$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft File: 69FEA3D523BC4635AE385A6D91412834159FF34B.mft (raw, json) Hash identifier: S+Mo8DbQ/On4U5unKrXh29iztBWK9/JwYOO8k+99vME= Subject key identifier: DE:0A:FE:C9:12:20:4D:C2:26:43:2A:17:9F:85:9E:CF:33:C2:EB:0D Authority key identifier: 69:FE:A3:D5:23:BC:46:35:AE:38:5A:6D:91:41:28:34:15:9F:F3:4B Certificate issuer: /CN=69FEA3D523BC4635AE385A6D91412834159FF34B Certificate serial: 702989958906ADD66D57855806953481997E4D8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft Manifest number: B3 Signing time: Thu 28 Aug 2025 01:02:00 +0000 Manifest this update: Thu 28 Aug 2025 00:57:00 +0000 Manifest next update: Sun 31 Aug 2025 04:06:00 +0000 Files and hashes: 1: 69FEA3D523BC4635AE385A6D91412834159FF34B.crl (hash: 6DRcahoU+gQBa/IEzF1DqEurY0X2uzkJiOnA7v1Z1O4=) 2: 3136302e32322e3231372e302f32342d3234203d3e20313532383431.roa (hash: 2H9ugvO1mqNF5HVzGPvvJyo9xLTxDYsuZlPEZxpIFQg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.crl rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 04:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:29:89:95:89:06:ad:d6:6d:57:85:58:06:95:34:81:99:7e:4d:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69FEA3D523BC4635AE385A6D91412834159FF34B Validity Not Before: Aug 28 00:57:00 2025 GMT Not After : Aug 31 04:06:00 2025 GMT Subject: CN=DE0AFEC912204DC226432A179F859ECF33C2EB0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ba:1d:79:9c:88:44:fb:82:8b:7b:05:34:8f: ce:c4:a7:f2:64:fb:2d:53:06:cb:32:9c:c8:81:99: bb:61:11:45:45:23:48:a6:3e:33:6e:d7:45:f9:52: d6:fa:27:c0:7b:84:5b:25:83:59:d7:39:9d:64:7c: 8b:cb:4a:c7:a7:e3:eb:67:f7:57:eb:d6:46:d9:bd: 7e:df:b5:2f:e4:50:0f:3f:07:45:da:00:f8:5a:da: 3e:7c:24:23:f8:46:cf:dd:dd:3b:a7:b0:c1:40:89: aa:79:b6:73:0d:a9:6e:7c:99:4c:f5:23:0c:84:7b: 8b:d9:f9:ae:05:13:71:92:55:c0:e8:a8:12:04:c0: 87:bd:0e:88:0c:dd:ab:de:39:7d:3d:86:38:5a:a9: 9f:9c:af:13:7b:ae:85:5f:ba:80:74:fe:f6:06:73: 90:c9:ab:a6:73:5a:60:cb:5a:10:a1:16:c2:59:aa: 83:4c:31:f4:9f:45:20:8c:7a:f5:f3:77:2d:3a:be: dc:cc:4c:e1:fd:f3:db:0e:56:19:1e:d4:cf:2d:5d: 52:9c:d5:9e:c8:9e:3d:26:68:80:0c:11:04:8a:53: 31:e2:33:76:30:e5:23:79:06:2f:47:1c:55:0d:ea: 4e:58:89:09:42:f0:62:62:b8:33:88:02:36:77:cf: fe:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:0A:FE:C9:12:20:4D:C2:26:43:2A:17:9F:85:9E:CF:33:C2:EB:0D X509v3 Authority Key Identifier: