$ rpki-client -vvf repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft File: 69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft (raw, json) Hash identifier: SzOgW5s7tpw+pjRAl0u7/SQsXF7vOPT7E+YRcPZ7rww= Subject key identifier: FB:E9:B4:E3:A0:4D:DF:E8:43:F7:47:A8:33:4B:7A:A9:40:B1:E7:20 Authority key identifier: 69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7 Certificate issuer: /CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7 Certificate serial: 3818562FF3323A0EE259C9CB9145CC014BA40A48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft Manifest number: 01C3 Signing time: Thu 05 Jun 2025 04:21:44 +0000 Manifest this update: Thu 05 Jun 2025 04:16:44 +0000 Manifest next update: Sun 08 Jun 2025 09:10:44 +0000 Files and hashes: 1: 3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa (hash: heu4e8sIQY0GrzrCMXaxDxeM2U05OsH3YIXr+Hp2kfg=) 2: 69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl (hash: Gu8i1uGNR/HPEIb+XI5LBrmxJ2xpCkGI+sUUB6iY//A=) 3: 3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa (hash: ZuytWq4PWrbArnGlNtL3kdcVQRo24jWxli7Scbb4h7Y=) 4: 3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa (hash: k338Lmr2nBFKtOYrTW3s+aTUS4KKRTx1cKwMsZkav7w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 09:10:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:18:56:2f:f3:32:3a:0e:e2:59:c9:cb:91:45:cc:01:4b:a4:0a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7 Validity Not Before: Jun 5 04:16:44 2025 GMT Not After : Jun 8 09:10:44 2025 GMT Subject: CN=FBE9B4E3A04DDFE843F747A8334B7AA940B1E720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6b:c2:29:cc:b4:87:dc:43:0d:9e:21:7c:d4: 3a:01:70:13:2d:60:4a:d0:7c:a3:46:00:28:d6:2c: f4:7a:ca:81:56:ae:20:9f:ba:bf:d9:bc:d5:b3:e5: b7:cb:09:ca:b8:8f:c8:f6:16:5a:bc:05:ad:58:13: 3c:ec:8c:e0:5a:0e:1d:24:86:59:eb:1f:42:a7:6e: 21:3f:56:97:e5:8f:e4:ab:ba:b2:a8:b5:f0:19:4d: f3:0f:79:f9:c0:c6:af:51:e2:d3:0a:ec:6e:b6:69: c1:62:07:d2:34:b7:29:11:8d:be:7f:e1:21:db:aa: dd:97:d3:e3:c0:7f:e1:e3:57:3e:fd:e3:ed:8b:ad: 9e:0a:72:5a:7c:c1:1d:4a:c1:ec:8d:cc:47:9c:21: 27:38:bc:cc:97:b6:22:81:05:dd:26:e2:75:ac:17: fe:44:b5:2d:3a:b1:81:4a:b3:16:2f:21:c7:0e:c4: 18:88:12:95:48:b3:ab:ef:24:65:7d:49:93:cf:b0: 16:af:8b:1a:88:73:3b:72:a9:63:ce:53:b7:a5:ec: 8c:a9:a9:9d:c0:93:f0:52:90:35:3a:a8:f5:45:c2: 39:af:ee:0c:de:56:9b:5d:84:da:8c:a7:fc:11:b9: 3a:d8:83:23:f7:75:ef:4b:1e:8a:63:fa:bb:e2:85: cc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E9:B4:E3:A0:4D:DF:E8:43:F7:47:A8:33:4B:7A:A9:40:B1:E7:20 X509v3 