$ rpki-client -vvf repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft File: 69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft (raw, json) Hash identifier: VuZAtbdjpNcZcJNstRFkY0l0iPxKUB0LZfGNRGf3fX8= Subject key identifier: A6:32:57:19:09:C5:B2:B7:04:A6:1B:3B:6F:04:F0:3A:8F:8D:56:10 Authority key identifier: 69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7 Certificate issuer: /CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7 Certificate serial: 1DFF00DAD92B12BBAF0EAAD1D5225D435E2022A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft Manifest number: 01A7 Signing time: Thu 03 Apr 2025 12:51:43 +0000 Manifest this update: Thu 03 Apr 2025 12:46:43 +0000 Manifest next update: Sun 06 Apr 2025 20:25:43 +0000 Files and hashes: 1: 3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa (hash: ZuytWq4PWrbArnGlNtL3kdcVQRo24jWxli7Scbb4h7Y=) 2: 3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa (hash: k338Lmr2nBFKtOYrTW3s+aTUS4KKRTx1cKwMsZkav7w=) 3: 3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa (hash: heu4e8sIQY0GrzrCMXaxDxeM2U05OsH3YIXr+Hp2kfg=) 4: 69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl (hash: jumSSnbjdxGCrkyGEl+zPZ7UMm7AeNwX77rc4ywY7OE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 20:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ff:00:da:d9:2b:12:bb:af:0e:aa:d1:d5:22:5d:43:5e:20:22:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7 Validity Not Before: Apr 3 12:46:43 2025 GMT Not After : Apr 6 20:25:43 2025 GMT Subject: CN=A632571909C5B2B704A61B3B6F04F03A8F8D5610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:08:b9:ff:10:e7:e5:8b:6d:61:f3:de:27:eb: 48:87:b2:a8:4c:2f:3a:d4:77:c1:59:56:10:6c:01: 75:9d:42:83:36:69:d6:b6:dc:48:ba:20:35:29:3c: 82:0a:63:b5:1f:a2:bb:53:23:c8:25:a3:14:70:36: 31:56:69:e3:c6:e8:77:f5:42:1c:74:06:a6:ea:cf: 69:02:5c:95:fb:d6:68:22:d5:ad:78:80:7f:a2:6a: 85:29:f5:3c:b2:e9:46:45:df:3a:0e:82:70:b6:f4: 02:fa:b9:12:9c:bf:2b:e5:13:2a:df:37:2b:57:c6: a5:da:be:5b:88:60:e6:c4:34:0c:c3:74:f7:16:e3: 0c:48:e4:19:ac:e4:23:67:d2:bd:63:f8:f5:4b:b6: bc:94:b9:3b:db:d2:4a:d7:cd:6b:09:7d:fb:23:f9: 6f:43:44:c0:9b:8a:22:ad:9e:bd:06:9d:50:c1:d9: 02:d2:33:6e:e0:1c:3a:d2:fd:45:f6:ff:ca:24:12: 3c:c1:ac:8d:a6:e3:37:5e:b9:bb:a7:a0:9e:4e:a0: ed:47:1b:4f:e3:94:fb:a1:1e:7c:ca:8d:e1:d3:93: ad:b6:ef:12:29:1c:f5:fc:b5:12:bd:52:fc:c1:6f: b7:f7:ce:75:82:2e:dc:cb:23:d5:f0:e5:b3:e4:78: a1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:32:57:19:09:C5:B2:B7:04:A6:1B:3B:6F:04:F0:3A:8F:8D:56:10 X509v3 