$ rpki-client -vvf repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft File: 0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft (raw, json) Hash identifier: eQJCFAEupT4M2JyMLx1tQqwXOqvwR+QzpJ14g+pTJkc= Subject key identifier: 15:4E:91:54:3D:B9:74:8C:08:0A:A5:21:BE:CF:01:95:9B:38:04:0D Authority key identifier: 06:90:81:5B:5E:9C:22:28:26:3F:17:C9:B3:F5:F9:9D:D6:88:2F:9C Certificate issuer: /CN=0690815B5E9C2228263F17C9B3F5F99DD6882F9C Certificate serial: 4001B965A96A6273E06D83BD3EF0026EC8AD858D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft Manifest number: 018C Signing time: Mon 20 Oct 2025 06:51:11 +0000 Manifest this update: Mon 20 Oct 2025 06:46:11 +0000 Manifest next update: Thu 23 Oct 2025 15:01:11 +0000 Files and hashes: 1: 0690815B5E9C2228263F17C9B3F5F99DD6882F9C.crl (hash: rs95bJQiE9I1KRcftvVhm1Cu1ABA/eA7xzLRgH6GGdo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.crl rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:01:b9:65:a9:6a:62:73:e0:6d:83:bd:3e:f0:02:6e:c8:ad:85:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0690815B5E9C2228263F17C9B3F5F99DD6882F9C Validity Not Before: Oct 20 06:46:11 2025 GMT Not After : Oct 23 15:01:11 2025 GMT Subject: CN=154E91543DB9748C080AA521BECF01959B38040D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:08:72:59:d9:80:8d:62:ef:07:3d:d0:72:0f: 2d:1a:1a:76:27:5b:a8:24:97:f4:68:40:84:9b:3e: f5:86:52:78:b0:d0:8a:43:50:42:1a:4f:39:a8:70: 10:1a:f2:a3:fd:5d:b7:eb:ef:90:e6:c0:a7:75:0b: d9:1e:0c:b0:66:64:e4:90:e3:62:a7:e7:35:ca:67: 44:1e:5b:a9:f9:2a:71:50:3d:42:18:d7:54:24:23: c0:73:ec:bd:92:82:36:25:c1:c5:37:d6:6f:e3:28: 37:35:10:3c:b9:eb:8b:c5:25:b8:92:e4:e2:49:4b: 76:b0:eb:45:dd:5b:3e:65:83:d3:49:d4:14:c6:7a: cb:80:5d:60:d4:27:00:19:6e:47:61:32:fd:ba:f6: 5c:d4:e8:f1:a4:89:47:e7:35:f1:2d:18:85:ef:1c: ac:3d:70:1e:e7:40:11:ee:aa:01:69:e3:2a:29:05: 5f:a5:dc:fe:dd:ec:6f:37:f5:84:4d:60:8b:da:41: fd:fa:d2:95:e2:2d:01:56:01:79:c4:ae:ff:c5:7f: 58:45:4e:54:b6:41:bf:ef:f2:56:54:ba:b7:f8:10: 81:d0:a7:c0:d1:74:79:c0:55:db:e4:46:72:2c:db: 4c:d6:c0:b9:bf:15:01:cb:0b:ff:fc:f1:28:25:2e: e1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4E:91:54:3D:B9:74:8C:08:0A:A5:21:BE:CF:01:95:9B:38:04:0D X509v3 Authority Key Identifier: keyid:06:90:81:5B:5E:9C:22:28:26:3F:17:C9:B3:F5:F9:9D:D6:88:2F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:e9:c5:23:de:96:75:05:20:da:39:88:e4:f6:64:65:9f:5e: 