$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft File: C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft (raw, json) Hash identifier: nleZs+NX2QoW7yp0Fb3T4W9sV/tdwfL984Ry6WgHUzo= Subject key identifier: FA:0F:A9:2D:F7:AB:00:76:33:37:80:B8:BF:2D:73:98:45:03:93:30 Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE Certificate issuer: /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Certificate serial: 55EA2143FF13D519358A101C5745C160C43D1624 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft Manifest number: 042E Signing time: Mon 16 Jun 2025 07:10:50 +0000 Manifest this update: Mon 16 Jun 2025 07:05:50 +0000 Manifest next update: Thu 19 Jun 2025 15:41:50 +0000 Files and hashes: 1: 3130332e34312e3230362e302f32342d3234203d3e203538333937.roa (hash: 8p0am7ehV2An1UqUgUm2Z1Br0OD2VEAPk/dVcoq3jDQ=) 2: 3131372e35332e3135312e302f32342d3234203d3e203538333937.roa (hash: Si3tPvzTYMJNo6ziKI0r83ugddQoVhs+qZtKjviywZY=) 3: 3131372e35332e3134392e302f32342d3234203d3e203538333937.roa (hash: 0q8NrmjjcxoNrx7WtkZa7JKjlra7drxIR2Rkv2uH0qU=) 4: 3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (hash: Es6h8MzPI3S1mFQ1J0kqGZiZfKqhvpv8wCyy8PJOM40=) 5: 3131372e35332e3135302e302f32342d3234203d3e203538333937.roa (hash: UMpjLuebG+yMQNJv43xd3u8qZ1cqsp7h54oRFs+fJIg=) 6: 3131372e35332e3134382e302f32342d3234203d3e203538333937.roa (hash: s/yj35IxEbWgMmRyngcwwQ2XYvpHuhez/PCo0jx4Hk4=) 7: 3130332e34312e3230372e302f32342d3234203d3e203538333937.roa (hash: /5ZnjDo2uinC9TTjfx0reoiz9f4sCWczTxGAg/U2xq4=) 8: C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl (hash: 3+6wrG9+3N2PQJgmOsFluraYCJ+E7HBUP/LIL8xYlnM=) 9: 3130332e34312e3230352e302f32342d3234203d3e203538333937.roa (hash: bzqLwXgqRc5lqIH8QIxSqfc9LTb/899srIuuHKEc/bE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 11:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:ea:21:43:ff:13:d5:19:35:8a:10:1c:57:45:c1:60:c4:3d:16:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Validity Not Before: Jun 16 07:05:50 2025 GMT Not After : Jun 19 15:41:50 2025 GMT Subject: CN=FA0FA92DF7AB0076333780B8BF2D739845039330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:15:a6:1a:51:a9:51:1b:ad:7f:e6:33:ee:73: cd:83:51:b5:83:ca:3a:82:3e:3a:6b:f4:9c:c8:34: 90:c5:0d:df:67:59:0c:4d:4b:d3:bc:18:9a:6b:fb: a0:79:f6:8f:e6:c8:8f:52:fd:5f:87:ef:aa:ab:21: b6:fe:93:76:7e:3a:21:58:a8:1f:44:cc:37:ba:c0: 3a:ea:f7:43:d2:ea:52:81:f5:36:5d:d6:a9:0d:2f: c3:38:ca:27:5e:83:b7:da:14:9a:9d:bc:4f:67:17: 3d:54:00:a8:fa:52:87:da:a3:8d:19:5a:e4:f2:10: 03:e0:9d:99:7b:6f:0a:3a:f5:02:41:16:91:b3:4f: e9:25:8e:10:0b:4c:7b:ab:af:be:ed:b4:df:e6:2b: bf:07:29:18:b7:a7:d0:06:cc:31:bf:83:48:4b:16: 7f:21:bb:7f:9d:05:a4:df:4c:55:1c:f6:ca:4c:d3: 99:14:68:3e:cf:85:0d:88:2a:79:36:a0:f1:bb:9c: ab:8d:65:53:f5:5c:46:8a:e0:a4:91:98:6c:a1:72: 