$ rpki-client -vvf repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft File: 69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft (raw, json) Hash identifier: dVjS8xNjjos64Isj/u3Apx574CDjHKAtYf8bhSHIfto= Subject key identifier: 85:98:7C:73:39:0A:1E:7D:12:AB:98:EF:3D:40:57:E5:0C:63:D2:F4 Authority key identifier: 69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7 Certificate issuer: /CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7 Certificate serial: 60A37B43A2A4C17028241F077A8E20813C370298 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft Manifest number: 01EE Signing time: Sun 07 Sep 2025 07:11:46 +0000 Manifest this update: Sun 07 Sep 2025 07:06:46 +0000 Manifest next update: Wed 10 Sep 2025 15:33:46 +0000 Files and hashes: 1: 69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl (hash: DkYoY0D97zm6eAR2TvR2ABsvboQtoLfd4/0N6Na0RE4=) 2: 3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa (hash: SA4jtW4MamCTfZtBnVJuWRU56DDkBtSVfuwzHUHzgZQ=) 3: 3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa (hash: 9ZkiCqfJaR2Zz0Qi5RLZPH4v5HuKpySyDiWp1DDQcaA=) 4: 3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa (hash: ZStiQiNLIgsMsK4weqSRNlK9ytdK1wtKwc7rWiw2Y64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:a3:7b:43:a2:a4:c1:70:28:24:1f:07:7a:8e:20:81:3c:37:02:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7 Validity Not Before: Sep 7 07:06:46 2025 GMT Not After : Sep 10 15:33:46 2025 GMT Subject: CN=85987C73390A1E7D12AB98EF3D4057E50C63D2F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:81:89:86:eb:63:14:28:9b:f5:bd:ad:3c:f7: 55:c9:d1:dd:fa:f7:f8:7f:65:1e:77:e4:18:20:2b: ea:d1:cb:27:42:5d:ad:75:72:ed:3e:66:89:75:7a: 58:bb:a0:f8:14:9b:82:7e:97:82:4e:25:b8:bf:2a: 84:47:5f:25:97:c4:46:94:b9:03:11:32:76:55:86: e1:f7:e9:2b:d7:67:68:29:ae:5e:81:f7:1d:d7:9e: 04:33:90:2b:51:e6:c4:6f:35:21:c2:0f:3f:d4:94: f1:1c:be:a7:e7:f1:e7:48:80:36:13:63:b6:67:9e: 66:29:a0:6d:bf:98:ee:78:51:fc:1b:29:5c:e2:13: 9f:09:39:14:76:51:b9:9b:24:ee:da:39:eb:46:45: 23:d0:6d:95:7c:92:48:5d:12:00:1c:ec:c5:8e:9c: 19:04:61:06:f0:a1:12:72:37:f5:32:25:25:14:b8: 2e:f3:cb:1e:b7:18:8f:2b:a8:96:11:6b:24:81:50: bc:8c:88:6c:51:a3:76:99:9c:d7:1c:5d:9a:d9:bb: 3c:c6:f8:78:b5:b5:6b:21:6f:c7:11:ca:f8:a6:d3: 75:6b:7b:c7:80:e1:6c:23:73:06:f8:0e:bd:86:e2: b1:77:3f:49:72:5b:a6:5c:ec:16:ef:6d:63:33:59: e5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:98:7C:73:39:0A:1E:7D:12:AB:98:EF:3D:40:57:E5:0C:63:D2:F4 X509v3 Authority Key Identifier: keyid:69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:d2:c2:a9:8c:26:06:c9:04:fc:50:91:68:e8:30:e6:0a:a0: a8:58:8a:0c:12:a6:72:a8:c6:e3:b1:0d:5a:47:c0:f8:7a:11: 60:be:ef:8b:5f:be:8a:90:8d:5e:14:41:94:e1:fc:fc:f3:2f: 20:f3:ce:41:e7:a1:e5:70:0c:fb:dd:99:33:c6:47:00:b3:61: 0f:bb:3a:15:20:5f:db:02:17:e8:61:a5:6c:91:00:bb:7b:a3: 2d:25:be:56:6d:78:3d:bd:3f:cc:55:d2:5f:fd:26:6f:2b:da: 38:32:f4:4a:4e:d3:64:8f:fa:53:ee:db:a7:c8:96:50:46:f8: f3:65:71:2f:69:d5:df:11:e0:11:a3:ee:ca:68:24:29:ed:b3: 35:34:c0:d1:ef:d2:11:f5:9f:ad:20:1c:6a:a7:5d:01:d0:1a: 02:41:35:26:1e:e4:c1:fb:cb:c5:09:d2:31:a3:15:7e:32:e5: c9:17:38:7c:c6:16:62:30:bb:4d:1e:80:a7:51:b7:72:33:e0: dd:24:bd:b7:7b:b3:b9:da:a5:76:8d:8d:4f:ec:d3:44:dd:b3: 60:46:c4:3d:3b:14:70:ec:21:b2:e1:5c:04:5c:77:05:78:5a: d5:aa:84:a5:2f:63:b2:44:b0:d5:90:f4:55:41:86:b2:ae:48: 4e:31:60:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYKN7Q6KkwXAoJB8Heo4ggTw3ApgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFFNTE2 QTU5QjVFNzAeFw0yNTA5MDcwNzA2NDZaFw0yNTA5MTAxNTMzNDZaMDMxMTAvBgNV BAMTKDg1OTg3QzczMzkwQTFFN0QxMkFCOThFRjNENDA1N0U1MEM2M0QyRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXgYmG62MUKJv1va0891XJ0d36 9/h/ZR535BggK+rRyydCXa11cu0+Zol1eli7oPgUm4J+l4JOJbi/KoRHXyWXxEaU uQMRMnZVhuH36SvXZ2gprl6B9x3XngQzkCtR5sRvNSHCDz/UlPEcvqfn8edIgDYT Y7ZnnmYpoG2/mO54UfwbKVziE58JORR2UbmbJO7aOetGRSPQbZV8kkhdEgAc7MWO nBkEYQbwoRJyN/UyJSUUuC7zyx63GI8rqJYRaySBULyMiGxRo3aZnNccXZrZuzzG +Hi1tWshb8cRyvim03Vre8eA4Wwjcwb4Dr2G4rF3P0lyW6Zc7BbvbWMzWeVXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhZh8czkKHn0Sq5jvPUBX5Qxj0vQwHwYDVR0j BBgwFoAUaf+a80ERzUY37YpstDUeUWpZtecwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjQwYWJlNi04ZGVlLTRiZDEtODE0Yy0yYWYzMWEzZDljZGYvMC82OUZGOUFGMzQx MTFDRDQ2MzdFRDhBNkNCNDM1MUU1MTZBNTlCNUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFFNTE2QTU5 QjVFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY0MGFiZTYtOGRlZS00YmQxLTgx NGMtMmFmMzFhM2Q5Y2RmLzAvNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFF NTE2QTU5QjVFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALXSwqmMJgbJBPxQkWjoMOYKoKhYigwSpnKo xuOxDVpHwPh6EWC+74tfvoqQjV4UQZTh/PzzLyDzzkHnoeVwDPvdmTPGRwCzYQ+7 OhUgX9sCF+hhpWyRALt7oy0lvlZteD29P8xV0l/9Jm8r2jgy9EpO02SP+lPu26fI llBG+PNlcS9p1d8R4BGj7spoJCntszU0wNHv0hH1n60gHGqnXQHQGgJBNSYe5MH7 y8UJ0jGjFX4y5ckXOHzGFmIwu00egKdRt3Iz4N0kvbd7s7napXaNjU/s00Tds2BG xD07FHDsIbLhXARcdwV4WtWqhKUvY7JEsNWQ9FVBhrKuSE4xYGs= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:00 2025 by rpki-client