6c:58:a7:90:32:04:7b:6e:04:46:15:91:f9:16:aa:44:8d:2d: 6d:fd:42:a7:3c:63:13:b3:cd:47:91:32:f4:37:2b:2a:3e:4a: 8f:27:6f:96:9d:c3:5c:bc:04:95:0b:4e:6f:e4:44:75:66:36: b4:88:82:6b:82:a9:2a:0e:2f:ea:52:e4:27:d6:42:f2:69:97: 31:78:86:7a:5e:03:d1:50:f1:86:6d:51:f7:4c:55:72:be:59: 27:3c:6c:04:88:ca:bf:02:1e:95:9f:85:b8:e5:32:80:f5:a1: 09:74:73:bd:e5:13:11:8e:8a:49:8f:3c:ac:a3:08:a7:5a:ff: c8:e6:19:8e:fd:80:96:aa:82:c8:24:fb:00:45:3d:c8:1b:75: d3:37:bf:0b:5e:08:98:59:bf:ed:e8:c9:e7:1e:09:ef:dd:cc: 39:b9:64:ef:00:3b:46:cf:99:04:e2:9c:31:46:98:04:c4:57: 18:7c:19:30:f6:ad:32:b1:4b:19:de:67:e9:6f:e9:9e:8a:4e: 52:0f:c8:09:c0:63:30:78:2a:14:ad:ef:4e:43:81:57:4a:db: 97:c3:70:bf:6b:f1:ac:e5:aa:f3:af:57:07:85:49:2d:a9:5e: 3b:6b:9d:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQAG5ZalqYnPgbYO9PvACbsithY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5MDgxNUI1RTlDMjIyODI2M0YxN0M5QjNGNUY5OURE Njg4MkY5QzAeFw0yNTEwMjAwNjQ2MTFaFw0yNTEwMjMxNTAxMTFaMDMxMTAvBgNV BAMTKDE1NEU5MTU0M0RCOTc0OEMwODBBQTUyMUJFQ0YwMTk1OUIzODA0MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDCHJZ2YCNYu8HPdByDy0aGnYn W6gkl/RoQISbPvWGUniw0IpDUEIaTzmocBAa8qP9Xbfr75DmwKd1C9keDLBmZOSQ 42Kn5zXKZ0QeW6n5KnFQPUIY11QkI8Bz7L2SgjYlwcU31m/jKDc1EDy564vFJbiS 5OJJS3aw60XdWz5lg9NJ1BTGesuAXWDUJwAZbkdhMv269lzU6PGkiUfnNfEtGIXv HKw9cB7nQBHuqgFp4yopBV+l3P7d7G839YRNYIvaQf360pXiLQFWAXnErv/Ff1hF TlS2Qb/v8lZUurf4EIHQp8DRdHnAVdvkRnIs20zWwLm/FQHLC//88SglLuGfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFU6RVD25dIwICqUhvs8BlZs4BA0wHwYDVR0j BBgwFoAUBpCBW16cIigmPxfJs/X5ndaIL5wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x M2ZhN2Q1Yy0zNjhkLTRhZjMtYjhlNy0xNzg2MjQ2ZGQ2MmYvMC8wNjkwODE1QjVF OUMyMjI4MjYzRjE3QzlCM0Y1Rjk5REQ2ODgyRjlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY5MDgxNUI1RTlDMjIyODI2M0YxN0M5QjNGNUY5OURENjg4 MkY5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTNmYTdkNWMtMzY4ZC00YWYzLWI4 ZTctMTc4NjI0NmRkNjJmLzAvMDY5MDgxNUI1RTlDMjIyODI2M0YxN0M5QjNGNUY5 OURENjg4MkY5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL/pxSPelnUFINo5iOT2ZGWfXmxYp5AyBHtu BEYVkfkWqkSNLW39Qqc8YxOzzUeRMvQ3Kyo+So8nb5adw1y8BJULTm/kRHVmNrSI gmuCqSoOL+pS5CfWQvJplzF4hnpeA9FQ8YZtUfdMVXK+WSc8bASIyr8CHpWfhbjl MoD1oQl0c73lExGOikmPPKyjCKda/8jmGY79gJaqgsgk+wBFPcgbddM3vwteCJhZ v+3oyeceCe/dzDm5ZO8AO0bPmQTinDFGmATEVxh8GTD2rTKxSxneZ+lv6Z6KTlIP yAnAYzB4KhSt705DgVdK25fDcL9r8azlqvOvVweFSS2pXjtrnek= -----END CERTIFICATE-----Generated at Mon Oct 20 09:45:12 2025 by rpki-client