$ rpki-client -vvf repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft File: 69D341364BC344B4ED6B3A65031AACB403AB3222.mft (raw, json) Hash identifier: 3ALAoMhFm/jh3djcplgWgAysPNmSduFnBM+7RzKC9Ko= Subject key identifier: 70:EC:56:B2:CA:B0:61:A6:4E:E9:EE:E4:8F:AD:9D:43:C5:BE:3E:57 Authority key identifier: 69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 Certificate issuer: /CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Certificate serial: 0C396E4D02BA58381E4C16F5A9830D909FDCAC3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject info access: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft Manifest number: 0520 Signing time: Sun 02 Nov 2025 05:41:21 +0000 Manifest this update: Sun 02 Nov 2025 05:36:21 +0000 Manifest next update: Wed 05 Nov 2025 16:07:21 +0000 Files and hashes: 1: 3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa (hash: mEwVbYgiqYJGIGp+5J9MnWrl5gm8ToUUdLv1IaAGjLQ=) 2: 69D341364BC344B4ED6B3A65031AACB403AB3222.crl (hash: WxlXr+93c5couz/6Cgjn8hfpAlflDKVKCX3qYSwOVMI=) 3: 323430323a326134303a3a2f33322d3438203d3e20313336383733.roa (hash: /62nOK71rLN/rA80+Xk3S/HgS8HMB1l9OOKuRpOZFP0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:39:6e:4d:02:ba:58:38:1e:4c:16:f5:a9:83:0d:90:9f:dc:ac:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Validity Not Before: Nov 2 05:36:21 2025 GMT Not After : Nov 5 16:07:21 2025 GMT Subject: CN=70EC56B2CAB061A64EE9EEE48FAD9D43C5BE3E57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f7:2a:00:38:b0:dc:83:cf:a1:70:c5:3b:1d: f3:65:4c:dd:f3:7a:84:72:e8:67:5d:23:92:bd:5b: e8:69:74:55:13:be:bd:f4:fa:8e:8b:e1:90:d5:82: 08:35:7a:2e:02:c1:88:5b:af:af:20:ef:61:03:0f: f8:1c:fb:40:b1:98:70:84:9b:cb:4e:9a:99:b1:3e: 65:94:db:d4:b6:39:81:e6:98:01:79:f7:2d:2f:5b: 6b:45:b1:90:63:ae:0d:50:f3:d9:1c:39:d1:57:62: 30:0b:33:5d:47:fe:28:a4:ae:33:9d:2b:bd:66:e8: 31:57:d1:08:61:1c:90:55:9f:af:99:da:de:ef:27: 7d:e9:26:5a:a3:57:3c:35:84:09:fc:55:97:1e:60: 84:66:ec:b7:5e:ff:d3:aa:85:64:31:82:eb:7b:92: 51:76:4a:f0:14:c5:71:34:90:77:a1:e7:5f:95:d0: de:88:9f:f7:b9:60:70:68:66:43:fe:61:4b:92:1a: 76:f0:58:44:53:95:6f:c2:68:59:c2:a8:be:e2:3a: ab:6c:38:89:b1:f0:0e:77:74:59:92:f6:fa:57:a5: e5:14:a2:c1:ab:ea:6e:4d:0a:6c:d0:28:be:bd:10: 2e:9e:27:db:d9:b7:07:90:8d:fe:20:67:05:1d:83: 90:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:EC:56:B2:CA:B0:61:A6:4E:E9:EE:E4:8F:AD:9D:43:C5:BE:3E:57 X509v3 Authority Key Identifier: