$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft File: 69FEA3D523BC4635AE385A6D91412834159FF34B.mft (raw, json) Hash identifier: rGJub8zjZTdlSHapC5WujqkzXwTdCK6N9NN2D0PdJHU= Subject key identifier: 60:9E:3E:90:B5:1D:B1:1C:C2:CC:E6:F5:6F:E2:44:90:29:CB:11:AC Authority key identifier: 69:FE:A3:D5:23:BC:46:35:AE:38:5A:6D:91:41:28:34:15:9F:F3:4B Certificate issuer: /CN=69FEA3D523BC4635AE385A6D91412834159FF34B Certificate serial: 44A04EF8D2974FD226FD1D28BBBAEED32DB171BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft Manifest number: CA Signing time: Sun 19 Oct 2025 17:31:57 +0000 Manifest this update: Sun 19 Oct 2025 17:26:57 +0000 Manifest next update: Thu 23 Oct 2025 01:09:57 +0000 Files and hashes: 1: 3136302e32322e3231372e302f32342d3234203d3e20313532383431.roa (hash: 2H9ugvO1mqNF5HVzGPvvJyo9xLTxDYsuZlPEZxpIFQg=) 2: 69FEA3D523BC4635AE385A6D91412834159FF34B.crl (hash: DxNWaPvt1JvQdAxI1Jrp2zlmjcVxfDoPNE4reOM96PM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.crl rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 01:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:a0:4e:f8:d2:97:4f:d2:26:fd:1d:28:bb:ba:ee:d3:2d:b1:71:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69FEA3D523BC4635AE385A6D91412834159FF34B Validity Not Before: Oct 19 17:26:57 2025 GMT Not After : Oct 23 01:09:57 2025 GMT Subject: CN=609E3E90B51DB11CC2CCE6F56FE2449029CB11AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:09:0a:75:5e:9e:67:f2:39:a4:46:03:12:5f: df:3b:e4:73:5b:69:73:2d:48:78:30:eb:2c:5d:11: ba:e3:76:6f:b8:eb:01:40:c4:fb:42:ee:a3:75:52: 0e:fc:3b:e4:5c:a8:c2:9f:ae:e2:7c:15:27:20:85: 02:71:a9:78:59:a2:0f:1f:6b:94:22:c8:c1:a8:80: a4:f8:54:a8:94:10:99:53:f4:09:00:e7:7c:bb:b9: 09:25:bc:a8:34:74:5d:8e:b3:8b:cc:4f:43:10:dd: fb:ac:ab:23:a4:c3:b0:a5:ed:6b:2b:71:99:cd:90: 41:f9:25:f7:cf:30:e2:7e:94:62:da:79:e0:b6:70: 83:5c:b1:41:4e:3b:6b:e9:47:49:8f:39:3d:02:9a: 15:04:a6:1f:36:bc:33:47:67:f5:d5:c2:a8:31:5d: 65:3e:8a:83:a4:89:4b:3a:08:d8:3e:1e:9d:9e:4c: a6:b7:2e:9b:7c:a0:0e:0f:f1:89:12:a0:01:5b:78: b6:8a:bc:b1:26:df:97:ef:96:a6:e5:89:44:3e:73: 9c:d7:f3:13:31:4d:1e:f5:21:3d:ff:83:ba:4c:b6: 31:c4:8a:51:07:b3:13:b7:7d:63:5e:25:b4:85:39: 85:3f:71:b4:71:a7:18:d6:24:dd:fa:10:cd:a7:8e: d1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:9E:3E:90:B5:1D:B1:1C:C2:CC:E6:F5:6F:E2:44:90:29:CB:11:AC X509v3 Authority Key Identifier: keyid:69:FE:A3:D5:23:BC:46:35:AE:38:5A:6D:91:41:28:34:15:9F:F3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:3a:67:32:1c:c8:1c:78:25:02:25:8a:36:aa:8c:ad:81:9b: 13:82:43:cd:71:16:34:d5:04:d3:20:e3:f2:8b:9f:53:82:b7: c0:8c:2f:d3:a3:a6:c9:e4:d3:24:9c:ea:6a:04:0b:67:76:4d: e7:1e:0e:e1:28:ee:dd:13:22:00:64:a5:66:dc:bc:aa:98:60: 5f:55:c1:55:65:c2:34:6b:cb:d7:95:da:26:90:db:64:75:42: ff:91:ad:9e:ab:cc:b5:7e:3c:e8:12:7e:59:95:f8:f2:c5:aa: fc:d2:9c:91:55:92:5e:a8:7e:d1:b4:75:ff:4b:01:70:55:c9: 7b:8e:d8:1a:1e:25:c3:39:4a:b2:38:b0:14:96:48:de:63:fb: 8b:1e:36:39:40:97:c9:1c:de:4c:8f:35:5c:08:72:24:92:e8: 0e:ef:51:66:13:d7:3e:d2:17:97:12:8f:0e:c6:67:70:97:3d: 79:e3:52:29:aa:3d:0a:10:dd:09:b8:00:a8:6e:1f:67:f4:a7: ab:20:24:23:da:af:da:30:4c:44:b2:c3:61:ef:6e:d7:87:6c: 9c:45:a5:39:26:e9:36:e3:9e:d5:70:34:9c:10:99:1d:b5:ae: bf:d5:d1:4f:e1:72:62:48:18:d2:ff:01:a6:b7:a7:9b:61:18: ff:2d:e1:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURKBO+NKXT9Im/R0ou7ru0y2xcb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4MzQx NTlGRjM0QjAeFw0yNTEwMTkxNzI2NTdaFw0yNTEwMjMwMTA5NTdaMDMxMTAvBgNV BAMTKDYwOUUzRTkwQjUxREIxMUNDMkNDRTZGNTZGRTI0NDkwMjlDQjExQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0CQp1Xp5n8jmkRgMSX9875HNb aXMtSHgw6yxdEbrjdm+46wFAxPtC7qN1Ug78O+RcqMKfruJ8FScghQJxqXhZog8f a5QiyMGogKT4VKiUEJlT9AkA53y7uQklvKg0dF2Os4vMT0MQ3fusqyOkw7Cl7Wsr cZnNkEH5JffPMOJ+lGLaeeC2cINcsUFOO2vpR0mPOT0CmhUEph82vDNHZ/XVwqgx XWU+ioOkiUs6CNg+Hp2eTKa3Lpt8oA4P8YkSoAFbeLaKvLEm35fvlqbliUQ+c5zX 8xMxTR71IT3/g7pMtjHEilEHsxO3fWNeJbSFOYU/cbRxpxjWJN36EM2njtHvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYJ4+kLUdsRzCzOb1b+JEkCnLEawwHwYDVR0j BBgwFoAUaf6j1SO8RjWuOFptkUEoNBWf80swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTdkNzM4ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMC82OUZFQTNENTIz QkM0NjM1QUUzODVBNkQ5MTQxMjgzNDE1OUZGMzRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4MzQxNTlG RjM0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzAvNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4 MzQxNTlGRjM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHc6ZzIcyBx4JQIlijaqjK2BmxOCQ81xFjTV BNMg4/KLn1OCt8CML9Ojpsnk0ySc6moEC2d2TeceDuEo7t0TIgBkpWbcvKqYYF9V wVVlwjRry9eV2iaQ22R1Qv+RrZ6rzLV+POgSflmV+PLFqvzSnJFVkl6oftG0df9L AXBVyXuO2BoeJcM5SrI4sBSWSN5j+4seNjlAl8kc3kyPNVwIciSS6A7vUWYT1z7S F5cSjw7GZ3CXPXnjUimqPQoQ3Qm4AKhuH2f0p6sgJCPar9owTESyw2HvbteHbJxF pTkm6TbjntVwNJwQmR21rr/V0U/hcmJIGNL/Aaa3p5thGP8t4SU= -----END CERTIFICATE-----Generated at Mon Oct 20 17:01:25 2025 by rpki-client