$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft File: C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft (raw, json) Hash identifier: 9n8fBtHlwXfrWT6q/ujqR+yWEVrtiA0PaMW2Cl1KH6g= Subject key identifier: 54:F5:84:5E:18:57:D4:38:66:82:6D:7F:FD:F2:B9:21:4F:0A:5F:99 Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE Certificate issuer: /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Certificate serial: 7DA73B6399D18EB7B5EFBA6005732771FC98D61E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft Manifest number: 0452 Signing time: Fri 05 Sep 2025 20:10:51 +0000 Manifest this update: Fri 05 Sep 2025 20:05:51 +0000 Manifest next update: Tue 09 Sep 2025 02:20:51 +0000 Files and hashes: 1: C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl (hash: DMJVzKaXcSyUloOQMa9bfIUuJhBYZhWg5XMocelARn8=) 2: 3130332e34312e3230352e302f32342d3234203d3e203538333937.roa (hash: bzqLwXgqRc5lqIH8QIxSqfc9LTb/899srIuuHKEc/bE=) 3: 3131372e35332e3134392e302f32342d3234203d3e203538333937.roa (hash: 0q8NrmjjcxoNrx7WtkZa7JKjlra7drxIR2Rkv2uH0qU=) 4: 3130332e34312e3230372e302f32342d3234203d3e203538333937.roa (hash: /5ZnjDo2uinC9TTjfx0reoiz9f4sCWczTxGAg/U2xq4=) 5: 3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (hash: Es6h8MzPI3S1mFQ1J0kqGZiZfKqhvpv8wCyy8PJOM40=) 6: 3130332e34312e3230362e302f32342d3234203d3e203538333937.roa (hash: 8p0am7ehV2An1UqUgUm2Z1Br0OD2VEAPk/dVcoq3jDQ=) 7: 3131372e35332e3135302e302f32342d3234203d3e203538333937.roa (hash: UMpjLuebG+yMQNJv43xd3u8qZ1cqsp7h54oRFs+fJIg=) 8: 3131372e35332e3135312e302f32342d3234203d3e203538333937.roa (hash: Si3tPvzTYMJNo6ziKI0r83ugddQoVhs+qZtKjviywZY=) 9: 3131372e35332e3134382e302f32342d3234203d3e203538333937.roa (hash: s/yj35IxEbWgMmRyngcwwQ2XYvpHuhez/PCo0jx4Hk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 02:20:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:a7:3b:63:99:d1:8e:b7:b5:ef:ba:60:05:73:27:71:fc:98:d6:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Validity Not Before: Sep 5 20:05:51 2025 GMT Not After : Sep 9 02:20:51 2025 GMT Subject: CN=54F5845E1857D43866826D7FFDF2B9214F0A5F99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d2:60:90:64:ab:23:f3:16:2b:d7:99:30:54: 24:5b:6e:9a:99:17:e1:29:a6:97:c6:4c:8f:ba:19: c9:46:e6:20:14:05:2f:62:d4:ef:a3:ce:b3:40:25: 26:2f:b9:93:03:61:60:79:32:5f:64:fb:f9:ef:8e: 87:cc:6e:10:9c:1f:b8:52:8b:e4:af:5b:56:8c:23: 3d:85:45:7d:30:3f:65:89:9a:bb:4b:ef:00:72:87: 1d:86:53:ba:87:e7:6e:2f:c8:fd:1c:4c:fc:de:d0: 9b:27:2c:ec:93:69:d9:cb:7a:2a:d8:c3:0b:4d:14: 0c:df:c7:08:6f:cd:d6:f3:15:1e:33:8d:71:57:81: cc:8c:92:e9:5e:85:ed:71:f0:e6:f2:09:2c:c5:03: d5:3b:9e:56:a2:28:e2:7b:3d:ea:22:e2:99:0b:1e: 99:9a:c9:28:93:13:ab:fc:56:ae:a3:91:d3:a2:a8: 13:86:33:64:ce:51:04:ff:26:1a:6f:63:3d:cd:66: 21:df:2f:8c:cc:5a:4b:07:1c:28:e4:9e:2e:d3:db: 