keyid:69:FE:A3:D5:23:BC:46:35:AE:38:5A:6D:91:41:28:34:15:9F:F3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:6d:69:89:fd:2c:dc:2c:47:f4:46:20:7a:62:9a:54:fa:07: 48:50:ff:48:d7:c1:f9:af:37:82:28:4c:2f:80:5b:ee:30:1d: 88:24:49:4a:1b:bd:71:c4:53:12:26:82:29:6c:62:8c:23:41: d9:42:58:c1:69:c7:0f:f2:2c:8b:7d:83:76:59:7a:6f:2e:81: 94:c1:50:e1:aa:66:14:99:08:70:5f:5c:07:f3:11:c7:f3:ce: 50:59:74:b9:6d:b5:5b:ff:11:11:f6:34:47:10:d0:90:f2:90: 81:40:2d:c7:88:25:99:77:8f:b1:c3:f3:e9:41:0c:c1:77:ab: de:7f:d1:c9:94:cc:a7:0d:fd:ab:8c:85:4c:2f:6e:e5:e3:b9: 2b:ec:f6:ac:53:83:85:08:b0:39:68:f2:be:07:54:c3:36:97: f5:92:bc:c5:a4:64:d5:d6:b2:db:10:99:b1:74:39:b7:c3:d4: 48:26:42:10:29:96:02:56:05:6a:84:20:1b:65:2f:4c:7d:e8: 21:8c:42:36:3b:89:25:94:f3:2e:2d:ce:9b:a1:90:32:d6:51: d9:c2:c4:40:38:83:08:f8:c8:96:34:8d:96:d8:b9:af:fc:57: 1b:d9:fb:1a:ed:14:91:54:d9:80:3b:d7:7e:ba:67:c5:5d:a8: 93:01:60:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcCmJlYkGrdZtV4VYBpU0gZl+TYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4MzQx NTlGRjM0QjAeFw0yNTA4MjgwMDU3MDBaFw0yNTA4MzEwNDA2MDBaMDMxMTAvBgNV BAMTKERFMEFGRUM5MTIyMDREQzIyNjQzMkExNzlGODU5RUNGMzNDMkVCMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUuh15nIhE+4KLewU0j87Ep/Jk +y1TBssynMiBmbthEUVFI0imPjNu10X5Utb6J8B7hFslg1nXOZ1kfIvLSsen4+tn 91fr1kbZvX7ftS/kUA8/B0XaAPha2j58JCP4Rs/d3TunsMFAiap5tnMNqW58mUz1 IwyEe4vZ+a4FE3GSVcDoqBIEwIe9DogM3aveOX09hjhaqZ+crxN7roVfuoB0/vYG c5DJq6ZzWmDLWhChFsJZqoNMMfSfRSCMevXzdy06vtzMTOH989sOVhke1M8tXVKc 1Z7Inj0maIAMEQSKUzHiM3Yw5SN5Bi9HHFUN6k5YiQlC8GJiuDOIAjZ3z/7tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3gr+yRIgTcImQyoXn4WezzPC6w0wHwYDVR0j BBgwFoAUaf6j1SO8RjWuOFptkUEoNBWf80swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTdkNzM4ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMC82OUZFQTNENTIz QkM0NjM1QUUzODVBNkQ5MTQxMjgzNDE1OUZGMzRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4MzQxNTlG RjM0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzAvNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4 MzQxNTlGRjM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINtaYn9LNwsR/RGIHpimlT6B0hQ/0jXwfmv N4IoTC+AW+4wHYgkSUobvXHEUxImgilsYowjQdlCWMFpxw/yLIt9g3ZZem8ugZTB UOGqZhSZCHBfXAfzEcfzzlBZdLlttVv/ERH2NEcQ0JDykIFALceIJZl3j7HD8+lB DMF3q95/0cmUzKcN/auMhUwvbuXjuSvs9qxTg4UIsDlo8r4HVMM2l/WSvMWkZNXW stsQmbF0ObfD1EgmQhAplgJWBWqEIBtlL0x96CGMQjY7iSWU8y4tzpuhkDLWUdnC xEA4gwj4yJY0jZbYua/8VxvZ+xrtFJFU2YA71366Z8VdqJMBYHE= -----END CERTIFICATE-----Generated at Fri Aug 29 20:53:39 2025 by rpki-client