$ rpki-client -vvf repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft File: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft (raw, json) Hash identifier: wy320+xOXlh6NlYsKgcSwvSZTmITnFcK76e9/1hyi8I= Subject key identifier: 9B:C9:CC:A2:6A:E3:6D:50:1A:B5:36:5D:00:E5:96:04:93:1B:CC:3B Authority key identifier: 6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 Certificate issuer: /CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Certificate serial: 4F352141221B4CFAE956D09B23A682EAC2973575 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft Manifest number: 01E7 Signing time: Tue 28 Oct 2025 05:02:27 +0000 Manifest this update: Tue 28 Oct 2025 04:57:27 +0000 Manifest next update: Fri 31 Oct 2025 16:28:27 +0000 Files and hashes: 1: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl (hash: hOYDu4pp4lHjLcYls1HzGsyphcJVsaRKTLdbIn19kcw=) 2: 3130332e3132362e3131382e302f32342d3234203d3e20313338313136.roa (hash: sksB0+JpfamOk8agUpLTqgwXQckz8CSkrdrAWOtJ4OI=) 3: 3130332e3132362e3131392e302f32342d3234203d3e20313339393732.roa (hash: wyY3CPGpB3zzZUc8QiVL+ydL4s6XrQRhF73erj2QQSs=) 4: 3130332e3132362e3131362e302f32332d3234203d3e20313333383030.roa (hash: xdEDtfm0tP7FMpWiWg9KdIp8IvvJjKZMSw6HMfYr844=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 09:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:35:21:41:22:1b:4c:fa:e9:56:d0:9b:23:a6:82:ea:c2:97:35:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Validity Not Before: Oct 28 04:57:27 2025 GMT Not After : Oct 31 16:28:27 2025 GMT Subject: CN=9BC9CCA26AE36D501AB5365D00E59604931BCC3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5d:99:5d:24:18:a5:69:81:8e:23:dd:97:77: 47:bd:b4:4c:02:f4:ab:73:bf:c6:1e:fa:47:f2:d7: bb:d0:d6:d3:1a:be:42:bd:35:53:16:ae:fa:fd:b1: 68:6a:16:0b:e7:3d:7c:dc:50:06:57:ac:b0:20:bb: 91:3e:8e:b9:67:96:ee:95:07:ec:db:5b:04:bd:8f: 39:dd:6b:7f:4b:4d:17:89:79:ab:43:d2:d8:6d:0e: cf:c1:a4:19:d7:32:97:18:9c:d8:0d:b3:49:ec:18: 57:bc:ba:06:dd:fe:2f:f7:a1:ce:27:d0:53:0e:d4: 52:7b:3d:34:24:a1:ff:53:8e:7c:2e:0a:15:47:76: 5d:76:7b:a5:23:1a:a8:a8:c3:0a:f7:c6:fc:1a:41: 30:df:52:5b:47:0f:99:5a:66:07:56:03:f5:a5:2e: cd:7e:08:03:75:52:6a:14:4f:46:17:6a:b7:a3:eb: c8:f9:e0:2a:d4:f2:3b:87:c9:5c:ed:31:00:47:00: 40:52:60:cd:00:7c:b2:4d:ab:3c:69:64:52:5b:ec: c0:03:19:aa:e5:c8:fa:f5:cb:0a:7b:76:c4:06:58: 2b:a5:98:05:16:75:0e:ff:15:51:78:36:fb:a8:aa: 19:00:bd:46:bf:9e:da:da:3d:c5:0f:48:95:cb:5a: d3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C9:CC:A2:6A:E3:6D:50:1A:B5:36:5D:00:E5:96:04:93:1B:CC:3B