$ rpki-client -vvf repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft File: C69451771D2C519C2269EA17115B3E600E9CF809.mft (raw, json) Hash identifier: 5ilTSG+aCv3Dtfe+k4lqeJRKgPO7eqQQ+D9tQeghHEU= Subject key identifier: D4:B7:7B:59:20:99:4C:F0:3B:45:1A:A2:75:9C:17:22:F2:09:D3:0F Authority key identifier: C6:94:51:77:1D:2C:51:9C:22:69:EA:17:11:5B:3E:60:0E:9C:F8:09 Certificate issuer: /CN=C69451771D2C519C2269EA17115B3E600E9CF809 Certificate serial: 4D02B3219C085115372AD685B03AC57CED86D421 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C69451771D2C519C2269EA17115B3E600E9CF809.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft Manifest number: B2 Signing time: Mon 20 Oct 2025 07:22:18 +0000 Manifest this update: Mon 20 Oct 2025 07:17:18 +0000 Manifest next update: Thu 23 Oct 2025 13:01:18 +0000 Files and hashes: 1: C69451771D2C519C2269EA17115B3E600E9CF809.crl (hash: ypqi/6/C6ZRsVh1UGCtmideCkBz3M9rr5F9aZzfrxSQ=) 2: 3136302e32352e34362e302f32332d3233203d3e20313533303539.roa (hash: HyQIrSfaVLasp8fH2cuEU5XU64FY/TlMBq7lyZFmW5w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.crl rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C69451771D2C519C2269EA17115B3E600E9CF809.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:02:b3:21:9c:08:51:15:37:2a:d6:85:b0:3a:c5:7c:ed:86:d4:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C69451771D2C519C2269EA17115B3E600E9CF809 Validity Not Before: Oct 20 07:17:18 2025 GMT Not After : Oct 23 13:01:18 2025 GMT Subject: CN=D4B77B5920994CF03B451AA2759C1722F209D30F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f9:85:cf:8d:a8:9b:31:33:d6:95:36:fb:ce: 69:de:a5:8b:c2:78:fe:95:45:d2:a5:94:c0:9c:45: 2f:4f:0a:97:be:8f:6c:b2:89:c8:99:92:e7:b7:20: ef:7d:85:e5:04:f4:1b:ad:2e:a9:86:32:27:c0:64: 7b:4b:84:52:98:f5:97:ac:7b:34:93:6b:32:53:b3: d2:d2:79:6e:8c:1f:bd:11:91:23:17:d3:04:96:19: d6:d3:73:8d:72:0b:1a:14:98:25:38:ba:64:8f:05: 4f:89:65:02:ba:ca:24:3a:48:48:55:a2:59:29:c3: 1b:46:7c:1e:8d:53:35:41:a8:d2:fa:0e:ec:6b:3e: c4:85:4c:61:19:0b:77:5d:2d:d6:b5:53:1f:8d:01: 57:76:7a:15:de:f4:e1:6b:dc:bd:ae:f9:0a:fa:c1: eb:20:e4:f1:b0:02:73:56:f2:95:fb:eb:ac:f4:fa: d6:bc:29:b9:2c:bc:65:f3:c7:bd:fc:fc:e5:65:a4: 93:0d:3c:51:8f:cd:b5:80:f8:46:37:0e:8e:f6:79: dc:21:9a:c8:8b:5b:ae:46:c2:03:2d:4c:a3:51:28: 78:f6:a4:d1:b9:83:b9:91:a4:23:db:87:0a:a0:d6: e4:4c:b9:14:e1:c0:db:3c:34:c3:72:23:15:09:3c: 68:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B7:7B:59:20:99:4C:F0:3B:45:1A:A2:75:9C:17:22:F2:09:D3:0F X509v3 Authority Key Identifier: keyid:C6:94:51:77:1D:2C:51:9C:22:69:EA:17:11:5B:3E:60:0E:9C:F8:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C69451771D2C519C2269EA17115B3E600E9CF809.