$ rpki-client -vvf repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.mft File: 69CE57F4984A7B332974000C0033734628A36A46.mft (raw, json) Hash identifier: 3p81x5CVPycTLAz3IpevHxRfRVWD4naC3+qObFL5lh0= Subject key identifier: 2F:9F:AD:A4:06:DC:65:98:C1:24:5B:AB:EC:50:31:DA:0F:33:87:E2 Authority key identifier: 69:CE:57:F4:98:4A:7B:33:29:74:00:0C:00:33:73:46:28:A3:6A:46 Certificate issuer: /CN=69CE57F4984A7B332974000C0033734628A36A46 Certificate serial: 409A02BA1C0492E708C44DBC71D49179F11DDEC1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69CE57F4984A7B332974000C0033734628A36A46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.mft Manifest number: 01D4 Signing time: Tue 22 Jul 2025 13:42:11 +0000 Manifest this update: Tue 22 Jul 2025 13:37:11 +0000 Manifest next update: Sat 26 Jul 2025 00:22:11 +0000 Files and hashes: 1: 69CE57F4984A7B332974000C0033734628A36A46.crl (hash: mLc7SVod/xhFMJcz2hDpB7Sa1HDPu715nUgO197NHqw=) 2: 3130332e3231312e32362e302f32332d3233203d3e20313530313933.roa (hash: D9VjBd2SjUz6CPtv7rAeGVZ7pKCH1KTw8I8eNpUrm1E=) 3: 3130332e3231312e32372e302f32342d3234203d3e20313530313933.roa (hash: tDhS3e/QLZsQ3vBs7q3ofq7yiXbldQoFkAzqM7dBRFo=) 4: 3130332e3231312e32362e302f32342d3234203d3e20313530313933.roa (hash: p7oly61u2I9DIyxWJNTp5Y4E72pJPA3rw/vCpcCqXJg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.crl rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69CE57F4984A7B332974000C0033734628A36A46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:22:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:9a:02:ba:1c:04:92:e7:08:c4:4d:bc:71:d4:91:79:f1:1d:de:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69CE57F4984A7B332974000C0033734628A36A46 Validity Not Before: Jul 22 13:37:11 2025 GMT Not After : Jul 26 00:22:11 2025 GMT Subject: CN=2F9FADA406DC6598C1245BABEC5031DA0F3387E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ea:96:37:03:c6:df:54:2f:e7:ee:ce:ec:f1: 18:39:62:54:7b:62:f7:c3:23:b7:96:85:ce:47:2c: f1:f9:bf:90:13:94:37:29:21:c5:6c:0d:b8:a3:fb: a5:4c:ae:34:c7:56:d8:d1:3f:3d:f8:0f:6c:68:ae: 33:e7:b7:b0:32:c6:8c:4e:88:1a:c9:ea:6c:eb:05: e2:bb:e2:14:13:6b:6c:db:ad:e0:19:e1:dd:fe:86: 53:0d:8c:51:6a:d0:83:31:a4:97:cb:48:eb:eb:8b: fb:55:d2:4f:fa:e6:41:8a:9b:d7:78:20:fe:28:83: a0:c0:16:2f:54:97:98:15:0b:58:7a:cf:83:c7:81: 49:36:a5:7e:09:ee:22:bb:8b:bc:7c:5b:a7:36:da: 71:ea:e3:96:17:b4:7e:ba:9f:d6:62:67:a3:ac:9e: d2:6a:c0:48:48:c3:9a:37:12:c6:40:12:6e:62:f8: d3:03:8e:27:cc:08:f5:a6:09:27:5d:31:ad:0a:57: a6:60:04:73:eb:64:d4:ae:f0:da:f3:87:4c:c7:63: 20:68:52:d0:04:aa:8a:d1:00:12:a9:aa:76:68:c0: ef:12:74:93:08:48:eb:21:7b:b8:a5:60:10:54:a9: 2a:5a:af:94:5c:74:f9:1a:42:f9:c8:a8:b8:9e:15: 67:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:9F:AD:A4:06:DC:65:98:C1:24:5B:AB:EC:50:31:DA:0F:33:87:E2 