$ rpki-client -vvf repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft File: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft (raw, json) Hash identifier: g/5qUUYPEFWv433MYLlIO5hbBLmD8+WZly2rbi4/snE= Subject key identifier: DA:8A:82:99:C7:F0:3F:64:CF:EE:14:E5:7A:4F:01:91:A6:3D:97:82 Authority key identifier: D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA Certificate issuer: /CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Certificate serial: 677FBD2A086B44E6774A5D71FD2E2D8A5DB03EE7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft Manifest number: 01FD Signing time: Sat 18 Oct 2025 05:10:44 +0000 Manifest this update: Sat 18 Oct 2025 05:05:44 +0000 Manifest next update: Tue 21 Oct 2025 16:22:44 +0000 Files and hashes: 1: 3130332e34312e3234382e302f32342d3234203d3e20313336383431.roa (hash: V3NQepAED/G4v92/Kw8wwvusDJ/oK/3dp6EJLA6gw0s=) 2: 3130332e34312e3234392e302f32342d3234203d3e20313336383431.roa (hash: 7IiFMO+HhVDLxjHT2X4iJ4FHi1Re2KahShbn05EtlK4=) 3: 3130332e34312e3234382e302f32332d3233203d3e20313336383431.roa (hash: Q9gcXsnmhgdIFiAoT+4PlNJP+vGRpaSMes16ABWpf6E=) 4: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl (hash: 6RYwauIgXczWFGVEUp/moXxugrT26bVhWFQ1YuEZsYc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 16:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:7f:bd:2a:08:6b:44:e6:77:4a:5d:71:fd:2e:2d:8a:5d:b0:3e:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Validity Not Before: Oct 18 05:05:44 2025 GMT Not After : Oct 21 16:22:44 2025 GMT Subject: CN=DA8A8299C7F03F64CFEE14E57A4F0191A63D9782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5d:ee:10:88:8b:c7:d7:0f:30:4a:a7:be:02: 5f:5d:c3:f7:71:38:72:91:0c:15:46:29:93:0e:c8: 56:b2:5d:dd:c6:fa:50:fa:d2:4e:32:9b:94:d9:50: 2e:b4:38:68:e6:5b:03:9d:38:a6:fd:74:b2:d8:72: 39:85:e3:fe:f1:97:24:60:8b:7c:fd:72:73:1f:15: 5b:b1:ff:a7:41:ca:7b:9b:24:de:5b:a5:03:18:e1: 7b:bb:79:ac:90:fc:b2:74:c0:bd:94:90:86:33:a2: 19:a9:c4:41:1e:0a:7a:d1:02:18:90:6c:28:fb:f1: c7:a9:84:56:d0:b0:aa:35:95:0b:78:3a:de:86:6b: a8:85:5d:74:4f:a3:09:cc:f3:33:3c:65:a3:d9:22: a3:7a:29:37:3a:cd:b8:72:6c:6a:c2:c5:aa:12:a4: 13:e3:4d:69:72:b2:ff:1b:1c:b4:63:1f:77:52:57: 16:23:13:89:30:c4:21:d2:9f:56:95:11:df:a8:87: 41:c0:0b:b4:ae:aa:52:c6:a7:69:4c:49:0b:89:64: c8:b4:aa:49:16:25:9f:08:d0:2b:24:11:88:1d:b5: 1e:05:e2:4e:6e:c7:95:24:09:a6:62:ac:08:f3:73: 63:18:d7:42:99:95:55:57:cd:10:d0:77:af:5c:ce: f6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8A:82:99:C7:F0:3F:64:CF:EE:14:E5:7A:4F:01:91:A6:3D:97:82 