$ rpki-client -vvf repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft File: 69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft (raw, json) Hash identifier: am4z4iqz0/zYfgAQ68mqac7Q2Mp3TQnWHZkCcUasRSs= Subject key identifier: 72:11:AC:F4:4C:23:DE:4B:C9:C5:73:C3:4E:8A:84:FE:DD:78:27:DC Authority key identifier: 69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7 Certificate issuer: /CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7 Certificate serial: 7B0214BBC3AD6939C12E808FD2FDE338CA9BB990 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft Manifest number: 01DE Signing time: Tue 05 Aug 2025 09:11:47 +0000 Manifest this update: Tue 05 Aug 2025 09:06:47 +0000 Manifest next update: Fri 08 Aug 2025 16:35:47 +0000 Files and hashes: 1: 69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl (hash: 1Ag75zVzTv/ofIMio6cwUb+CDOS3eDvc5cY7667m2dw=) 2: 3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa (hash: k338Lmr2nBFKtOYrTW3s+aTUS4KKRTx1cKwMsZkav7w=) 3: 3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa (hash: heu4e8sIQY0GrzrCMXaxDxeM2U05OsH3YIXr+Hp2kfg=) 4: 3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa (hash: ZuytWq4PWrbArnGlNtL3kdcVQRo24jWxli7Scbb4h7Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 16:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:02:14:bb:c3:ad:69:39:c1:2e:80:8f:d2:fd:e3:38:ca:9b:b9:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7 Validity Not Before: Aug 5 09:06:47 2025 GMT Not After : Aug 8 16:35:47 2025 GMT Subject: CN=7211ACF44C23DE4BC9C573C34E8A84FEDD7827DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a2:4f:ec:24:7e:dd:e3:94:df:51:a7:5c:22: 7d:07:0d:6a:65:7f:2e:21:a8:8c:7b:ba:dd:8c:40: 4d:70:6f:a0:b4:99:06:bf:4a:58:5c:54:3a:2c:77: 9e:07:f4:f1:a8:66:82:b3:07:de:d8:6c:93:dd:4a: 9b:6f:30:03:49:59:40:9d:db:0c:b6:46:a0:35:55: aa:c2:9c:d2:88:c9:ea:c2:aa:44:f5:8a:8f:80:51: 52:92:d4:16:8d:48:39:06:7f:28:f4:8d:ce:c3:49: 51:e4:6c:7a:da:db:a6:7e:86:09:1e:62:a9:9b:31: 7c:7d:80:dc:7f:fe:53:92:11:48:bd:0d:c6:fc:c4: b4:09:e1:5f:e5:b1:78:1b:ea:22:d3:2b:f6:f9:b3: 4d:90:af:39:54:05:d7:39:44:a2:a0:d0:57:85:ed: 70:5c:98:c3:e5:ba:8e:57:0d:ef:2c:82:2d:7f:32: 6c:bd:30:a8:a9:92:06:51:34:30:43:ff:25:84:55: d8:8e:59:5c:c8:69:be:e1:4b:5d:dd:9b:bb:d8:98: f7:3a:d2:09:a1:e3:4e:0c:e1:a4:b9:2e:5e:47:3d: c8:bb:81:41:d9:ed:c9:0f:c3:1b:11:4a:7e:d0:e3: 10:0d:e0:64:2c:a4:4a:49:2a:bc:f3:1d:32:c3:25: dd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:11:AC:F4:4C:23:DE:4B:C9:C5:73:C3:4E:8A:84:FE:DD:78:27:DC X509v3 Authority