$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft File: C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft (raw, json) Hash identifier: pjwtTptqmyuh1f3u3Lkw+5BWkVcWT17NOvaDHoXQheA= Subject key identifier: B1:69:39:C8:B1:60:61:25:64:CC:5A:83:15:74:7D:D0:B5:02:93:81 Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE Certificate issuer: /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Certificate serial: 56E7D9813C3A86BDB35AF323B4A14F3EC544AD00 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft Manifest number: 0445 Signing time: Thu 07 Aug 2025 01:20:51 +0000 Manifest this update: Thu 07 Aug 2025 01:15:51 +0000 Manifest next update: Sun 10 Aug 2025 09:11:51 +0000 Files and hashes: 1: 3131372e35332e3135302e302f32342d3234203d3e203538333937.roa (hash: UMpjLuebG+yMQNJv43xd3u8qZ1cqsp7h54oRFs+fJIg=) 2: 3130332e34312e3230352e302f32342d3234203d3e203538333937.roa (hash: bzqLwXgqRc5lqIH8QIxSqfc9LTb/899srIuuHKEc/bE=) 3: 3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (hash: Es6h8MzPI3S1mFQ1J0kqGZiZfKqhvpv8wCyy8PJOM40=) 4: 3131372e35332e3134392e302f32342d3234203d3e203538333937.roa (hash: 0q8NrmjjcxoNrx7WtkZa7JKjlra7drxIR2Rkv2uH0qU=) 5: C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl (hash: 2jXVFw8iSxpB+wvEhcVKy7D/jsL1Wkl200dC4lxqFaY=) 6: 3130332e34312e3230362e302f32342d3234203d3e203538333937.roa (hash: 8p0am7ehV2An1UqUgUm2Z1Br0OD2VEAPk/dVcoq3jDQ=) 7: 3131372e35332e3134382e302f32342d3234203d3e203538333937.roa (hash: s/yj35IxEbWgMmRyngcwwQ2XYvpHuhez/PCo0jx4Hk4=) 8: 3131372e35332e3135312e302f32342d3234203d3e203538333937.roa (hash: Si3tPvzTYMJNo6ziKI0r83ugddQoVhs+qZtKjviywZY=) 9: 3130332e34312e3230372e302f32342d3234203d3e203538333937.roa (hash: /5ZnjDo2uinC9TTjfx0reoiz9f4sCWczTxGAg/U2xq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 07:22:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:e7:d9:81:3c:3a:86:bd:b3:5a:f3:23:b4:a1:4f:3e:c5:44:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Validity Not Before: Aug 7 01:15:51 2025 GMT Not After : Aug 10 09:11:51 2025 GMT Subject: CN=B16939C8B160612564CC5A8315747DD0B5029381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:04:da:56:84:b9:7e:cb:6f:e4:6c:d2:88:d7: ee:d1:64:18:d1:77:bc:27:da:ba:d1:46:08:a0:8d: 8e:1b:27:d5:e4:c0:6d:e7:b8:1a:71:78:e8:d6:3a: e2:b8:07:24:ac:8d:91:5d:fb:d9:fc:a5:77:1e:92: 72:f4:5e:49:0a:8a:03:99:b2:1c:6f:52:a1:af:75: f2:e2:68:de:63:37:51:91:88:34:90:dd:69:b3:85: f6:1e:96:68:ea:03:56:ae:b6:d7:64:47:4b:ed:4e: 87:d1:bf:45:8a:de:9d:1d:7a:1e:f0:0f:77:38:1b: d9:5f:24:00:88:67:20:ce:27:db:5d:20:d1:ef:d2: 21:24:01:f2:e6:34:5b:db:a4:b7:d0:c4:8a:08:00: 42:f3:ff:32:84:e8:a2:f2:b5:ed:7c:29:ce:b1:27: ee:ac:d5:09:48:4a:d4:19:e5:01:6d:d3:5e:fe:a8: 59:f1:e6:04:e2:ba:c4:00:23:9a:7e:6f:66:cb:9b: 1a:b5:2d:e3:b3:83:26:a2:87:62:87:0c:06:c2:7d: 