$ rpki-client -vvf repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft File: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft (raw, json) Hash identifier: DZnusBSVZg5dFJEOzv9S9tdXkUg8ho9d4aR/pUaXtsA= Subject key identifier: A6:95:35:B5:FE:F9:9F:41:71:1B:31:98:C6:A4:33:E7:CC:16:52:DA Authority key identifier: 69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 Certificate issuer: /CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Certificate serial: 1FD8BF5298740201C145DB50126119F28C6D4501 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft Manifest number: 0201 Signing time: Wed 06 Aug 2025 07:11:18 +0000 Manifest this update: Wed 06 Aug 2025 07:06:18 +0000 Manifest next update: Sat 09 Aug 2025 16:51:18 +0000 Files and hashes: 1: 3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa (hash: mN0twBIDnpakC8HUHafkf1WXSP1Z0ySHIU0xGnkB28I=) 2: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl (hash: BS7Fd3YP27c1R9qlizmGrt/iT5mRWCA14GpjAB1hyqg=) 3: 3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa (hash: VeN/bGOYLWRy+rz86CsEUNPZS6zxON2N9UHaLIP5nig=) 4: 3130332e3138392e3230362e302f32332d3233203d3e2039333431.roa (hash: VhmM6dwj6jhcWpHKGkB8nHv6O88nIuiPwR83QLa+WS8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 16:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:d8:bf:52:98:74:02:01:c1:45:db:50:12:61:19:f2:8c:6d:45:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Validity Not Before: Aug 6 07:06:18 2025 GMT Not After : Aug 9 16:51:18 2025 GMT Subject: CN=A69535B5FEF99F41711B3198C6A433E7CC1652DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9a:16:0e:67:e3:72:03:00:ef:f4:e7:2f:25: 17:46:b4:cd:00:ea:da:61:4a:f3:46:e1:62:28:07: af:e0:42:6b:79:11:df:1d:78:d5:93:2c:5b:6b:af: fe:3c:35:a2:5d:83:ce:a2:cf:ba:2d:79:ee:71:af: d4:e7:6a:ea:18:14:a8:0e:2d:dc:09:ae:73:53:a4: dc:77:9c:89:81:84:b4:90:12:33:61:4e:a3:55:69: 3f:ae:93:f8:c1:67:d9:af:c8:c6:11:28:e4:7e:27: 98:be:bb:da:8e:db:8f:d5:03:90:3b:00:1e:7f:bb: 66:cc:d9:87:b1:9d:75:86:4e:b2:0a:e8:34:aa:d6: ed:dc:60:bf:3f:d1:43:75:32:bb:14:bc:93:2a:8b: f3:ef:89:df:65:54:a1:46:71:de:0d:81:11:70:40: b5:04:6d:14:cc:c1:46:ce:de:70:f0:ac:bb:3f:e2: 56:57:0e:30:64:a8:26:ef:90:a8:5f:55:49:09:8a: ad:3c:60:d7:bb:f9:0a:70:60:53:dc:4a:29:08:c2: 0c:25:1c:4a:d1:60:e8:ec:12:06:e9:33:bf:cb:b4: c0:67:ca:3b:ca:41:02:db:19:2d:af:8f:1b:2b:d5: 21:1f:91:d2:4f:f8:71:a4:59:fd:37:44:4e:62:e4: ad:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:95:35:B5:FE:F9:9F:41:71:1B:31:98:C6:A4:33:E7:CC:16:52:DA X509v3 