$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft File: C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft (raw, json) Hash identifier: 3TxcmVLi/WSqHNHDk23QjHruRlNFmpdew1iru2rLSyc= Subject key identifier: 81:61:55:C9:CD:96:E2:39:C8:F5:39:7C:CE:B5:1E:33:E6:F2:FB:FC Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE Certificate issuer: /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Certificate serial: 09653BC3A5C6CD19B5DBB594AB1D6A83CD29A94D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft Manifest number: 043D Signing time: Sat 19 Jul 2025 16:50:49 +0000 Manifest this update: Sat 19 Jul 2025 16:45:49 +0000 Manifest next update: Tue 22 Jul 2025 20:20:49 +0000 Files and hashes: 1: 3131372e35332e3134382e302f32342d3234203d3e203538333937.roa (hash: s/yj35IxEbWgMmRyngcwwQ2XYvpHuhez/PCo0jx4Hk4=) 2: 3131372e35332e3135312e302f32342d3234203d3e203538333937.roa (hash: Si3tPvzTYMJNo6ziKI0r83ugddQoVhs+qZtKjviywZY=) 3: C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl (hash: gwBMwPYWqbY1mUC/cuSP8jCz+6jxgDS6bZTfQoLrRl4=) 4: 3130332e34312e3230352e302f32342d3234203d3e203538333937.roa (hash: bzqLwXgqRc5lqIH8QIxSqfc9LTb/899srIuuHKEc/bE=) 5: 3130332e34312e3230362e302f32342d3234203d3e203538333937.roa (hash: 8p0am7ehV2An1UqUgUm2Z1Br0OD2VEAPk/dVcoq3jDQ=) 6: 3131372e35332e3134392e302f32342d3234203d3e203538333937.roa (hash: 0q8NrmjjcxoNrx7WtkZa7JKjlra7drxIR2Rkv2uH0qU=) 7: 3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (hash: Es6h8MzPI3S1mFQ1J0kqGZiZfKqhvpv8wCyy8PJOM40=) 8: 3130332e34312e3230372e302f32342d3234203d3e203538333937.roa (hash: /5ZnjDo2uinC9TTjfx0reoiz9f4sCWczTxGAg/U2xq4=) 9: 3131372e35332e3135302e302f32342d3234203d3e203538333937.roa (hash: UMpjLuebG+yMQNJv43xd3u8qZ1cqsp7h54oRFs+fJIg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 20:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:65:3b:c3:a5:c6:cd:19:b5:db:b5:94:ab:1d:6a:83:cd:29:a9:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Validity Not Before: Jul 19 16:45:49 2025 GMT Not After : Jul 22 20:20:49 2025 GMT Subject: CN=816155C9CD96E239C8F5397CCEB51E33E6F2FBFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:88:e2:9e:5d:44:b3:99:20:d6:86:15:07:44: 39:c9:73:96:1f:41:03:cb:32:19:0c:a4:32:69:e5: b9:49:09:06:fa:55:56:92:17:39:d5:a6:61:07:8b: 37:60:e5:17:ba:d3:54:90:83:43:13:eb:07:f8:ea: 26:e4:29:c5:bd:03:f5:e6:68:00:86:17:fd:04:65: ef:65:0f:15:e0:bc:e0:4f:1e:ca:18:2e:3c:6b:f0: 1c:97:11:91:45:4b:d8:3c:1b:da:55:ba:45:ab:db: 85:10:59:06:5f:f1:d2:a1:df:95:d3:ba:95:78:06: 7f:62:f1:3a:b1:dc:e3:45:09:ef:bf:9c:21:7d:4b: a1:75:ec:c6:98:1b:0e:f7:2e:07:89:82:51:fd:9e: 03:d6:df:b1:a6:9f:9c:7d:bb:eb:ec:4b:8f:bf:3b: 10:b5:1f:02:e2:4a:de:62:df:8c:bb:23:53:76:ef: 3a:95:01:75:6f:9e:4a:a8:23:41:c6:ab:5f:42:18: 98:ff:c9:4a:11:4f:4f:3b:d7:1c:0b:19:cc:c6:62: e5:17:f8:1c:d0:57:a6:30:c6:95:9d:12:ce:15:89: 8b:b6:6f:55:b1:cb:57:12:16:1e:8f:1c:66:95:8c: 83:de:71:1e:39:d2:d4:77:d2:ec:8b:bc:2d:01:e2: 7d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:61:55:C9:CD:96:E2:39:C8:F5:39:7C:CE:B5:1E:33:E6:F2:FB:FC X509v3 Authority Key Identifier: keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:81:73:0c:61:a6:34:46:24:a8:da:2b:f9:a8:79:ee:56:3d: fa:db:f7:91:98:af:e6:24:36:f8:99:8a:ee:d4:01:5b:02:4e: af:83:af:40:41:50:4a:50:67:28:dc:69:8f:49:5b:17:62:71: 92:bd:11:56:f6:17:09:12:56:06:37:07:f4:02:83:cb:96:b9: 35:0e:95:16:77:7b:6e:1c:1d:79:50:f1:13:c5:44:30:7a:7d: ff:d1:b9:19:4d:79:00:b5:c4:34:73:8f:49:c2:87:a8:6b:01: ca:40:30:49:00:26:bb:a6:7c:cb:f9:6d:b3:3a:b8:e9:26:25: 64:b1:0c:25:69:0c:57:69:00:ec:2d:5f:7f:15:53:67:76:cf: f3:da:c6:18:46:26:8e:a5:34:c1:0c:e2:e5:de:e6:d8:fe:ed: 45:cd:86:21:d7:ee:87:e2:bd:34:c1:ef:9e:45:54:3f:76:f5: 3f:f8:86:73:48:ca:fb:33:c6:2f:9d:b0:d0:29:ce:af:49:ce: 96:27:85:82:c8:fa:9c:99:cd:2b:bf:6d:3c:80:23:51:47:38: 0a:43:f6:fe:ea:fc:7f:cf:97:26:b6:c0:65:a7:8f:a3:f4:54: b7:97:19:a5:29:13:af:78:73:ce:bb:e5:73:91:2a:e3:30:7c: 51:af:2c:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCWU7w6XGzRm127WUqx1qg80pqU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1 Mzg5OThBRTAeFw0yNTA3MTkxNjQ1NDlaFw0yNTA3MjIyMDIwNDlaMDMxMTAvBgNV BAMTKDgxNjE1NUM5Q0Q5NkUyMzlDOEY1Mzk3Q0NFQjUxRTMzRTZGMkZCRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAiOKeXUSzmSDWhhUHRDnJc5Yf QQPLMhkMpDJp5blJCQb6VVaSFznVpmEHizdg5Re601SQg0MT6wf46ibkKcW9A/Xm aACGF/0EZe9lDxXgvOBPHsoYLjxr8ByXEZFFS9g8G9pVukWr24UQWQZf8dKh35XT upV4Bn9i8Tqx3ONFCe+/nCF9S6F17MaYGw73LgeJglH9ngPW37Gmn5x9u+vsS4+/ OxC1HwLiSt5i34y7I1N27zqVAXVvnkqoI0HGq19CGJj/yUoRT0871xwLGczGYuUX +BzQV6YwxpWdEs4ViYu2b1Wxy1cSFh6PHGaVjIPecR450tR30uyLvC0B4n39AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgWFVyc2W4jnI9Tl8zrUeM+by+/wwHwYDVR0j BBgwFoAUxpAFu3ukaKEKMs5E6cTOeFOJmK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiYTQ1ZS1mNWRhLTQ1ODEtYmZlNS1jMTYxNmMzMGVmYWIvMC9DNjkwMDVCQjdC QTQ2OEExMEEzMkNFNDRFOUM0Q0U3ODUzODk5OEFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1Mzg5 OThBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4YmE0NWUtZjVkYS00NTgxLWJm ZTUtYzE2MTZjMzBlZmFiLzAvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENF Nzg1Mzg5OThBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKBcwxhpjRGJKjaK/moee5WPfrb95GYr+Yk NviZiu7UAVsCTq+Dr0BBUEpQZyjcaY9JWxdicZK9EVb2FwkSVgY3B/QCg8uWuTUO lRZ3e24cHXlQ8RPFRDB6ff/RuRlNeQC1xDRzj0nCh6hrAcpAMEkAJrumfMv5bbM6 uOkmJWSxDCVpDFdpAOwtX38VU2d2z/PaxhhGJo6lNMEM4uXe5tj+7UXNhiHX7ofi vTTB755FVD929T/4hnNIyvszxi+dsNApzq9JzpYnhYLI+pyZzSu/bTyAI1FHOApD 9v7q/H/Plya2wGWnj6P0VLeXGaUpE694c8675XORKuMwfFGvLK4= -----END CERTIFICATE-----Generated at Mon Jul 21 18:06:38 2025 by rpki-client