$ rpki-client -vvf repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft File: F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft (raw, json) Hash identifier: RRtrfEjpaHBUaBekxjYv3qyHOmOwjfQzr5YhX6Yyjvs= Subject key identifier: BD:96:AA:3B:3D:34:91:3E:0E:55:E6:1A:FC:3D:62:39:ED:DD:4D:4B Authority key identifier: F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B Certificate issuer: /CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B Certificate serial: 3D43F197AD4191E54ED9F337E008C6CF892CC37A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft Manifest number: 02CE Signing time: Sun 02 Nov 2025 20:22:18 +0000 Manifest this update: Sun 02 Nov 2025 20:17:18 +0000 Manifest next update: Thu 06 Nov 2025 04:57:18 +0000 Files and hashes: 1: 3130332e33392e31342e302f32342d3234203d3e203633383237.roa (hash: zTXz6ViHpuUnydIo3u7N32sUnlV7Ga/gyh5w07AZqAI=) 2: 3130332e33392e31332e302f32342d3234203d3e203633383237.roa (hash: pRKe+kXmByJ2JQdqGwZqDIIAk5V2EZK8ohpT3QljbGE=) 3: 34332e3234332e3138342e302f32342d3234203d3e203633383237.roa (hash: +aCt5+OXK6i1mR1vUsqsKmaPLobmcj6xpzHFr2y248I=) 4: 34332e3234332e3138362e302f32342d3234203d3e203633383237.roa (hash: ihkQzGAO8DoG0WnuEPJGIoHev84I28N1A3HWiNGFa0Q=) 5: F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl (hash: hyR+8w7Eq393MWWLHkAMUz0JnFlKnVCpmTytIDSDTR0=) 6: 34332e3234332e3138372e302f32342d3234203d3e203633383237.roa (hash: Df4ylZ+0W3N4EtnLalY+zYatkTr7lHaj8iG3DxNbv+w=) 7: 3130332e33392e31322e302f32332d3233203d3e203633383237.roa (hash: NFgbHOWF09e2UJQTu6ELDWDZsspY1ki/AkPp6Ba87/o=) 8: 3130332e33392e31322e302f32342d3234203d3e203633383237.roa (hash: f4T+onCxZDveeFTCMzFwwEAIgiLhuur5vB8ungh3o6Q=) 9: 3130332e33392e31352e302f32342d3234203d3e203633383237.roa (hash: /BVYixhjCRvqFjUFmXC//F/0kY3GQUw+CgUs6eD3lKE=) 10: 34332e3234332e3138352e302f32342d3234203d3e203633383237.roa (hash: tPL8LGFCeScODEGc8A8pbjQLA1tS07qIShgIss5wh6Y=) 11: 34332e3234332e3138342e302f32332d3233203d3e203633383237.roa (hash: A/k45s19FefdLANTjaU2DJdWu18m3PvvvLFNqzKTYEk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:57:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:43:f1:97:ad:41:91:e5:4e:d9:f3:37:e0:08:c6:cf:89:2c:c3:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B Validity Not Before: Nov 2 20:17:18 2025 GMT Not After : Nov 6 04:57:18 2025 GMT Subject: CN=BD96AA3B3D34913E0E55E61AFC3D6239EDDD4D4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c6:ac:d4:41:4c:a3:8e:81:d3:de:0a:52:88: 7f:6c:ef:07:59:67:df:6e:3a:f5:30:51:e6:bb:70: 16:96:be:27:18:ef:ec:c6:9e:15:56:d3:e0:6f:e8: ad:6a:3d:fc:7a:85:37:1f:7c:bc:99:41:9b:8c:62: c0:bc:09:68:8a:6a:9a:76:77:b5:3d:09:d4:b3:a8: 9f:19:89:ac:a4:d6:41:45:b5:e1:d6:22:7c:33:aa: 82:01:e7:b1:c9:97:c1:7a:24:84:99:d7:99:d1:7d: 30:ca:03:e9:53:69:7a:5e:27:6e:20:21:29:2f:8b: 6f:3c:7c:c4:a3:4b:81:7a:70:e3:04:bf:b9:95:f3: 68:2f:c1:6f:74:85:84:26:8e:38:88:fb:d8:a9:d5: 18:cb:97:c3:ad:03:7e:91:0f:2c:e8:ce:36:28:44: 60:de:c8:59:bb:58:ba:a8:77:25:25:d1:af:04:43: 