$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft File: 969449FF3E24842B0CECC61AB398E88F83709FC1.mft (raw, json) Hash identifier: /f01WefWxyoDEjoiVaEvkqJGZX8WqzBF4VaCXcQ1trU= Subject key identifier: 4B:3E:0A:22:DB:1D:61:C8:6C:88:41:81:21:1B:1E:61:43:9F:32:CB Authority key identifier: 96:94:49:FF:3E:24:84:2B:0C:EC:C6:1A:B3:98:E8:8F:83:70:9F:C1 Certificate issuer: /CN=969449FF3E24842B0CECC61AB398E88F83709FC1 Certificate serial: 678FD4EB3FFBD25ADB75A99249AA1E0BA748168A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft Manifest number: 0106 Signing time: Tue 04 Nov 2025 13:31:53 +0000 Manifest this update: Tue 04 Nov 2025 13:26:53 +0000 Manifest next update: Fri 07 Nov 2025 14:34:53 +0000 Files and hashes: 1: 969449FF3E24842B0CECC61AB398E88F83709FC1.crl (hash: t2eYyXiWmL083LQwz57/XN3/BEuLJCtyvHnu45XNpeA=) 2: 3135372e32302e3134352e302f32342d3234203d3e20313532343231.roa (hash: WH9oEmWb7QCWvMI7938Ik3XMbgOCFpaDBMXkH3Xj3ws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.crl rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:8f:d4:eb:3f:fb:d2:5a:db:75:a9:92:49:aa:1e:0b:a7:48:16:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969449FF3E24842B0CECC61AB398E88F83709FC1 Validity Not Before: Nov 4 13:26:53 2025 GMT Not After : Nov 7 14:34:53 2025 GMT Subject: CN=4B3E0A22DB1D61C86C884181211B1E61439F32CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:59:bb:46:9a:2e:37:27:10:20:82:a4:70:1c: 6b:76:6c:8a:73:b4:dc:c8:93:a0:cb:ef:b9:8c:db: e4:1a:d2:5e:6f:96:ac:b3:cc:b3:e4:a8:5b:08:cd: a9:6d:a1:6c:8d:a2:c3:15:0f:f7:00:93:d5:77:e6: 56:7c:23:6a:bf:22:11:b1:c0:a1:b9:c2:b2:ab:f3: 37:51:08:b6:1a:e7:5a:bc:8b:6d:8b:0b:32:f9:ec: 26:4a:c1:e8:51:00:e5:fe:e7:51:00:25:1d:e9:b1: ef:4e:88:b4:f8:64:01:df:3e:7d:fa:ea:e9:f0:15: 53:31:c3:f9:35:d9:ce:1b:5d:c1:07:18:cd:89:06: 11:4a:bc:82:cd:28:ba:73:a2:8b:26:74:f2:7a:f8: b2:72:1e:65:ed:a1:9f:d4:8a:3c:4f:5d:73:1c:c1: 99:33:f7:60:b9:f5:97:ef:3d:7f:f3:c5:a4:e7:fb: d3:9f:96:33:ee:47:72:f4:3e:40:5f:6f:02:69:a2: 34:fa:c1:8f:bb:06:f0:ce:77:80:6a:d5:a5:99:ee: 4c:5e:f5:38:db:66:34:74:2d:1c:b9:c2:6c:14:20: af:73:40:b2:16:60:33:58:d2:58:07:49:c8:c7:a6: 55:5d:3d:f7:00:d6:a2:34:0e:82:5b:70:c6:c0:e2: 87:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:3E:0A:22:DB:1D:61:C8:6C:88:41:81:21:1B:1E:61:43:9F:32:CB X509v3 Authority Key Identifier: keyid:96:94:49:FF:3E:24:84:2B:0C:EC:C6:1A:B3:98:E8:8F:83:70:9F:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:51:9d:a3:e0:35:dc:48:af:ad:d4:65:50:a4:27:84:5b:eb: 