$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft File: C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft (raw, json) Hash identifier: qOHAS0Ew3HOaFTx1PEiVWk+eMyMVqsS6WHR5c4mY54M= Subject key identifier: 83:D9:01:41:22:DC:29:2F:D8:06:EC:C7:89:B4:9B:80:8D:E6:A9:3B Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE Certificate issuer: /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Certificate serial: 5DCCA844000F9A131D3696A9933C9DE2A7A43C24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft Manifest number: 0429 Signing time: Wed 04 Jun 2025 19:30:57 +0000 Manifest this update: Wed 04 Jun 2025 19:25:57 +0000 Manifest next update: Sun 08 Jun 2025 01:51:57 +0000 Files and hashes: 1: 3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (hash: Es6h8MzPI3S1mFQ1J0kqGZiZfKqhvpv8wCyy8PJOM40=) 2: 3130332e34312e3230362e302f32342d3234203d3e203538333937.roa (hash: 8p0am7ehV2An1UqUgUm2Z1Br0OD2VEAPk/dVcoq3jDQ=) 3: C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl (hash: 256X9oq09LVPy1hLRwF+2krEy8xYZmGxoU9C7Pof+Ss=) 4: 3131372e35332e3134392e302f32342d3234203d3e203538333937.roa (hash: 0q8NrmjjcxoNrx7WtkZa7JKjlra7drxIR2Rkv2uH0qU=) 5: 3131372e35332e3135312e302f32342d3234203d3e203538333937.roa (hash: Si3tPvzTYMJNo6ziKI0r83ugddQoVhs+qZtKjviywZY=) 6: 3131372e35332e3135302e302f32342d3234203d3e203538333937.roa (hash: UMpjLuebG+yMQNJv43xd3u8qZ1cqsp7h54oRFs+fJIg=) 7: 3131372e35332e3134382e302f32342d3234203d3e203538333937.roa (hash: s/yj35IxEbWgMmRyngcwwQ2XYvpHuhez/PCo0jx4Hk4=) 8: 3130332e34312e3230372e302f32342d3234203d3e203538333937.roa (hash: /5ZnjDo2uinC9TTjfx0reoiz9f4sCWczTxGAg/U2xq4=) 9: 3130332e34312e3230352e302f32342d3234203d3e203538333937.roa (hash: bzqLwXgqRc5lqIH8QIxSqfc9LTb/899srIuuHKEc/bE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 01:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:cc:a8:44:00:0f:9a:13:1d:36:96:a9:93:3c:9d:e2:a7:a4:3c:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Validity Not Before: Jun 4 19:25:57 2025 GMT Not After : Jun 8 01:51:57 2025 GMT Subject: CN=83D9014122DC292FD806ECC789B49B808DE6A93B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9d:9e:b6:c6:51:c7:45:b7:06:83:12:5c:c3: 5f:7f:6d:d6:c8:05:b1:de:fa:e1:b7:e8:75:cd:95: 60:99:b4:cd:46:94:39:19:f8:d8:b1:88:93:23:19: c6:dc:3d:65:6d:27:01:8f:a3:fc:e2:64:26:b8:9d: d4:e6:2e:38:51:e4:af:87:20:22:e0:85:da:3a:e0: 25:35:97:fc:2b:37:09:83:83:3f:a3:50:71:f2:54: 67:91:74:b6:13:f8:d4:ad:a0:70:83:26:fd:28:4c: 9a:ad:44:6c:ff:61:35:4d:3b:2a:e4:35:cd:0f:6a: 1f:e8:4a:2d:92:eb:4c:27:92:c8:f4:1e:02:11:04: 53:9f:67:33:04:8c:f5:1d:61:06:06:ff:e1:7c:76: 49:76:6c:68:0b:90:36:50:9a:0c:df:5a:6d:f0:2c: e5:74:d3:2d:9e:7f:a6:02:52:da:49:57:78:bd:b4: 3f:a9:ec:4d:7f:b2:fc:a6:1c:23:fb:e7:10:8b:f8: 2a:ae:72:ee:5d:c1:cc:b3:40:6b:ac:3f:09:8a:1a: da:99:60:7a:8f:9b:f5:3a:4b:0c:ef:fc:8f:1e:b0: 73:3d:c9:ee:93:7e:93:8e:62:02:e0:8c:90:94:20: 1c:a4:91:1b:1d:8c:50:6b:b3:3a:90:65:6b:c0:02: 7a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D9:01:41:22:DC:29:2F:D8:06:EC:C7:89:B4:9B:80:8D:E6:A9:3B X509v3 Authority Key Identifier: keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:e8:2c:b9:45:86:cc:6e:a0:f3:60:d5:92:bb:67:82:4d:21: 37:09:b6:4f:4b:7c:36:84:ba:01:64:7c:d1:94:ee:81:b6:a9: 7e:d9:42:96:56:9a:ce:04:db:ab:82:4e:2d:c8:b5:85:d7:27: 1d:c4:e9:47:1b:15:6f:95:92:e4:1c:5d:bb:3e:49:c8:85:74: 8e:5a:d1:dc:a2:07:18:18:d1:31:b7:56:a6:ee:96:9b:63:83: 90:f8:80:d9:63:8c:4d:3a:eb:d7:91:f1:d8:54:23:1f:3f:10: 1b:07:1b:94:17:22:5d:c0:96:ad:e9:9a:84:03:73:2b:3e:f7: 29:76:d9:ae:0f:51:ae:83:94:34:45:d9:12:0c:cf:1f:a1:ba: f5:5f:a1:63:e8:a6:0f:c6:b5:55:05:21:6d:fc:a9:b9:6f:d0: cd:86:4f:e6:e5:64:3c:2b:b0:7d:1a:5a:40:24:ab:49:82:9b: c7:4a:fb:fe:a7:6b:06:93:21:05:5f:4c:0c:c9:2d:b7:49:63: 6e:3c:22:11:5f:08:16:70:60:24:8a:12:07:c1:2f:5c:be:3d: 53:71:cd:f2:94:71:a8:cc:20:75:bd:46:11:98:28:51:bb:84: b7:d9:4e:a1:0d:36:93:4e:da:76:c7:bc:7a:3d:34:78:2d:87: 6e:51:e6:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXcyoRAAPmhMdNpapkzyd4qekPCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1 Mzg5OThBRTAeFw0yNTA2MDQxOTI1NTdaFw0yNTA2MDgwMTUxNTdaMDMxMTAvBgNV BAMTKDgzRDkwMTQxMjJEQzI5MkZEODA2RUNDNzg5QjQ5QjgwOERFNkE5M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpnZ62xlHHRbcGgxJcw19/bdbI BbHe+uG36HXNlWCZtM1GlDkZ+NixiJMjGcbcPWVtJwGPo/ziZCa4ndTmLjhR5K+H ICLghdo64CU1l/wrNwmDgz+jUHHyVGeRdLYT+NStoHCDJv0oTJqtRGz/YTVNOyrk Nc0Pah/oSi2S60wnksj0HgIRBFOfZzMEjPUdYQYG/+F8dkl2bGgLkDZQmgzfWm3w LOV00y2ef6YCUtpJV3i9tD+p7E1/svymHCP75xCL+Cqucu5dwcyzQGusPwmKGtqZ YHqPm/U6Swzv/I8esHM9ye6TfpOOYgLgjJCUIBykkRsdjFBrszqQZWvAAnr3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg9kBQSLcKS/YBuzHibSbgI3mqTswHwYDVR0j BBgwFoAUxpAFu3ukaKEKMs5E6cTOeFOJmK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiYTQ1ZS1mNWRhLTQ1ODEtYmZlNS1jMTYxNmMzMGVmYWIvMC9DNjkwMDVCQjdC QTQ2OEExMEEzMkNFNDRFOUM0Q0U3ODUzODk5OEFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1Mzg5 OThBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4YmE0NWUtZjVkYS00NTgxLWJm ZTUtYzE2MTZjMzBlZmFiLzAvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENF Nzg1Mzg5OThBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDoLLlFhsxuoPNg1ZK7Z4JNITcJtk9LfDaE ugFkfNGU7oG2qX7ZQpZWms4E26uCTi3ItYXXJx3E6UcbFW+VkuQcXbs+SciFdI5a 0dyiBxgY0TG3Vqbulptjg5D4gNljjE0669eR8dhUIx8/EBsHG5QXIl3Alq3pmoQD cys+9yl22a4PUa6DlDRF2RIMzx+huvVfoWPopg/GtVUFIW38qblv0M2GT+blZDwr sH0aWkAkq0mCm8dK+/6nawaTIQVfTAzJLbdJY248IhFfCBZwYCSKEgfBL1y+PVNx zfKUcajMIHW9RhGYKFG7hLfZTqENNpNO2nbHvHo9NHgth25R5sY= -----END CERTIFICATE-----Generated at Thu Jun 5 18:20:18 2025 by rpki-client