X509v3 Authority Key Identifier: keyid:D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:47:52:8e:a5:df:3e:f1:76:b5:39:88:d1:d3:55:c9:0a:93: 9d:0d:05:ee:14:38:75:ac:45:69:71:d6:0f:ea:fc:0a:6c:e5: 6f:45:a5:0c:4c:15:f2:e4:81:ba:bd:7f:f4:07:f2:ec:fb:c9: f6:3c:9e:cb:8e:89:51:5a:89:05:2b:ce:af:49:5d:d0:c4:73: ed:15:9c:2d:6a:c8:52:b6:bb:7d:0e:d8:3c:e6:ab:3e:03:67: a6:3c:bb:57:2d:6c:de:3d:45:88:97:4d:23:18:f9:62:1d:97: 3e:9d:c7:d6:a7:2a:c9:75:63:2c:3f:02:41:1e:95:15:68:88: 61:44:9a:66:38:93:eb:17:47:a5:26:6c:27:1e:1c:d5:ea:78: 61:8d:61:6a:67:56:58:aa:7f:99:c8:c0:f8:56:7b:b8:16:ec: 29:0e:f4:6f:92:ba:2d:b4:41:af:d5:73:7b:b3:0e:2d:40:91: 1c:0e:64:d7:1d:d2:f3:d8:9a:c9:42:a2:33:b3:d2:35:74:ff: 0b:3d:13:5f:0b:29:2c:8e:80:a5:11:a2:64:b1:75:e1:13:54: fc:60:c6:26:21:23:fb:85:b9:aa:14:51:30:9b:b9:ed:3e:03: a9:79:69:47:d3:d0:65:5d:7a:91:a5:f9:c9:16:eb:a8:70:75: 5a:78:86:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ3+9KghrROZ3Sl1x/S4til2wPucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVG QkM0QjFGQTAeFw0yNTEwMTgwNTA1NDRaFw0yNTEwMjExNjIyNDRaMDMxMTAvBgNV BAMTKERBOEE4Mjk5QzdGMDNGNjRDRkVFMTRFNTdBNEYwMTkxQTYzRDk3ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEXe4QiIvH1w8wSqe+Al9dw/dx OHKRDBVGKZMOyFayXd3G+lD60k4ym5TZUC60OGjmWwOdOKb9dLLYcjmF4/7xlyRg i3z9cnMfFVux/6dBynubJN5bpQMY4Xu7eayQ/LJ0wL2UkIYzohmpxEEeCnrRAhiQ bCj78cephFbQsKo1lQt4Ot6Ga6iFXXRPownM8zM8ZaPZIqN6KTc6zbhybGrCxaoS pBPjTWlysv8bHLRjH3dSVxYjE4kwxCHSn1aVEd+oh0HAC7SuqlLGp2lMSQuJZMi0 qkkWJZ8I0CskEYgdtR4F4k5ux5UkCaZirAjzc2MY10KZlVVXzRDQd69czvaVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2oqCmcfwP2TP7hTlek8BkaY9l4IwHwYDVR0j BBgwFoAU1GmTe9AwV1pjibH/TNsYXvvEsfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzUyNzdlOC03ZDBmLTQxODQtOWMyOC1hNjYzNWVmZWYyOWMvMC9ENDY5OTM3QkQw MzA1NzVBNjM4OUIxRkY0Q0RCMTg1RUZCQzRCMUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVGQkM0 QjFGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc1Mjc3ZTgtN2QwZi00MTg0LTlj MjgtYTY2MzVlZmVmMjljLzAvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4 NUVGQkM0QjFGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRHUo6l3z7xdrU5iNHTVckKk50NBe4UOHWs RWlx1g/q/Aps5W9FpQxMFfLkgbq9f/QH8uz7yfY8nsuOiVFaiQUrzq9JXdDEc+0V nC1qyFK2u30O2Dzmqz4DZ6Y8u1ctbN49RYiXTSMY+WIdlz6dx9anKsl1Yyw/AkEe lRVoiGFEmmY4k+sXR6UmbCceHNXqeGGNYWpnVliqf5nIwPhWe7gW7CkO9G+Sui20 Qa/Vc3uzDi1AkRwOZNcd0vPYmslCojOz0jV0/ws9E18LKSyOgKURomSxdeETVPxg xiYhI/uFuaoUUTCbue0+A6l5aUfT0GVdepGl+ckW66hwdVp4hus= -----END CERTIFICATE-----Generated at Mon Oct 20 10:31:52 2025 by rpki-client