00:0d:b0:db:ae:43:bf:7d:bc:65:2c:0c:25:4d:ff: a2:b1:1d:b2:ac:0f:5f:1c:71:17:30:37:53:9f:31: 33:e9:53:81:79:7a:bc:1b:2b:3e:25:41:aa:be:13: 89:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0F:A9:2D:F7:AB:00:76:33:37:80:B8:BF:2D:73:98:45:03:93:30 X509v3 Authority Key Identifier: keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:06:de:c2:b1:56:51:02:f2:41:1b:fe:82:ed:3e:26:6e:aa: 7c:3d:20:c6:40:ba:96:3b:a4:aa:25:33:1d:7d:d6:87:0b:78: e8:10:b5:4e:12:df:ca:75:71:8e:85:75:40:b5:30:39:31:8c: 73:77:73:18:e9:52:7e:c3:14:5b:2a:b7:e8:6e:4c:64:b9:94: 39:d5:f7:a7:87:cd:85:a8:83:00:a6:f4:24:b4:8b:ce:99:e7: ed:a1:76:bc:8d:a1:85:92:46:67:1b:f4:f4:7e:90:4e:bc:ec: ce:5d:00:55:15:b8:79:55:32:23:84:a9:97:97:21:63:bf:fa: 05:34:a4:c3:64:c4:4b:f9:33:64:bd:14:32:90:42:f6:aa:1e: 28:ff:bf:93:be:c6:c7:00:94:9a:fb:32:35:b7:70:0b:9c:c8: 55:e0:5f:96:50:50:92:d1:4a:bf:fc:e8:e0:64:2c:fb:ec:b5: 31:07:6c:4e:1d:33:68:01:9b:e6:6a:33:6a:24:a9:6c:3d:65: 4c:93:a7:8f:e3:a5:de:02:f0:b0:8c:28:fd:03:7d:3d:38:9a: f9:b0:b4:2f:01:46:22:d6:56:ae:d2:62:2f:a5:77:8c:83:bd: 19:ca:b8:42:78:78:87:76:a7:86:d1:31:45:af:38:27:47:2e: 24:40:c5:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVeohQ/8T1Rk1ihAcV0XBYMQ9FiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1 Mzg5OThBRTAeFw0yNTA2MTYwNzA1NTBaFw0yNTA2MTkxNTQxNTBaMDMxMTAvBgNV BAMTKEZBMEZBOTJERjdBQjAwNzYzMzM3ODBCOEJGMkQ3Mzk4NDUwMzkzMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCFaYaUalRG61/5jPuc82DUbWD yjqCPjpr9JzINJDFDd9nWQxNS9O8GJpr+6B59o/myI9S/V+H76qrIbb+k3Z+OiFY qB9EzDe6wDrq90PS6lKB9TZd1qkNL8M4yideg7faFJqdvE9nFz1UAKj6Uofao40Z WuTyEAPgnZl7bwo69QJBFpGzT+kljhALTHurr77ttN/mK78HKRi3p9AGzDG/g0hL Fn8hu3+dBaTfTFUc9spM05kUaD7PhQ2IKnk2oPG7nKuNZVP1XEaK4KSRmGyhcgAN sNuuQ799vGUsDCVN/6KxHbKsD18ccRcwN1OfMTPpU4F5erwbKz4lQaq+E4knAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+g+pLferAHYzN4C4vy1zmEUDkzAwHwYDVR0j BBgwFoAUxpAFu3ukaKEKMs5E6cTOeFOJmK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiYTQ1ZS1mNWRhLTQ1ODEtYmZlNS1jMTYxNmMzMGVmYWIvMC9DNjkwMDVCQjdC QTQ2OEExMEEzMkNFNDRFOUM0Q0U3ODUzODk5OEFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1Mzg5 OThBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4YmE0NWUtZjVkYS00NTgxLWJm ZTUtYzE2MTZjMzBlZmFiLzAvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENF Nzg1Mzg5OThBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIoG3sKxVlEC8kEb/oLtPiZuqnw9IMZAupY7 pKolMx191ocLeOgQtU4S38p1cY6FdUC1MDkxjHN3cxjpUn7DFFsqt+huTGS5lDnV 96eHzYWogwCm9CS0i86Z5+2hdryNoYWSRmcb9PR+kE687M5dAFUVuHlVMiOEqZeX IWO/+gU0pMNkxEv5M2S9FDKQQvaqHij/v5O+xscAlJr7MjW3cAucyFXgX5ZQUJLR Sr/86OBkLPvstTEHbE4dM2gBm+ZqM2okqWw9ZUyTp4/jpd4C8LCMKP0DfT04mvmw tC8BRiLWVq7SYi+ld4yDvRnKuEJ4eId2p4bRMUWvOCdHLiRAxe4= -----END CERTIFICATE-----Generated at Mon Jun 16 12:23:45 2025 by rpki-client