$ rpki-client -vvf repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft File: 469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft (raw, json) Hash identifier: PvEze/vYl4s1bAYF/QkRY8SF2wR8FAYujA3O9R168lg= Subject key identifier: 40:32:6B:2A:BB:73:2C:7B:2C:CB:21:BA:15:75:9D:4F:EA:9A:AA:4F Authority key identifier: 46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76 Certificate issuer: /CN=469F8799C9283F6AFAB227A7A8E070D32DC1E876 Certificate serial: 5F28AE17BBA439300E88CC1BF792C31CEF4F14D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft Manifest number: C9 Signing time: Tue 04 Nov 2025 16:30:41 +0000 Manifest this update: Tue 04 Nov 2025 16:25:41 +0000 Manifest next update: Fri 07 Nov 2025 20:30:41 +0000 Files and hashes: 1: 3136302e32352e3233362e302f32332d3234203d3e20313533313035.roa (hash: ugFHgJ4jVtmoNRHFYzSQ9xdBRfhWtLtZAJwWKuo4XXg=) 2: 469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl (hash: UHkvGqdwW2BW5Er+gne9yngy1FPUuTuDN1u2SbF9Nnk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:28:ae:17:bb:a4:39:30:0e:88:cc:1b:f7:92:c3:1c:ef:4f:14:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=469F8799C9283F6AFAB227A7A8E070D32DC1E876 Validity Not Before: Nov 4 16:25:41 2025 GMT Not After : Nov 7 20:30:41 2025 GMT Subject: CN=40326B2ABB732C7B2CCB21BA15759D4FEA9AAA4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f1:79:0a:23:a9:5b:0c:63:6a:cd:0a:5b:c5: 4e:65:4c:20:d0:5b:b9:f0:e1:f4:7f:db:ba:29:ed: 82:73:52:61:fa:47:8a:19:db:1e:e6:96:13:ff:c1: 00:c6:9d:3c:44:af:c8:28:2c:f1:b5:66:f4:99:17: 1d:03:e9:56:07:5b:f8:c1:87:19:e6:00:f1:d5:42: 28:fb:20:f1:da:51:11:39:fc:32:bf:51:14:9e:45: 6f:ee:5e:4c:97:0d:34:6f:af:e4:70:18:13:12:96: 28:80:b5:f8:e0:0d:c0:72:09:4a:65:c4:b9:f7:94: d5:54:12:18:f2:83:77:ce:5b:d3:ac:bb:0a:c6:24: 6a:d2:b9:b8:b8:df:ae:1e:d9:22:38:9b:97:39:09: a0:bb:8f:93:76:b4:e5:92:ac:9d:69:39:1b:c3:1f: 82:6d:6f:72:c3:0a:8b:f0:c3:8d:c8:aa:b2:27:08: b1:e0:6b:0b:19:b5:77:28:d8:a9:23:63:4b:20:8b: 83:ab:c5:6a:80:79:17:67:88:4b:78:a0:8a:5a:0c: ce:9b:a5:6e:4f:69:ef:a2:68:85:df:bf:cc:4e:3f: cb:c2:93:92:54:17:a8:1a:3c:e1:f8:b7:5d:30:3b: de:a4:b2:84:fe:25:22:f1:69:86:d6:10:c1:24:2c: 23:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:32:6B:2A:BB:73:2C:7B:2C:CB:21:BA:15:75:9D:4F:EA:9A:AA:4F X509v3 Authority Key Identifier: keyid:46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:c0:88:d2:24:55:3a:ca:a5:a6:25:7c:a3:9e:27:c6:0e:ed: 