$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft File: C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft (raw, json) Hash identifier: Xet3N8pSzU5WaeBu141ptg0Zb8TdXqQIyWCxG0GtcO4= Subject key identifier: 09:4A:26:25:D4:FE:86:8D:7C:C0:D0:DF:A1:85:F1:F7:3B:A5:7B:16 Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE Certificate issuer: /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Certificate serial: 22FE25446FE402108401470F75F7FB8A9F52A0F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft Manifest number: 046E Signing time: Sun 02 Nov 2025 21:00:50 +0000 Manifest this update: Sun 02 Nov 2025 20:55:50 +0000 Manifest next update: Thu 06 Nov 2025 06:40:50 +0000 Files and hashes: 1: 3130332e34312e3230372e302f32342d3234203d3e203538333937.roa (hash: 4cA9blITWaGnf+nkl+PhUyn2mgMUfbwhbbX8hqlhuwc=) 2: 3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (hash: 28AwtI6PlstTWzWDAVfpiiifxdaL8P6FvCfZnLUiyFM=) 3: C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl (hash: uiilU0JlSJKmOUUWFyB/5lVxCtE5oxZBl7EqhZXspJg=) 4: 3130332e34312e3230362e302f32342d3234203d3e203538333937.roa (hash: TlAHfis9k9OhMBttiZq0mSci/rJTU64geHe3MFRXMno=) 5: 3131372e35332e3134382e302f32342d3234203d3e203538333937.roa (hash: yPibvoj8h9RJ0GLdE7Y55+0vwm9XtVDLQI8fCsI5zGg=) 6: 3130332e34312e3230352e302f32342d3234203d3e203538333937.roa (hash: whajeEl8nBFK1Hik+aj8CuI5z46PiprE6Zt+K1qGkcA=) 7: 3131372e35332e3134392e302f32342d3234203d3e203538333937.roa (hash: 2LZZVkt+5pgtlh+bN+Dr5svVCbc5hhi96q5bed9+mrg=) 8: 3131372e35332e3135312e302f32342d3234203d3e203538333937.roa (hash: NacNr8tlzmpb4QfQ/myDM10o14kPPy00AmDGdwRiRcE=) 9: 3131372e35332e3135302e302f32342d3234203d3e203538333937.roa (hash: hL/G5kx82YBCvbiF0oPP1gPo6p46SnHQuMG9HUhh6Go=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 06:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:fe:25:44:6f:e4:02:10:84:01:47:0f:75:f7:fb:8a:9f:52:a0:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Validity Not Before: Nov 2 20:55:50 2025 GMT Not After : Nov 6 06:40:50 2025 GMT Subject: CN=094A2625D4FE868D7CC0D0DFA185F1F73BA57B16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0a:cc:90:d4:9a:2c:e2:50:ba:7b:a3:33:62: 02:b1:b4:7a:37:b2:c7:17:5a:bf:7d:fd:38:ab:83: eb:37:29:5d:44:93:48:0a:0d:05:6e:3f:55:3d:39: 50:65:13:2b:6b:36:a6:7f:ad:d0:3b:eb:da:a2:0f: 3e:40:c2:03:9d:79:90:85:20:05:b0:1f:92:e2:51: e2:70:03:be:d5:fd:2d:4e:d3:b9:fe:d2:b1:ff:0e: 96:4c:9a:1c:d8:37:db:b7:6f:88:11:4f:b3:8f:08: 91:bd:1c:c1:a5:30:f5:05:90:5d:0a:6e:f4:24:d7: 55:e4:ea:b5:da:99:5a:ff:17:1d:e2:56:d1:e2:ce: 65:f2:13:a3:b5:6e:7d:13:47:85:8e:bd:17:ab:53: e4:ef:81:61:2f:f9:00:ae:ba:47:ca:4d:a6:f2:3f: 81:71:8a:5a:f1:12:83:43:7e:b6:45:93:2c:74:9d: bb:9b:eb:c6:9f:c7:99:01:7b:18:d1:bf:79:9f:29: f1:df:88:29:88:f5:e3:46:31:bf:7e:ee:6b:55:4c: 