$ rpki-client -vvf repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft File: 6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft (raw, json) Hash identifier: cjwrb5vBrEBvKefhVrrQuvdNovua6B7oYDuHPS9Ul9U= Subject key identifier: 3C:65:34:AB:39:FE:04:79:FC:2B:4E:DE:F0:5C:B9:96:A8:CB:3D:D3 Authority key identifier: 6C:F6:DF:7E:65:16:A6:AB:F5:39:F0:39:6C:B6:C0:D4:DB:50:F4:D8 Certificate issuer: /CN=6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8 Certificate serial: 3EB00450432C2B763F62ED80FB193B19AD63358A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft Manifest number: 021D Signing time: Sun 16 Nov 2025 07:01:57 +0000 Manifest this update: Sun 16 Nov 2025 06:56:57 +0000 Manifest next update: Wed 19 Nov 2025 10:32:57 +0000 Files and hashes: 1: 6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl (hash: Z2PH6QmM6jCuQsn0sxqxt6sl4zA1hZ0SFLlIh2MDo/s=) 2: 3130332e3139312e3134382e302f32332d3234203d3e2034383030.roa (hash: LB25lzl1k2b8wSXRCoswASZkgaqBVFdROFOv1MVYW7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Nov 2025 10:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:b0:04:50:43:2c:2b:76:3f:62:ed:80:fb:19:3b:19:ad:63:35:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8 Validity Not Before: Nov 16 06:56:57 2025 GMT Not After : Nov 19 10:32:57 2025 GMT Subject: CN=3C6534AB39FE0479FC2B4EDEF05CB996A8CB3DD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4f:93:80:09:a3:6b:1e:9f:c5:7d:fd:e5:a7: 03:38:d5:b1:06:81:d6:98:54:74:ee:b6:c0:e0:a3: a7:b3:ca:f9:69:e2:cf:94:1c:e3:e8:2b:83:1f:4e: b3:f8:91:14:f5:4f:42:e8:ed:eb:2c:27:b0:dc:bf: cc:89:10:ec:76:7b:b0:d8:7f:84:98:55:34:97:47: 5b:c2:e4:f8:68:75:1b:67:c5:b7:fc:88:c5:81:43: a5:61:73:30:cd:9f:ae:ec:d5:2a:78:da:dd:37:a7: a3:25:07:c2:c5:83:f0:a6:25:e7:7a:8f:c0:6d:b7: 2a:67:99:76:19:e0:cf:d1:5d:1f:58:4f:89:e7:37: cd:7c:f6:00:61:64:f9:27:51:36:48:be:96:d1:fc: 3d:c8:a1:dd:e6:f1:4f:5d:0e:ac:1a:7a:b5:19:cc: 5f:35:14:bc:c7:ea:6a:e3:e8:97:54:f4:bf:68:bb: 17:1f:b6:26:9c:c1:5f:42:e4:ab:a1:c8:93:60:d5: 8f:63:d4:07:19:aa:a7:2a:b1:33:8c:35:52:27:1e: dc:43:db:05:7c:9a:63:44:ec:84:89:e1:e8:e8:30: c6:0b:34:e6:be:04:7c:21:79:54:50:21:c9:9b:24: 40:53:65:9b:96:df:7a:5e:4b:a6:4a:8d:15:b4:9f: 0e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:65:34:AB:39:FE:04:79:FC:2B:4E:DE:F0:5C:B9:96:A8:CB:3D:D3 X509v3 Authority Key Identifier: keyid:6C:F6:DF:7E:65:16:A6:AB:F5:39:F0:39:6C:B6:C0:D4:DB:50:F4:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:fc:76:5b:a8:05:a8:1f:aa:33:c8:5d:dd:ab:f8:f8:3b:cf: 