$ rpki-client -vvf repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft File: 69D341364BC344B4ED6B3A65031AACB403AB3222.mft (raw, json) Hash identifier: Dc3wTkfpkp7K/VeAvKp6zh7Pv4pVQbAt4xfWy5GKIxw= Subject key identifier: 0E:55:0D:EB:66:5F:7B:24:09:B1:25:1C:9B:AA:B2:C0:1E:9C:E4:94 Authority key identifier: 69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 Certificate issuer: /CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Certificate serial: 05A4237441DDBF6610E41C15ACF9AABE73D80051 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject info access: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft Manifest number: 04F1 Signing time: Sat 19 Jul 2025 13:11:19 +0000 Manifest this update: Sat 19 Jul 2025 13:06:19 +0000 Manifest next update: Tue 22 Jul 2025 19:38:19 +0000 Files and hashes: 1: 323430323a326134303a3a2f33322d3438203d3e20313336383733.roa (hash: /62nOK71rLN/rA80+Xk3S/HgS8HMB1l9OOKuRpOZFP0=) 2: 69D341364BC344B4ED6B3A65031AACB403AB3222.crl (hash: KEiV2B8b6LR1CIEeYVE68rTjDjtpFaT/kX6fPnUHI48=) 3: 3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa (hash: mEwVbYgiqYJGIGp+5J9MnWrl5gm8ToUUdLv1IaAGjLQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 19:38:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:a4:23:74:41:dd:bf:66:10:e4:1c:15:ac:f9:aa:be:73:d8:00:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Validity Not Before: Jul 19 13:06:19 2025 GMT Not After : Jul 22 19:38:19 2025 GMT Subject: CN=0E550DEB665F7B2409B1251C9BAAB2C01E9CE494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:31:87:64:99:89:49:88:8b:36:9d:ec:31:51: b7:d0:29:ba:c1:af:7b:c9:a8:89:4f:8d:62:d6:47: f2:02:ba:2c:7d:36:2f:c9:67:e7:e7:d9:c7:b3:88: 83:b9:4d:0e:70:ef:95:40:02:c0:25:5a:92:e5:b3: 57:0c:1e:58:c5:c3:00:c7:af:96:28:83:85:1e:97: 67:7b:77:bf:57:44:f2:c7:f5:31:88:2f:e4:b7:45: 06:9b:8d:c7:2a:75:01:f1:87:42:cf:5c:14:68:2a: e2:63:9f:9b:2e:e1:7d:31:54:2c:8c:e1:81:f3:78: 85:0a:ad:79:32:3d:81:c4:d0:2c:b2:10:e8:0e:d7: ff:06:a4:99:c9:70:b3:80:13:19:1b:e7:7f:d2:9a: ca:e4:69:77:45:8c:45:95:c7:39:0b:cd:77:77:ad: 00:6b:e4:3e:ef:c9:b1:94:8e:c8:a5:c6:a3:5d:b1: 37:5f:b1:43:12:d1:d9:9d:27:de:de:f8:fc:25:3f: da:3a:ee:c0:51:32:f0:00:ce:cb:37:4c:6a:e1:f3: 2f:f7:e9:2f:f4:f6:57:4a:42:3f:42:1a:b9:96:b8: 74:2e:24:a3:3f:5c:ae:66:81:7b:27:be:ba:62:5f: f8:7a:33:3e:7e:c7:3d:c9:26:77:9b:42:9f:59:3a: 49:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:55:0D:EB:66:5F:7B:24:09:B1:25:1C:9B:AA:B2:C0:1E:9C:E4:94 X509v3 Authority Key Identifier: keyid:69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:92:b6:c4:df:a8:29:80:84:fd:b0:04:f0:9b:ae:6b:c8:06: 17:75:7e:15:5b:e8:34:5b:f0:80:b1:fd:34:3b:cc:65:09:48: b3:44:a0:89:3e:62:eb:c2:35:65:d9:40:08:64:fe:0a:84:18: 7c:4c:8f:e4:c2:6d:31:a8:6f:da:c0:3e:dc:24:4b:22:d9:b6: b1:e0:45:ed:bb:d5:71:0c:d1:39:62:ac:5d:c2:03:46:8a:93: 15:24:76:e4:76:7a:85:ce:30:dc:be:c4:95:61:d3:5a:13:2e: f5:75:4b:a0:8b:dd:03:ad:2c:d2:8b:41:e4:75:c6:96:8b:27: f7:b7:ba:07:af:75:c5:08:7d:eb:ac:94:86:3b:13:79:12:6a: c1:04:c5:66:d4:12:bf:9c:49:ff:6b:dc:78:a2:27:5a:2d:04: 7f:6a:16:e2:d5:5a:f2:82:09:d9:f8:74:7d:12:dd:ef:fb:6f: 7e:5e:1f:8e:82:88:0d:5c:3f:44:1e:03:a8:ea:ae:a3:f0:a9: cd:d0:49:fb:cd:04:ec:7e:04:c7:67:04:bb:fe:b6:ee:eb:9e: 11:e3:3e:a9:09:6c:58:9b:d9:b5:90:e3:de:23:6b:4e:4a:d5: 90:19:ce:c1:c0:be:ce:a4:2d:f0:ca:12:c6:1e:5f:53:39:0b: 26:1a:64:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBaQjdEHdv2YQ5BwVrPmqvnPYAFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQw M0FCMzIyMjAeFw0yNTA3MTkxMzA2MTlaFw0yNTA3MjIxOTM4MTlaMDMxMTAvBgNV BAMTKDBFNTUwREVCNjY1RjdCMjQwOUIxMjUxQzlCQUFCMkMwMUU5Q0U0OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOMYdkmYlJiIs2newxUbfQKbrB r3vJqIlPjWLWR/ICuix9Ni/JZ+fn2ceziIO5TQ5w75VAAsAlWpLls1cMHljFwwDH r5Yog4Uel2d7d79XRPLH9TGIL+S3RQabjccqdQHxh0LPXBRoKuJjn5su4X0xVCyM 4YHzeIUKrXkyPYHE0CyyEOgO1/8GpJnJcLOAExkb53/SmsrkaXdFjEWVxzkLzXd3 rQBr5D7vybGUjsilxqNdsTdfsUMS0dmdJ97e+PwlP9o67sBRMvAAzss3TGrh8y/3 6S/09ldKQj9CGrmWuHQuJKM/XK5mgXsnvrpiX/h6Mz5+xz3JJnebQp9ZOknDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDlUN62ZfeyQJsSUcm6qywB6c5JQwHwYDVR0j BBgwFoAUadNBNkvDRLTtazplAxqstAOrMiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTdhNmJjYi05ZWI2LTQ5ZGUtYjk5OC0wYmVkM2M1YzEyNzgvMC82OUQzNDEzNjRC QzM0NEI0RUQ2QjNBNjUwMzFBQUNCNDAzQUIzMjIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQwM0FC MzIyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3YTZiY2ItOWViNi00OWRlLWI5 OTgtMGJlZDNjNWMxMjc4LzAvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFD QjQwM0FCMzIyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKaStsTfqCmAhP2wBPCbrmvIBhd1fhVb6DRb 8ICx/TQ7zGUJSLNEoIk+YuvCNWXZQAhk/gqEGHxMj+TCbTGob9rAPtwkSyLZtrHg Re271XEM0TlirF3CA0aKkxUkduR2eoXOMNy+xJVh01oTLvV1S6CL3QOtLNKLQeR1 xpaLJ/e3ugevdcUIfeuslIY7E3kSasEExWbUEr+cSf9r3HiiJ1otBH9qFuLVWvKC Cdn4dH0S3e/7b35eH46CiA1cP0QeA6jqrqPwqc3QSfvNBOx+BMdnBLv+tu7rnhHj PqkJbFib2bWQ494ja05K1ZAZzsHAvs6kLfDKEsYeX1M5CyYaZJs= -----END CERTIFICATE-----Generated at Mon Jul 21 18:14:13 2025 by rpki-client