$ rpki-client -vvf repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft File: 469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft (raw, json) Hash identifier: YjeMfcdXG0t3GA6uOAShYaKOm9M8+ev0VCfyzpu8yIE= Subject key identifier: 06:13:9B:B3:96:3A:99:02:E1:98:BB:20:E6:F9:0C:67:7A:03:51:92 Authority key identifier: 46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76 Certificate issuer: /CN=469F8799C9283F6AFAB227A7A8E070D32DC1E876 Certificate serial: 0A99B6F3FEF8E532545AF95FE23183464D773F32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft Manifest number: C2 Signing time: Mon 20 Oct 2025 00:40:40 +0000 Manifest this update: Mon 20 Oct 2025 00:35:40 +0000 Manifest next update: Thu 23 Oct 2025 05:21:40 +0000 Files and hashes: 1: 469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl (hash: cMRJtovIp+pG9zB9Zamn6FcEN2ouh/Ia6zq0C639GGc=) 2: 3136302e32352e3233362e302f32332d3234203d3e20313533313035.roa (hash: ugFHgJ4jVtmoNRHFYzSQ9xdBRfhWtLtZAJwWKuo4XXg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:99:b6:f3:fe:f8:e5:32:54:5a:f9:5f:e2:31:83:46:4d:77:3f:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=469F8799C9283F6AFAB227A7A8E070D32DC1E876 Validity Not Before: Oct 20 00:35:40 2025 GMT Not After : Oct 23 05:21:40 2025 GMT Subject: CN=06139BB3963A9902E198BB20E6F90C677A035192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9d:7a:e8:8c:da:cb:f6:a0:a8:0e:e1:e2:20: 12:29:8b:d1:64:6d:95:ba:31:99:0a:72:e4:fb:34: c1:07:a3:6f:00:c7:61:83:49:05:fc:5b:b6:a3:22: a8:3b:6e:8e:fb:52:aa:37:4e:8f:14:54:f7:d3:da: 67:64:50:6d:e2:50:b4:81:93:19:49:de:b6:71:73: 7f:6e:e0:a4:e4:2c:92:cf:7d:8a:c6:10:89:f9:d9: dc:8e:f4:87:21:a0:19:48:95:34:ef:c3:f5:e3:17: 6c:39:96:6f:f8:b1:3e:2a:ef:f9:ff:8e:c2:b5:25: 4c:04:db:d7:3d:ad:63:cf:92:2f:ba:36:31:9f:7f: 2d:0c:af:71:08:16:fc:65:da:de:e7:70:e9:67:6a: a8:4e:5f:38:0c:f2:36:47:54:a9:f5:f4:e5:83:8f: f3:2f:a4:71:62:88:20:73:fc:39:d4:79:5c:49:5a: 0c:60:69:32:d7:f7:0b:9c:54:cd:80:33:86:77:7e: 1b:98:29:bd:0e:83:c5:67:bf:dc:31:63:88:8a:a9: d5:49:81:c2:f5:a8:05:64:2e:39:9c:b2:32:01:ae: bf:8f:25:c6:2e:a4:e3:28:c1:af:48:ff:d5:9b:2f: 0d:f4:78:35:c3:0f:94:61:fd:20:56:d9:66:c9:ef: 1a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:13:9B:B3:96:3A:99:02:E1:98:BB:20:E6:F9:0C:67:7A:03:51:92 X509v3 Authority Key Identifier: keyid:46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:be:ec:45:02:25:0f:67:a0:85:a0:80:ac:f5:15:7d:d3:71: 