Key Identifier: keyid:69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:6f:da:db:25:eb:37:ae:3c:24:b7:09:d7:1a:d9:f8:33:e6: 26:7d:91:2d:4d:00:44:9d:db:4e:aa:0d:dc:fd:bb:de:9c:e2: c9:da:ad:b4:31:a2:8c:6d:59:b5:3a:43:f9:e8:01:12:cf:d8: 20:8b:71:3b:9b:30:22:dd:27:df:0b:cf:f0:fe:89:e1:6f:e8: e8:55:da:bb:fc:a7:13:52:f1:6f:c8:1c:37:f5:62:90:cf:96: fb:c0:ee:f7:f8:18:c3:f6:6f:8e:8c:c6:ae:20:4e:ec:fd:d4: 39:77:b7:90:67:04:bb:b0:6b:e1:f7:2b:57:88:08:a6:2a:fe: 7f:57:68:d7:84:06:20:d7:68:fe:5d:b4:57:9b:99:cc:6d:13: 5c:bb:8b:81:21:b9:8b:1f:83:31:c6:d9:41:ba:00:fe:e8:8e: 05:fb:d0:d1:e1:5b:36:58:4b:b9:69:e0:c1:d8:a4:fe:9b:90: eb:0a:00:ac:91:de:27:aa:b2:0b:57:b3:9b:5e:54:10:8f:57: d3:19:e6:d9:b3:a2:3a:fa:b9:75:ef:a4:96:45:d9:5c:01:84: aa:5d:48:d4:af:b6:2e:ea:47:68:c8:ed:ca:39:02:ef:a2:d2: eb:75:38:ef:57:66:27:2b:ed:55:22:bf:47:ac:5c:2d:e8:29: 7a:97:e2:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUewIUu8OtaTnBLoCP0v3jOMqbuZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFFNTE2 QTU5QjVFNzAeFw0yNTA4MDUwOTA2NDdaFw0yNTA4MDgxNjM1NDdaMDMxMTAvBgNV BAMTKDcyMTFBQ0Y0NEMyM0RFNEJDOUM1NzNDMzRFOEE4NEZFREQ3ODI3REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRok/sJH7d45TfUadcIn0HDWpl fy4hqIx7ut2MQE1wb6C0mQa/SlhcVDosd54H9PGoZoKzB97YbJPdSptvMANJWUCd 2wy2RqA1VarCnNKIyerCqkT1io+AUVKS1BaNSDkGfyj0jc7DSVHkbHra26Z+hgke YqmbMXx9gNx//lOSEUi9Dcb8xLQJ4V/lsXgb6iLTK/b5s02QrzlUBdc5RKKg0FeF 7XBcmMPluo5XDe8sgi1/Mmy9MKipkgZRNDBD/yWEVdiOWVzIab7hS13dm7vYmPc6 0gmh404M4aS5Ll5HPci7gUHZ7ckPwxsRSn7Q4xAN4GQspEpJKrzzHTLDJd0VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUchGs9Ewj3kvJxXPDToqE/t14J9wwHwYDVR0j BBgwFoAUaf+a80ERzUY37YpstDUeUWpZtecwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjQwYWJlNi04ZGVlLTRiZDEtODE0Yy0yYWYzMWEzZDljZGYvMC82OUZGOUFGMzQx MTFDRDQ2MzdFRDhBNkNCNDM1MUU1MTZBNTlCNUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFFNTE2QTU5 QjVFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY0MGFiZTYtOGRlZS00YmQxLTgx NGMtMmFmMzFhM2Q5Y2RmLzAvNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFF NTE2QTU5QjVFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJv2tsl6zeuPCS3Cdca2fgz5iZ9kS1NAESd 206qDdz9u96c4snarbQxooxtWbU6Q/noARLP2CCLcTubMCLdJ98Lz/D+ieFv6OhV 2rv8pxNS8W/IHDf1YpDPlvvA7vf4GMP2b46Mxq4gTuz91Dl3t5BnBLuwa+H3K1eI CKYq/n9XaNeEBiDXaP5dtFebmcxtE1y7i4EhuYsfgzHG2UG6AP7ojgX70NHhWzZY S7lp4MHYpP6bkOsKAKyR3ieqsgtXs5teVBCPV9MZ5tmzojr6uXXvpJZF2VwBhKpd SNSvti7qR2jI7co5Au+i0ut1OO9XZicr7VUiv0esXC3oKXqX4oE= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:13 2025 by rpki-client