$ rpki-client -vvf repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft File: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft (raw, json) Hash identifier: 51LIJukbXEx3iFnp/tcfFaAA6u3GueqFpGGUUVZ5f2c= Subject key identifier: 29:79:DF:60:C6:87:40:4D:1E:BE:FC:2E:7D:57:B9:68:9C:5E:E6:D0 Authority key identifier: 69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 Certificate issuer: /CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Certificate serial: 27810935C986C61286117AF11EE7C91E1B2401D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft Manifest number: 0222 Signing time: Sat 18 Oct 2025 09:31:17 +0000 Manifest this update: Sat 18 Oct 2025 09:26:17 +0000 Manifest next update: Tue 21 Oct 2025 13:35:17 +0000 Files and hashes: 1: 3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa (hash: VeN/bGOYLWRy+rz86CsEUNPZS6zxON2N9UHaLIP5nig=) 2: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl (hash: 6mktKiPLD8wWzoH7hSa3NtmgXbC2EJvx9uHxtOgA4a8=) 3: 3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa (hash: mN0twBIDnpakC8HUHafkf1WXSP1Z0ySHIU0xGnkB28I=) 4: 3130332e3138392e3230362e302f32332d3233203d3e2039333431.roa (hash: VhmM6dwj6jhcWpHKGkB8nHv6O88nIuiPwR83QLa+WS8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 13:35:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:81:09:35:c9:86:c6:12:86:11:7a:f1:1e:e7:c9:1e:1b:24:01:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Validity Not Before: Oct 18 09:26:17 2025 GMT Not After : Oct 21 13:35:17 2025 GMT Subject: CN=2979DF60C687404D1EBEFC2E7D57B9689C5EE6D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e3:87:04:4f:51:9b:a1:88:8e:e0:aa:3b:e4: 35:11:bf:07:06:00:6a:25:f0:09:bd:db:0b:4d:34: b3:f8:35:30:08:1f:6c:af:a6:73:23:06:51:a4:42: 1a:36:45:db:7a:0c:ed:9c:2a:81:0e:b4:28:fc:72: 96:cb:46:94:5f:cf:d5:9c:0e:a7:91:e9:0a:63:2e: 24:90:af:76:62:96:91:99:57:18:84:f3:d8:55:7e: 55:0d:a5:26:8f:cc:83:7a:6f:fd:01:11:74:2a:3e: cc:dc:77:fc:0d:7b:f8:0c:72:f8:5b:fc:e7:c0:f7: ea:9c:22:66:55:c9:6a:2b:e9:70:00:ea:2d:c4:37: 40:01:7f:de:db:23:26:e8:4f:a2:16:8f:76:1f:6e: 80:56:ce:b1:27:26:80:aa:5a:af:1c:ab:77:a3:9d: 7b:6c:f1:54:9f:49:dc:7e:38:0e:25:39:cc:cc:fc: 43:2c:d0:fc:74:f3:d5:c6:1b:8c:08:a0:62:8e:b6: 29:8d:43:b3:6d:53:ea:c4:a9:88:4f:1a:35:81:e0: 9c:dd:8a:e7:32:6c:8e:74:76:00:84:0e:d0:f8:51: 79:58:72:f9:ea:c2:ee:af:0e:bf:ad:dc:0c:f7:b1: ea:5d:44:92:e6:00:8b:f8:36:44:c8:b0:da:44:17: 0e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:79:DF:60:C6:87:40:4D:1E:BE:FC:2E:7D:57:B9:68:9C:5E:E6:D0 X509v3 