$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft File: 969449FF3E24842B0CECC61AB398E88F83709FC1.mft (raw, json) Hash identifier: DB/qFAvDnAreS7MFE7yfNEjvJ8rtIaR6SkL2/BJvZxY= Subject key identifier: 69:9F:75:15:B9:DF:1F:55:7F:E1:EF:B6:AA:96:A3:50:8F:FC:06:2B Authority key identifier: 96:94:49:FF:3E:24:84:2B:0C:EC:C6:1A:B3:98:E8:8F:83:70:9F:C1 Certificate issuer: /CN=969449FF3E24842B0CECC61AB398E88F83709FC1 Certificate serial: 1558835C1E90D3C5F5DA1F986C24559EFE43CD55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft Manifest number: FF Signing time: Sun 19 Oct 2025 23:31:54 +0000 Manifest this update: Sun 19 Oct 2025 23:26:54 +0000 Manifest next update: Thu 23 Oct 2025 04:35:54 +0000 Files and hashes: 1: 3135372e32302e3134352e302f32342d3234203d3e20313532343231.roa (hash: WH9oEmWb7QCWvMI7938Ik3XMbgOCFpaDBMXkH3Xj3ws=) 2: 969449FF3E24842B0CECC61AB398E88F83709FC1.crl (hash: KLvp308EGNeUeUa/K22uyMMgKR+XS4F3LkisygrmBZ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.crl rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:58:83:5c:1e:90:d3:c5:f5:da:1f:98:6c:24:55:9e:fe:43:cd:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969449FF3E24842B0CECC61AB398E88F83709FC1 Validity Not Before: Oct 19 23:26:54 2025 GMT Not After : Oct 23 04:35:54 2025 GMT Subject: CN=699F7515B9DF1F557FE1EFB6AA96A3508FFC062B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8c:7f:66:55:7e:f7:a9:7c:88:f3:f3:68:9c: 04:09:ae:81:9f:63:e2:77:7f:d0:83:1a:4b:64:d0: 74:2c:a5:b5:da:26:67:97:9f:5a:64:66:08:e1:f7: e1:2f:c0:a4:5b:c6:c6:09:21:7d:7a:0e:4a:c0:5e: 3f:83:18:6c:99:a1:f0:ae:c6:ed:90:7e:b1:bd:12: 76:c8:a0:37:28:ec:65:39:05:e3:e4:3d:34:ec:4c: a3:69:33:ef:e1:e6:b3:71:a5:f3:1e:c3:25:ca:df: 11:24:f9:61:fb:01:af:a9:b1:06:9b:a1:28:71:0f: a8:4a:eb:af:c3:80:9c:86:6e:aa:c9:e6:50:85:63: a3:74:c0:a8:8e:8f:f9:d6:42:ea:e2:41:b8:46:9d: 3c:11:a6:b0:18:0c:df:7e:7b:ce:75:b3:2e:82:f8: eb:de:75:1c:f5:f3:05:81:74:e1:cf:2f:9f:c5:fa: 16:dc:13:7a:92:41:bf:e5:70:9e:b7:ea:66:5d:5a: 2f:89:c9:85:39:3c:05:89:3f:71:ad:41:6b:5c:36: 1a:41:c1:84:ae:2a:6a:97:44:94:af:77:ca:7b:05: 86:5f:7d:3b:6a:7f:20:32:29:06:b1:d8:9b:f8:98: 3e:e9:3e:dc:2e:2e:72:bb:20:e7:a5:0f:be:bb:ee: f2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9F:75:15:B9:DF:1F:55:7F:E1:EF:B6:AA:96:A3:50:8F:FC:06:2B X509v3 Authority Key Identifier: keyid:96:94:49:FF:3E:24:84:2B:0C:EC:C6:1A:B3:98:E8:8F:83:70:9F:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:4b:b7:95:3a:91:e0:bc:d9:7d:49:26:e2:3e:eb:dc:b7:48: d7:e7:99:f0:a1:1b:a1:8e:57:b3:d0:45:e4:2d:8c:3c:d9:66: 6b:b3:8a:31:1e:0a:a5:f1:3e:81:4d:e4:0e:44:47:30:d8:df: 09:f1:89:ab:65:7c:28:a6:96:1e:d6:a1:3f:32:04:00:0c:08: 9d:6f:84:ab:20:7c:95:e8:24:7b:5e:86:43:e6:ff:43:3f:8b: f3:8f:14:9d:50:89:6b:ec:ca:12:5a:68:7a:2a:7e:e0:21:f5: 8c:4c:34:3b:f6:d2:dd:4a:f1:fe:29:1f:a3:6f:55:60:77:87: 2c:c8:37:98:52:58:da:e9:6e:7c:c2:5b:41:85:ee:c3:71:a0: 04:7d:f5:15:f2:70:21:d6:4a:fd:46:71:43:bd:e1:ce:f7:4b: 37:81:28:c4:7c:20:52:82:9b:07:c5:d1:94:2b:7d:fd:68:43: 87:1e:d0:4e:1b:13:b2:06:f9:54:86:25:a4:0b:53:19:3c:ee: 26:47:f5:87:0b:84:5e:5f:a6:ed:54:fa:8e:e7:c9:5b:de:6b: e7:8e:8d:d4:a4:8f:41:cb:9e:f9:c4:a6:f0:2d:05:8e:9e:dd: 76:58:6c:fb:76:5f:7e:5f:c7:74:4c:70:ef:d3:77:54:ad:31: 54:9b:2c:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFViDXB6Q08X12h+YbCRVnv5DzVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4OEY4 MzcwOUZDMTAeFw0yNTEwMTkyMzI2NTRaFw0yNTEwMjMwNDM1NTRaMDMxMTAvBgNV BAMTKDY5OUY3NTE1QjlERjFGNTU3RkUxRUZCNkFBOTZBMzUwOEZGQzA2MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxjH9mVX73qXyI8/NonAQJroGf Y+J3f9CDGktk0HQspbXaJmeXn1pkZgjh9+EvwKRbxsYJIX16DkrAXj+DGGyZofCu xu2QfrG9EnbIoDco7GU5BePkPTTsTKNpM+/h5rNxpfMewyXK3xEk+WH7Aa+psQab oShxD6hK66/DgJyGbqrJ5lCFY6N0wKiOj/nWQuriQbhGnTwRprAYDN9+e851sy6C +OvedRz18wWBdOHPL5/F+hbcE3qSQb/lcJ636mZdWi+JyYU5PAWJP3GtQWtcNhpB wYSuKmqXRJSvd8p7BYZffTtqfyAyKQax2Jv4mD7pPtwuLnK7IOelD7677vJ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaZ91FbnfH1V/4e+2qpajUI/8BiswHwYDVR0j BBgwFoAUlpRJ/z4khCsM7MYas5joj4Nwn8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTRmNzkzNC1jZGM3LTQwODItODNmYi1kZjdkNGY4MjE5YWYvMC85Njk0NDlGRjNF MjQ4NDJCMENFQ0M2MUFCMzk4RTg4RjgzNzA5RkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4OEY4Mzcw OUZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzAvOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4 OEY4MzcwOUZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxLt5U6keC82X1JJuI+69y3SNfnmfChG6GO V7PQReQtjDzZZmuzijEeCqXxPoFN5A5ERzDY3wnxiatlfCimlh7WoT8yBAAMCJ1v hKsgfJXoJHtehkPm/0M/i/OPFJ1QiWvsyhJaaHoqfuAh9YxMNDv20t1K8f4pH6Nv VWB3hyzIN5hSWNrpbnzCW0GF7sNxoAR99RXycCHWSv1GcUO94c73SzeBKMR8IFKC mwfF0ZQrff1oQ4ce0E4bE7IG+VSGJaQLUxk87iZH9YcLhF5fpu1U+o7nyVvea+eO jdSkj0HLnvnEpvAtBY6e3XZYbPt2X35fx3RMcO/Td1StMVSbLK4= -----END CERTIFICATE-----Generated at Mon Oct 20 13:15:13 2025 by rpki-client