$ rpki-client -vvf repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft File: 69D341364BC344B4ED6B3A65031AACB403AB3222.mft (raw, json) Hash identifier: cVZlfOAjIkjUlUvUoIGCcAvVGgi8+3PnmJKaw16Uhog= Subject key identifier: 45:07:5C:4A:C4:1E:FB:65:99:46:C9:DA:7C:7E:92:F9:9B:3C:6A:99 Authority key identifier: 69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 Certificate issuer: /CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Certificate serial: 5AE51611D771BB4B2B1BB10C04718BB23249688F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject info access: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft Manifest number: 04F2 Signing time: Mon 21 Jul 2025 19:41:27 +0000 Manifest this update: Mon 21 Jul 2025 19:36:27 +0000 Manifest next update: Fri 25 Jul 2025 02:41:27 +0000 Files and hashes: 1: 323430323a326134303a3a2f33322d3438203d3e20313336383733.roa (hash: /62nOK71rLN/rA80+Xk3S/HgS8HMB1l9OOKuRpOZFP0=) 2: 3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa (hash: mEwVbYgiqYJGIGp+5J9MnWrl5gm8ToUUdLv1IaAGjLQ=) 3: 69D341364BC344B4ED6B3A65031AACB403AB3222.crl (hash: D1eKbMyUawHd+0GjIKvOR39g0aSkUMIQ/FdR9no8EhU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 02:41:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:e5:16:11:d7:71:bb:4b:2b:1b:b1:0c:04:71:8b:b2:32:49:68:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Validity Not Before: Jul 21 19:36:27 2025 GMT Not After : Jul 25 02:41:27 2025 GMT Subject: CN=45075C4AC41EFB659946C9DA7C7E92F99B3C6A99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:88:53:c7:3a:cf:76:42:3c:eb:2a:84:b8:2b: 0f:c6:e9:1b:34:da:e6:d7:e0:17:e9:d0:75:61:82: f1:36:32:56:63:a6:a5:8c:7d:dc:49:d1:af:db:c5: fc:07:32:21:77:08:21:0d:a4:5e:29:91:08:e9:e2: 3f:13:f8:81:f9:04:d8:ff:b0:83:ee:96:58:05:7d: bb:d5:a7:9d:7a:4c:6c:6a:17:2a:0c:9a:24:7b:f0: 85:d8:3b:04:21:38:1a:fe:fb:aa:e5:13:13:4e:39: 01:72:34:60:ea:3f:1a:1b:c7:60:cf:bc:55:ee:e4: 78:85:1c:87:aa:28:c2:eb:ad:23:99:a5:6c:dc:fc: bb:91:d4:09:cd:8f:6d:48:14:ca:01:b9:4d:11:2a: b0:29:f9:aa:4c:01:9d:80:ec:be:f8:cf:bb:0e:2c: 81:b8:3d:b5:cc:d7:fb:b0:31:9e:6c:3c:91:37:64: b7:81:f0:73:ea:9a:00:36:3f:47:44:47:ee:20:b9: f5:bf:c9:e2:a6:3b:28:44:dd:47:e9:68:d9:48:c8: d3:63:6e:21:1b:f5:2f:80:0f:ae:34:06:da:d2:e9: 98:9f:10:91:e1:ef:05:a0:f8:6e:87:53:58:9b:f8: e3:ad:ef:f5:a7:93:d4:51:8a:b4:44:6b:f5:a6:54: 24:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:07:5C:4A:C4:1E:FB:65:99:46:C9:DA:7C:7E:92:F9:9B:3C:6A:99 X509v3 Authority Key Identifier: keyid:69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:69:f2:4d:5b:1c:22:83:16:46:df:6d:a4:be:ee:04:23:45: 63:d6:f8:a6:92:51:57:61:57:83:02:ad:19:15:0f:c3:ce:20: ff:52:92:7b:71:b8:35:be:d1:2b:11:57:c2:8f:d0:b9:59:60: f2:c3:af:27:44:54:2f:1d:f0:b5:e0:6a:58:3c:f8:4c:8c:12: f2:95:a4:64:a7:b7:fe:7b:a9:8d:e2:5a:10:45:be:3b:66:d5: 5c:25:c3:2c:c6:e0:9d:0a:82:f1:5d:cb:ff:8f:de:e7:c1:92: 13:1d:b2:86:2b:01:df:2e:bc:4a:39:4a:7a:6b:bc:38:02:cc: 01:84:08:75:f5:77:17:ea:7c:0a:5f:bb:7e:0c:ed:44:8c:e9: e9:e2:f0:e9:bd:f0:d3:58:ca:e2:81:e8:5c:9c:3f:e3:00:96: 28:95:46:95:3d:9d:f7:e6:f2:f1:11:58:c6:60:99:52:38:68: 02:16:25:42:a4:72:73:03:62:39:b7:6c:ab:1f:62:00:f9:69: 93:78:e7:23:c6:e7:4d:ea:c8:62:8c:40:ec:5c:7f:ea:84:ea: 66:ab:ad:e5:c0:1d:81:07:b7:2a:45:e3:ba:a9:97:06:84:23: 36:55:2d:f4:a9:52:0e:9a:22:49:18:9b:82:56:52:9d:7b:54: 6c:b2:f1:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWuUWEddxu0srG7EMBHGLsjJJaI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQw M0FCMzIyMjAeFw0yNTA3MjExOTM2MjdaFw0yNTA3MjUwMjQxMjdaMDMxMTAvBgNV BAMTKDQ1MDc1QzRBQzQxRUZCNjU5OTQ2QzlEQTdDN0U5MkY5OUIzQzZBOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7iFPHOs92QjzrKoS4Kw/G6Rs0 2ubX4Bfp0HVhgvE2MlZjpqWMfdxJ0a/bxfwHMiF3CCENpF4pkQjp4j8T+IH5BNj/ sIPullgFfbvVp516TGxqFyoMmiR78IXYOwQhOBr++6rlExNOOQFyNGDqPxobx2DP vFXu5HiFHIeqKMLrrSOZpWzc/LuR1AnNj21IFMoBuU0RKrAp+apMAZ2A7L74z7sO LIG4PbXM1/uwMZ5sPJE3ZLeB8HPqmgA2P0dER+4gufW/yeKmOyhE3UfpaNlIyNNj biEb9S+AD640BtrS6ZifEJHh7wWg+G6HU1ib+OOt7/Wnk9RRirREa/WmVCTNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURQdcSsQe+2WZRsnafH6S+Zs8apkwHwYDVR0j BBgwFoAUadNBNkvDRLTtazplAxqstAOrMiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTdhNmJjYi05ZWI2LTQ5ZGUtYjk5OC0wYmVkM2M1YzEyNzgvMC82OUQzNDEzNjRC QzM0NEI0RUQ2QjNBNjUwMzFBQUNCNDAzQUIzMjIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQwM0FC MzIyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3YTZiY2ItOWViNi00OWRlLWI5 OTgtMGJlZDNjNWMxMjc4LzAvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFD QjQwM0FCMzIyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALNp8k1bHCKDFkbfbaS+7gQjRWPW+KaSUVdh V4MCrRkVD8POIP9SkntxuDW+0SsRV8KP0LlZYPLDrydEVC8d8LXgalg8+EyMEvKV pGSnt/57qY3iWhBFvjtm1VwlwyzG4J0KgvFdy/+P3ufBkhMdsoYrAd8uvEo5Snpr vDgCzAGECHX1dxfqfApfu34M7USM6eni8Om98NNYyuKB6FycP+MAliiVRpU9nffm 8vERWMZgmVI4aAIWJUKkcnMDYjm3bKsfYgD5aZN45yPG503qyGKMQOxcf+qE6mar reXAHYEHtypF47qplwaEIzZVLfSpUg6aIkkYm4JWUp17VGyy8RE= -----END CERTIFICATE-----Generated at Thu Jul 24 03:55:36 2025 by rpki-client