Authority Key Identifier: keyid:69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:0e:55:7e:06:d3:ca:46:7e:50:7d:c8:72:d1:0c:a8:a3:d9: 36:1b:f7:37:c8:11:ca:81:82:71:74:70:bb:e8:59:9b:b8:fe: c7:7c:92:2f:e2:93:3a:b5:e4:d7:b1:3b:c2:ca:8e:26:e4:17: 26:48:e1:cc:72:5f:c0:a7:42:f4:75:5d:e7:6d:86:c9:43:ec: 21:e9:a9:83:e7:60:29:28:41:8c:d3:e3:c9:87:ad:0a:01:d5: a9:d7:e1:81:03:00:09:b1:32:00:b8:55:f0:d2:b2:ac:8d:6e: 74:f6:a0:eb:c1:1e:63:74:bb:f0:6f:fa:b6:a6:59:4f:aa:f3: 88:91:e0:b4:0b:1e:24:40:49:cf:e7:df:79:a2:39:7a:24:d6: d9:9a:22:70:28:f6:2f:4c:ed:3c:06:82:ac:fa:33:56:ea:f3: 44:e9:ad:a3:fe:27:9d:8c:39:f3:04:79:e2:ed:45:43:76:13: fa:71:27:05:1d:59:7d:94:1c:3b:94:6c:3f:e8:dc:29:a7:88: 0a:72:79:04:3c:43:f2:72:1f:57:e4:6b:cc:e9:76:32:60:b6: 1b:d3:72:88:e0:2d:cf:0f:16:69:23:ba:20:9a:27:24:32:4e: 78:75:31:f7:6d:4b:95:8e:0a:91:88:af:b8:ab:5d:3c:d2:21: ec:3b:82:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOBhWL/MyOg7iWcnLkUXMAUukCkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFFNTE2 QTU5QjVFNzAeFw0yNTA2MDUwNDE2NDRaFw0yNTA2MDgwOTEwNDRaMDMxMTAvBgNV BAMTKEZCRTlCNEUzQTA0RERGRTg0M0Y3NDdBODMzNEI3QUE5NDBCMUU3MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7a8IpzLSH3EMNniF81DoBcBMt YErQfKNGACjWLPR6yoFWriCfur/ZvNWz5bfLCcq4j8j2Flq8Ba1YEzzsjOBaDh0k hlnrH0KnbiE/Vpflj+SrurKotfAZTfMPefnAxq9R4tMK7G62acFiB9I0tykRjb5/ 4SHbqt2X0+PAf+HjVz794+2LrZ4Kclp8wR1KweyNzEecISc4vMyXtiKBBd0m4nWs F/5EtS06sYFKsxYvIccOxBiIEpVIs6vvJGV9SZPPsBavixqIcztyqWPOU7el7Iyp qZ3Ak/BSkDU6qPVFwjmv7gzeVptdhNqMp/wRuTrYgyP3de9LHopj+rvihcy5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU++m046BN3+hD90eoM0t6qUCx5yAwHwYDVR0j BBgwFoAUaf+a80ERzUY37YpstDUeUWpZtecwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjQwYWJlNi04ZGVlLTRiZDEtODE0Yy0yYWYzMWEzZDljZGYvMC82OUZGOUFGMzQx MTFDRDQ2MzdFRDhBNkNCNDM1MUU1MTZBNTlCNUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFFNTE2QTU5 QjVFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY0MGFiZTYtOGRlZS00YmQxLTgx NGMtMmFmMzFhM2Q5Y2RmLzAvNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFF NTE2QTU5QjVFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcOVX4G08pGflB9yHLRDKij2TYb9zfIEcqB gnF0cLvoWZu4/sd8ki/ikzq15NexO8LKjibkFyZI4cxyX8CnQvR1XedthslD7CHp qYPnYCkoQYzT48mHrQoB1anX4YEDAAmxMgC4VfDSsqyNbnT2oOvBHmN0u/Bv+ram WU+q84iR4LQLHiRASc/n33miOXok1tmaInAo9i9M7TwGgqz6M1bq80TpraP+J52M OfMEeeLtRUN2E/pxJwUdWX2UHDuUbD/o3CmniApyeQQ8Q/JyH1fka8zpdjJgthvT cojgLc8PFmkjuiCaJyQyTnh1MfdtS5WOCpGIr7irXTzSIew7gtI= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:53 2025 by rpki-client