X509v3 Authority Key Identifier: keyid:6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:36:f7:1b:26:b2:f2:1d:5f:2c:84:fa:8d:91:bc:75:e4:43: fa:c6:5d:af:05:2a:d5:00:8c:c9:46:62:2f:ec:39:63:2a:5b: 1f:a2:53:b2:9e:aa:82:b3:73:fa:96:fb:ef:66:1f:08:bc:3d: 9c:80:3a:e8:e4:53:c4:c9:63:86:50:b2:62:8e:20:87:75:2d: bb:1d:5a:95:ec:00:de:bd:b9:ea:14:04:7e:8d:98:53:b3:65: 2d:e3:c2:dd:06:f9:b9:19:82:b2:9f:54:a4:76:d0:62:ee:df: 62:c6:f2:18:e7:5e:12:3d:a0:71:97:be:7d:9e:21:0d:c1:27: ca:3c:44:be:e6:4d:54:0f:5c:ff:67:3c:16:0f:fe:c9:c5:87: a8:41:f4:f8:05:7c:53:60:9c:c9:c2:a1:da:a2:5d:df:49:84: 65:c3:b3:69:3c:35:f6:59:43:09:f0:79:e0:a2:28:e3:1b:e7: 53:d3:e3:d8:f2:1c:85:6e:0b:1f:bc:24:52:39:32:75:04:c0: 75:6b:19:d6:b7:eb:a8:85:a9:23:9f:57:e3:f2:e4:30:99:18: c5:2c:ba:f9:ae:a3:aa:16:45:77:fb:e9:f5:1e:e4:d0:07:a5: 6a:f5:66:62:3c:46:e1:46:f8:a2:ee:26:06:43:21:f6:96:1a: 12:ae:fa:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTzUhQSIbTPrpVtCbI6aC6sKXNXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdE MDJGNDdFODAeFw0yNTEwMjgwNDU3MjdaFw0yNTEwMzExNjI4MjdaMDMxMTAvBgNV BAMTKDlCQzlDQ0EyNkFFMzZENTAxQUI1MzY1RDAwRTU5NjA0OTMxQkNDM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmXZldJBilaYGOI92Xd0e9tEwC 9Ktzv8Ye+kfy17vQ1tMavkK9NVMWrvr9sWhqFgvnPXzcUAZXrLAgu5E+jrlnlu6V B+zbWwS9jznda39LTReJeatD0thtDs/BpBnXMpcYnNgNs0nsGFe8ugbd/i/3oc4n 0FMO1FJ7PTQkof9TjnwuChVHdl12e6UjGqiowwr3xvwaQTDfUltHD5laZgdWA/Wl Ls1+CAN1UmoUT0YXarej68j54CrU8juHyVztMQBHAEBSYM0AfLJNqzxpZFJb7MAD GarlyPr1ywp7dsQGWCulmAUWdQ7/FVF4NvuoqhkAvUa/ntraPcUPSJXLWtORAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm8nMomrjbVAatTZdAOWWBJMbzDswHwYDVR0j BBgwFoAUbfioc7cLqMytoxqt2CFf99AvR+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 N2QyNmRlMC02OGNmLTQyOWMtOGIwZS04ZDY0Yjc2MmY4MjQvMC82REY4QTg3M0I3 MEJBOENDQURBMzFBQUREODIxNUZGN0QwMkY0N0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdEMDJG NDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTdkMjZkZTAtNjhjZi00MjljLThi MGUtOGQ2NGI3NjJmODI0LzAvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVG RjdEMDJGNDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC829xsmsvIdXyyE+o2RvHXkQ/rGXa8FKtUA jMlGYi/sOWMqWx+iU7KeqoKzc/qW++9mHwi8PZyAOujkU8TJY4ZQsmKOIId1Lbsd WpXsAN69ueoUBH6NmFOzZS3jwt0G+bkZgrKfVKR20GLu32LG8hjnXhI9oHGXvn2e IQ3BJ8o8RL7mTVQPXP9nPBYP/snFh6hB9PgFfFNgnMnCodqiXd9JhGXDs2k8NfZZ QwnweeCiKOMb51PT49jyHIVuCx+8JFI5MnUEwHVrGda366iFqSOfV+Py5DCZGMUs uvmuo6oWRXf76fUe5NAHpWr1ZmI8RuFG+KLuJgZDIfaWGhKu+no= -----END CERTIFICATE-----Generated at Tue Oct 28 12:32:00 2025 by rpki-client