$ rpki-client -vvf repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft File: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft (raw, json) Hash identifier: Keq+IZ/1mWYwyReWqohqLIks/O7COamVSnvdSbFY3m4= Subject key identifier: 34:5F:E4:00:4D:89:D0:E8:DB:FC:D9:64:45:C5:6E:F6:77:35:3F:80 Authority key identifier: 6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA Certificate issuer: /CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Certificate serial: 04E62B297448092F6BC484C9FD239EE46AB83358 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft Manifest number: 021F Signing time: Wed 29 Oct 2025 07:40:02 +0000 Manifest this update: Wed 29 Oct 2025 07:35:02 +0000 Manifest next update: Sat 01 Nov 2025 09:56:02 +0000 Files and hashes: 1: 3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa (hash: jcYNuwq5tBbtUM+5LFf+gih2lHYu/silWmdWErgVy5M=) 2: 3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa (hash: XLXbrSM75a4OOhdIFSVSWGya3QA7TZER3P7tGhI+wW0=) 3: 6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl (hash: lWp4T1lK+9H6FlugRJdld83hftIFW7r6o4sp/gagwfA=) 4: 3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa (hash: R1C6O4ul1Ppozfaiesg+Uhn8MwDAOfzdAmq+sSEet2w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 09:56:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e6:2b:29:74:48:09:2f:6b:c4:84:c9:fd:23:9e:e4:6a:b8:33:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA Validity Not Before: Oct 29 07:35:02 2025 GMT Not After : Nov 1 09:56:02 2025 GMT Subject: CN=345FE4004D89D0E8DBFCD96445C56EF677353F80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:06:43:5e:5c:32:09:dc:c3:d9:ed:a4:76:53: 74:ac:b8:a8:c0:fd:91:3f:e0:46:91:a8:5a:00:24: 7d:fc:04:b5:4b:5d:f0:e8:c4:b9:49:ab:3f:69:f3: 5a:eb:2c:f6:bc:ec:22:dc:3f:02:85:f9:60:df:b1: 54:a1:34:4c:91:dc:cd:e2:cc:2e:d8:ec:b8:a3:17: 4b:c7:43:de:9e:fb:0e:d8:06:be:53:b9:c7:eb:c7: 1f:63:c7:85:33:63:7a:5d:ce:5f:e0:16:00:27:a9: 64:73:10:47:dd:48:bc:29:e0:65:6e:f6:8a:2f:a7: f2:e2:6e:42:2d:8d:47:e9:44:e7:ce:40:5e:11:9c: 7f:cf:13:2b:6f:b6:0a:01:7d:11:06:16:6a:dd:0e: 30:01:63:e8:49:84:44:cd:a1:40:5c:d6:07:6f:f9: 4e:3e:31:ab:99:55:6b:53:e2:e9:0f:fd:f4:e9:88: 50:1e:2f:2f:15:f5:65:d6:3b:65:47:a8:8e:0a:38: d1:a3:7e:a4:1a:64:d1:c9:01:81:88:b8:e0:92:b4: c1:5b:f9:fd:26:df:80:c9:c7:78:e9:f6:79:3b:0d: ed:cd:c4:6a:9f:c0:9a:6c:8f:9a:fd:a8:b4:e7:97: cf:3b:45:4d:6d:bf:0a:88:c4:27:12:2a:18:df:2b: b8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:5F:E4:00:4D:89:D0:E8:DB:FC:D9:64:45:C5:6E:F6:77:35:3F:80 