2d:d0:d8:2f:81:38:34:8b:d0:e4:7b:dc:a6:d8:e1: 32:22:5a:0d:79:d9:ea:6d:98:9d:88:6e:c2:59:15: b6:e3:ec:ad:b4:2c:dd:e7:98:6c:14:63:43:5a:31: 8c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F5:84:5E:18:57:D4:38:66:82:6D:7F:FD:F2:B9:21:4F:0A:5F:99 X509v3 Authority Key Identifier: keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:33:14:06:d6:df:e6:95:1b:f8:20:14:16:18:14:57:60:42: 64:73:e4:90:21:a1:36:cb:37:1e:e5:05:b1:a3:9d:d5:30:59: 91:32:6d:a0:3b:8d:ad:39:1e:e6:a1:5f:a0:6e:8b:3a:f6:9a: 25:9c:1e:9a:85:23:d5:d6:f8:7e:03:40:4e:75:79:6e:e5:4e: 15:9e:04:69:da:61:4f:6c:26:34:6f:47:8a:e3:b9:58:87:e3: 95:10:3f:74:ae:68:d1:a0:0d:54:e1:28:ee:1e:bb:c2:36:e9: 9b:d1:03:38:f9:68:e2:b2:c3:f7:88:f2:ed:21:39:1c:30:80: 12:8c:55:f3:32:c8:1f:52:c8:e9:80:07:85:cd:15:73:12:a8: dc:d7:2c:fa:09:22:82:0b:aa:e8:8b:e9:89:93:ab:aa:77:4d: 0a:a8:c6:45:3e:c1:ef:92:72:db:2a:e8:29:1f:56:ed:65:e4: 7e:ca:d8:f7:4b:7d:1c:5b:d9:06:59:9e:f7:7f:22:39:16:c3: 68:9d:3c:e2:82:bb:40:1d:3c:8e:81:38:cd:4c:7a:a8:ce:6d: 06:51:9f:17:39:21:5e:c0:2c:b0:34:1c:bc:83:33:f8:c0:54: da:6f:1b:39:1c:a4:17:3c:23:7f:88:3b:e5:37:40:25:84:4e: c5:5d:27:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfac7Y5nRjre177pgBXMncfyY1h4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1 Mzg5OThBRTAeFw0yNTA5MDUyMDA1NTFaFw0yNTA5MDkwMjIwNTFaMDMxMTAvBgNV BAMTKDU0RjU4NDVFMTg1N0Q0Mzg2NjgyNkQ3RkZERjJCOTIxNEYwQTVGOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ0mCQZKsj8xYr15kwVCRbbpqZ F+EpppfGTI+6GclG5iAUBS9i1O+jzrNAJSYvuZMDYWB5Ml9k+/nvjofMbhCcH7hS i+SvW1aMIz2FRX0wP2WJmrtL7wByhx2GU7qH524vyP0cTPze0JsnLOyTadnLeirY wwtNFAzfxwhvzdbzFR4zjXFXgcyMkulehe1x8ObyCSzFA9U7nlaiKOJ7Peoi4pkL HpmaySiTE6v8Vq6jkdOiqBOGM2TOUQT/JhpvYz3NZiHfL4zMWksHHCjkni7T2y3Q 2C+BODSL0OR73KbY4TIiWg152eptmJ2IbsJZFbbj7K20LN3nmGwUY0NaMYyzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVPWEXhhX1Dhmgm1//fK5IU8KX5kwHwYDVR0j BBgwFoAUxpAFu3ukaKEKMs5E6cTOeFOJmK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiYTQ1ZS1mNWRhLTQ1ODEtYmZlNS1jMTYxNmMzMGVmYWIvMC9DNjkwMDVCQjdC QTQ2OEExMEEzMkNFNDRFOUM0Q0U3ODUzODk5OEFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1Mzg5 OThBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4YmE0NWUtZjVkYS00NTgxLWJm ZTUtYzE2MTZjMzBlZmFiLzAvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENF Nzg1Mzg5OThBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkzFAbW3+aVG/ggFBYYFFdgQmRz5JAhoTbL Nx7lBbGjndUwWZEybaA7ja05HuahX6Buizr2miWcHpqFI9XW+H4DQE51eW7lThWe BGnaYU9sJjRvR4rjuViH45UQP3SuaNGgDVThKO4eu8I26ZvRAzj5aOKyw/eI8u0h ORwwgBKMVfMyyB9SyOmAB4XNFXMSqNzXLPoJIoILquiL6YmTq6p3TQqoxkU+we+S ctsq6CkfVu1l5H7K2PdLfRxb2QZZnvd/IjkWw2idPOKCu0AdPI6BOM1MeqjObQZR nxc5IV7ALLA0HLyDM/jAVNpvGzkcpBc8I3+IO+U3QCWETsVdJyI= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:46 2025 by rpki-client