$ rpki-client -vvf repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft File: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft (raw, json) Hash identifier: VLfxi0f3WhvdI0guQ9FjGzFpEXAVVNRzHDRrXZxflf0= Subject key identifier: 37:D9:39:E8:63:59:31:64:22:05:AF:47:6B:58:16:7D:0C:02:1B:F2 Authority key identifier: 69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 Certificate issuer: /CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Certificate serial: 3EC4F38378BA4887EC6C01FD1485B597510C0460 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft Manifest number: 01EA Signing time: Sat 14 Jun 2025 16:21:15 +0000 Manifest this update: Sat 14 Jun 2025 16:16:15 +0000 Manifest next update: Tue 17 Jun 2025 22:00:15 +0000 Files and hashes: 1: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl (hash: yiFqsZUEy1oZHUy2jqKmiRp/usTjlVkpP/FRvmjnh5Q=) 2: 3130332e3138392e3230362e302f32332d3233203d3e2039333431.roa (hash: VhmM6dwj6jhcWpHKGkB8nHv6O88nIuiPwR83QLa+WS8=) 3: 3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa (hash: VeN/bGOYLWRy+rz86CsEUNPZS6zxON2N9UHaLIP5nig=) 4: 3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa (hash: mN0twBIDnpakC8HUHafkf1WXSP1Z0ySHIU0xGnkB28I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 22:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:c4:f3:83:78:ba:48:87:ec:6c:01:fd:14:85:b5:97:51:0c:04:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Validity Not Before: Jun 14 16:16:15 2025 GMT Not After : Jun 17 22:00:15 2025 GMT Subject: CN=37D939E8635931642205AF476B58167D0C021BF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:de:24:c1:f0:74:53:14:6e:fe:38:3d:ec:e3: ef:cb:de:67:d9:12:bd:5c:cd:b8:8c:43:95:f5:53: 1e:82:a3:4f:12:4b:cb:18:a1:4c:8c:0d:65:f8:ff: 26:dd:8f:c7:cc:18:eb:58:c6:34:d1:11:76:96:86: f7:dd:90:b9:9b:2b:8e:db:c8:40:42:56:f6:59:5a: d5:01:ec:65:b0:f8:e5:2c:bf:6f:7c:4e:08:70:5e: a3:aa:4e:8d:bc:66:9b:4a:28:5d:f1:ce:94:3c:49: 35:68:66:49:2a:7e:e1:f8:a4:9c:04:d6:7e:b0:04: 0c:77:d7:bd:f7:81:07:a2:34:98:6f:09:02:f4:14: dd:a9:e4:0a:79:62:a3:d7:5f:50:6f:72:b7:a9:49: 88:0a:65:5e:94:57:35:a4:9f:1e:6f:ee:4d:65:ad: 47:1c:b9:af:73:21:b8:e9:80:6d:9f:0b:d2:29:c2: 7d:f6:bb:e4:2d:89:97:73:a7:e4:26:45:4d:dc:18: 90:92:c4:5f:40:d2:2f:62:09:65:2f:26:3d:30:fa: f1:9e:f9:32:75:d1:51:2c:b4:45:4b:48:b9:26:33: 20:38:81:18:f5:0c:a1:f8:07:0a:e2:92:88:d1:bd: 78:75:c6:d6:8d:d7:9a:a8:99:84:f4:d9:50:2a:bd: d5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D9:39:E8:63:59:31:64:22:05:AF:47:6B:58:16:7D:0C:02:1B:F2 X509v3 