$ rpki-client -vvf repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft File: D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft (raw, json) Hash identifier: BmlmfHMcu15RaG0mnR/AWF5U0bvwSI6U3sqiaAvcD5M= Subject key identifier: 21:86:2A:10:CD:FC:43:E7:3F:D6:A3:04:87:D5:22:1B:9D:4C:83:42 Authority key identifier: D6:9B:38:7E:6B:9C:AF:1B:D2:6B:28:6A:94:8D:5A:77:FB:85:F8:0A Certificate issuer: /CN=D69B387E6B9CAF1BD26B286A948D5A77FB85F80A Certificate serial: 580381400D2F0D648C14C68009A0EBCF54734FE1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft Manifest number: A6 Signing time: Sun 19 Oct 2025 05:22:15 +0000 Manifest this update: Sun 19 Oct 2025 05:17:15 +0000 Manifest next update: Wed 22 Oct 2025 06:49:15 +0000 Files and hashes: 1: 3130332e36352e3134322e302f32332d3234203d3e20313432333333.roa (hash: Sg9u/AwZirmCvlw+W9NyMDOy14LKr1t7vCJz3dMVUog=) 2: D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl (hash: 2rC25BeK3ouOAuDmaEmGfEdcK0H5jgtEokn9dB1vxDM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 06:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:03:81:40:0d:2f:0d:64:8c:14:c6:80:09:a0:eb:cf:54:73:4f:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D69B387E6B9CAF1BD26B286A948D5A77FB85F80A Validity Not Before: Oct 19 05:17:15 2025 GMT Not After : Oct 22 06:49:15 2025 GMT Subject: CN=21862A10CDFC43E73FD6A30487D5221B9D4C8342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:96:10:e0:2f:38:81:ed:3f:d9:ec:c5:2a:75: 50:ef:11:3b:f9:d3:49:7b:ec:7c:f4:57:9a:fd:fd: 1c:ce:c9:24:f6:b5:42:36:43:a2:53:eb:20:30:79: 9a:29:ef:f2:8a:29:81:68:69:54:1d:14:a1:e6:59: 07:bd:6f:2f:c8:aa:c9:23:64:da:b6:09:6a:84:a7: 34:01:68:b3:13:93:55:2f:d0:b3:74:40:df:1b:d8: b2:72:21:2c:14:d4:0f:57:7c:13:36:2e:3f:70:bc: e6:55:87:5c:f2:52:01:e3:9f:e9:f4:7e:56:02:f3: 51:2b:61:fb:95:f7:01:e1:d5:7f:99:92:35:ff:9b: ad:99:86:7a:e1:1e:96:d9:e6:03:fd:c4:4e:5e:d5: d7:bd:9a:ae:e3:ec:8b:7d:44:43:4b:9e:d0:ad:8e: 08:88:d2:4e:43:91:1e:38:e1:b6:b2:5a:e0:ce:d2: 3c:aa:ef:e5:dc:9b:9d:1c:56:b1:73:d7:29:15:77: 1a:63:20:c3:39:fa:e2:48:f7:1f:75:5e:54:69:b5: f1:1b:1f:ec:b9:ca:51:22:7e:ed:04:28:7c:9b:07: 1e:cc:15:ba:61:c0:d6:ec:02:a3:9f:6d:19:f0:00: f5:37:74:52:e7:28:af:be:0a:e4:d1:55:66:47:29: 99:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:86:2A:10:CD:FC:43:E7:3F:D6:A3:04:87:D5:22:1B:9D:4C:83:42 X509v3 Authority Key Identifier: keyid:D6:9B:38:7E:6B:9C:AF:1B:D2:6B:28:6A:94:8D:5A:77:FB:85:F8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:a9:25:4a:dd:a6:f5:4f:90:09:c2:e0:cb:78:c8:7b:6c:69: 