$ rpki-client -vvf repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft File: 69D341364BC344B4ED6B3A65031AACB403AB3222.mft (raw, json) Hash identifier: zT9vidls2fXX7jMVAStXbORi8tNtvS6ElebsUCJ46+k= Subject key identifier: 21:A7:6E:DE:41:29:CE:7B:61:88:20:40:3E:FC:BE:92:F9:87:73:CE Authority key identifier: 69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 Certificate issuer: /CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Certificate serial: 100B2E7B418172EF8CA3B610D42CEB0704B5D321 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject info access: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft Manifest number: 04F9 Signing time: Wed 06 Aug 2025 09:31:21 +0000 Manifest this update: Wed 06 Aug 2025 09:26:21 +0000 Manifest next update: Sat 09 Aug 2025 15:35:21 +0000 Files and hashes: 1: 323430323a326134303a3a2f33322d3438203d3e20313336383733.roa (hash: /62nOK71rLN/rA80+Xk3S/HgS8HMB1l9OOKuRpOZFP0=) 2: 69D341364BC344B4ED6B3A65031AACB403AB3222.crl (hash: sRXMj42FefMTKG39huovmk+pCzLCsksnAr8TkRN2nRk=) 3: 3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa (hash: mEwVbYgiqYJGIGp+5J9MnWrl5gm8ToUUdLv1IaAGjLQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 15:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:0b:2e:7b:41:81:72:ef:8c:a3:b6:10:d4:2c:eb:07:04:b5:d3:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Validity Not Before: Aug 6 09:26:21 2025 GMT Not After : Aug 9 15:35:21 2025 GMT Subject: CN=21A76EDE4129CE7B618820403EFCBE92F98773CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:50:71:c4:4e:e7:69:f0:e0:58:7c:92:3d:95: b9:53:fa:23:1a:b8:f3:82:91:e6:e2:2b:21:b1:f6: ce:b8:24:e2:a6:7a:12:91:65:4b:63:a6:82:33:59: be:ed:14:ef:81:d1:1d:ce:26:55:2b:11:19:1a:ad: 9c:09:bf:ed:fd:fa:2e:92:ef:07:43:8f:8b:ac:36: 5c:a9:7d:51:3a:10:1f:e0:42:21:b7:34:ee:4d:9a: 46:04:cd:c1:66:6f:75:a5:79:ab:d9:f2:e9:ed:3b: 96:44:30:31:0b:a6:26:ee:69:35:79:df:8a:c1:5d: 0d:47:14:27:15:15:22:a9:13:5c:95:86:f3:c3:e7: 70:4e:58:41:70:ed:7f:88:02:cb:cc:c3:51:7c:66: c6:1a:8d:85:94:cb:20:8f:1f:d5:55:b7:7d:f1:eb: a1:f6:ea:b8:ea:4a:a0:8c:0a:9b:14:d1:ad:4b:6b: 99:42:45:5a:d5:85:a5:58:89:40:33:67:48:fa:05: 5b:f2:c4:c6:ca:b8:e2:54:52:11:b0:51:b7:1a:b1: e1:40:9a:07:eb:32:29:03:65:27:e4:f1:36:c9:c1: b5:8d:db:74:4d:b8:86:7e:b5:15:cd:00:c7:7b:28: 9a:8c:72:6a:1f:9c:55:e2:56:6f:4a:fa:b2:95:68: a0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A7:6E:DE:41:29:CE:7B:61:88:20:40:3E:FC:BE:92:F9:87:73:CE X509v3 Authority Key Identifier: keyid:69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:0f:ce:99:65:ac:1c:bc:bb:84:b9:33:b2:40:31:ac:95:8f: f6:20:9a:4e:44:55:d8:67:dd:17:86:1f:e0:36:77:58:5d:de: 71:4a:20:f7:28:a7:c3:7b:86:c2:47:eb:93:4a:90:05:63:ff: 57:87:a0:8d:83:d0:a5:38:5a:a7:9d:23:f7:d9:7b:61:97:91: 85:23:a3:c9:ef:67:11:ba:20:a0:d2:5c:1a:d2:30:89:29:9e: 52:a3:af:a2:c2:6f:4b:fc:84:36:c1:48:70:c6:40:34:53:92: fc:df:1c:28:c9:3f:4e:31:0d:68:3e:f7:c9:10:aa:a3:50:89: 52:93:ba:5d:52:c4:98:05:63:88:66:92:0e:8b:b2:a8:f1:75: c5:9b:61:30:26:4a:54:ff:a5:e2:df:8f:29:1f:68:49:26:22: 7d:a2:d5:4a:bb:ec:84:10:27:d5:42:97:05:ec:e9:c1:1b:b1: f0:89:b1:a0:9c:6f:64:a2:72:4d:aa:03:c8:30:a7:77:99:f1: d3:c0:d6:9a:ff:11:75:4a:55:1b:a5:46:a1:e5:b0:ba:b0:31: 4e:aa:50:86:10:fd:39:0a:2f:99:8a:57:83:0b:b9:0f:fb:29: b7:8e:f5:63:cd:3c:14:35:63:07:88:06:1e:c0:ab:9c:f4:24: 27:3f:cf:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEAsue0GBcu+Mo7YQ1CzrBwS10yEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQw M0FCMzIyMjAeFw0yNTA4MDYwOTI2MjFaFw0yNTA4MDkxNTM1MjFaMDMxMTAvBgNV BAMTKDIxQTc2RURFNDEyOUNFN0I2MTg4MjA0MDNFRkNCRTkyRjk4NzczQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/UHHETudp8OBYfJI9lblT+iMa uPOCkebiKyGx9s64JOKmehKRZUtjpoIzWb7tFO+B0R3OJlUrERkarZwJv+39+i6S 7wdDj4usNlypfVE6EB/gQiG3NO5NmkYEzcFmb3WleavZ8untO5ZEMDELpibuaTV5 34rBXQ1HFCcVFSKpE1yVhvPD53BOWEFw7X+IAsvMw1F8ZsYajYWUyyCPH9VVt33x 66H26rjqSqCMCpsU0a1La5lCRVrVhaVYiUAzZ0j6BVvyxMbKuOJUUhGwUbcaseFA mgfrMikDZSfk8TbJwbWN23RNuIZ+tRXNAMd7KJqMcmofnFXiVm9K+rKVaKDJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIadu3kEpznthiCBAPvy+kvmHc84wHwYDVR0j BBgwFoAUadNBNkvDRLTtazplAxqstAOrMiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTdhNmJjYi05ZWI2LTQ5ZGUtYjk5OC0wYmVkM2M1YzEyNzgvMC82OUQzNDEzNjRC QzM0NEI0RUQ2QjNBNjUwMzFBQUNCNDAzQUIzMjIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQwM0FC MzIyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3YTZiY2ItOWViNi00OWRlLWI5 OTgtMGJlZDNjNWMxMjc4LzAvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFD QjQwM0FCMzIyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUPzpllrBy8u4S5M7JAMayVj/Ygmk5EVdhn 3ReGH+A2d1hd3nFKIPcop8N7hsJH65NKkAVj/1eHoI2D0KU4WqedI/fZe2GXkYUj o8nvZxG6IKDSXBrSMIkpnlKjr6LCb0v8hDbBSHDGQDRTkvzfHCjJP04xDWg+98kQ qqNQiVKTul1SxJgFY4hmkg6LsqjxdcWbYTAmSlT/peLfjykfaEkmIn2i1Uq77IQQ J9VClwXs6cEbsfCJsaCcb2Sick2qA8gwp3eZ8dPA1pr/EXVKVRulRqHlsLqwMU6q UIYQ/TkKL5mKV4MLuQ/7KbeO9WPNPBQ1YweIBh7Aq5z0JCc/z8c= -----END CERTIFICATE-----Generated at Thu Aug 7 17:34:31 2025 by rpki-client