Authority Key Identifier: keyid:69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:b2:b0:df:11:49:58:5d:06:c6:fa:87:15:94:c5:af:b9:b0: d3:13:0a:22:71:e5:c4:b4:4c:ec:f9:ae:0d:ab:96:3c:c8:ea: f1:80:33:ab:c8:f5:89:a5:19:97:bb:1c:6f:ae:56:22:36:a9: ad:62:eb:67:9a:4b:fc:50:b3:b3:e1:1d:7a:c3:7d:b1:8a:ba: 73:e1:ba:d8:e4:9f:a8:27:f7:b2:49:6e:ba:74:a0:e8:67:0d: 7e:94:2f:0a:6f:5d:8c:b6:39:2c:7c:10:d6:17:dd:86:86:c3: 5e:9b:0d:66:d2:0b:f4:e6:08:38:b9:a7:76:b4:ee:47:37:68: 1b:91:ad:d4:8c:8f:ec:0c:d3:67:7e:9f:c7:51:ca:f5:ed:f2: 56:08:55:25:1d:c6:32:12:c8:cb:d2:8d:b9:1a:12:77:26:a3: ca:d3:65:70:90:85:5d:20:0f:dc:86:a2:32:d0:6c:74:32:ed: 47:59:76:e1:08:7a:43:75:9d:42:38:33:e0:f2:d2:a7:5a:9d: 85:99:8c:75:70:1a:1d:06:e1:6c:e3:bd:9a:c8:43:db:da:e0: d6:8d:51:76:25:eb:b2:13:ca:b4:a4:0f:ee:17:f4:ac:8d:39: a9:ad:47:b1:64:b5:93:ca:9e:19:43:44:08:7b:fb:3a:57:1b: 7b:90:da:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPsTzg3i6SIfsbAH9FIW1l1EMBGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1 REFFRTQyOTAeFw0yNTA2MTQxNjE2MTVaFw0yNTA2MTcyMjAwMTVaMDMxMTAvBgNV BAMTKDM3RDkzOUU4NjM1OTMxNjQyMjA1QUY0NzZCNTgxNjdEMEMwMjFCRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt3iTB8HRTFG7+OD3s4+/L3mfZ Er1czbiMQ5X1Ux6Co08SS8sYoUyMDWX4/ybdj8fMGOtYxjTREXaWhvfdkLmbK47b yEBCVvZZWtUB7GWw+OUsv298TghwXqOqTo28ZptKKF3xzpQ8STVoZkkqfuH4pJwE 1n6wBAx31733gQeiNJhvCQL0FN2p5Ap5YqPXX1BvcrepSYgKZV6UVzWknx5v7k1l rUccua9zIbjpgG2fC9Ipwn32u+QtiZdzp+QmRU3cGJCSxF9A0i9iCWUvJj0w+vGe +TJ10VEstEVLSLkmMyA4gRj1DKH4BwrikojRvXh1xtaN15qomYT02VAqvdUvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN9k56GNZMWQiBa9Ha1gWfQwCG/IwHwYDVR0j BBgwFoAUaZRcOGmz5CnUsK7O35mZ6l2u5CkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODMxZWViNC1mMzU3LTQ1YTctOTI2NS00MjhiMDA3YTAyNzAvMC82OTk0NUMzODY5 QjNFNDI5RDRCMEFFQ0VERjk5OTlFQTVEQUVFNDI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1REFF RTQyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTgzMWVlYjQtZjM1Ny00NWE3LTky NjUtNDI4YjAwN2EwMjcwLzAvNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5 RUE1REFFRTQyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM2ysN8RSVhdBsb6hxWUxa+5sNMTCiJx5cS0 TOz5rg2rljzI6vGAM6vI9YmlGZe7HG+uViI2qa1i62eaS/xQs7PhHXrDfbGKunPh utjkn6gn97JJbrp0oOhnDX6ULwpvXYy2OSx8ENYX3YaGw16bDWbSC/TmCDi5p3a0 7kc3aBuRrdSMj+wM02d+n8dRyvXt8lYIVSUdxjISyMvSjbkaEncmo8rTZXCQhV0g D9yGojLQbHQy7UdZduEIekN1nUI4M+Dy0qdanYWZjHVwGh0G4WzjvZrIQ9va4NaN UXYl67ITyrSkD+4X9KyNOamtR7FktZPKnhlDRAh7+zpXG3uQ2tk= -----END CERTIFICATE-----Generated at Mon Jun 16 21:36:22 2025 by rpki-client