Authority Key Identifier: keyid:69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:ee:7d:45:ee:68:76:18:8e:f5:65:e8:24:18:de:ba:d7:c9: b6:0f:52:ed:45:51:3f:82:bd:87:0e:17:b3:84:d8:f8:31:a2: 10:8d:43:58:a1:df:ba:a4:3d:1a:bf:e3:06:47:e7:da:a7:ac: 6e:c9:a3:31:79:da:b4:b8:36:bd:4d:5c:8d:76:86:9d:df:30: ea:80:8e:fa:00:9a:b9:d1:89:dc:53:d5:00:30:31:36:12:96: ef:df:81:92:1b:fd:14:07:49:fb:0d:42:0f:cd:fd:d1:7d:7a: 03:a8:15:d7:3d:40:70:9f:24:6c:28:a7:37:1d:74:85:19:86: cf:96:65:dd:21:43:3b:d0:34:90:81:51:4e:b1:e3:f4:6d:40: 9c:cd:e5:dc:97:24:de:c4:d6:23:3a:d0:bf:ae:64:3e:2a:b5: 7b:96:b9:c9:d9:13:ff:fb:84:6b:d1:28:13:f9:af:43:ef:8f: be:f4:72:6b:65:91:3b:55:75:4b:a4:5a:8a:cc:cd:16:77:30: 3c:62:0b:41:a6:e6:92:3e:ad:67:a2:eb:71:08:77:9e:5f:34: 83:4a:98:5b:4b:c3:04:20:31:92:4e:0c:a3:82:e0:33:12:48: 94:49:75:56:5c:e3:1d:7c:4b:68:a4:38:95:aa:58:ca:13:84: d2:a6:de:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH9i/Uph0AgHBRdtQEmEZ8oxtRQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1 REFFRTQyOTAeFw0yNTA4MDYwNzA2MThaFw0yNTA4MDkxNjUxMThaMDMxMTAvBgNV BAMTKEE2OTUzNUI1RkVGOTlGNDE3MTFCMzE5OEM2QTQzM0U3Q0MxNjUyREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEmhYOZ+NyAwDv9OcvJRdGtM0A 6tphSvNG4WIoB6/gQmt5Ed8deNWTLFtrr/48NaJdg86iz7otee5xr9TnauoYFKgO LdwJrnNTpNx3nImBhLSQEjNhTqNVaT+uk/jBZ9mvyMYRKOR+J5i+u9qO24/VA5A7 AB5/u2bM2YexnXWGTrIK6DSq1u3cYL8/0UN1MrsUvJMqi/Pvid9lVKFGcd4NgRFw QLUEbRTMwUbO3nDwrLs/4lZXDjBkqCbvkKhfVUkJiq08YNe7+QpwYFPcSikIwgwl HErRYOjsEgbpM7/LtMBnyjvKQQLbGS2vjxsr1SEfkdJP+HGkWf03RE5i5K2pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUppU1tf75n0FxGzGYxqQz58wWUtowHwYDVR0j BBgwFoAUaZRcOGmz5CnUsK7O35mZ6l2u5CkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODMxZWViNC1mMzU3LTQ1YTctOTI2NS00MjhiMDA3YTAyNzAvMC82OTk0NUMzODY5 QjNFNDI5RDRCMEFFQ0VERjk5OTlFQTVEQUVFNDI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1REFF RTQyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTgzMWVlYjQtZjM1Ny00NWE3LTky NjUtNDI4YjAwN2EwMjcwLzAvNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5 RUE1REFFRTQyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPufUXuaHYYjvVl6CQY3rrXybYPUu1FUT+C vYcOF7OE2PgxohCNQ1ih37qkPRq/4wZH59qnrG7JozF52rS4Nr1NXI12hp3fMOqA jvoAmrnRidxT1QAwMTYSlu/fgZIb/RQHSfsNQg/N/dF9egOoFdc9QHCfJGwopzcd dIUZhs+WZd0hQzvQNJCBUU6x4/RtQJzN5dyXJN7E1iM60L+uZD4qtXuWucnZE//7 hGvRKBP5r0Pvj770cmtlkTtVdUukWorMzRZ3MDxiC0Gm5pI+rWei63EId55fNINK mFtLwwQgMZJODKOC4DMSSJRJdVZc4x18S2ikOJWqWMoThNKm3hc= -----END CERTIFICATE-----Generated at Thu Aug 7 03:23:29 2025 by rpki-client