6e:ea:3d:93:d2:35:fb:f5:d4:e9:98:99:f2:2d:02: 59:bc:f4:60:fe:2f:74:f3:99:e2:fa:9b:3c:3e:90: 5a:d2:61:c5:35:fd:49:21:b8:81:63:d9:85:bb:2a: e6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:4A:26:25:D4:FE:86:8D:7C:C0:D0:DF:A1:85:F1:F7:3B:A5:7B:16 X509v3 Authority Key Identifier: keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:90:b4:07:6f:2c:57:93:0b:7e:94:fe:f1:12:84:32:33:50: e9:ce:ca:8e:84:b4:35:30:0c:2f:8a:a6:71:a5:98:da:51:32: 02:1a:99:58:38:7e:f2:09:19:df:e8:a8:e5:fb:0d:6c:3b:e2: c2:2f:83:b8:1b:7f:ba:7f:01:c5:11:f9:3d:9b:25:61:1a:0d: 4d:a1:c6:8c:a5:0f:e7:81:7b:54:ee:1e:08:c3:69:92:1e:5f: e0:66:51:52:f9:ec:ba:18:43:41:25:29:4a:da:12:ec:ab:22: 41:65:c2:82:02:83:50:b4:ec:7b:9f:8e:38:af:b8:3f:5a:72: 95:e5:1e:f2:b7:00:31:99:f0:2f:c6:65:c3:2b:74:31:34:56: 16:9c:81:3a:b5:08:1e:71:4d:b0:15:f9:33:91:de:97:ef:b0: 11:7e:f9:6c:e3:40:ee:b3:99:fd:99:0b:70:d1:f8:ee:09:45: b8:1c:bd:ca:01:da:f0:15:25:5e:4f:ef:23:83:20:8d:ae:a6: 71:3d:58:82:77:a2:cd:46:0e:7b:bf:1c:4c:f6:b0:89:40:55: c3:20:ad:36:7c:c4:4b:b0:47:96:00:d6:29:60:29:0a:aa:71: d7:45:67:38:0d:68:c6:4c:36:e4:30:b9:20:99:5d:3d:6a:67: 8f:23:26:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIv4lRG/kAhCEAUcPdff7ip9SoPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1 Mzg5OThBRTAeFw0yNTExMDIyMDU1NTBaFw0yNTExMDYwNjQwNTBaMDMxMTAvBgNV BAMTKDA5NEEyNjI1RDRGRTg2OEQ3Q0MwRDBERkExODVGMUY3M0JBNTdCMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBCsyQ1Jos4lC6e6MzYgKxtHo3 sscXWr99/Tirg+s3KV1Ek0gKDQVuP1U9OVBlEytrNqZ/rdA769qiDz5AwgOdeZCF IAWwH5LiUeJwA77V/S1O07n+0rH/DpZMmhzYN9u3b4gRT7OPCJG9HMGlMPUFkF0K bvQk11Xk6rXamVr/Fx3iVtHizmXyE6O1bn0TR4WOvRerU+TvgWEv+QCuukfKTaby P4FxilrxEoNDfrZFkyx0nbub68afx5kBexjRv3mfKfHfiCmI9eNGMb9+7mtVTG7q PZPSNfv11OmYmfItAlm89GD+L3TzmeL6mzw+kFrSYcU1/UkhuIFj2YW7KuYVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCUomJdT+ho18wNDfoYXx9zulexYwHwYDVR0j BBgwFoAUxpAFu3ukaKEKMs5E6cTOeFOJmK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiYTQ1ZS1mNWRhLTQ1ODEtYmZlNS1jMTYxNmMzMGVmYWIvMC9DNjkwMDVCQjdC QTQ2OEExMEEzMkNFNDRFOUM0Q0U3ODUzODk5OEFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1Mzg5 OThBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4YmE0NWUtZjVkYS00NTgxLWJm ZTUtYzE2MTZjMzBlZmFiLzAvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENF Nzg1Mzg5OThBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKQtAdvLFeTC36U/vEShDIzUOnOyo6EtDUw DC+KpnGlmNpRMgIamVg4fvIJGd/oqOX7DWw74sIvg7gbf7p/AcUR+T2bJWEaDU2h xoylD+eBe1TuHgjDaZIeX+BmUVL57LoYQ0ElKUraEuyrIkFlwoICg1C07Hufjjiv uD9acpXlHvK3ADGZ8C/GZcMrdDE0VhacgTq1CB5xTbAV+TOR3pfvsBF++WzjQO6z mf2ZC3DR+O4JRbgcvcoB2vAVJV5P7yODII2upnE9WIJ3os1GDnu/HEz2sIlAVcMg rTZ8xEuwR5YA1ilgKQqqcddFZzgNaMZMNuQwuSCZXT1qZ48jJl8= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:16 2025 by rpki-client