$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft File: 969449FF3E24842B0CECC61AB398E88F83709FC1.mft (raw, json) Hash identifier: u596rP2+6Bvr+lyObO7E5lHXDOQALEllMRL49Z6iASY= Subject key identifier: 4C:89:14:AB:2F:09:20:82:0F:72:37:82:78:A3:85:CA:8A:69:59:13 Authority key identifier: 96:94:49:FF:3E:24:84:2B:0C:EC:C6:1A:B3:98:E8:8F:83:70:9F:C1 Certificate issuer: /CN=969449FF3E24842B0CECC61AB398E88F83709FC1 Certificate serial: 60D5D4FCAA17834F5D120D0FB1EFF5149AEB4FFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft Manifest number: DE Signing time: Tue 05 Aug 2025 16:01:54 +0000 Manifest this update: Tue 05 Aug 2025 15:56:54 +0000 Manifest next update: Sat 09 Aug 2025 01:26:54 +0000 Files and hashes: 1: 969449FF3E24842B0CECC61AB398E88F83709FC1.crl (hash: XgafHuErUvkx0NVgzJsOC9cKf9eK3JIbs4Z3b32mi7c=) 2: 3135372e32302e3134352e302f32342d3234203d3e20313532343231.roa (hash: WH9oEmWb7QCWvMI7938Ik3XMbgOCFpaDBMXkH3Xj3ws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.crl rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:d5:d4:fc:aa:17:83:4f:5d:12:0d:0f:b1:ef:f5:14:9a:eb:4f:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969449FF3E24842B0CECC61AB398E88F83709FC1 Validity Not Before: Aug 5 15:56:54 2025 GMT Not After : Aug 9 01:26:54 2025 GMT Subject: CN=4C8914AB2F0920820F72378278A385CA8A695913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c1:34:fd:4e:af:1c:56:53:fa:02:17:1d:26: e6:c7:84:56:e8:16:30:2c:e8:b7:ba:61:1a:33:81: c3:10:f5:93:80:5d:fa:05:c8:aa:16:b1:a3:47:58: bd:d9:6c:a4:7d:ca:da:d1:ee:62:d1:ec:cc:40:e4: 6d:68:fa:6f:bd:00:d4:22:09:55:41:b6:9e:d9:6c: a1:bc:b0:26:e6:ca:cb:83:7b:7a:d6:97:d3:00:8e: 44:f4:9b:cc:64:67:24:94:96:e3:90:92:aa:78:cc: b0:88:6b:7e:ee:94:54:83:a3:52:4f:10:06:18:6d: 08:b4:1f:b1:64:9f:17:57:d7:80:44:6e:d5:1d:d7: 68:58:87:18:50:e6:31:26:c5:7b:c4:77:a8:74:60: bf:e4:3a:53:cc:6b:78:28:ab:fa:ef:8a:45:e3:51: c3:c1:b9:a5:02:29:0f:b6:e6:7f:b9:0b:67:37:9a: 77:14:f7:4e:1f:13:16:53:46:be:63:bf:2a:4f:7f: ee:ad:b9:5c:b2:7f:9d:90:c6:0c:73:05:56:b0:02: 6c:b2:bd:1e:19:a5:53:a7:2e:76:17:6c:e9:c1:dd: 77:98:21:35:9c:18:36:2a:d6:c3:4e:c6:6e:ce:4a: 70:80:23:0f:7c:41:eb:ab:6d:24:09:ba:77:75:4e: 42:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:89:14:AB:2F:09:20:82:0F:72:37:82:78:A3:85:CA:8A:69:59:13 X509v3 Authority Key Identifier: keyid:96:94:49:FF:3E:24:84:2B:0C:EC:C6:1A:B3:98:E8:8F:83:70:9F:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:d1:1a:31:68:31:f5:92:7d:0f:3d:d8:5d:84:1e:fb:74:24: 