$ rpki-client -vvf repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft File: F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft (raw, json) Hash identifier: ksBvd9B+STjk/92s1CKz08Uec6V/90kaYNSAWoV3/DM= Subject key identifier: 71:01:2D:86:CD:17:BF:A1:31:12:E8:B0:A1:17:00:CE:F2:BC:07:DA Authority key identifier: F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B Certificate issuer: /CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B Certificate serial: 213561745F126B8F9169B7D112999437C3E28216 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft Manifest number: 029D Signing time: Sun 20 Jul 2025 10:52:14 +0000 Manifest this update: Sun 20 Jul 2025 10:47:14 +0000 Manifest next update: Wed 23 Jul 2025 12:26:14 +0000 Files and hashes: 1: 34332e3234332e3138362e302f32342d3234203d3e203633383237.roa (hash: ZffeIBEtnLg/Ujj93wFNolRHO6kiysPo5MQ8XNigO0w=) 2: F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl (hash: 7eLKGUfiDRVdwxTXbbh8jMMbLhyUZYuPRVPCpQGPveg=) 3: 34332e3234332e3138342e302f32342d3234203d3e203633383237.roa (hash: z29/6B1kOK/eMjCWZtmvPZLgk+HLmYp/VefCqYrAsKY=) 4: 3130332e33392e31352e302f32342d3234203d3e203633383237.roa (hash: W4a/cfhB9oac3lsy90TNAMFErRsxFA2KdB5prppjaDo=) 5: 3130332e33392e31342e302f32342d3234203d3e203633383237.roa (hash: RgKgrskhhkjPJ/Dk8nbIAuuLnQfC2xLVHfdXQzj2BLI=) 6: 3130332e33392e31332e302f32342d3234203d3e203633383237.roa (hash: VwTNigUnV52ERl4JC5acU3ZlKRaYwPoaUPZcexI3ywI=) 7: 34332e3234332e3138342e302f32332d3233203d3e203633383237.roa (hash: Yi662bRsVhQynKfcqy7qXGygDZ5R6XwwA4ioPRSjZss=) 8: 34332e3234332e3138372e302f32342d3234203d3e203633383237.roa (hash: nC9Vz/V7n91DCoxvdGVxW+GzAM9lX59dn3xendBCsjg=) 9: 3130332e33392e31322e302f32342d3234203d3e203633383237.roa (hash: lYQCgluKRMLdqhxTINGi3YwkFcOJwrOABEOfRjK/jF8=) 10: 34332e3234332e3138352e302f32342d3234203d3e203633383237.roa (hash: d6Eei0Mi3Z0MIL/gTjyKioJhC1+Xma/Y2mDdx7nO/5M=) 11: 3130332e33392e31322e302f32332d3233203d3e203633383237.roa (hash: ESipPGaWYxRGOLDa3lXlGJb3f8FCnj+2d4bGvhqlgIk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 12:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:35:61:74:5f:12:6b:8f:91:69:b7:d1:12:99:94:37:c3:e2:82:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B Validity Not Before: Jul 20 10:47:14 2025 GMT Not After : Jul 23 12:26:14 2025 GMT Subject: CN=71012D86CD17BFA13112E8B0A11700CEF2BC07DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ef:12:ad:71:40:60:64:db:8c:86:81:15:44: 48:46:26:d5:60:bd:59:d5:03:83:f1:9b:8b:31:fc: 70:23:67:97:7c:c4:6e:1d:7b:59:9d:bf:89:ad:0b: 03:f0:f7:2b:c7:66:b6:fe:b5:f1:b1:c7:a0:49:f0: ca:17:30:d4:8b:0b:be:c3:02:90:6e:b5:77:c5:01: 97:62:0b:09:f9:bc:37:fd:61:15:17:b0:d3:32:4c: db:69:ad:a7:85:2c:1c:8a:96:2c:53:9f:07:a3:b5: ca:c9:c2:61:f8:ac:e5:66:b4:ce:30:f4:75:bc:45: cf:94:21:a9:e2:4f:eb:35:a7:61:aa:a3:3f:78:d4: 5d:97:20:5a:16:07:b0:13:c5:f6:a4:9a:c4:66:6e: 69:b6:2c:75:d3:64:91:3a:ea:2a:2f:c0:4f:13:1a: a9:e2:63:ab:20:6e:d1:68:c4:bf:99:fc:84:2f:a7: 