72:6b:b2:fb:50:5f:d0:ee:86:45:e5:6f:c8:7e:49:f1:c5:c3: f4:54:6b:66:49:aa:38:a7:03:09:d9:8b:aa:1e:ab:a4:bc:b6: af:7f:71:3b:56:91:14:40:ae:73:df:17:20:dd:38:bf:15:09: fd:1a:e1:1c:e6:14:c1:92:e8:89:a3:1b:e8:ec:29:35:fb:dc: 17:19:e7:ce:93:e3:d9:a1:e6:6b:f7:b1:33:66:93:f6:9e:29: f6:fe:e0:65:04:1c:11:a3:42:0f:ce:67:96:ca:9a:cf:9b:c3: 94:ba:bd:d0:c1:ea:fe:e6:46:bd:4b:13:44:a2:98:cf:93:8a: 09:1a:bd:f1:48:2e:0d:5b:19:ed:f9:bf:71:8e:d9:8b:62:9f: 70:8f:5f:39:92:1b:1f:9b:d0:03:a6:a6:a9:d6:28:b8:25:76: bc:96:87:13:27:4e:76:97:62:fb:ff:46:99:d8:13:a9:1e:b5: e2:8d:df:c1:97:50:d7:2c:91:bc:5e:9c:b5:ae:d8:71:69:97: ab:e7:9d:d8:cd:d1:52:bb:99:0e:e9:62:8d:1f:c7:e8:de:3f: 69:7c:e3:25:90:52:04:16:d2:86:18:00:94:0e:02:40:ae:84: b2:88:74:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWAOBQA0vDWSMFMaACaDrz1RzT+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVBNzdG Qjg1RjgwQTAeFw0yNTEwMTkwNTE3MTVaFw0yNTEwMjIwNjQ5MTVaMDMxMTAvBgNV BAMTKDIxODYyQTEwQ0RGQzQzRTczRkQ2QTMwNDg3RDUyMjFCOUQ0QzgzNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwlhDgLziB7T/Z7MUqdVDvETv5 00l77Hz0V5r9/RzOyST2tUI2Q6JT6yAweZop7/KKKYFoaVQdFKHmWQe9by/Iqskj ZNq2CWqEpzQBaLMTk1Uv0LN0QN8b2LJyISwU1A9XfBM2Lj9wvOZVh1zyUgHjn+n0 flYC81ErYfuV9wHh1X+ZkjX/m62ZhnrhHpbZ5gP9xE5e1de9mq7j7It9RENLntCt jgiI0k5DkR444bayWuDO0jyq7+Xcm50cVrFz1ykVdxpjIMM5+uJI9x91XlRptfEb H+y5ylEifu0EKHybBx7MFbphwNbsAqOfbRnwAPU3dFLnKK++CuTRVWZHKZnjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIYYqEM38Q+c/1qMEh9UiG51Mg0IwHwYDVR0j BBgwFoAU1ps4fmucrxvSayhqlI1ad/uF+AowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM4ZjNhMS1hYzBmLTRmN2MtOWM2Yy02YjI3NTY2ZmU3MGMvMC9ENjlCMzg3RTZC OUNBRjFCRDI2QjI4NkE5NDhENUE3N0ZCODVGODBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVBNzdGQjg1 RjgwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOGYzYTEtYWMwZi00ZjdjLTlj NmMtNmIyNzU2NmZlNzBjLzAvRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVB NzdGQjg1RjgwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCpJUrdpvVPkAnC4Mt4yHtsaXJrsvtQX9Du hkXlb8h+SfHFw/RUa2ZJqjinAwnZi6oeq6S8tq9/cTtWkRRArnPfFyDdOL8VCf0a 4RzmFMGS6ImjG+jsKTX73BcZ586T49mh5mv3sTNmk/aeKfb+4GUEHBGjQg/OZ5bK ms+bw5S6vdDB6v7mRr1LE0SimM+TigkavfFILg1bGe35v3GO2Ytin3CPXzmSGx+b 0AOmpqnWKLgldryWhxMnTnaXYvv/RpnYE6keteKN38GXUNcskbxenLWu2HFpl6vn ndjN0VK7mQ7pYo0fx+jeP2l84yWQUgQW0oYYAJQOAkCuhLKIdH0= -----END CERTIFICATE-----Generated at Mon Oct 20 09:51:31 2025 by rpki-client