$ rpki-client -vvf repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft File: 69D341364BC344B4ED6B3A65031AACB403AB3222.mft (raw, json) Hash identifier: c1VkhpyNe6Q/nG8bdDS3nj68eUoDhQZYWDF8jIrhatE= Subject key identifier: AC:80:00:E4:16:37:05:22:35:34:CC:CB:50:82:A0:4A:E7:C7:91:DF Authority key identifier: 69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 Certificate issuer: /CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Certificate serial: 45AD9CE1888A7399DC6A92D7F5CAC65C64C4B0E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject info access: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft Manifest number: 04E3 Signing time: Tue 17 Jun 2025 21:11:21 +0000 Manifest this update: Tue 17 Jun 2025 21:06:21 +0000 Manifest next update: Sat 21 Jun 2025 05:07:21 +0000 Files and hashes: 1: 323430323a326134303a3a2f33322d3438203d3e20313336383733.roa (hash: /62nOK71rLN/rA80+Xk3S/HgS8HMB1l9OOKuRpOZFP0=) 2: 3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa (hash: mEwVbYgiqYJGIGp+5J9MnWrl5gm8ToUUdLv1IaAGjLQ=) 3: 69D341364BC344B4ED6B3A65031AACB403AB3222.crl (hash: joBJI6o4sHuMAYmFk+3sBwZr8ZH9cmPePKhtGHaAYNY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 02:47:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:ad:9c:e1:88:8a:73:99:dc:6a:92:d7:f5:ca:c6:5c:64:c4:b0:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Validity Not Before: Jun 17 21:06:21 2025 GMT Not After : Jun 21 05:07:21 2025 GMT Subject: CN=AC8000E4163705223534CCCB5082A04AE7C791DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4e:63:fe:3b:eb:6c:7a:9c:cc:1f:14:b6:eb: 9f:a1:82:12:c1:9b:ed:e5:8d:60:06:49:73:7d:20: 50:be:48:b9:82:bf:dd:54:d7:2f:36:84:6c:76:39: c0:00:b1:c9:3f:a4:80:0a:a8:18:b2:87:9d:80:1c: d5:31:8b:43:0e:4e:5f:16:c6:61:d0:15:0b:58:ec: e4:2c:7e:29:b1:cd:8b:e3:44:2c:44:f1:a3:93:38: 03:ec:54:c5:1a:67:b9:10:0b:1e:37:31:26:ad:a1: c5:e0:23:09:ff:a9:e8:11:ee:14:23:2a:93:c2:f6: d1:20:5a:99:db:06:0b:2f:34:33:db:d9:f8:78:01: aa:f0:f4:02:2f:3b:33:08:ec:b2:65:c9:37:10:85: f7:cc:d2:cc:2a:6d:ba:06:4e:ec:d6:86:fc:76:9d: de:4a:74:70:98:dd:3b:f1:0f:a6:8e:61:0c:af:85: 54:fc:08:d2:03:6b:1d:56:ee:a6:57:b0:bc:03:bb: 56:cf:18:6b:d3:21:c9:69:0c:00:5b:2e:d6:76:e0: 19:31:5c:59:5b:c9:b6:c5:3e:71:27:ee:dd:9e:c6: cc:2d:7e:f8:d7:44:7c:1e:7e:ab:42:22:00:43:58: 9e:05:47:1a:17:88:5f:68:1e:ad:fd:b2:95:f1:28: f2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:80:00:E4:16:37:05:22:35:34:CC:CB:50:82:A0:4A:E7:C7:91:DF X509v3 Authority Key Identifier: keyid:69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:a1:b5:2f:4f:a8:77:3a:2f:a0:3e:79:3d:34:b1:bc:c5:8e: b1:82:db:3b:1e:1e:0e:bf:ba:19:84:ce:f1:ff:3a:68:a3:59: 86:ce:36:5e:ad:46:ea:39:f2:0a:a4:64:46:6e:f5:55:51:76: 38:1c:62:0c:31:b1:b7:fe:4a:dd:13:38:95:8d:7a:57:c5:96: 53:3a:ae:c3:f7:d8:63:33:d9:6c:e0:47:0d:a4:3a:df:34:12: 55:19:77:00:73:98:02:88:73:5d:4b:b7:28:f7:c7:76:cb:34: 8d:88:fe:52:47:f6:86:f3:16:02:82:90:11:61:ec:3d:35:0a: 8d:56:4e:85:1e:b5:2a:a0:29:5d:d7:a2:5c:78:32:76:1b:e0: e3:9f:4e:87:ab:a4:90:c5:4b:2a:81:a8:27:df:92:20:e6:50: b3:4e:82:1d:3f:5c:a7:16:c4:08:70:32:6a:95:b1:4e:e5:81: b9:bb:00:58:71:d1:4f:aa:e9:e8:b7:3f:d2:12:09:9d:aa:7f: 54:43:9d:7d:46:10:98:7e:ec:e6:35:9d:92:a6:4f:aa:b7:bf: 68:86:e8:18:dc:56:58:65:e0:59:6d:fd:a8:e4:c9:de:3a:68: 8f:ce:6d:83:60:ce:04:7a:7b:5a:bb:cb:70:11:9a:37:e3:50: 93:8a:1e:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURa2c4YiKc5ncapLX9crGXGTEsOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQw M0FCMzIyMjAeFw0yNTA2MTcyMTA2MjFaFw0yNTA2MjEwNTA3MjFaMDMxMTAvBgNV BAMTKEFDODAwMEU0MTYzNzA1MjIzNTM0Q0NDQjUwODJBMDRBRTdDNzkxREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5TmP+O+tsepzMHxS265+hghLB m+3ljWAGSXN9IFC+SLmCv91U1y82hGx2OcAAsck/pIAKqBiyh52AHNUxi0MOTl8W xmHQFQtY7OQsfimxzYvjRCxE8aOTOAPsVMUaZ7kQCx43MSatocXgIwn/qegR7hQj KpPC9tEgWpnbBgsvNDPb2fh4Aarw9AIvOzMI7LJlyTcQhffM0swqbboGTuzWhvx2 nd5KdHCY3TvxD6aOYQyvhVT8CNIDax1W7qZXsLwDu1bPGGvTIclpDABbLtZ24Bkx XFlbybbFPnEn7t2exswtfvjXRHwefqtCIgBDWJ4FRxoXiF9oHq39spXxKPJpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrIAA5BY3BSI1NMzLUIKgSufHkd8wHwYDVR0j BBgwFoAUadNBNkvDRLTtazplAxqstAOrMiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTdhNmJjYi05ZWI2LTQ5ZGUtYjk5OC0wYmVkM2M1YzEyNzgvMC82OUQzNDEzNjRC QzM0NEI0RUQ2QjNBNjUwMzFBQUNCNDAzQUIzMjIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQwM0FC MzIyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3YTZiY2ItOWViNi00OWRlLWI5 OTgtMGJlZDNjNWMxMjc4LzAvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFD QjQwM0FCMzIyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKhtS9PqHc6L6A+eT00sbzFjrGC2zseHg6/ uhmEzvH/OmijWYbONl6tRuo58gqkZEZu9VVRdjgcYgwxsbf+St0TOJWNelfFllM6 rsP32GMz2WzgRw2kOt80ElUZdwBzmAKIc11Ltyj3x3bLNI2I/lJH9obzFgKCkBFh 7D01Co1WToUetSqgKV3Xolx4MnYb4OOfToerpJDFSyqBqCffkiDmULNOgh0/XKcW xAhwMmqVsU7lgbm7AFhx0U+q6ei3P9ISCZ2qf1RDnX1GEJh+7OY1nZKmT6q3v2iG 6BjcVlhl4Flt/ajkyd46aI/ObYNgzgR6e1q7y3ARmjfjUJOKHtk= -----END CERTIFICATE-----Generated at Wed Jun 18 03:48:19 2025 by rpki-client