Authority Key Identifier: keyid:69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:05:27:cc:79:2c:27:b8:40:65:1c:2b:1e:87:71:6e:a0:11: 6f:99:35:e9:5a:8d:78:d4:72:aa:12:61:39:89:2b:4f:48:11: ab:5b:db:a5:2f:98:38:de:96:84:f4:63:93:04:48:15:c8:ea: a8:94:b4:da:75:f2:ff:bb:a2:05:e7:70:de:26:6b:c2:aa:eb: c5:ac:6c:35:38:55:55:00:96:19:37:38:37:30:5e:d9:de:15: 06:c2:9e:ad:80:cf:fe:5b:7b:e5:2f:b7:1a:41:31:5f:d9:68: 45:d3:9e:0b:21:0d:87:88:1f:da:ce:77:54:5c:db:de:74:ba: 03:f1:8b:ec:f7:c5:1b:77:62:99:d6:26:df:c3:3a:22:52:61: 4a:42:94:12:67:9a:f2:54:ce:af:d1:6e:3b:60:65:d3:78:19: 2e:63:04:e4:99:e8:4b:23:bf:39:16:4b:9d:33:29:c7:ef:2a: b1:b4:87:5b:6f:56:ff:e5:0d:c1:3a:ad:4b:e1:f7:15:a9:c3: 4e:4c:1c:c2:0b:16:02:c0:d3:6d:09:d6:a8:d9:d5:f2:3a:76: be:9b:ff:be:fd:70:28:37:b0:27:35:cc:af:63:e6:16:26:88: 60:d5:57:5a:cc:31:3f:5e:90:f2:5f:e5:48:00:ce:ae:58:26: 43:90:d4:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ4EJNcmGxhKGEXrxHufJHhskAdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1 REFFRTQyOTAeFw0yNTEwMTgwOTI2MTdaFw0yNTEwMjExMzM1MTdaMDMxMTAvBgNV BAMTKDI5NzlERjYwQzY4NzQwNEQxRUJFRkMyRTdENTdCOTY4OUM1RUU2RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC144cET1GboYiO4Ko75DURvwcG AGol8Am92wtNNLP4NTAIH2yvpnMjBlGkQho2Rdt6DO2cKoEOtCj8cpbLRpRfz9Wc DqeR6QpjLiSQr3ZilpGZVxiE89hVflUNpSaPzIN6b/0BEXQqPszcd/wNe/gMcvhb /OfA9+qcImZVyWor6XAA6i3EN0ABf97bIyboT6IWj3YfboBWzrEnJoCqWq8cq3ej nXts8VSfSdx+OA4lOczM/EMs0Px089XGG4wIoGKOtimNQ7NtU+rEqYhPGjWB4Jzd iucybI50dgCEDtD4UXlYcvnqwu6vDr+t3Az3sepdRJLmAIv4NkTIsNpEFw7nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKXnfYMaHQE0evvwufVe5aJxe5tAwHwYDVR0j BBgwFoAUaZRcOGmz5CnUsK7O35mZ6l2u5CkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODMxZWViNC1mMzU3LTQ1YTctOTI2NS00MjhiMDA3YTAyNzAvMC82OTk0NUMzODY5 QjNFNDI5RDRCMEFFQ0VERjk5OTlFQTVEQUVFNDI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1REFF RTQyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTgzMWVlYjQtZjM1Ny00NWE3LTky NjUtNDI4YjAwN2EwMjcwLzAvNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5 RUE1REFFRTQyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcFJ8x5LCe4QGUcKx6HcW6gEW+ZNelajXjU cqoSYTmJK09IEatb26UvmDjeloT0Y5MESBXI6qiUtNp18v+7ogXncN4ma8Kq68Ws bDU4VVUAlhk3ODcwXtneFQbCnq2Az/5be+UvtxpBMV/ZaEXTngshDYeIH9rOd1Rc 2950ugPxi+z3xRt3YpnWJt/DOiJSYUpClBJnmvJUzq/RbjtgZdN4GS5jBOSZ6Esj vzkWS50zKcfvKrG0h1tvVv/lDcE6rUvh9xWpw05MHMILFgLA020J1qjZ1fI6dr6b /779cCg3sCc1zK9j5hYmiGDVV1rMMT9ekPJf5UgAzq5YJkOQ1N8= -----END CERTIFICATE-----Generated at Mon Oct 20 15:31:33 2025 by rpki-client