34:e9:e8:13:76:67:bc:56:2f:65:28:91:28:d0:4d: c3:96:83:6c:b9:67:7c:bd:dd:c9:dd:80:4b:91:39: 00:5f:8f:ee:50:ed:46:0a:0c:19:16:62:62:33:cd: 81:d4:69:37:77:b6:fa:52:f0:64:5a:30:1f:67:f2: e4:8a:6a:0b:c6:68:3c:93:c9:3e:0e:17:cb:fd:6c: ea:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:96:AA:3B:3D:34:91:3E:0E:55:E6:1A:FC:3D:62:39:ED:DD:4D:4B X509v3 Authority Key Identifier: keyid:F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:21:69:41:a7:39:83:7f:8b:b9:f8:27:81:af:85:a0:30:1d: 94:1d:d4:50:a0:4e:fd:24:b4:39:97:ec:a4:e9:1c:f2:9c:92: d9:87:0b:f1:a1:28:a7:ed:55:02:14:2a:60:ba:1e:83:90:f8: 88:73:91:78:0a:e8:cc:4d:60:9c:35:39:1e:39:79:10:07:07: 30:c1:a0:52:8e:ab:b1:e9:ba:65:b7:23:6a:f9:0a:41:58:b6: ab:25:d5:d3:69:e0:3e:10:22:7a:ce:d2:87:62:f9:00:2e:cd: 93:54:4b:e9:96:a0:b0:fa:3a:52:56:80:f3:77:fd:52:05:4b: da:9a:29:1a:4b:07:1c:4c:18:96:07:97:37:ba:d0:e8:16:f8: 05:08:45:a8:03:41:dd:cb:c6:bb:bd:f8:cb:76:b0:f1:22:8d: 5b:21:fa:b0:fc:11:de:fc:d8:b0:6e:46:c1:1e:25:4f:8a:61: c8:5a:e8:90:bd:12:14:63:ee:ae:f5:99:7a:00:d4:53:39:6f: e3:49:f9:9b:03:b6:b5:20:d3:e9:c2:f7:cc:0d:b1:1c:d3:71: b4:ab:19:97:1a:67:db:54:e5:1a:1c:36:7c:13:56:b3:7e:1e: e7:c9:b7:13:e5:3e:1d:4d:c5:6b:60:bc:4f:24:fa:d4:35:6e: 71:56:d5:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPUPxl61BkeVO2fM34AjGz4ksw3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjY5QjYzN0VBOTRERTRDQzkxNTBCREZENTMyN0JFMDNB MDMzNzg0QjAeFw0yNTExMDIyMDE3MThaFw0yNTExMDYwNDU3MThaMDMxMTAvBgNV BAMTKEJEOTZBQTNCM0QzNDkxM0UwRTU1RTYxQUZDM0Q2MjM5RURERDRENEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVxqzUQUyjjoHT3gpSiH9s7wdZ Z99uOvUwUea7cBaWvicY7+zGnhVW0+Bv6K1qPfx6hTcffLyZQZuMYsC8CWiKapp2 d7U9CdSzqJ8Ziayk1kFFteHWInwzqoIB57HJl8F6JISZ15nRfTDKA+lTaXpeJ24g ISkvi288fMSjS4F6cOMEv7mV82gvwW90hYQmjjiI+9ip1RjLl8OtA36RDyzozjYo RGDeyFm7WLqodyUl0a8EQzTp6BN2Z7xWL2UokSjQTcOWg2y5Z3y93cndgEuROQBf j+5Q7UYKDBkWYmIzzYHUaTd3tvpS8GRaMB9n8uSKagvGaDyTyT4OF8v9bOrlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvZaqOz00kT4OVeYa/D1iOe3dTUswHwYDVR0j BBgwFoAU9ptjfqlN5MyRUL39Uye+A6AzeEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWE2ODcxMi0xZDlhLTQxNDMtODJmMS0xYzgyYzMzMTY1ZWEvMC9GNjlCNjM3RUE5 NERFNENDOTE1MEJERkQ1MzI3QkUwM0EwMzM3ODRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjY5QjYzN0VBOTRERTRDQzkxNTBCREZENTMyN0JFMDNBMDMz Nzg0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFhNjg3MTItMWQ5YS00MTQzLTgy ZjEtMWM4MmMzMzE2NWVhLzAvRjY5QjYzN0VBOTRERTRDQzkxNTBCREZENTMyN0JF MDNBMDMzNzg0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMwhaUGnOYN/i7n4J4GvhaAwHZQd1FCgTv0k tDmX7KTpHPKcktmHC/GhKKftVQIUKmC6HoOQ+IhzkXgK6MxNYJw1OR45eRAHBzDB oFKOq7HpumW3I2r5CkFYtqsl1dNp4D4QInrO0odi+QAuzZNUS+mWoLD6OlJWgPN3 /VIFS9qaKRpLBxxMGJYHlze60OgW+AUIRagDQd3Lxru9+Mt2sPEijVsh+rD8Ed78 2LBuRsEeJU+KYcha6JC9EhRj7q71mXoA1FM5b+NJ+ZsDtrUg0+nC98wNsRzTcbSr GZcaZ9tU5RocNnwTVrN+HufJtxPlPh1NxWtgvE8k+tQ1bnFW1b0= -----END CERTIFICATE-----Generated at Wed Nov 5 03:52:43 2025 by rpki-client