$ rpki-client -vvf repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft File: 69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft (raw, json) Hash identifier: 21OTtY80+7ramIALMdCoSzYKEFLw3/FnGDpjaPR0EQM= Subject key identifier: 09:9B:46:C0:F6:0D:E4:47:19:9A:3A:4E:64:8C:DD:97:B7:89:B4:39 Authority key identifier: 69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7 Certificate issuer: /CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7 Certificate serial: 7972713BAE8BDA1C9A95029482B3AC091A27AD96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft Manifest number: 01D7 Signing time: Sun 20 Jul 2025 15:11:42 +0000 Manifest this update: Sun 20 Jul 2025 15:06:42 +0000 Manifest next update: Thu 24 Jul 2025 01:37:42 +0000 Files and hashes: 1: 3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa (hash: heu4e8sIQY0GrzrCMXaxDxeM2U05OsH3YIXr+Hp2kfg=) 2: 3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa (hash: k338Lmr2nBFKtOYrTW3s+aTUS4KKRTx1cKwMsZkav7w=) 3: 69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl (hash: ODGp+aB5m+3bsQCcEOZiurwqnfYf6cQiJflbjDX2LSM=) 4: 3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa (hash: ZuytWq4PWrbArnGlNtL3kdcVQRo24jWxli7Scbb4h7Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 01:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:72:71:3b:ae:8b:da:1c:9a:95:02:94:82:b3:ac:09:1a:27:ad:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7 Validity Not Before: Jul 20 15:06:42 2025 GMT Not After : Jul 24 01:37:42 2025 GMT Subject: CN=099B46C0F60DE447199A3A4E648CDD97B789B439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:07:63:83:82:95:4a:6f:f8:f7:40:73:1e:6b: b7:b5:5b:4c:72:e5:0d:a0:d5:4a:b4:10:ec:50:25: 02:5b:18:42:f5:66:87:8e:e2:a0:9c:01:06:9f:c6: 21:9c:19:4a:3e:fc:e0:bc:87:29:1c:35:4a:63:b5: 36:b5:7b:05:57:79:e5:a6:29:ae:77:bf:0a:8c:07: 19:e9:3c:fe:74:0d:1b:86:c8:df:1f:f9:8b:fc:1d: 39:03:1f:b4:b4:a8:45:1c:da:d6:85:ab:82:47:59: df:d4:f1:b8:49:a4:2f:be:33:f3:e5:09:76:bc:f1: aa:b1:eb:6f:e1:c4:a9:57:41:31:c1:db:61:44:8e: 8d:11:bd:de:6a:ef:2c:75:27:7f:f2:50:b4:25:f8: 23:f1:0a:54:8d:dc:56:7d:64:98:b9:e9:c5:de:d2: 21:6f:bc:d5:ad:7a:e1:30:65:be:f7:33:4f:0c:09: 05:92:f1:42:4b:34:bd:bb:2c:8c:2a:e9:d2:8d:4b: 45:87:8e:d9:f5:05:fd:7f:06:f2:a9:60:b8:4e:de: ef:af:96:aa:cd:41:ba:43:ad:95:c8:4e:fd:eb:da: 66:1b:bd:db:ec:d6:24:e8:59:de:a6:bd:24:35:cd: ae:7a:7a:00:20:74:52:2e:44:c8:43:e9:c3:be:aa: 78:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:9B:46:C0:F6:0D:E4:47:19:9A:3A:4E:64:8C:DD:97:B7:89:B4:39 X509v3 