$ rpki-client -vvf repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft File: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft (raw, json) Hash identifier: wQE4AuCKaHs0ywCniJnfCEZYLBAi8cA/x/GbwR4pUfM= Subject key identifier: 85:69:7F:82:3A:DF:28:EF:8E:DA:06:F3:29:95:53:DB:C0:54:AD:C0 Authority key identifier: D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA Certificate issuer: /CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Certificate serial: 17AA07842B69097E3A978DFF40CC85D9FEEC9B37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft Manifest number: 0204 Signing time: Mon 03 Nov 2025 19:10:44 +0000 Manifest this update: Mon 03 Nov 2025 19:05:44 +0000 Manifest next update: Fri 07 Nov 2025 03:45:44 +0000 Files and hashes: 1: 3130332e34312e3234392e302f32342d3234203d3e20313336383431.roa (hash: 7IiFMO+HhVDLxjHT2X4iJ4FHi1Re2KahShbn05EtlK4=) 2: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl (hash: s+bjeWyl0Rh5TEhn7GtIgOtc4oTRwrvEdmtZ+HJyybQ=) 3: 3130332e34312e3234382e302f32342d3234203d3e20313336383431.roa (hash: V3NQepAED/G4v92/Kw8wwvusDJ/oK/3dp6EJLA6gw0s=) 4: 3130332e34312e3234382e302f32332d3233203d3e20313336383431.roa (hash: Q9gcXsnmhgdIFiAoT+4PlNJP+vGRpaSMes16ABWpf6E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 03:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:aa:07:84:2b:69:09:7e:3a:97:8d:ff:40:cc:85:d9:fe:ec:9b:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Validity Not Before: Nov 3 19:05:44 2025 GMT Not After : Nov 7 03:45:44 2025 GMT Subject: CN=85697F823ADF28EF8EDA06F3299553DBC054ADC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7e:9d:f1:4e:b2:78:70:58:46:8b:51:6f:e8: 91:ec:71:d3:2b:f8:dc:d9:ef:09:39:76:29:c1:d5: 48:28:dd:5d:a0:ec:bb:59:9c:aa:e0:6c:e8:bc:ef: 17:00:f0:17:dd:19:9e:89:03:4a:50:26:f0:93:19: 31:3a:dd:8f:d3:22:99:4f:14:88:95:b2:87:dd:82: 29:05:15:52:bd:ef:0f:48:75:06:6d:14:94:45:c5: 84:d1:de:ea:33:1d:b8:20:37:22:9a:a9:56:fd:5f: 98:02:67:5b:ae:3b:e0:97:1f:40:d3:4d:a7:fb:e9: c0:04:37:ca:4c:97:19:91:2c:12:e0:b2:f5:74:c7: ef:a3:8c:5c:3d:bb:ee:c9:d4:4e:64:c1:13:d6:dc: 76:f7:71:22:94:10:c6:be:29:d5:4e:2d:b1:c5:b7: 4f:92:b0:92:fa:dc:51:6a:c1:a6:83:51:da:f5:54: 65:1e:be:68:db:01:df:3f:d9:28:f6:e6:27:be:b7: 82:97:6c:f2:ab:6a:e7:dc:c4:b2:ba:58:6d:1f:e0: d8:9a:9d:f3:07:ab:77:a0:5f:e7:ff:3c:7a:e2:3d: a6:fa:1a:ac:ce:3f:1a:ce:04:2c:bb:3c:08:0b:98: db:98:58:f4:30:d9:0d:85:fc:a4:2c:37:ec:b8:18: fd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:69:7F:82:3A:DF:28:EF:8E:DA:06:F3:29:95:53:DB:C0:54:AD:C0 X509v3 