keyid:69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:76:64:86:07:1c:bf:b3:60:dc:68:81:ab:5f:33:89:a7:f2: 74:9b:e0:14:c2:46:65:be:9e:f8:bb:22:3c:54:c7:d8:fe:5c: c5:b2:16:cb:1a:92:d9:69:c9:40:7d:f1:49:a7:bc:17:e0:62: 31:cf:d6:9a:f1:69:d4:5b:8a:41:33:02:86:cc:5a:3f:b3:7f: 68:fe:fb:bd:73:1e:17:9e:5c:d5:e9:16:25:7d:7f:81:82:2b: 13:06:13:1f:8b:28:ba:18:35:c4:e4:bc:e0:26:f6:56:d4:bb: e1:8f:21:78:8b:0d:65:d0:9f:8e:8e:7a:da:dc:06:ea:1d:9e: 48:02:9a:04:d2:7f:ff:b6:82:eb:d4:13:90:6f:55:0d:84:f1: b5:38:3d:49:42:7d:f2:2a:6a:70:c4:fd:ac:9c:ad:d2:36:22: e7:c7:03:89:8a:30:e7:98:6e:1a:e4:d0:4d:b1:01:1d:b9:9c: bc:91:17:de:0a:82:18:34:eb:e8:0b:21:fa:26:6c:b9:d7:16: e2:b7:23:2a:5c:77:ef:d1:04:ae:37:4a:b7:ec:e2:71:d5:1d: af:8e:68:ab:da:12:98:47:48:07:56:e5:cb:87:59:c6:f7:88: ee:ec:dd:8e:fd:ae:4c:3f:ae:66:ae:78:9e:c2:52:5a:bf:aa: 0d:2b:0f:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDDluTQK6WDgeTBb1qYMNkJ/crD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQw M0FCMzIyMjAeFw0yNTExMDIwNTM2MjFaFw0yNTExMDUxNjA3MjFaMDMxMTAvBgNV BAMTKDcwRUM1NkIyQ0FCMDYxQTY0RUU5RUVFNDhGQUQ5RDQzQzVCRTNFNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa9yoAOLDcg8+hcMU7HfNlTN3z eoRy6GddI5K9W+hpdFUTvr30+o6L4ZDVggg1ei4CwYhbr68g72EDD/gc+0CxmHCE m8tOmpmxPmWU29S2OYHmmAF59y0vW2tFsZBjrg1Q89kcOdFXYjALM11H/iikrjOd K71m6DFX0QhhHJBVn6+Z2t7vJ33pJlqjVzw1hAn8VZceYIRm7Lde/9OqhWQxgut7 klF2SvAUxXE0kHeh51+V0N6In/e5YHBoZkP+YUuSGnbwWERTlW/CaFnCqL7iOqts OImx8A53dFmS9vpXpeUUosGr6m5NCmzQKL69EC6eJ9vZtweQjf4gZwUdg5DnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcOxWssqwYaZO6e7kj62dQ8W+PlcwHwYDVR0j BBgwFoAUadNBNkvDRLTtazplAxqstAOrMiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTdhNmJjYi05ZWI2LTQ5ZGUtYjk5OC0wYmVkM2M1YzEyNzgvMC82OUQzNDEzNjRC QzM0NEI0RUQ2QjNBNjUwMzFBQUNCNDAzQUIzMjIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQwM0FC MzIyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3YTZiY2ItOWViNi00OWRlLWI5 OTgtMGJlZDNjNWMxMjc4LzAvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFD QjQwM0FCMzIyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH12ZIYHHL+zYNxogatfM4mn8nSb4BTCRmW+ nvi7IjxUx9j+XMWyFssaktlpyUB98UmnvBfgYjHP1prxadRbikEzAobMWj+zf2j+ +71zHheeXNXpFiV9f4GCKxMGEx+LKLoYNcTkvOAm9lbUu+GPIXiLDWXQn46Oetrc BuodnkgCmgTSf/+2guvUE5BvVQ2E8bU4PUlCffIqanDE/aycrdI2IufHA4mKMOeY bhrk0E2xAR25nLyRF94Kghg06+gLIfombLnXFuK3Iypcd+/RBK43Srfs4nHVHa+O aKvaEphHSAdW5cuHWcb3iO7s3Y79rkw/rmaueJ7CUlq/qg0rDwo= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:23 2025 by rpki-client