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d2:f8:3d:f6:c3:45:59:71:2f:e2:e5:61:55:9d:a9:3c:66: d1:f6:02:6d:b6:5c:44:3f:dc:a9:42:67:19:4d:37:1c:84:33: 2e:da:45:66:33:d7:10:73:63:5f:32:ae:33:1c:f5:c8:3e:8a: 27:91:9a:d6:61:ff:75:14:77:91:88:a7:21:29:90:7d:f3:31: 8d:25:5b:41:1d:0c:27:bc:b5:46:92:03:e6:b0:e6:79:19:08: c2:63:e7:4d:1e:36:55:ff:8c:17:a6:60:a2:91:34:90:85:e5: f5:5a:76:b8:5f:33:ad:87:09:9e:67:b1:75:c8:d5:4a:80:b9: e3:50:c3:22:7b:ce:36:ad:e6:f9:84:18:65:c1:f4:db:91:f0: df:b4:4f:00:93:dc:bb:33:c8:5e:dd:a4:0b:ba:fe:ee:89:64: 14:b1:4c:bf:43:09:4d:55:27:dd:fc:c8:03:60:63:64:73:fb: e7:00:e7:25:1d:0e:05:bd:a0:30:31:a1:67:53:b5:db:a9:8a: 64:69:06:0b:23:88:ec:7f:f2:5b:63:22:49:a8:f4:b8:e5:76: eb:84:95:50:71:1f:61:67:0c:f7:65:78:e7:ae:ff:38:46:2f: e7:ae:ed:4f:2c:a7:77:95:37:96:0f:dc:49:03:92:2b:de:31: 00:d0:16:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTQKzIZwIURU3KtaFsDrFfO2G1CEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5NDUxNzcxRDJDNTE5QzIyNjlFQTE3MTE1QjNFNjAw RTlDRjgwOTAeFw0yNTEwMjAwNzE3MThaFw0yNTEwMjMxMzAxMThaMDMxMTAvBgNV BAMTKEQ0Qjc3QjU5MjA5OTRDRjAzQjQ1MUFBMjc1OUMxNzIyRjIwOUQzMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx+YXPjaibMTPWlTb7zmnepYvC eP6VRdKllMCcRS9PCpe+j2yyiciZkue3IO99heUE9ButLqmGMifAZHtLhFKY9Zes ezSTazJTs9LSeW6MH70RkSMX0wSWGdbTc41yCxoUmCU4umSPBU+JZQK6yiQ6SEhV olkpwxtGfB6NUzVBqNL6DuxrPsSFTGEZC3ddLda1Ux+NAVd2ehXe9OFr3L2u+Qr6 wesg5PGwAnNW8pX766z0+ta8KbksvGXzx738/OVlpJMNPFGPzbWA+EY3Do72edwh msiLW65GwgMtTKNRKHj2pNG5g7mRpCPbhwqg1uRMuRThwNs8NMNyIxUJPGi7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1Ld7WSCZTPA7RRqidZwXIvIJ0w8wHwYDVR0j BBgwFoAUxpRRdx0sUZwiaeoXEVs+YA6c+AkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTE0M2ExOS0yMTdhLTQ5ZWYtOGNiMS01OTMwMTJkMmI3NTkvMC9DNjk0NTE3NzFE MkM1MTlDMjI2OUVBMTcxMTVCM0U2MDBFOUNGODA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzY5NDUxNzcxRDJDNTE5QzIyNjlFQTE3MTE1QjNFNjAwRTlD RjgwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWExNDNhMTktMjE3YS00OWVmLThj YjEtNTkzMDEyZDJiNzU5LzAvQzY5NDUxNzcxRDJDNTE5QzIyNjlFQTE3MTE1QjNF NjAwRTlDRjgwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfS+D32w0VZcS/i5WFVnak8ZtH2Am22XEQ/ 3KlCZxlNNxyEMy7aRWYz1xBzY18yrjMc9cg+iieRmtZh/3UUd5GIpyEpkH3zMY0l W0EdDCe8tUaSA+aw5nkZCMJj500eNlX/jBemYKKRNJCF5fVadrhfM62HCZ5nsXXI 1UqAueNQwyJ7zjat5vmEGGXB9NuR8N+0TwCT3LszyF7dpAu6/u6JZBSxTL9DCU1V J938yANgY2Rz++cA5yUdDgW9oDAxoWdTtdupimRpBgsjiOx/8ltjIkmo9LjlduuE lVBxH2FnDPdleOeu/zhGL+eu7U8sp3eVN5YP3EkDkiveMQDQFiE= -----END CERTIFICATE-----Generated at Tue Oct 21 05:11:15 2025 by rpki-client