Authority Key Identifier: keyid:D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:99:25:32:7a:f3:c1:2a:b2:9c:42:91:10:e7:f6:92:1c:3a: 94:d5:6c:75:90:12:4a:71:64:92:bc:73:9d:5c:91:81:6c:1c: e2:2e:cd:78:cb:28:23:34:bd:e4:fe:d4:fc:6b:15:84:80:d0: 77:db:b8:e9:e2:c3:62:fa:24:03:18:f5:b4:99:7b:2e:0c:9b: 2e:aa:db:ae:ab:77:fd:de:8f:ad:71:99:19:3c:b0:05:17:69: 15:d2:4b:03:f3:2d:70:c2:bf:0c:09:43:7c:bc:ba:cb:26:11: e7:3c:71:a6:22:24:72:b5:71:39:38:3b:b0:d7:08:23:51:ce: 55:11:2c:ad:58:bd:c3:21:e0:4a:be:34:20:5b:3c:08:9d:23: a7:f1:8f:4f:0c:d0:66:7a:8f:13:93:36:47:86:1c:54:d2:cb: 01:f8:09:7c:22:d7:75:8a:f3:f3:7e:25:c9:8c:3c:b7:58:ae: f6:73:79:3b:19:1e:3f:71:33:cd:fb:e0:42:89:c0:73:a4:ea: d3:41:87:c8:3d:b2:b8:c0:56:e3:b4:ec:4d:e6:a3:09:f0:16: 30:51:c8:c1:32:51:8a:69:c2:7a:7d:b9:9b:12:71:2d:8b:e3: f4:7c:ba:04:3d:c2:da:c6:c7:a3:79:80:fd:bc:f0:da:46:73: 22:e4:3c:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF6oHhCtpCX46l43/QMyF2f7smzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVG QkM0QjFGQTAeFw0yNTExMDMxOTA1NDRaFw0yNTExMDcwMzQ1NDRaMDMxMTAvBgNV BAMTKDg1Njk3RjgyM0FERjI4RUY4RURBMDZGMzI5OTU1M0RCQzA1NEFEQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCefp3xTrJ4cFhGi1Fv6JHscdMr +NzZ7wk5dinB1Ugo3V2g7LtZnKrgbOi87xcA8BfdGZ6JA0pQJvCTGTE63Y/TIplP FIiVsofdgikFFVK97w9IdQZtFJRFxYTR3uozHbggNyKaqVb9X5gCZ1uuO+CXH0DT Taf76cAEN8pMlxmRLBLgsvV0x++jjFw9u+7J1E5kwRPW3Hb3cSKUEMa+KdVOLbHF t0+SsJL63FFqwaaDUdr1VGUevmjbAd8/2Sj25ie+t4KXbPKraufcxLK6WG0f4Nia nfMHq3egX+f/PHriPab6GqzOPxrOBCy7PAgLmNuYWPQw2Q2F/KQsN+y4GP1VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhWl/gjrfKO+O2gbzKZVT28BUrcAwHwYDVR0j BBgwFoAU1GmTe9AwV1pjibH/TNsYXvvEsfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzUyNzdlOC03ZDBmLTQxODQtOWMyOC1hNjYzNWVmZWYyOWMvMC9ENDY5OTM3QkQw MzA1NzVBNjM4OUIxRkY0Q0RCMTg1RUZCQzRCMUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVGQkM0 QjFGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc1Mjc3ZTgtN2QwZi00MTg0LTlj MjgtYTY2MzVlZmVmMjljLzAvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4 NUVGQkM0QjFGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIiZJTJ688EqspxCkRDn9pIcOpTVbHWQEkpx ZJK8c51ckYFsHOIuzXjLKCM0veT+1PxrFYSA0HfbuOniw2L6JAMY9bSZey4Mmy6q 266rd/3ej61xmRk8sAUXaRXSSwPzLXDCvwwJQ3y8ussmEec8caYiJHK1cTk4O7DX CCNRzlURLK1YvcMh4Eq+NCBbPAidI6fxj08M0GZ6jxOTNkeGHFTSywH4CXwi13WK 8/N+JcmMPLdYrvZzeTsZHj9xM8374EKJwHOk6tNBh8g9srjAVuO07E3mownwFjBR yMEyUYppwnp9uZsScS2L4/R8ugQ9wtrGx6N5gP288NpGcyLkPLs= -----END CERTIFICATE-----Generated at Wed Nov 5 17:49:00 2025 by rpki-client