X509v3 Authority Key Identifier: keyid:6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:a1:e0:55:42:25:54:0e:99:cc:03:9e:19:0c:c4:f5:27:e9: f9:7d:55:a5:83:ae:f5:60:e5:64:b7:14:21:7b:1a:a4:67:90: 60:90:e5:20:2f:2c:1f:fb:95:a6:7f:5b:e8:e8:39:b0:51:cc: a4:7f:23:87:e1:f4:2e:1f:bd:62:85:85:c9:5c:99:48:ff:48: 85:f5:ce:f7:32:63:1b:4b:77:70:2f:aa:01:ac:80:d3:bc:af: 02:13:de:a1:1f:29:39:6a:a8:32:49:34:f3:13:1b:83:06:9f: cf:01:01:cd:75:82:33:dd:ff:ef:09:7f:46:13:a5:12:4d:45: e1:d4:b2:c0:93:f6:69:83:af:d0:f0:7d:9c:88:8f:01:40:8f: 40:20:03:c8:16:f4:0f:2f:00:5f:3d:bb:d9:d1:4c:f7:1c:c0: dd:2a:2e:51:07:47:fd:2f:4b:49:03:a3:d3:20:40:60:bc:c2: 95:2a:89:03:7f:ea:77:bd:8c:a1:dd:8a:8d:b3:da:ef:8a:d2: af:3b:81:4a:cf:71:65:56:75:69:cb:5a:f5:3d:8a:22:9d:de: 50:27:d6:da:1e:97:64:76:b7:2e:f3:4e:c1:8d:bf:c9:7b:3e: 0c:ac:82:d0:a4:05:97:d7:2e:a7:cb:2e:d1:60:0c:7b:84:51: 37:08:d4:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBOYrKXRICS9rxITJ/SOe5Gq4M1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMx REIwOEZEQTAeFw0yNTEwMjkwNzM1MDJaFw0yNTExMDEwOTU2MDJaMDMxMTAvBgNV BAMTKDM0NUZFNDAwNEQ4OUQwRThEQkZDRDk2NDQ1QzU2RUY2NzczNTNGODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJBkNeXDIJ3MPZ7aR2U3SsuKjA /ZE/4EaRqFoAJH38BLVLXfDoxLlJqz9p81rrLPa87CLcPwKF+WDfsVShNEyR3M3i zC7Y7LijF0vHQ96e+w7YBr5Tucfrxx9jx4UzY3pdzl/gFgAnqWRzEEfdSLwp4GVu 9oovp/LibkItjUfpROfOQF4RnH/PEytvtgoBfREGFmrdDjABY+hJhETNoUBc1gdv +U4+MauZVWtT4ukP/fTpiFAeLy8V9WXWO2VHqI4KONGjfqQaZNHJAYGIuOCStMFb +f0m34DJx3jp9nk7De3NxGqfwJpsj5r9qLTnl887RU1tvwqIxCcSKhjfK7iDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNF/kAE2J0Ojb/NlkRcVu9nc1P4AwHwYDVR0j BBgwFoAUb8DJM0D/c1k0NMjv/O2Osx2wj9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjY1OTkwNC0zNzAyLTQ3OTctYmQxYi00NDdhYjhjOTRlMGMvMC82RkMwQzkzMzQw RkY3MzU5MzQzNEM4RUZGQ0VEOEVCMzFEQjA4RkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhFQjMxREIw OEZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY2NTk5MDQtMzcwMi00Nzk3LWJk MWItNDQ3YWI4Yzk0ZTBjLzAvNkZDMEM5MzM0MEZGNzM1OTM0MzRDOEVGRkNFRDhF QjMxREIwOEZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmh4FVCJVQOmcwDnhkMxPUn6fl9VaWDrvVg 5WS3FCF7GqRnkGCQ5SAvLB/7laZ/W+joObBRzKR/I4fh9C4fvWKFhclcmUj/SIX1 zvcyYxtLd3AvqgGsgNO8rwIT3qEfKTlqqDJJNPMTG4MGn88BAc11gjPd/+8Jf0YT pRJNReHUssCT9mmDr9DwfZyIjwFAj0AgA8gW9A8vAF89u9nRTPccwN0qLlEHR/0v S0kDo9MgQGC8wpUqiQN/6ne9jKHdio2z2u+K0q87gUrPcWVWdWnLWvU9iiKd3lAn 1toel2R2ty7zTsGNv8l7PgysgtCkBZfXLqfLLtFgDHuEUTcI1Fw= -----END CERTIFICATE-----Generated at Thu Oct 30 14:55:01 2025 by rpki-client