$ rpki-client -vvf repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft File: 6437999FD06F2C7F0F16F8160CD6145F775884A4.mft (raw, json) Hash identifier: cOcsua9YsHdfbyNE3q6OpZMwPuzlXlKyl0ugw01Cxoo= Subject key identifier: 15:15:82:56:6D:82:DA:50:35:26:44:7A:40:4F:BA:DD:50:13:5D:38 Authority key identifier: 64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 Certificate issuer: /CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Certificate serial: 09EAF853C79A766FE51B2D9A4785A947AE011233 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft Manifest number: 0254 Signing time: Thu 30 Oct 2025 09:50:03 +0000 Manifest this update: Thu 30 Oct 2025 09:45:03 +0000 Manifest next update: Sun 02 Nov 2025 13:46:03 +0000 Files and hashes: 1: 3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa (hash: 6kBcLlz4I+EwiYd/zHv8YINF31MEROhjhbQ+A0qjPjE=) 2: 3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa (hash: FtQ7YyJ/nXZZN06U1YB5sNs24X+l1RzMYb5gI1y1G9M=) 3: 3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa (hash: b3wEoQmduATe2XsB1+5lzcIjLJ7k0E7+xb68g1ewVFQ=) 4: 6437999FD06F2C7F0F16F8160CD6145F775884A4.crl (hash: 46I3lkAnsnrncQG9Kcxl7A88d2k6O3KImGFBaCVZoVo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 13:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ea:f8:53:c7:9a:76:6f:e5:1b:2d:9a:47:85:a9:47:ae:01:12:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Validity Not Before: Oct 30 09:45:03 2025 GMT Not After : Nov 2 13:46:03 2025 GMT Subject: CN=151582566D82DA503526447A404FBADD50135D38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:42:b4:2f:2f:da:7f:22:3d:0f:fa:46:d2:6f: b5:39:b9:a3:1d:f9:a0:72:ce:46:c6:81:8c:79:d2: 6b:1e:6a:3c:b4:e3:f3:25:fa:35:9b:62:68:99:0d: 77:41:5d:91:7f:f7:6e:5e:98:8e:6a:da:1c:a3:9c: 09:c1:f8:ed:e2:a4:c3:14:74:5e:a0:58:7e:4d:9e: 89:c8:83:be:2b:16:81:fc:5e:fa:9c:75:d8:2f:91: 10:7a:ca:6d:1a:92:12:42:55:23:7a:ba:72:b1:87: 9b:92:e4:8a:b0:37:63:89:49:91:08:7a:81:2d:36: d0:9c:4c:45:f7:f7:f4:fa:eb:6b:52:b8:88:ff:60: 70:0b:89:45:48:07:2f:50:18:34:cb:c3:de:48:23: cd:3b:f8:c3:0e:53:b5:2e:63:f2:1b:c5:0b:6e:f4: a7:81:4c:38:84:a0:d9:5b:9f:e6:99:71:4d:09:19: 32:e6:da:c6:78:ae:03:2f:87:82:c1:ee:f4:77:b1: 68:f4:51:a7:da:87:bc:6b:99:61:4f:ec:b0:e2:54: 8a:0f:8c:e1:cc:2a:6f:01:05:dd:e2:d9:7b:53:e3: bd:4a:e2:cd:57:40:83:a3:37:2c:7a:5a:b2:d4:2b: 2f:b3:5b:f3:b5:99:73:23:4d:12:f3:5e:25:98:70: 9d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:15:82:56:6D:82:DA:50:35:26:44:7A:40:4F:BA:DD:50:13:5D:38 X509v3 Authority