X509v3 Authority Key Identifier: keyid:69:CE:57:F4:98:4A:7B:33:29:74:00:0C:00:33:73:46:28:A3:6A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69CE57F4984A7B332974000C0033734628A36A46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:34:ab:b6:a4:cb:3a:02:49:92:5e:cb:e4:68:ed:d1:97:51: b4:e0:77:29:0f:66:31:f1:49:86:dc:94:d2:46:24:5a:63:73: e5:f2:51:07:bd:04:56:5e:4c:36:32:ee:57:7b:19:26:61:cd: cf:55:64:aa:e3:61:c9:9c:26:2b:9b:34:88:71:8d:04:a8:fc: b2:40:d4:d3:86:a0:9f:62:31:cf:08:00:18:d0:7c:04:fc:da: ac:e2:17:4b:3c:17:26:6e:07:1d:8f:28:84:a3:bc:ee:b3:fe: a9:80:08:1c:56:09:a2:49:62:70:01:2e:5d:79:03:6c:16:0b: 14:63:b0:0e:90:18:aa:03:5d:43:d2:28:3e:8e:3c:ce:04:df: 1b:d0:7f:ec:30:36:52:ce:90:3f:a7:2f:af:8f:4d:7f:8b:08: e8:bd:9e:31:70:24:2c:e3:e6:12:7a:9a:65:93:04:0d:39:e8: 6b:9b:e5:46:0e:71:9d:57:16:f6:81:92:3f:ce:10:0a:3b:d4: 57:cf:cc:dd:21:f6:be:38:e9:d2:e1:8e:5f:c4:15:52:57:86: 55:7e:73:c1:18:d9:c4:5f:85:5e:04:b1:39:5f:12:af:a3:f9: 0e:66:fc:9b:be:97:54:00:3b:32:65:b3:be:02:95:9e:fd:a0: f8:d1:c8:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQJoCuhwEkucIxE28cdSRefEd3sEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlDRTU3RjQ5ODRBN0IzMzI5NzQwMDBDMDAzMzczNDYy OEEzNkE0NjAeFw0yNTA3MjIxMzM3MTFaFw0yNTA3MjYwMDIyMTFaMDMxMTAvBgNV BAMTKDJGOUZBREE0MDZEQzY1OThDMTI0NUJBQkVDNTAzMURBMEYzMzg3RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR6pY3A8bfVC/n7s7s8Rg5YlR7 YvfDI7eWhc5HLPH5v5ATlDcpIcVsDbij+6VMrjTHVtjRPz34D2xorjPnt7AyxoxO iBrJ6mzrBeK74hQTa2zbreAZ4d3+hlMNjFFq0IMxpJfLSOvri/tV0k/65kGKm9d4 IP4og6DAFi9Ul5gVC1h6z4PHgUk2pX4J7iK7i7x8W6c22nHq45YXtH66n9ZiZ6Os ntJqwEhIw5o3EsZAEm5i+NMDjifMCPWmCSddMa0KV6ZgBHPrZNSu8Nrzh0zHYyBo UtAEqorRABKpqnZowO8SdJMISOshe7ilYBBUqSpar5RcdPkaQvnIqLieFWf3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL5+tpAbcZZjBJFur7FAx2g8zh+IwHwYDVR0j BBgwFoAUac5X9JhKezMpdAAMADNzRiijakYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGQ2NmI2OS03MDdhLTQ4MzAtYTJkMy1hZjZjYTBkMTViY2UvMC82OUNFNTdGNDk4 NEE3QjMzMjk3NDAwMEMwMDMzNzM0NjI4QTM2QTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlDRTU3RjQ5ODRBN0IzMzI5NzQwMDBDMDAzMzczNDYyOEEz NkE0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBkNjZiNjktNzA3YS00ODMwLWEy ZDMtYWY2Y2EwZDE1YmNlLzAvNjlDRTU3RjQ5ODRBN0IzMzI5NzQwMDBDMDAzMzcz NDYyOEEzNkE0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIE0q7akyzoCSZJey+Ro7dGXUbTgdykPZjHx SYbclNJGJFpjc+XyUQe9BFZeTDYy7ld7GSZhzc9VZKrjYcmcJiubNIhxjQSo/LJA 1NOGoJ9iMc8IABjQfAT82qziF0s8FyZuBx2PKISjvO6z/qmACBxWCaJJYnABLl15 A2wWCxRjsA6QGKoDXUPSKD6OPM4E3xvQf+wwNlLOkD+nL6+PTX+LCOi9njFwJCzj 5hJ6mmWTBA056Gub5UYOcZ1XFvaBkj/OEAo71FfPzN0h9r446dLhjl/EFVJXhlV+ c8EY2cRfhV4EsTlfEq+j+Q5m/Ju+l1QAOzJls74ClZ79oPjRyFo= -----END CERTIFICATE-----Generated at Wed Jul 23 12:26:21 2025 by rpki-client