8f:82:e8:ba:d1:b0:4c:ce:54:38:f6:70:10:78:bc:dc:41:5c: db:a4:20:e0:1b:d4:5c:d9:73:5b:7a:18:07:bb:f2:cb:29:27: 10:bb:cc:9f:bb:f6:a4:cb:39:f1:ed:fa:8b:02:0e:98:8d:be: ee:42:b5:79:b3:8b:73:f0:10:ec:d6:2c:e8:40:4e:cd:03:77: 78:92:8f:69:02:10:59:c8:47:02:a6:da:1b:64:d6:b9:83:dd: 9c:39:4f:7e:35:7d:8a:74:91:54:10:b7:3b:5d:22:24:4a:72: 0b:51:1c:95:e8:ca:5e:dc:b6:26:4a:79:38:06:71:2c:fc:f1: 08:a7:59:bc:01:c8:ca:ab:b1:f3:ac:b8:65:96:7c:7c:47:20: d6:b2:9e:42:db:09:4b:eb:ad:bd:86:47:8a:40:42:3d:9e:d1: b3:40:38:cc:e7:b3:b7:b0:45:57:59:fd:87:80:22:2f:89:b1: ed:35:92:06:2a:f5:6d:53:79:62:01:c8:c4:3c:1b:25:3b:a2: ec:d3:84:50:9b:e9:50:13:1b:e7:5a:d0:ca:9a:5a:bc:87:96: 02:66:21:39:6e:95:e7:cc:22:3b:c5:69:2f:6f:54:23:11:b7: 5a:6f:7e:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYNXU/KoXg09dEg0Pse/1FJrrT/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4OEY4 MzcwOUZDMTAeFw0yNTA4MDUxNTU2NTRaFw0yNTA4MDkwMTI2NTRaMDMxMTAvBgNV BAMTKDRDODkxNEFCMkYwOTIwODIwRjcyMzc4Mjc4QTM4NUNBOEE2OTU5MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdwTT9Tq8cVlP6AhcdJubHhFbo FjAs6Le6YRozgcMQ9ZOAXfoFyKoWsaNHWL3ZbKR9ytrR7mLR7MxA5G1o+m+9ANQi CVVBtp7ZbKG8sCbmysuDe3rWl9MAjkT0m8xkZySUluOQkqp4zLCIa37ulFSDo1JP EAYYbQi0H7FknxdX14BEbtUd12hYhxhQ5jEmxXvEd6h0YL/kOlPMa3goq/rvikXj UcPBuaUCKQ+25n+5C2c3mncU904fExZTRr5jvypPf+6tuVyyf52QxgxzBVawAmyy vR4ZpVOnLnYXbOnB3XeYITWcGDYq1sNOxm7OSnCAIw98QeurbSQJund1TkJhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTIkUqy8JIIIPcjeCeKOFyoppWRMwHwYDVR0j BBgwFoAUlpRJ/z4khCsM7MYas5joj4Nwn8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTRmNzkzNC1jZGM3LTQwODItODNmYi1kZjdkNGY4MjE5YWYvMC85Njk0NDlGRjNF MjQ4NDJCMENFQ0M2MUFCMzk4RTg4RjgzNzA5RkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4OEY4Mzcw OUZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzAvOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4 OEY4MzcwOUZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTRGjFoMfWSfQ892F2EHvt0JI+C6LrRsEzO VDj2cBB4vNxBXNukIOAb1FzZc1t6GAe78sspJxC7zJ+79qTLOfHt+osCDpiNvu5C tXmzi3PwEOzWLOhATs0Dd3iSj2kCEFnIRwKm2htk1rmD3Zw5T341fYp0kVQQtztd IiRKcgtRHJXoyl7ctiZKeTgGcSz88QinWbwByMqrsfOsuGWWfHxHINaynkLbCUvr rb2GR4pAQj2e0bNAOMzns7ewRVdZ/YeAIi+Jse01kgYq9W1TeWIByMQ8GyU7ouzT hFCb6VATG+da0MqaWryHlgJmITlulefMIjvFaS9vVCMRt1pvfvg= -----END CERTIFICATE-----Generated at Tue Aug 5 22:54:57 2025 by rpki-client