$ rpki-client -vvf repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft File: 6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft (raw, json) Hash identifier: ByVUkcS7S7LqyvmKPAZxZ8dK1Z7gMNHFK43eKVDQFFk= Subject key identifier: C4:61:FC:03:CD:16:B7:EF:29:4E:01:D8:30:9E:02:CE:E6:F4:3D:9A Authority key identifier: 6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7 Certificate issuer: /CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7 Certificate serial: 543EDF25A0968F114771470509889934B5DB40DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft Manifest number: 0286 Signing time: Mon 03 Nov 2025 20:51:31 +0000 Manifest this update: Mon 03 Nov 2025 20:46:31 +0000 Manifest next update: Thu 06 Nov 2025 22:46:31 +0000 Files and hashes: 1: 3130332e3135362e3232362e302f32342d3234203d3e203435373031.roa (hash: OkMPQza0tirm+lkEvMo+wQnirw7z1P7FKUQAEdz/Gek=) 2: 6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl (hash: Uy44jkinZF8V8bSixvA/3XZMS577yObI8Ett9TQRaDU=) 3: 323430363a386563303a3a2f33322d3332203d3e203435373031.roa (hash: MzuVDKjjbWuffKhWQ0E6XJFxJ4Xptq+EBiCyvozexRA=) 4: 3130332e3135362e3232372e302f32342d3234203d3e203435373031.roa (hash: znHE6AD5Lm1YZC2YGdLN2BPXoosYaoUkOA2ryqU5ZV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 22:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:3e:df:25:a0:96:8f:11:47:71:47:05:09:88:99:34:b5:db:40:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7 Validity Not Before: Nov 3 20:46:31 2025 GMT Not After : Nov 6 22:46:31 2025 GMT Subject: CN=C461FC03CD16B7EF294E01D8309E02CEE6F43D9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:de:ce:fa:19:62:cc:df:b5:96:1c:84:f6:cb: 6e:c7:f9:53:a7:87:4f:31:f1:37:16:fb:88:84:51: d0:d9:7b:88:ae:cc:50:6c:98:6f:f3:e8:ff:b6:93: 03:f2:ff:a0:d8:14:ef:63:6d:56:f6:54:69:d3:aa: 3c:aa:2b:01:c5:9d:21:ed:30:a7:3d:1e:bc:15:e0: f3:bf:9a:65:34:90:2c:14:83:27:91:82:67:33:45: 25:97:0a:da:f3:cc:15:fe:91:46:a3:83:8e:22:ce: df:13:1c:14:e4:ab:8d:ee:b7:ca:05:7a:c8:67:b5: e6:66:fd:f8:3c:80:c7:c9:d0:08:6c:dd:ff:f1:84: c1:22:55:a8:d0:bc:8e:87:f5:af:44:2c:27:01:9a: aa:22:c3:47:a0:ec:90:cd:ba:fc:12:b6:51:59:b2: 5c:aa:ef:03:0e:2e:e8:56:65:6a:d1:c0:3e:6c:f1: 88:36:12:ac:3e:e3:df:0e:42:00:7a:f7:7f:74:6d: d4:eb:70:01:5a:1a:81:a4:c2:10:6a:8c:eb:9e:8a: 29:e3:2e:d8:ae:d3:b2:7b:b7:5d:67:e1:63:62:35: c3:d1:36:a3:c5:ab:6a:5f:18:33:89:21:8f:7c:2e: c4:d7:30:e6:cd:9d:5c:45:e7:ae:f1:7f:ac:39:11: 90:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:61:FC:03:CD:16:B7:EF:29:4E:01:D8:30:9E:02:CE:E6:F4:3D:9A X509v3 Authority Key Identifier: keyid:6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:89:06:87:9b:12:16:e1:c2:e3:c6:bc:bc:5f:bd:47:b1:b4: 5b:b8:70:05:92:35:fb:99:bc:39:ed:69:f0:d4:53:9e:35:9b: 72:74:79:7e:f0:17:97:b2:37:96:2a:0d:3a:1b:b7:a9:71:96: 72:3a:a7:1b:bc:8a:d1:a1:99:c4:48:05:c4:f0:48:ac:a3:fb: 43:14:2c:9a:0f:45:82:e1:d6:8f:e5:4e:49:f7:93:8e:e1:80: 46:fa:bf:0b:f1:20:9b:7d:4e:70:b1:c1:8b:40:eb:f1:95:29: 20:71:d8:e7:61:00:e7:ed:21:98:7b:2d:e7:5b:9d:2f:8a:fc: d7:f9:94:f5:4f:7d:b8:89:62:53:ce:ed:3b:c1:c5:72:72:f5: 83:fa:d4:35:8e:bc:b3:9b:c4:df:8d:95:99:0c:37:91:a7:65: 4a:7a:9b:64:07:ce:f6:d1:68:a4:9c:3b:ce:e2:03:dd:55:16: be:08:c2:4c:e4:69:77:62:22:12:07:fb:b5:cb:38:a7:9d:c5: 96:b0:78:db:22:de:cc:3a:58:a5:28:a5:2b:f2:6c:e1:55:59: ea:0d:bb:60:6a:6b:b0:4a:d5:cc:a2:cb:be:b4:f6:6a:8a:ad: 34:16:8a:b3:5a:a2:d8:de:d3:48:7a:b1:cb:4b:0a:7c:93:b0: dc:8e:89:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVD7fJaCWjxFHcUcFCYiZNLXbQN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkUxMjM1QzhGQzNGMkVGNkQ5RDI0NUQwNjA3QUE2RDc2 M0M1RDRFNzAeFw0yNTExMDMyMDQ2MzFaFw0yNTExMDYyMjQ2MzFaMDMxMTAvBgNV BAMTKEM0NjFGQzAzQ0QxNkI3RUYyOTRFMDFEODMwOUUwMkNFRTZGNDNEOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc3s76GWLM37WWHIT2y27H+VOn h08x8TcW+4iEUdDZe4iuzFBsmG/z6P+2kwPy/6DYFO9jbVb2VGnTqjyqKwHFnSHt MKc9HrwV4PO/mmU0kCwUgyeRgmczRSWXCtrzzBX+kUajg44izt8THBTkq43ut8oF eshnteZm/fg8gMfJ0Ahs3f/xhMEiVajQvI6H9a9ELCcBmqoiw0eg7JDNuvwStlFZ slyq7wMOLuhWZWrRwD5s8Yg2Eqw+498OQgB69390bdTrcAFaGoGkwhBqjOueiinj Ltiu07J7t11n4WNiNcPRNqPFq2pfGDOJIY98LsTXMObNnVxF567xf6w5EZAnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxGH8A80Wt+8pTgHYMJ4Czub0PZowHwYDVR0j BBgwFoAUbhI1yPw/LvbZ0kXQYHqm12PF1OcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTM1NWM1YS1lZmM4LTQ4ZjctOTAyZi02ZTMxZmM0Mjk5NWEvMC82RTEyMzVDOEZD M0YyRUY2RDlEMjQ1RDA2MDdBQTZENzYzQzVENEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkUxMjM1QzhGQzNGMkVGNkQ5RDI0NUQwNjA3QUE2RDc2M0M1 RDRFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjUzNTVjNWEtZWZjOC00OGY3LTkw MmYtNmUzMWZjNDI5OTVhLzAvNkUxMjM1QzhGQzNGMkVGNkQ5RDI0NUQwNjA3QUE2 RDc2M0M1RDRFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2JBoebEhbhwuPGvLxfvUextFu4cAWSNfuZ vDntafDUU541m3J0eX7wF5eyN5YqDTobt6lxlnI6pxu8itGhmcRIBcTwSKyj+0MU LJoPRYLh1o/lTkn3k47hgEb6vwvxIJt9TnCxwYtA6/GVKSBx2OdhAOftIZh7Ledb nS+K/Nf5lPVPfbiJYlPO7TvBxXJy9YP61DWOvLObxN+NlZkMN5GnZUp6m2QHzvbR aKScO87iA91VFr4IwkzkaXdiIhIH+7XLOKedxZaweNsi3sw6WKUopSvybOFVWeoN u2Bqa7BK1cyiy7609mqKrTQWirNaotje00h6sctLCnyTsNyOidw= -----END CERTIFICATE-----Generated at Wed Nov 5 21:31:36 2025 by rpki-client