$ rpki-client -vvf repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft File: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft (raw, json) Hash identifier: DI4Ow1vOdu264K1Bulz6oOzgHJBBcC2HaInYvRuZ4Hw= Subject key identifier: C8:BA:40:16:6D:2D:9F:2C:DC:40:D0:E8:94:FE:17:F4:2C:0C:0B:EE Authority key identifier: 69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 Certificate issuer: /CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Certificate serial: 27B22531F1DF6C8AF7818177E43770DECDBE42B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft Manifest number: 01D4 Signing time: Sat 26 Apr 2025 13:41:15 +0000 Manifest this update: Sat 26 Apr 2025 13:36:15 +0000 Manifest next update: Tue 29 Apr 2025 20:50:15 +0000 Files and hashes: 1: 3130332e3138392e3230362e302f32332d3233203d3e2039333431.roa (hash: VhmM6dwj6jhcWpHKGkB8nHv6O88nIuiPwR83QLa+WS8=) 2: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl (hash: uN/SraYtFxC60ivAzhMi6zWFXRNMRKTGFBiz13eET00=) 3: 3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa (hash: mN0twBIDnpakC8HUHafkf1WXSP1Z0ySHIU0xGnkB28I=) 4: 3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa (hash: VeN/bGOYLWRy+rz86CsEUNPZS6zxON2N9UHaLIP5nig=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 20:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:b2:25:31:f1:df:6c:8a:f7:81:81:77:e4:37:70:de:cd:be:42:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Validity Not Before: Apr 26 13:36:15 2025 GMT Not After : Apr 29 20:50:15 2025 GMT Subject: CN=C8BA40166D2D9F2CDC40D0E894FE17F42C0C0BEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:55:7d:a4:7a:c2:6c:21:db:16:2f:b2:44:20: db:3c:18:0a:92:87:a4:45:e5:85:34:be:6c:f0:c9: c1:40:5e:18:0a:de:fa:c1:15:ab:a8:bf:4d:22:0e: 08:2f:1b:36:cc:49:13:13:89:5b:d3:b4:0d:a7:99: 13:9d:28:f7:73:f9:ee:81:61:29:8f:8c:70:ca:72: cd:b2:94:42:c0:14:e1:2b:69:79:96:4a:93:74:60: 3e:b9:7d:b4:f6:a0:55:e7:0c:58:bf:01:76:1d:14: 8b:f4:4f:40:83:1c:80:2f:22:f2:90:40:30:8e:01: 52:b0:e7:0c:cd:85:0f:20:98:53:ef:c6:02:1f:71: 41:3b:8f:67:30:f8:c8:58:fa:23:8d:43:04:22:f1: 15:5c:8a:0d:ff:1e:8c:8a:97:ae:18:64:2f:2e:1a: e8:98:ee:bd:87:44:d0:94:3d:f5:32:22:81:11:f4: af:1d:93:7a:70:f2:55:86:96:54:44:6c:ee:17:d6: f6:71:25:0f:95:8a:27:60:80:c8:34:b7:c0:1e:2b: 4b:e1:3e:10:4a:25:2e:d5:09:f1:d9:b9:d9:ec:82: 7e:c5:3b:a4:10:b9:6f:23:43:8e:94:06:50:dd:a7: fb:cb:e8:4e:c7:5c:59:0b:88:ba:8a:bb:e9:0a:1c: 66:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:BA:40:16:6D:2D:9F:2C:DC:40:D0:E8:94:FE:17:F4:2C:0C:0B:EE X509v3 