$ rpki-client -vvf repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft File: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft (raw, json) Hash identifier: E3z3qkkHr4GKChsEAvIuUcWDkTUoVlzilA6XGYsZXXs= Subject key identifier: 9E:18:3F:C4:84:57:3A:7D:EF:12:9A:C6:91:60:16:02:A9:83:18:CB Authority key identifier: 69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 Certificate issuer: /CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Certificate serial: 448AE211F8C934E322B9B606B03FEA8A60C97741 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft Manifest number: 0229 Signing time: Mon 03 Nov 2025 01:01:17 +0000 Manifest this update: Mon 03 Nov 2025 00:56:17 +0000 Manifest next update: Thu 06 Nov 2025 10:36:17 +0000 Files and hashes: 1: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl (hash: pxHaWyNpkVaW5eo6zEVG0lh0CjGicX0OuisNFlR5JDs=) 2: 3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa (hash: mN0twBIDnpakC8HUHafkf1WXSP1Z0ySHIU0xGnkB28I=) 3: 3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa (hash: VeN/bGOYLWRy+rz86CsEUNPZS6zxON2N9UHaLIP5nig=) 4: 3130332e3138392e3230362e302f32332d3233203d3e2039333431.roa (hash: VhmM6dwj6jhcWpHKGkB8nHv6O88nIuiPwR83QLa+WS8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:8a:e2:11:f8:c9:34:e3:22:b9:b6:06:b0:3f:ea:8a:60:c9:77:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Validity Not Before: Nov 3 00:56:17 2025 GMT Not After : Nov 6 10:36:17 2025 GMT Subject: CN=9E183FC484573A7DEF129AC691601602A98318CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:54:60:59:32:9d:d4:8f:be:dc:a4:23:05:4f: 7a:64:5a:f8:b8:9b:c9:06:c2:7e:08:4e:b9:d2:3c: 96:c5:47:2c:b7:f1:2f:11:c3:91:b2:7e:b3:1c:70: eb:0d:b3:b3:4e:de:8b:6d:81:6c:cb:4c:63:f2:fb: 40:0c:70:a5:f2:5a:79:2d:fa:47:dc:50:0c:4c:7f: 67:97:70:65:ef:d2:77:24:6d:b6:4e:ba:81:ec:09: ad:f9:64:24:20:fb:52:86:b2:7a:de:f2:99:ac:15: d1:b2:e0:86:89:dc:58:31:e5:cb:1c:1f:01:41:18: 78:c0:84:af:a8:2d:bf:78:ca:38:8a:b2:0b:84:e2: 8a:af:c9:b0:d2:e9:73:13:7b:bf:5c:1d:d3:9a:e9: f7:fa:7a:fd:92:fb:ca:db:cf:6e:fe:46:1c:f9:29: 88:98:06:70:15:88:a8:c0:50:fd:b5:99:5f:40:87: d5:7f:1a:94:86:7c:8f:ec:a6:5c:b2:ad:d7:a2:cd: 07:d1:e9:94:3d:66:4e:7a:55:ab:44:31:d6:bd:51: 6c:73:16:2d:af:63:4e:8a:d7:1e:2b:0b:e0:77:25: 50:00:f5:a6:0d:f8:3d:93:4e:84:22:3d:8d:c3:b2: fb:a2:0a:f6:1d:1a:4e:f7:d2:99:fe:e1:c8:8e:9c: f7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:18:3F:C4:84:57:3A:7D:EF:12:9A:C6:91:60:16:02:A9:83:18:CB X509v3 Authority Key Identifier: keyid:69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:7f:4e:9a:c8:e8:6e:33:d6:43:fe:e0:f4:db:67:72:88:bb: d5:42:64:f9:6a:d0:a1:4d:9c:e5:23:f0:84:66:a5:e0:8e:7b: fb:35:1f:48:ef:c5:79:9f:d5:56:56:bd:cb:76:0b:bb:a1:cd: ab:f7:7a:2b:42:0c:9e:71:4f:ab:9f:08:b8:38:f2:dc:3a:04: b0:7b:0f:e6:70:72:66:7f:8d:09:45:48:f9:be:d6:ec:23:36: ec:f4:8b:d6:5c:b7:56:61:d9:62:8f:71:3a:aa:2d:9d:63:34: 42:84:64:b7:e3:81:81:c5:35:b3:98:82:fc:52:7b:a1:77:0b: 75:8b:f4:09:22:9a:ce:b0:96:88:3c:9b:13:1b:03:f6:29:4a: 4f:3d:f6:a7:88:87:bf:76:94:2b:d0:ff:f9:ad:19:d1:c5:17: 98:25:76:ca:31:cb:21:e7:07:0a:46:75:61:d3:77:50:90:1d: 9f:43:bb:40:3b:af:10:c4:14:41:a7:84:12:ab:69:57:1c:bf: cf:6e:d1:0d:4f:0f:29:46:09:00:98:e7:95:a0:7a:09:80:22: 11:83:c2:09:df:ca:87:b2:84:13:5d:11:89:75:d2:e9:fe:50: 20:dd:38:0c:2b:e2:e1:a2:e2:5d:78:a5:b1:99:e3:31:10:32: 12:a8:b0:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURIriEfjJNOMiubYGsD/qimDJd0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1 REFFRTQyOTAeFw0yNTExMDMwMDU2MTdaFw0yNTExMDYxMDM2MTdaMDMxMTAvBgNV BAMTKDlFMTgzRkM0ODQ1NzNBN0RFRjEyOUFDNjkxNjAxNjAyQTk4MzE4Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrVGBZMp3Uj77cpCMFT3pkWvi4 m8kGwn4ITrnSPJbFRyy38S8Rw5GyfrMccOsNs7NO3ottgWzLTGPy+0AMcKXyWnkt +kfcUAxMf2eXcGXv0nckbbZOuoHsCa35ZCQg+1KGsnre8pmsFdGy4IaJ3Fgx5csc HwFBGHjAhK+oLb94yjiKsguE4oqvybDS6XMTe79cHdOa6ff6ev2S+8rbz27+Rhz5 KYiYBnAViKjAUP21mV9Ah9V/GpSGfI/splyyrdeizQfR6ZQ9Zk56VatEMda9UWxz Fi2vY06K1x4rC+B3JVAA9aYN+D2TToQiPY3DsvuiCvYdGk730pn+4ciOnPetAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnhg/xIRXOn3vEprGkWAWAqmDGMswHwYDVR0j BBgwFoAUaZRcOGmz5CnUsK7O35mZ6l2u5CkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODMxZWViNC1mMzU3LTQ1YTctOTI2NS00MjhiMDA3YTAyNzAvMC82OTk0NUMzODY5 QjNFNDI5RDRCMEFFQ0VERjk5OTlFQTVEQUVFNDI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1REFF RTQyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTgzMWVlYjQtZjM1Ny00NWE3LTky NjUtNDI4YjAwN2EwMjcwLzAvNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5 RUE1REFFRTQyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHt/TprI6G4z1kP+4PTbZ3KIu9VCZPlq0KFN nOUj8IRmpeCOe/s1H0jvxXmf1VZWvct2C7uhzav3eitCDJ5xT6ufCLg48tw6BLB7 D+ZwcmZ/jQlFSPm+1uwjNuz0i9Zct1Zh2WKPcTqqLZ1jNEKEZLfjgYHFNbOYgvxS e6F3C3WL9Akims6wlog8mxMbA/YpSk899qeIh792lCvQ//mtGdHFF5gldsoxyyHn BwpGdWHTd1CQHZ9Du0A7rxDEFEGnhBKraVccv89u0Q1PDylGCQCY55WgegmAIhGD wgnfyoeyhBNdEYl10un+UCDdOAwr4uGi4l14pbGZ4zEQMhKosFc= -----END CERTIFICATE-----Generated at Tue Nov 4 20:33:07 2025 by rpki-client