Key Identifier: keyid:64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:b3:10:2d:e8:4c:fc:b5:2c:0a:cc:7c:de:27:ca:38:c3:f2: 25:14:fa:d6:0a:8f:4d:e5:d9:c5:65:eb:2b:f8:dc:cd:d0:2c: 47:25:ee:67:38:48:aa:f3:1a:65:97:9d:34:23:e3:55:3d:e8: ba:6c:8c:7c:3e:80:f4:56:5b:93:6a:c3:40:2f:2e:48:9e:4f: e8:23:2c:93:81:c4:9d:e2:3c:28:12:1b:0e:1d:70:e9:69:47: 6e:95:4a:7c:2f:49:b8:45:02:d7:46:e0:a6:e0:e1:47:ec:41: 04:dc:76:9e:2a:72:83:8e:7a:dd:01:ed:51:bd:e1:1f:55:bc: 88:f7:98:2d:67:58:97:48:01:93:78:06:bd:d4:ed:31:e5:90: 36:7f:2a:b9:c8:49:fb:8e:50:d4:c8:fd:a4:99:48:5c:f4:95: 40:b8:f3:b6:4a:60:af:a5:52:57:46:a2:e2:de:b3:8a:1b:81: a6:35:90:38:d2:7c:ab:d5:f1:7d:e0:86:d6:6b:76:53:18:56: 6b:7f:5a:70:88:64:f8:3b:8c:4a:01:04:93:73:cc:0f:22:85: 1d:a3:d4:ea:4e:eb:75:18:7e:e9:01:6e:9d:e0:59:d7:39:2e: 17:cf:e5:17:bb:08:fc:12:46:4c:29:e9:a1:7e:85:75:a0:00: b8:fb:fa:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCer4U8eadm/lGy2aR4WpR64BEjMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3 NzU4ODRBNDAeFw0yNTEwMzAwOTQ1MDNaFw0yNTExMDIxMzQ2MDNaMDMxMTAvBgNV BAMTKDE1MTU4MjU2NkQ4MkRBNTAzNTI2NDQ3QTQwNEZCQURENTAxMzVEMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXQrQvL9p/Ij0P+kbSb7U5uaMd +aByzkbGgYx50mseajy04/Ml+jWbYmiZDXdBXZF/925emI5q2hyjnAnB+O3ipMMU dF6gWH5NnonIg74rFoH8XvqcddgvkRB6ym0akhJCVSN6unKxh5uS5IqwN2OJSZEI eoEtNtCcTEX39/T662tSuIj/YHALiUVIBy9QGDTLw95II807+MMOU7UuY/IbxQtu 9KeBTDiEoNlbn+aZcU0JGTLm2sZ4rgMvh4LB7vR3sWj0Uafah7xrmWFP7LDiVIoP jOHMKm8BBd3i2XtT471K4s1XQIOjNyx6WrLUKy+zW/O1mXMjTRLzXiWYcJ2JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFRWCVm2C2lA1JkR6QE+63VATXTgwHwYDVR0j BBgwFoAUZDeZn9BvLH8PFvgWDNYUX3dYhKQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzZmZGM2MC04MDIzLTQwY2QtYWFhNC1jZDZlZDIyYzRkNDUvMC82NDM3OTk5RkQw NkYyQzdGMEYxNkY4MTYwQ0Q2MTQ1Rjc3NTg4NEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0NUY3NzU4 ODRBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc2ZmRjNjAtODAyMy00MGNkLWFh YTQtY2Q2ZWQyMmM0ZDQ1LzAvNjQzNzk5OUZEMDZGMkM3RjBGMTZGODE2MENENjE0 NUY3NzU4ODRBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKzEC3oTPy1LArMfN4nyjjD8iUU+tYKj03l 2cVl6yv43M3QLEcl7mc4SKrzGmWXnTQj41U96LpsjHw+gPRWW5Nqw0AvLkieT+gj LJOBxJ3iPCgSGw4dcOlpR26VSnwvSbhFAtdG4Kbg4UfsQQTcdp4qcoOOet0B7VG9 4R9VvIj3mC1nWJdIAZN4Br3U7THlkDZ/KrnISfuOUNTI/aSZSFz0lUC487ZKYK+l UldGouLes4obgaY1kDjSfKvV8X3ghtZrdlMYVmt/WnCIZPg7jEoBBJNzzA8ihR2j 1OpO63UYfukBbp3gWdc5LhfP5Re7CPwSRkwp6aF+hXWgALj7+kU= -----END CERTIFICATE-----Generated at Thu Oct 30 15:06:52 2025 by rpki-client