$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft File: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft (raw, json) Hash identifier: cnulTmvz18hjjTbTiER6y92MVpAzd5S+dCpZVgwu4+8= Subject key identifier: 90:F0:E0:AB:C2:E9:10:5F:41:B5:DF:92:53:50:30:71:2B:71:9D:E9 Authority key identifier: 69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E Certificate issuer: /CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Certificate serial: 33FBD6EA4C66EBCD7223F332D705E8FE6C80A014 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft Manifest number: 020F Signing time: Sun 26 Oct 2025 19:10:06 +0000 Manifest this update: Sun 26 Oct 2025 19:05:06 +0000 Manifest next update: Wed 29 Oct 2025 19:52:06 +0000 Files and hashes: 1: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl (hash: 3FHaGbWsN0UvGHlfeAe6Qf+mCPnjzAV+dJhhMtvS/xM=) 2: 3130332e31322e32382e302f32322d3234203d3e203535363730.roa (hash: 56/u0yMrkC94FdPOEf+mn1+2joJi+oVC5l6/K3alTgQ=) 3: 3130312e302e342e302f32322d3234203d3e203438343635.roa (hash: 0Vbzbdds4DlTIQ/frtEsWuiBQ6OCjLTHiqaNJsXbu/0=) 4: 323430303a666230303a3a2f33322d3438203d3e203535363730.roa (hash: FVA48wGL4/cskX5JvDPv5QyssORBEsld3N+rmhCU4Gc=) 5: 3130332e31322e32382e302f32322d3234203d3e203438343635.roa (hash: hq6fcTyLZ0Befnc7SCHGWV/VgoDOfnIfMb9/pRr7Usc=) 6: 3130312e302e342e302f32322d3234203d3e203535363730.roa (hash: 7ECSmeZAaiWw7xemuyw220yGHio1fDg8eukqs4CuhkU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 19:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:fb:d6:ea:4c:66:eb:cd:72:23:f3:32:d7:05:e8:fe:6c:80:a0:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Validity Not Before: Oct 26 19:05:06 2025 GMT Not After : Oct 29 19:52:06 2025 GMT Subject: CN=90F0E0ABC2E9105F41B5DF92535030712B719DE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d0:d0:4d:85:15:87:71:b9:65:73:23:1b:9e: a6:32:dd:a8:2b:8e:84:34:5b:2c:bb:a2:78:3e:db: 45:26:df:1e:f8:36:7a:b9:f0:ee:45:ff:ee:ef:54: 8d:25:bc:c9:f9:27:ad:28:d0:9e:23:55:54:20:72: 46:ee:f2:4c:87:13:da:51:e5:cb:61:ce:34:d2:f3: 15:d3:bd:69:50:dc:8e:e6:9a:51:02:41:de:cd:9d: 79:45:e5:a5:83:b9:d7:0b:1a:0c:82:39:4d:37:d6: 7e:a9:0c:d2:00:ec:25:d1:d1:cc:ce:e9:fc:41:cb: 2a:41:0f:da:fe:68:c5:67:6d:1d:c4:3d:fc:d6:0b: 16:f2:1b:36:00:82:d1:02:b3:ba:56:92:13:03:a7: 02:c6:ef:e1:3c:55:8a:2f:d6:f3:cf:4f:66:8f:d4: 74:37:b3:c0:11:eb:98:62:46:34:e9:3d:8b:a4:62: 71:fd:55:48:42:19:ad:f8:8b:68:ab:0e:40:56:0f: ed:5e:da:0f:9f:9e:54:11:fb:94:f2:17:1d:0d:1a: 3e:5e:d6:db:bd:74:4d:64:e5:08:5e:7e:65:59:9d: d0:2b:fa:bb:f3:5f:6a:9f:8e:ac:b9:77:55:c1:6f: e0:45:7d:ef:88:fe:11:72:49:a1:d3:a7:8d:00:2f: 50:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F0:E0:AB:C2:E9:10:5F:41:B5:DF:92:53:50:30:71:2B:71:9D:E9 X509v3 Authority Key Identifier: keyid:69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:5b:fe:41:e7:4f:69:4d:f5:59:cf:41:6f:2a:fb:1d:99:81: 82:45:fc:e0:36:16:1d:62:42:5b:48:59:39:e0:d9:ba:d3:4a: cb:f6:43:a5:66:ce:b6:35:9b:45:98:67:d8:0b:4b:66:10:f2: 5a:82:07:be:f4:35:08:fc:80:74:66:fd:77:2a:b9:32:c0:57: e4:48:bf:2c:02:3d:1a:15:a9:2a:5a:89:13:67:5b:69:4e:76: 3a:26:11:13:58:4b:7a:15:e9:4f:a3:6d:83:49:c3:e3:ea:58: af:92:72:da:9c:b9:75:86:de:62:3e:bb:1c:64:64:bf:04:2d: 1b:ce:28:af:dc:a6:f0:f2:05:60:95:3d:86:71:15:25:00:44: e8:10:61:23:bf:75:0c:74:a1:2f:93:ec:9b:61:03:f8:45:48: f0:b4:ca:31:bc:a0:83:50:82:95:f8:9c:04:39:d9:c6:5b:32: a3:de:47:35:a0:f0:01:ea:2e:20:f7:53:22:44:d8:1b:0d:e2: 50:77:ef:f1:f3:a6:aa:2d:b7:74:89:38:74:6d:40:71:d2:cb: 84:97:c3:af:61:7d:cc:62:b3:03:25:18:00:b6:29:14:56:c0: 83:52:c2:d4:13:73:74:51:34:e5:fc:64:a7:1d:df:d0:a8:4e: 2e:58:d4:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM/vW6kxm681yI/My1wXo/myAoBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVG RTNFN0MzRTAeFw0yNTEwMjYxOTA1MDZaFw0yNTEwMjkxOTUyMDZaMDMxMTAvBgNV BAMTKDkwRjBFMEFCQzJFOTEwNUY0MUI1REY5MjUzNTAzMDcxMkI3MTlERTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG0NBNhRWHcbllcyMbnqYy3agr joQ0Wyy7ong+20Um3x74Nnq58O5F/+7vVI0lvMn5J60o0J4jVVQgckbu8kyHE9pR 5cthzjTS8xXTvWlQ3I7mmlECQd7NnXlF5aWDudcLGgyCOU031n6pDNIA7CXR0czO 6fxByypBD9r+aMVnbR3EPfzWCxbyGzYAgtECs7pWkhMDpwLG7+E8VYov1vPPT2aP 1HQ3s8AR65hiRjTpPYukYnH9VUhCGa34i2irDkBWD+1e2g+fnlQR+5TyFx0NGj5e 1tu9dE1k5QhefmVZndAr+rvzX2qfjqy5d1XBb+BFfe+I/hFySaHTp40AL1CZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkPDgq8LpEF9Btd+SU1AwcStxnekwHwYDVR0j BBgwFoAUaWcBLvykNpjo4bckuR38Xv4+fD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDZlYTdmYS05NGQyLTRkZGMtYThlNi01ZGM2MjZjMjkxZDQvMC82OTY3MDEyRUZD QTQzNjk4RThFMUI3MjRCOTFERkM1RUZFM0U3QzNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVGRTNF N0MzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4 ZTYtNWRjNjI2YzI5MWQ0LzAvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZD NUVGRTNFN0MzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdb/kHnT2lN9VnPQW8q+x2ZgYJF/OA2Fh1i QltIWTng2brTSsv2Q6VmzrY1m0WYZ9gLS2YQ8lqCB770NQj8gHRm/XcquTLAV+RI vywCPRoVqSpaiRNnW2lOdjomERNYS3oV6U+jbYNJw+PqWK+SctqcuXWG3mI+uxxk ZL8ELRvOKK/cpvDyBWCVPYZxFSUAROgQYSO/dQx0oS+T7JthA/hFSPC0yjG8oINQ gpX4nAQ52cZbMqPeRzWg8AHqLiD3UyJE2BsN4lB37/Hzpqott3SJOHRtQHHSy4SX w69hfcxiswMlGAC2KRRWwINSwtQTc3RRNOX8ZKcd39CoTi5Y1E8= -----END CERTIFICATE-----Generated at Mon Oct 27 09:24:43 2025 by rpki-client