84:c4:dd:3b:47:24:6c:e4:58:0e:fc:16:92:b1:d5: 72:73:c0:87:98:98:6b:58:67:7c:3b:83:d5:cd:8c: aa:e0:88:92:1a:f9:3a:75:34:d4:0e:c9:4a:c8:64: 76:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:69:39:C8:B1:60:61:25:64:CC:5A:83:15:74:7D:D0:B5:02:93:81 X509v3 Authority Key Identifier: keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:aa:59:05:73:27:aa:37:1c:e8:79:ae:9e:ef:df:38:56:bb: 45:1d:c3:e7:b5:22:be:a2:2a:8b:6a:1b:0d:d0:6f:97:d8:db: 02:b4:f5:c3:03:54:74:b3:df:21:63:fe:01:c4:85:8f:36:1f: f4:43:fb:63:61:0d:57:31:16:a9:f7:a5:9d:a9:60:29:85:90: 02:87:1e:12:87:a6:82:56:ab:94:3a:55:de:52:eb:a5:21:af: 75:00:2e:c9:f3:eb:95:97:09:0d:ba:63:00:59:9f:a4:90:1d: bb:96:d4:35:f3:ae:94:10:fb:74:88:64:da:20:24:59:bf:85: f0:f1:44:06:4b:b6:ab:4a:06:5a:61:7a:3e:57:57:f1:e2:a0: 16:20:57:5f:61:3a:f1:e1:db:fa:95:6f:86:89:6a:f2:df:65: 24:57:62:e9:59:5f:b5:8b:3a:4d:29:eb:27:5b:b8:8d:d1:34: 7f:99:2a:64:c3:be:60:32:85:c5:1c:67:0e:6b:37:50:5f:fc: e1:b6:c2:a4:36:13:d3:da:4f:2a:99:b7:8f:ef:f1:81:74:b5: e6:fb:1a:3a:73:70:cd:73:5e:a5:e2:2d:fe:44:66:2e:6d:dd: fb:d6:9d:dc:40:c8:03:b9:6a:b4:ff:2c:43:ec:17:d6:42:2e: d3:a7:a6:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVufZgTw6hr2zWvMjtKFPPsVErQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1 Mzg5OThBRTAeFw0yNTA4MDcwMTE1NTFaFw0yNTA4MTAwOTExNTFaMDMxMTAvBgNV BAMTKEIxNjkzOUM4QjE2MDYxMjU2NENDNUE4MzE1NzQ3REQwQjUwMjkzODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHBNpWhLl+y2/kbNKI1+7RZBjR d7wn2rrRRgigjY4bJ9XkwG3nuBpxeOjWOuK4BySsjZFd+9n8pXceknL0XkkKigOZ shxvUqGvdfLiaN5jN1GRiDSQ3WmzhfYelmjqA1auttdkR0vtTofRv0WK3p0deh7w D3c4G9lfJACIZyDOJ9tdINHv0iEkAfLmNFvbpLfQxIoIAELz/zKE6KLyte18Kc6x J+6s1QlIStQZ5QFt017+qFnx5gTiusQAI5p+b2bLmxq1LeOzgyaih2KHDAbCfYTE 3TtHJGzkWA78FpKx1XJzwIeYmGtYZ3w7g9XNjKrgiJIa+Tp1NNQOyUrIZHYlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsWk5yLFgYSVkzFqDFXR90LUCk4EwHwYDVR0j BBgwFoAUxpAFu3ukaKEKMs5E6cTOeFOJmK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiYTQ1ZS1mNWRhLTQ1ODEtYmZlNS1jMTYxNmMzMGVmYWIvMC9DNjkwMDVCQjdC QTQ2OEExMEEzMkNFNDRFOUM0Q0U3ODUzODk5OEFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1Mzg5 OThBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4YmE0NWUtZjVkYS00NTgxLWJm ZTUtYzE2MTZjMzBlZmFiLzAvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENF Nzg1Mzg5OThBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAeqWQVzJ6o3HOh5rp7v3zhWu0Udw+e1Ir6i KotqGw3Qb5fY2wK09cMDVHSz3yFj/gHEhY82H/RD+2NhDVcxFqn3pZ2pYCmFkAKH HhKHpoJWq5Q6Vd5S66Uhr3UALsnz65WXCQ26YwBZn6SQHbuW1DXzrpQQ+3SIZNog JFm/hfDxRAZLtqtKBlphej5XV/HioBYgV19hOvHh2/qVb4aJavLfZSRXYulZX7WL Ok0p6ydbuI3RNH+ZKmTDvmAyhcUcZw5rN1Bf/OG2wqQ2E9PaTyqZt4/v8YF0teb7 GjpzcM1zXqXiLf5EZi5t3fvWndxAyAO5arT/LEPsF9ZCLtOnpng= -----END CERTIFICATE-----Generated at Thu Aug 7 03:29:49 2025 by rpki-client