db:79:cc:d1:ea:a4:84:72:d1:23:bc: 1c:c2:1b:0e:cc:6e:b5:cc:56:56:e6:4d:20:e3:d7: 7b:a7:3e:b8:9f:c2:8d:4b:3d:2b:97:a1:9d:37:23: ad:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DD:7A:DF:BA:B3:36:E0:D3:18:16:18:D0:DE:85:67:67:7A:C5:D4 X509v3 Authority Key Identifier: keyid:6C:FA:BB:BC:88:D3:9C:7F:78:09:5D:A7:D3:D3:5D:D3:AA:2E:95:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:d4:1a:59:87:59:66:46:79:45:f7:53:45:64:17:ed:49:9d: 4b:1e:ea:ce:7e:52:ad:5e:e4:e6:41:b7:8b:53:d3:c3:41:1d: f5:c0:54:e6:b3:01:2c:15:a3:89:6c:dc:78:03:e0:87:c6:7b: 5d:7e:33:43:d2:81:59:36:b4:b4:65:6f:23:c3:df:54:b6:6c: 5a:20:07:5d:df:7c:8f:e5:7d:3a:d0:31:0c:ca:b5:dc:42:7f: 2a:99:b1:a6:15:33:16:2b:d0:9c:12:c3:ee:04:bf:94:27:e9: 7f:ce:ee:79:ca:09:03:d4:cb:ea:8b:ca:17:50:75:1c:41:e5: 6c:c0:ad:70:89:c3:1d:b9:38:d8:dc:c6:f8:0a:f7:59:64:20: be:f2:54:9b:49:fe:de:18:0b:9a:6a:2e:bb:c9:1e:8e:fa:a1: ce:68:db:ec:fe:d8:ee:dc:ab:47:5a:a9:93:84:92:20:ff:0c: 76:52:df:30:38:28:71:13:2c:6f:ba:a5:47:e4:5e:a6:ef:b3: b4:51:98:7e:c5:5d:9f:4b:2c:72:63:c1:d4:53:91:a5:ee:ec: 36:79:df:9b:97:f9:28:02:ec:b1:95:1f:0b:fa:41:e4:34:c3: a3:59:68:63:d2:de:b6:2d:bc:1b:b4:d1:39:b6:9f:f2:15:5e: f3:23:31:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX6XFlzuWsQqx+OXVR7gMLzxb5JcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNGQUJCQkM4OEQzOUM3Rjc4MDk1REE3RDNEMzVERDNB QTJFOTU2NzAeFw0yNTEwMzExMDA2MDlaFw0yNTExMDMxMjE1MDlaMDMxMTAvBgNV BAMTKDI0REQ3QURGQkFCMzM2RTBEMzE4MTYxOEQwREU4NTY3Njc3QUM1RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCokpnPTNz3/HCnGZSZFeVJpTx0 vRWKppIdh+04oWTtxtCKL/lrmTRudHix252WYZeslSW0W7/UOH2lBHT3ZxnCKC0Z M9u0cC4AJ7VDIVs9w2C69sm6T32PNiVmjaGMSw7y0YuabRuH1GsHhxathwbGIXQA 9GXFqHVvseAttYTNxFMUYOjgZEPI3cQ27K0nkHwwnWFjATbBtbFJb4mZ/d4Hovop bTWAZvExwryHLr/aUdW/fuvaLeCCVTpbXBO/nDYQbnntBWhWC6jokOyaXAvljYUH 28DbeczR6qSEctEjvBzCGw7MbrXMVlbmTSDj13unPrifwo1LPSuXoZ03I639AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJN1637qzNuDTGBYY0N6FZ2d6xdQwHwYDVR0j BBgwFoAUbPq7vIjTnH94CV2n09Nd06oulWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Mzg3NGNmMy1hZGIxLTQ5NDctYTdlNC1hMmQzMmM1NGVkMWYvMC82Q0ZBQkJCQzg4 RDM5QzdGNzgwOTVEQTdEM0QzNUREM0FBMkU5NTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNGQUJCQkM4OEQzOUM3Rjc4MDk1REE3RDNEMzVERDNBQTJF OTU2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzM4NzRjZjMtYWRiMS00OTQ3LWE3 ZTQtYTJkMzJjNTRlZDFmLzAvNkNGQUJCQkM4OEQzOUM3Rjc4MDk1REE3RDNEMzVE RDNBQTJFOTU2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTUGlmHWWZGeUX3U0VkF+1JnUse6s5+Uq1e 5OZBt4tT08NBHfXAVOazASwVo4ls3HgD4IfGe11+M0PSgVk2tLRlbyPD31S2bFog B13ffI/lfTrQMQzKtdxCfyqZsaYVMxYr0JwSw+4Ev5Qn6X/O7nnKCQPUy+qLyhdQ dRxB5WzArXCJwx25ONjcxvgK91lkIL7yVJtJ/t4YC5pqLrvJHo76oc5o2+z+2O7c q0daqZOEkiD/DHZS3zA4KHETLG+6pUfkXqbvs7RRmH7FXZ9LLHJjwdRTkaXu7DZ5 35uX+SgC7LGVHwv6QeQ0w6NZaGPS3rYtvBu00Tm2n/IVXvMjMWg= -----END CERTIFICATE-----Generated at Sun Nov 2 05:03:12 2025 by rpki-client