Authority Key Identifier: keyid:69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:74:0c:ce:68:fb:dc:af:3f:52:66:be:2e:c4:d0:a7:03:2b: c4:a0:02:41:6c:50:0f:09:4e:ca:ce:47:cb:15:66:0f:1c:6e: 93:4c:85:53:5f:df:6e:74:85:6d:49:93:a0:dc:2e:c6:eb:6d: 9d:fe:fd:9d:46:cc:52:99:7c:14:5e:9d:14:a7:ab:d2:12:99: 52:db:c0:ef:9c:3e:d2:de:a8:41:b6:24:60:4f:94:fb:d9:5a: ed:32:8e:48:71:17:e4:ec:c5:9f:cf:00:01:0d:12:88:f8:bb: d4:0e:f6:21:d9:b4:b6:e5:9f:44:bf:b4:ea:89:a8:45:57:dc: 01:62:63:98:ac:94:b1:65:fc:69:3d:44:45:7c:fc:60:5f:a9: 63:ed:cf:30:69:72:7a:90:99:6a:ce:dc:74:ce:11:14:ae:57: 75:1b:c2:4e:81:57:a5:b7:29:d6:47:9e:a1:c4:87:2f:d7:ea: ed:cb:af:11:6c:e8:35:ce:4c:e9:fe:82:fb:2f:47:4f:38:3a: 19:90:e0:f6:d5:e9:3d:b4:7a:0a:a5:9b:51:9f:46:00:27:e4: 7b:69:c3:97:d5:65:d1:c2:30:cf:f9:38:76:c1:0d:0a:96:15: 5f:ed:bd:9c:b9:9d:cf:e9:c0:ba:00:03:bd:15:6a:b8:45:50: 6a:a6:6a:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeXJxO66L2hyalQKUgrOsCRonrZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFFNTE2 QTU5QjVFNzAeFw0yNTA3MjAxNTA2NDJaFw0yNTA3MjQwMTM3NDJaMDMxMTAvBgNV BAMTKDA5OUI0NkMwRjYwREU0NDcxOTlBM0E0RTY0OENERDk3Qjc4OUI0MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBB2ODgpVKb/j3QHMea7e1W0xy 5Q2g1Uq0EOxQJQJbGEL1ZoeO4qCcAQafxiGcGUo+/OC8hykcNUpjtTa1ewVXeeWm Ka53vwqMBxnpPP50DRuGyN8f+Yv8HTkDH7S0qEUc2taFq4JHWd/U8bhJpC++M/Pl CXa88aqx62/hxKlXQTHB22FEjo0Rvd5q7yx1J3/yULQl+CPxClSN3FZ9ZJi56cXe 0iFvvNWteuEwZb73M08MCQWS8UJLNL27LIwq6dKNS0WHjtn1Bf1/BvKpYLhO3u+v lqrNQbpDrZXITv3r2mYbvdvs1iToWd6mvSQ1za56egAgdFIuRMhD6cO+qngPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCZtGwPYN5EcZmjpOZIzdl7eJtDkwHwYDVR0j BBgwFoAUaf+a80ERzUY37YpstDUeUWpZtecwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjQwYWJlNi04ZGVlLTRiZDEtODE0Yy0yYWYzMWEzZDljZGYvMC82OUZGOUFGMzQx MTFDRDQ2MzdFRDhBNkNCNDM1MUU1MTZBNTlCNUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFFNTE2QTU5 QjVFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY0MGFiZTYtOGRlZS00YmQxLTgx NGMtMmFmMzFhM2Q5Y2RmLzAvNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFF NTE2QTU5QjVFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG10DM5o+9yvP1Jmvi7E0KcDK8SgAkFsUA8J TsrOR8sVZg8cbpNMhVNf3250hW1Jk6DcLsbrbZ3+/Z1GzFKZfBRenRSnq9ISmVLb wO+cPtLeqEG2JGBPlPvZWu0yjkhxF+TsxZ/PAAENEoj4u9QO9iHZtLbln0S/tOqJ qEVX3AFiY5islLFl/Gk9REV8/GBfqWPtzzBpcnqQmWrO3HTOERSuV3Ubwk6BV6W3 KdZHnqHEhy/X6u3LrxFs6DXOTOn+gvsvR084OhmQ4PbV6T20egqlm1GfRgAn5Htp w5fVZdHCMM/5OHbBDQqWFV/tvZy5nc/pwLoAA70VarhFUGqmanM= -----END CERTIFICATE-----Generated at Mon Jul 21 08:59:30 2025 by rpki-client