2b:bf:a9:56:2c:20:de:8c:a6:37:cf:23:1a:eb:16:dd:64:37: 02:ee:5c:69:be:80:a8:55:c9:e2:fd:e1:fb:15:27:91:dd:1c: 28:bf:47:58:8d:68:b7:29:37:2f:cf:ed:3b:f2:24:72:28:77: 51:37:cd:27:a3:60:d4:a5:2b:64:9e:9b:e3:86:24:2f:e5:31: bc:4a:db:25:96:3c:c3:23:fe:dc:ea:45:46:69:3b:a9:97:5f: b8:ae:b8:db:33:e9:b5:0c:83:7e:4c:cd:85:6f:df:ff:c7:16: ed:9e:a0:8e:3b:54:48:34:71:9e:97:c3:f9:c4:f9:43:60:bf: c0:2c:3b:ce:b4:19:29:01:32:4e:ad:4e:28:5b:87:53:80:20: ff:19:72:38:77:f9:7c:8a:1c:f0:d0:69:26:35:4f:4f:d6:9d: 7d:2b:aa:ea:df:56:df:92:fe:1d:01:a4:37:e9:50:c8:8b:03: 97:fd:27:1e:2b:36:b9:12:94:41:27:06:cd:85:82:94:d7:e9: c5:67:6f:23:6b:db:99:e8:14:f5:59:da:d6:8e:3d:03:5b:2f: bf:db:18:a1:19:0f:7e:97:c9:4b:83:30:cf:86:f5:80:39:b3: 82:ce:a9:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXyiuF7ukOTAOiMwb95LDHO9PFNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcwRDMy REMxRTg3NjAeFw0yNTExMDQxNjI1NDFaFw0yNTExMDcyMDMwNDFaMDMxMTAvBgNV BAMTKDQwMzI2QjJBQkI3MzJDN0IyQ0NCMjFCQTE1NzU5RDRGRUE5QUFBNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC88XkKI6lbDGNqzQpbxU5lTCDQ W7nw4fR/27op7YJzUmH6R4oZ2x7mlhP/wQDGnTxEr8goLPG1ZvSZFx0D6VYHW/jB hxnmAPHVQij7IPHaURE5/DK/URSeRW/uXkyXDTRvr+RwGBMSliiAtfjgDcByCUpl xLn3lNVUEhjyg3fOW9OsuwrGJGrSubi4364e2SI4m5c5CaC7j5N2tOWSrJ1pORvD H4Jtb3LDCovww43IqrInCLHgawsZtXco2KkjY0sgi4OrxWqAeRdniEt4oIpaDM6b pW5Pae+iaIXfv8xOP8vCk5JUF6gaPOH4t10wO96ksoT+JSLxaYbWEMEkLCOrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQDJrKrtzLHssyyG6FXWdT+qaqk8wHwYDVR0j BBgwFoAURp+HmckoP2r6sienqOBw0y3B6HYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWMyYTFhYy01YWU0LTQ3YWQtOGRiMS02NTJjN2YzZjdlOGYvMC80NjlGODc5OUM5 MjgzRjZBRkFCMjI3QTdBOEUwNzBEMzJEQzFFODc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcwRDMyREMx RTg3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVjMmExYWMtNWFlNC00N2FkLThk YjEtNjUyYzdmM2Y3ZThmLzAvNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcw RDMyREMxRTg3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfAiNIkVTrKpaYlfKOeJ8YO7Su/qVYsIN6M pjfPIxrrFt1kNwLuXGm+gKhVyeL94fsVJ5HdHCi/R1iNaLcpNy/P7TvyJHIod1E3 zSejYNSlK2Sem+OGJC/lMbxK2yWWPMMj/tzqRUZpO6mXX7iuuNsz6bUMg35MzYVv 3//HFu2eoI47VEg0cZ6Xw/nE+UNgv8AsO860GSkBMk6tTihbh1OAIP8Zcjh3+XyK HPDQaSY1T0/WnX0rqurfVt+S/h0BpDfpUMiLA5f9Jx4rNrkSlEEnBs2FgpTX6cVn byNr25noFPVZ2taOPQNbL7/bGKEZD36XyUuDMM+G9YA5s4LOqSc= -----END CERTIFICATE-----Generated at Tue Nov 4 18:57:25 2025 by rpki-client