70:03:9a:00:52:50:e7:ae:74:1d:fa:37:7a:75:aa:bf:a5:43: 32:e6:88:c0:5e:e8:38:d5:b4:56:96:48:ac:93:4f:79:47:8f: c0:c0:fe:dd:bd:ae:12:b4:8f:38:b6:7f:bd:65:b1:25:e8:f1: 7e:2b:26:53:4f:6a:dc:d4:17:4a:41:b8:fa:9f:77:54:48:b1: f2:cb:92:f3:35:36:31:95:1a:43:11:d9:a9:00:91:c6:f3:80: 89:e6:4a:26:fc:01:d4:1f:08:f4:70:c4:a5:b8:8c:a6:7c:c6: cf:64:41:fe:91:c2:b4:e6:d8:83:ee:77:ff:01:82:e5:43:63: db:11:7c:b4:42:54:b1:cf:31:cb:49:e5:b6:11:6c:dc:55:97: db:1d:4e:e2:73:15:a8:0f:48:d4:55:24:32:04:7d:bc:83:5a: b8:fd:7d:24:af:b4:ca:78:29:0c:0a:7d:7e:a9:d9:c5:31:4e: 02:67:36:e1:ff:24:09:17:d7:d7:de:9c:19:d5:c1:4e:59:73: c9:5d:28:75:c3:c9:99:86:54:38:fb:d5:53:fc:6a:86:68:88: 62:8b:b4:08:72:91:75:d0:a7:b1:12:e2:86:b2:3b:55:d5:2b: ef:cb:db:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPrAEUEMsK3Y/Yu2A+xk7Ga1jNYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMwRDRE QjUwRjREODAeFw0yNTExMTYwNjU2NTdaFw0yNTExMTkxMDMyNTdaMDMxMTAvBgNV BAMTKDNDNjUzNEFCMzlGRTA0NzlGQzJCNEVERUYwNUNCOTk2QThDQjNERDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNT5OACaNrHp/Fff3lpwM41bEG gdaYVHTutsDgo6ezyvlp4s+UHOPoK4MfTrP4kRT1T0Lo7essJ7Dcv8yJEOx2e7DY f4SYVTSXR1vC5PhodRtnxbf8iMWBQ6VhczDNn67s1Sp42t03p6MlB8LFg/CmJed6 j8BttypnmXYZ4M/RXR9YT4nnN8189gBhZPknUTZIvpbR/D3Iod3m8U9dDqwaerUZ zF81FLzH6mrj6JdU9L9ouxcftiacwV9C5KuhyJNg1Y9j1AcZqqcqsTOMNVInHtxD 2wV8mmNE7ISJ4ejoMMYLNOa+BHwheVRQIcmbJEBTZZuW33peS6ZKjRW0nw6RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPGU0qzn+BHn8K07e8Fy5lqjLPdMwHwYDVR0j BBgwFoAUbPbffmUWpqv1OfA5bLbA1NtQ9NgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDkwNmZjMC00MzYzLTRmNDYtOWIxNC01YzFhYjgyNWEzMzUvMC82Q0Y2REY3RTY1 MTZBNkFCRjUzOUYwMzk2Q0I2QzBENERCNTBGNEQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMwRDREQjUw RjREOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ5MDZmYzAtNDM2My00ZjQ2LTli MTQtNWMxYWI4MjVhMzM1LzAvNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMw RDREQjUwRjREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/8dluoBagfqjPIXd2r+Pg7z3ADmgBSUOeu dB36N3p1qr+lQzLmiMBe6DjVtFaWSKyTT3lHj8DA/t29rhK0jzi2f71lsSXo8X4r JlNPatzUF0pBuPqfd1RIsfLLkvM1NjGVGkMR2akAkcbzgInmSib8AdQfCPRwxKW4 jKZ8xs9kQf6RwrTm2IPud/8BguVDY9sRfLRCVLHPMctJ5bYRbNxVl9sdTuJzFagP SNRVJDIEfbyDWrj9fSSvtMp4KQwKfX6p2cUxTgJnNuH/JAkX19fenBnVwU5Zc8ld KHXDyZmGVDj71VP8aoZoiGKLtAhykXXQp7ES4oayO1XVK+/L22s= -----END CERTIFICATE-----Generated at Mon Nov 17 18:53:01 2025 by rpki-client