26:80:b9:66:4b:7e:e9:92:5b:48:15:c6:e8:28:32:0c:5f:fd: b9:4d:11:ac:8b:b1:f9:b3:7c:cf:c4:ec:ce:da:d2:1b:9a:ad: b0:30:4f:ff:de:39:ec:d5:04:a5:8d:12:e7:22:17:ae:c9:2e: a2:4e:39:a8:31:65:c7:83:08:02:1d:1c:53:35:be:a5:8e:a6: 81:6f:44:06:a6:15:03:98:12:c3:74:91:58:dd:a1:f4:d9:04: a8:db:7b:e4:e5:bb:dc:2c:dc:d6:8a:29:c7:05:3a:70:57:2f: 72:e8:19:cb:cc:0e:45:ca:41:6d:eb:1d:eb:00:c9:4e:60:8f: f8:f8:a9:f6:f9:b0:52:25:e2:f8:96:a9:60:ae:27:8f:eb:e8: f1:77:c6:cb:7b:52:99:5e:72:40:f3:7a:36:1c:f4:b9:80:af: 91:57:b9:0f:af:7e:6e:51:69:b5:c4:42:57:fa:9a:96:af:97: 00:86:f5:21:10:a3:99:c4:e9:b9:39:f2:71:0e:cd:21:f7:fc: 68:d2:26:75:16:90:6e:98:fd:7b:e0:f9:1d:81:72:ea:3f:e3: 06:96:d5:f8:3f:e9:78:99:7f:05:37:1d:9a:cc:f1:2d:2c:57: f7:57:bf:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCpm28/745TJUWvlf4jGDRk13PzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcwRDMy REMxRTg3NjAeFw0yNTEwMjAwMDM1NDBaFw0yNTEwMjMwNTIxNDBaMDMxMTAvBgNV BAMTKDA2MTM5QkIzOTYzQTk5MDJFMTk4QkIyMEU2RjkwQzY3N0EwMzUxOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGnXrojNrL9qCoDuHiIBIpi9Fk bZW6MZkKcuT7NMEHo28Ax2GDSQX8W7ajIqg7bo77Uqo3To8UVPfT2mdkUG3iULSB kxlJ3rZxc39u4KTkLJLPfYrGEIn52dyO9IchoBlIlTTvw/XjF2w5lm/4sT4q7/n/ jsK1JUwE29c9rWPPki+6NjGffy0Mr3EIFvxl2t7ncOlnaqhOXzgM8jZHVKn19OWD j/MvpHFiiCBz/DnUeVxJWgxgaTLX9wucVM2AM4Z3fhuYKb0Og8Vnv9wxY4iKqdVJ gcL1qAVkLjmcsjIBrr+PJcYupOMowa9I/9WbLw30eDXDD5Rh/SBW2WbJ7xr1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBhObs5Y6mQLhmLsg5vkMZ3oDUZIwHwYDVR0j BBgwFoAURp+HmckoP2r6sienqOBw0y3B6HYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWMyYTFhYy01YWU0LTQ3YWQtOGRiMS02NTJjN2YzZjdlOGYvMC80NjlGODc5OUM5 MjgzRjZBRkFCMjI3QTdBOEUwNzBEMzJEQzFFODc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcwRDMyREMx RTg3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVjMmExYWMtNWFlNC00N2FkLThk YjEtNjUyYzdmM2Y3ZThmLzAvNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcw RDMyREMxRTg3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAm+7EUCJQ9noIWggKz1FX3TcSaAuWZLfumS W0gVxugoMgxf/blNEayLsfmzfM/E7M7a0huarbAwT//eOezVBKWNEuciF67JLqJO OagxZceDCAIdHFM1vqWOpoFvRAamFQOYEsN0kVjdofTZBKjbe+Tlu9ws3NaKKccF OnBXL3LoGcvMDkXKQW3rHesAyU5gj/j4qfb5sFIl4viWqWCuJ4/r6PF3xst7Uple ckDzejYc9LmAr5FXuQ+vfm5RabXEQlf6mpavlwCG9SEQo5nE6bk58nEOzSH3/GjS JnUWkG6Y/Xvg+R2Bcuo/4waW1fg/6XiZfwU3HZrM8S0sV/dXvwE= -----END CERTIFICATE-----Generated at Mon Oct 20 08:44:59 2025 by rpki-client