Authority Key Identifier: keyid:69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:10:2c:3b:93:3b:23:1d:9f:63:fc:84:a3:45:bd:f3:b3:ef: 1f:9b:3e:50:a6:34:29:75:7f:2d:17:72:22:a2:57:ae:be:ac: 47:eb:f9:ae:b1:37:60:fa:a4:cc:7e:a6:a2:5e:ff:20:4c:e1: b8:f5:7a:22:64:3e:80:d6:ef:64:34:30:d6:ef:2b:e4:5f:c9: 7d:0b:9d:01:17:0f:89:4d:da:12:df:de:93:a7:d9:87:02:a6: c2:8e:f2:4c:af:9c:a4:23:95:ff:28:50:75:66:4f:16:ab:3f: 3e:59:b6:05:20:80:14:e0:94:6a:d1:d1:42:ef:e9:fe:47:93: 6e:85:2e:1a:48:a2:06:23:12:70:f9:28:a1:a3:d9:7f:44:be: 63:df:85:7a:95:32:08:8a:b3:19:91:44:0f:ac:12:94:f8:1b: c0:2d:6b:7c:75:a2:44:61:ac:b6:4a:a7:c5:46:f0:b4:e5:37: 5d:c5:b1:22:de:db:2d:ed:f0:ac:47:04:4d:82:60:a2:75:0d: 99:c7:95:74:d7:28:ee:d0:ab:1b:ab:5a:18:05:6a:6e:8c:2e: d6:25:e0:af:ac:ca:1f:a0:aa:84:03:c6:97:a6:50:f2:28:00: 40:6d:47:a4:49:6a:fd:fb:89:25:c3:f8:a6:ce:89:3f:74:fc: 4a:34:89:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ7IlMfHfbIr3gYF35Ddw3s2+QrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1 REFFRTQyOTAeFw0yNTA0MjYxMzM2MTVaFw0yNTA0MjkyMDUwMTVaMDMxMTAvBgNV BAMTKEM4QkE0MDE2NkQyRDlGMkNEQzQwRDBFODk0RkUxN0Y0MkMwQzBCRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmVX2kesJsIdsWL7JEINs8GAqS h6RF5YU0vmzwycFAXhgK3vrBFauov00iDggvGzbMSRMTiVvTtA2nmROdKPdz+e6B YSmPjHDKcs2ylELAFOEraXmWSpN0YD65fbT2oFXnDFi/AXYdFIv0T0CDHIAvIvKQ QDCOAVKw5wzNhQ8gmFPvxgIfcUE7j2cw+MhY+iONQwQi8RVcig3/HoyKl64YZC8u GuiY7r2HRNCUPfUyIoER9K8dk3pw8lWGllREbO4X1vZxJQ+ViidggMg0t8AeK0vh PhBKJS7VCfHZudnsgn7FO6QQuW8jQ46UBlDdp/vL6E7HXFkLiLqKu+kKHGaTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyLpAFm0tnyzcQNDolP4X9CwMC+4wHwYDVR0j BBgwFoAUaZRcOGmz5CnUsK7O35mZ6l2u5CkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODMxZWViNC1mMzU3LTQ1YTctOTI2NS00MjhiMDA3YTAyNzAvMC82OTk0NUMzODY5 QjNFNDI5RDRCMEFFQ0VERjk5OTlFQTVEQUVFNDI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1REFF RTQyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTgzMWVlYjQtZjM1Ny00NWE3LTky NjUtNDI4YjAwN2EwMjcwLzAvNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5 RUE1REFFRTQyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEQLDuTOyMdn2P8hKNFvfOz7x+bPlCmNCl1 fy0XciKiV66+rEfr+a6xN2D6pMx+pqJe/yBM4bj1eiJkPoDW72Q0MNbvK+RfyX0L nQEXD4lN2hLf3pOn2YcCpsKO8kyvnKQjlf8oUHVmTxarPz5ZtgUggBTglGrR0ULv 6f5Hk26FLhpIogYjEnD5KKGj2X9EvmPfhXqVMgiKsxmRRA+sEpT4G8Ata3x1okRh rLZKp8VG8LTlN13FsSLe2y3t8KxHBE2CYKJ1DZnHlXTXKO7QqxurWhgFam6MLtYl 4K+syh+gqoQDxpemUPIoAEBtR6RJav37iSXD+KbOiT90/Eo0iao= -----END CERTIFICATE-----Generated at Sat Apr 26 19:57:53 2025 by rpki-client