0e:92:93:98:a5:11:66:84:ef:4b:00:95:40:2b:72:c0:b0:15: 5a:8a:2b:f7:0d:4b:15:81:a4:b1:77:ec:ca:0f:6b:85:2e:30: 47:ae:49:9c:ca:43:f7:8f:85:90:33:e7:1b:df:f1:01:2f:e8: 4a:7e:45:46:f1:ee:a5:28:6e:b0:77:10:cd:3e:7a:66:ab:c8: 84:6d:6c:f6:c3:88:d8:7f:7a:ba:e9:e6:01:4d:0c:f1:de:af: 42:84:6a:78:2c:bf:3e:59:79:b2:37:88:90:4f:ec:91:7a:10: 16:d1:b1:9a:b4:ef:2b:81:24:15:75:7b:c1:d8:d3:a7:c6:2c: 3a:07:0d:64:86:a0:a2:38:08:e0:3c:a4:d7:f9:e7:54:a7:43: 58:a9:17:6d:07:90:ae:06:9f:a3:66:e6:32:5f:02:94:e2:d4: d7:17:09:25:a3:35:57:d5:c3:9f:55:ee:0a:0f:5a:97:01:c7: cc:23:17:e5:9d:e5:79:15:b0:c4:d8:4d:ad:ce:ee:e8:81:9b: 39:7c:fe:fe:7d:b9:8b:d7:c3:45:3d:f1:95:7d:9c:5a:c9:a3: 26:97:b1:68:d1:9c:47:e9:8f:b7:ed:0a:b4:a2:31:c5:e6:54: 4c:d8:8f:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ4/U6z/70lrbdamSSaoeC6dIFoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4OEY4 MzcwOUZDMTAeFw0yNTExMDQxMzI2NTNaFw0yNTExMDcxNDM0NTNaMDMxMTAvBgNV BAMTKDRCM0UwQTIyREIxRDYxQzg2Qzg4NDE4MTIxMUIxRTYxNDM5RjMyQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbWbtGmi43JxAggqRwHGt2bIpz tNzIk6DL77mM2+Qa0l5vlqyzzLPkqFsIzaltoWyNosMVD/cAk9V35lZ8I2q/IhGx wKG5wrKr8zdRCLYa51q8i22LCzL57CZKwehRAOX+51EAJR3pse9OiLT4ZAHfPn36 6unwFVMxw/k12c4bXcEHGM2JBhFKvILNKLpzoosmdPJ6+LJyHmXtoZ/UijxPXXMc wZkz92C59ZfvPX/zxaTn+9OfljPuR3L0PkBfbwJpojT6wY+7BvDOd4Bq1aWZ7kxe 9TjbZjR0LRy5wmwUIK9zQLIWYDNY0lgHScjHplVdPfcA1qI0DoJbcMbA4of1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSz4KItsdYchsiEGBIRseYUOfMsswHwYDVR0j BBgwFoAUlpRJ/z4khCsM7MYas5joj4Nwn8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTRmNzkzNC1jZGM3LTQwODItODNmYi1kZjdkNGY4MjE5YWYvMC85Njk0NDlGRjNF MjQ4NDJCMENFQ0M2MUFCMzk4RTg4RjgzNzA5RkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4OEY4Mzcw OUZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzAvOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4 OEY4MzcwOUZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFRnaPgNdxIr63UZVCkJ4Rb6w6Sk5ilEWaE 70sAlUArcsCwFVqKK/cNSxWBpLF37MoPa4UuMEeuSZzKQ/ePhZAz5xvf8QEv6Ep+ RUbx7qUobrB3EM0+emaryIRtbPbDiNh/errp5gFNDPHer0KEangsvz5ZebI3iJBP 7JF6EBbRsZq07yuBJBV1e8HY06fGLDoHDWSGoKI4COA8pNf551SnQ1ipF20HkK4G n6Nm5jJfApTi1NcXCSWjNVfVw59V7goPWpcBx8wjF+Wd5XkVsMTYTa3O7uiBmzl8 /v59uYvXw0U98ZV9nFrJoyaXsWjRnEfpj7ftCrSiMcXmVEzYjxM= -----END CERTIFICATE-----Generated at Tue Nov 4 21:00:39 2025 by rpki-client