Authority Key Identifier: keyid:69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:37:ef:07:fe:68:3d:2b:ed:b6:64:1e:5e:cb:8f:53:fa:3a: d7:75:5b:c0:80:96:a2:e8:08:86:b5:9f:a2:dc:39:8d:68:60: 23:0d:31:24:55:0a:39:91:96:e2:dc:31:0b:d0:60:7f:60:db: a5:f6:10:ae:5a:58:18:ac:ff:e4:8c:6a:d8:b9:ae:73:57:3f: b7:c1:dc:ff:0a:cc:4f:65:04:07:31:38:c2:76:be:0d:3c:c8: 27:56:90:bc:16:c3:c4:7d:15:56:2f:81:14:4a:72:37:fd:3d: 47:cb:ba:bf:d0:54:c5:8e:ee:c5:e8:7b:41:f3:87:e3:99:b9: 63:67:b1:1e:93:0f:3f:27:0a:e6:83:b8:7f:45:4e:8a:86:9a: 7f:7b:d1:88:d9:e1:00:7d:3c:89:6f:e1:6e:ce:1f:fa:3a:5f: d0:dd:ae:f8:ab:05:cb:7b:87:07:74:6b:b5:8b:40:39:d8:0f: 32:e1:c4:7f:b0:12:df:8d:3a:ab:67:89:95:28:02:c0:7d:4c: 39:64:fd:d7:d5:f0:71:ee:25:9c:35:dd:57:5e:10:88:b1:4b: 5e:e7:d4:6a:fd:99:55:33:8c:d1:0b:b2:b6:d0:17:9c:0e:1d: fb:30:db:3f:8d:9f:7f:ac:78:39:ec:74:e0:a4:89:d1:df:f2: 8e:55:f0:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHf8A2tkrEruvDqrR1SJdQ14gIqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFFNTE2 QTU5QjVFNzAeFw0yNTA0MDMxMjQ2NDNaFw0yNTA0MDYyMDI1NDNaMDMxMTAvBgNV BAMTKEE2MzI1NzE5MDlDNUIyQjcwNEE2MUIzQjZGMDRGMDNBOEY4RDU2MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4CLn/EOfli21h894n60iHsqhM LzrUd8FZVhBsAXWdQoM2ada23Ei6IDUpPIIKY7UfortTI8gloxRwNjFWaePG6Hf1 Qhx0Bqbqz2kCXJX71mgi1a14gH+iaoUp9Tyy6UZF3zoOgnC29AL6uRKcvyvlEyrf NytXxqXavluIYObENAzDdPcW4wxI5Bms5CNn0r1j+PVLtryUuTvb0krXzWsJffsj +W9DRMCbiiKtnr0GnVDB2QLSM27gHDrS/UX2/8okEjzBrI2m4zdeubunoJ5OoO1H G0/jlPuhHnzKjeHTk6227xIpHPX8tRK9UvzBb7f3znWCLtzLI9Xw5bPkeKH1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpjJXGQnFsrcEphs7bwTwOo+NVhAwHwYDVR0j BBgwFoAUaf+a80ERzUY37YpstDUeUWpZtecwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjQwYWJlNi04ZGVlLTRiZDEtODE0Yy0yYWYzMWEzZDljZGYvMC82OUZGOUFGMzQx MTFDRDQ2MzdFRDhBNkNCNDM1MUU1MTZBNTlCNUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFFNTE2QTU5 QjVFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY0MGFiZTYtOGRlZS00YmQxLTgx NGMtMmFmMzFhM2Q5Y2RmLzAvNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFF NTE2QTU5QjVFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFc37wf+aD0r7bZkHl7Lj1P6Otd1W8CAlqLo CIa1n6LcOY1oYCMNMSRVCjmRluLcMQvQYH9g26X2EK5aWBis/+SMati5rnNXP7fB 3P8KzE9lBAcxOMJ2vg08yCdWkLwWw8R9FVYvgRRKcjf9PUfLur/QVMWO7sXoe0Hz h+OZuWNnsR6TDz8nCuaDuH9FToqGmn970YjZ4QB9PIlv4W7OH/o6X9DdrvirBct7 hwd0a7WLQDnYDzLhxH+wEt+NOqtniZUoAsB9TDlk/dfV8HHuJZw13VdeEIixS17n 1Gr9mVUzjNELsrbQF5wOHfsw2z+Nn3+seDnsdOCkidHf8o5V8Cw= -----END CERTIFICATE-----Generated at Sat Apr 5 15:31:09 2025 by rpki-client