07:23:92:0a:64:8f:84:fd:c9:cf:b1:a2:d6:64:fd: 50:90:97:83:ac:35:ec:34:a9:24:4b:21:7b:90:46: aa:c0:59:a7:1d:90:3c:63:6f:be:ce:93:b3:e8:5c: ce:b6:02:c2:77:c1:ee:22:2d:69:a6:1b:43:53:48: 6b:53:da:ae:a6:43:83:a2:d9:20:a2:16:ec:c8:02: 65:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:01:2D:86:CD:17:BF:A1:31:12:E8:B0:A1:17:00:CE:F2:BC:07:DA X509v3 Authority Key Identifier: keyid:F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:3e:fb:4f:68:1f:4d:4a:75:57:6e:b5:c6:b8:16:ae:cd:73: 61:2a:43:48:de:9b:34:b2:ca:d9:24:bf:cd:1a:b4:50:f0:7c: f5:49:fa:60:4b:d4:ed:01:ec:d6:8c:dc:24:5f:17:8d:ae:ed: a7:e4:f5:5a:e3:8f:cc:bd:ba:86:d8:22:a8:81:c7:3b:ec:68: ba:ea:d3:7d:4b:62:29:65:e6:0a:9c:a9:9c:0f:4d:ce:6e:4b: b1:9d:8d:27:64:f5:01:d7:03:c8:13:13:7b:c3:1e:85:69:2e: 33:a1:87:89:82:e8:29:8c:1c:22:f2:2e:9a:71:02:5e:1b:d0: 6a:27:4b:cd:45:1e:5e:a9:c9:71:c0:b1:ac:84:06:81:e0:8a: a7:2c:b5:9e:7c:8a:5e:7c:cd:8f:e4:e8:6c:1e:6b:2b:b2:9e: fe:85:e6:60:aa:b8:10:6c:8a:0a:d6:04:fa:ed:04:bb:fe:ff: 88:0e:58:8d:34:e0:53:a1:90:f3:12:aa:c8:f4:7a:0d:99:b6: f0:16:b1:10:47:7c:f7:f2:b2:86:ca:83:e9:99:fc:86:d5:56: ca:2c:38:c5:09:10:eb:f1:d6:ff:1f:cb:67:f6:b3:4a:20:3f: ba:4f:f5:2b:9d:64:08:94:6d:08:2c:54:32:de:35:66:17:0b: fa:58:9f:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUITVhdF8Sa4+RabfREpmUN8PighYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjY5QjYzN0VBOTRERTRDQzkxNTBCREZENTMyN0JFMDNB MDMzNzg0QjAeFw0yNTA3MjAxMDQ3MTRaFw0yNTA3MjMxMjI2MTRaMDMxMTAvBgNV BAMTKDcxMDEyRDg2Q0QxN0JGQTEzMTEyRThCMEExMTcwMENFRjJCQzA3REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh7xKtcUBgZNuMhoEVREhGJtVg vVnVA4Pxm4sx/HAjZ5d8xG4de1mdv4mtCwPw9yvHZrb+tfGxx6BJ8MoXMNSLC77D ApButXfFAZdiCwn5vDf9YRUXsNMyTNtpraeFLByKlixTnwejtcrJwmH4rOVmtM4w 9HW8Rc+UIaniT+s1p2Gqoz941F2XIFoWB7ATxfakmsRmbmm2LHXTZJE66iovwE8T GqniY6sgbtFoxL+Z/IQvpwcjkgpkj4T9yc+xotZk/VCQl4OsNew0qSRLIXuQRqrA WacdkDxjb77Ok7PoXM62AsJ3we4iLWmmG0NTSGtT2q6mQ4Oi2SCiFuzIAmUDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcQEths0Xv6ExEuiwoRcAzvK8B9owHwYDVR0j BBgwFoAU9ptjfqlN5MyRUL39Uye+A6AzeEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWE2ODcxMi0xZDlhLTQxNDMtODJmMS0xYzgyYzMzMTY1ZWEvMC9GNjlCNjM3RUE5 NERFNENDOTE1MEJERkQ1MzI3QkUwM0EwMzM3ODRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjY5QjYzN0VBOTRERTRDQzkxNTBCREZENTMyN0JFMDNBMDMz Nzg0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFhNjg3MTItMWQ5YS00MTQzLTgy ZjEtMWM4MmMzMzE2NWVhLzAvRjY5QjYzN0VBOTRERTRDQzkxNTBCREZENTMyN0JF MDNBMDMzNzg0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGc++09oH01KdVdutca4Fq7Nc2EqQ0jemzSy ytkkv80atFDwfPVJ+mBL1O0B7NaM3CRfF42u7afk9Vrjj8y9uobYIqiBxzvsaLrq 031LYill5gqcqZwPTc5uS7GdjSdk9QHXA8gTE3vDHoVpLjOhh4mC6CmMHCLyLppx Al4b0GonS81FHl6pyXHAsayEBoHgiqcstZ58il58zY/k6Gweayuynv6F5mCquBBs igrWBPrtBLv+/4gOWI004FOhkPMSqsj0eg2ZtvAWsRBHfPfysobKg+mZ/IbVVsos OMUJEOvx1v8fy2f2s0ogP7pP9SudZAiUbQgsVDLeNWYXC/pYn6g= -----END CERTIFICATE-----Generated at Mon Jul 21 12:28:08 2025 by rpki-client