$ rpki-client -vvf repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft File: 69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft (raw, json) Hash identifier: dpyzR4Mp+8gDpUWIpToXTghS/yGCfehCbBNH5OFnkT0= Subject key identifier: 06:61:CB:BD:E6:9A:05:09:59:EE:65:75:4A:21:89:D8:87:79:28:1C Authority key identifier: 69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7 Certificate issuer: /CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7 Certificate serial: 6C5116FA07525D46E5BA7788107F7FD946472A40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft Manifest number: 0201 Signing time: Mon 20 Oct 2025 12:11:45 +0000 Manifest this update: Mon 20 Oct 2025 12:06:45 +0000 Manifest next update: Thu 23 Oct 2025 23:38:45 +0000 Files and hashes: 1: 3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa (hash: 9ZkiCqfJaR2Zz0Qi5RLZPH4v5HuKpySyDiWp1DDQcaA=) 2: 3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa (hash: SA4jtW4MamCTfZtBnVJuWRU56DDkBtSVfuwzHUHzgZQ=) 3: 3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa (hash: ZStiQiNLIgsMsK4weqSRNlK9ytdK1wtKwc7rWiw2Y64=) 4: 69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl (hash: F8FO0bbL00OFi3u0EMj+EWTDWVRbwkkdseu7yCYoXDg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:51:16:fa:07:52:5d:46:e5:ba:77:88:10:7f:7f:d9:46:47:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7 Validity Not Before: Oct 20 12:06:45 2025 GMT Not After : Oct 23 23:38:45 2025 GMT Subject: CN=0661CBBDE69A050959EE65754A2189D88779281C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:65:cd:f4:90:4c:4b:21:96:fa:37:00:48:4c: 87:b6:89:7e:18:b5:5f:07:73:28:b3:26:c9:71:3c: ff:f6:03:ba:34:ef:79:c1:60:46:d2:2c:b4:78:49: dc:fd:e0:1b:51:65:3f:8c:f4:5c:a2:8f:d1:59:88: a3:b3:04:04:a0:8f:ea:c3:a7:8b:19:ea:d8:ca:d6: 40:74:28:7f:fa:14:9d:7c:d6:23:10:ce:6d:7f:2f: ae:76:a0:c3:fc:f9:4e:de:02:37:5e:15:7c:d3:8d: e0:ab:6f:73:cb:f6:08:c5:7b:c2:7f:7c:a4:2c:5a: 82:49:c3:15:94:29:ac:b0:96:81:05:6f:4c:bd:4e: ed:68:64:7f:2d:36:6f:22:a3:65:c0:33:5f:24:44: bc:f9:74:69:25:f3:d7:7d:b1:b8:b3:fc:15:7e:74: 31:e8:d3:79:32:44:3f:7d:0d:fe:91:47:5f:4f:be: 17:94:14:f8:dc:65:19:52:b3:ed:1a:3a:e1:04:2d: 69:51:58:7c:83:b3:b7:55:2e:b9:89:51:4b:31:02: d8:a7:2c:a4:d9:3d:2a:7f:8a:f1:f2:a7:bb:ea:66: f7:23:ea:58:7e:c5:fd:cc:0b:6a:41:23:9b:fa:a5: 4f:3a:02:73:b4:1d:07:1c:4b:84:8b:5d:2a:91:ba: 8f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:61:CB:BD:E6:9A:05:09:59:EE:65:75:4A:21:89:D8:87:79:28:1C X509v3 Authority Key Identifier: keyid:69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:5f:13:6d:e2:23:9b:e6:d5:b3:27:30:8c:1e:57:27:39:1a: f9:df:81:65:fc:0f:50:fe:82:49:8a:be:4f:8e:b6:fd:19:cf: 34:8b:31:35:0c:37:cb:10:e3:9a:67:44:4b:8c:2d:25:df:bb: 1d:1d:18:62:28:7f:29:b4:25:1e:83:34:d0:79:29:9c:42:17: cd:27:07:94:55:5b:64:98:67:8b:c0:03:5b:64:be:7e:22:0f: 08:04:87:3c:2d:68:b5:05:12:0c:81:bd:08:d0:72:88:25:14: 42:c8:59:72:b4:57:bc:e2:b2:0a:d1:7c:39:48:63:37:b3:b2: ef:61:ca:f7:aa:39:52:de:02:08:c3:d8:23:62:75:aa:21:70: 5d:9f:bb:98:6f:cc:e5:9a:4b:4b:38:a3:d5:30:8c:e2:9e:b4: 57:b4:11:a2:ea:34:b6:0a:4d:68:95:ee:00:25:b5:da:24:07: 67:c2:21:b0:3e:eb:6a:a4:a1:a7:20:39:fb:ba:82:3e:32:46: 73:89:8b:9c:21:11:6a:a6:b5:4d:84:64:6e:16:f2:f9:1c:a9: f0:c7:07:e4:2b:35:9f:23:9d:a3:e9:9c:ac:bc:ed:14:13:92: a0:ef:26:e0:a6:9b:40:3b:b1:9b:8a:5b:50:99:dc:50:30:c2: fd:2e:ec:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbFEW+gdSXUbluneIEH9/2UZHKkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFFNTE2 QTU5QjVFNzAeFw0yNTEwMjAxMjA2NDVaFw0yNTEwMjMyMzM4NDVaMDMxMTAvBgNV BAMTKDA2NjFDQkJERTY5QTA1MDk1OUVFNjU3NTRBMjE4OUQ4ODc3OTI4MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJZc30kExLIZb6NwBITIe2iX4Y tV8HcyizJslxPP/2A7o073nBYEbSLLR4Sdz94BtRZT+M9Fyij9FZiKOzBASgj+rD p4sZ6tjK1kB0KH/6FJ181iMQzm1/L652oMP8+U7eAjdeFXzTjeCrb3PL9gjFe8J/ fKQsWoJJwxWUKaywloEFb0y9Tu1oZH8tNm8io2XAM18kRLz5dGkl89d9sbiz/BV+ dDHo03kyRD99Df6RR19PvheUFPjcZRlSs+0aOuEELWlRWHyDs7dVLrmJUUsxAtin LKTZPSp/ivHyp7vqZvcj6lh+xf3MC2pBI5v6pU86AnO0HQccS4SLXSqRuo9NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBmHLveaaBQlZ7mV1SiGJ2Id5KBwwHwYDVR0j BBgwFoAUaf+a80ERzUY37YpstDUeUWpZtecwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjQwYWJlNi04ZGVlLTRiZDEtODE0Yy0yYWYzMWEzZDljZGYvMC82OUZGOUFGMzQx MTFDRDQ2MzdFRDhBNkNCNDM1MUU1MTZBNTlCNUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFFNTE2QTU5 QjVFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY0MGFiZTYtOGRlZS00YmQxLTgx NGMtMmFmMzFhM2Q5Y2RmLzAvNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFF NTE2QTU5QjVFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNfE23iI5vm1bMnMIweVyc5GvnfgWX8D1D+ gkmKvk+Otv0ZzzSLMTUMN8sQ45pnREuMLSXfux0dGGIofym0JR6DNNB5KZxCF80n B5RVW2SYZ4vAA1tkvn4iDwgEhzwtaLUFEgyBvQjQcoglFELIWXK0V7zisgrRfDlI Yzezsu9hyveqOVLeAgjD2CNidaohcF2fu5hvzOWaS0s4o9UwjOKetFe0EaLqNLYK TWiV7gAltdokB2fCIbA+62qkoacgOfu6gj4yRnOJi5whEWqmtU2EZG4W8vkcqfDH B+QrNZ8jnaPpnKy87RQTkqDvJuCmm0A7sZuKW1CZ3FAwwv0u7Ng= -----END CERTIFICATE-----Generated at Mon Oct 20 14:33:56 2025 by rpki-client