$ rpki-client -vvf repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.mft File: 569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.mft (raw, json) Hash identifier: CRVd2f8qgeGocAAnDfdn5rbJ+tsIIqnzzYkBEWRIxFU= Subject key identifier: 7B:50:33:E0:C8:85:57:88:16:2B:51:58:F7:A9:1E:45:06:DC:EE:BF Authority key identifier: 56:9E:00:BE:70:FA:71:DE:55:10:B7:D8:17:00:C2:EB:98:DA:D8:C6 Certificate issuer: /CN=569E00BE70FA71DE5510B7D81700C2EB98DAD8C6 Certificate serial: 2AC7FA4B9E17C723127BC9A237329AE88EF0B7B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.mft Manifest number: 0248 Signing time: Sat 06 Sep 2025 06:02:20 +0000 Manifest this update: Sat 06 Sep 2025 05:57:20 +0000 Manifest next update: Tue 09 Sep 2025 11:12:20 +0000 Files and hashes: 1: 3130332e3138302e3132362e302f32342d3234203d3e20313439333734.roa (hash: wrzqaNynx40P6I+2V5LgTBezdoEL6ZnvzSzRxIRtLZk=) 2: 3130332e3138302e3132372e302f32342d3234203d3e20313439333734.roa (hash: /1qlOOJUeIQJuNJP2rwLlmsOg5XjE3wMrr8H+gToMuU=) 3: 569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.crl (hash: ZubFAyoVoUYfFHoERMWfsmUd9+bNbTD4/jGaoKfRU00=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.crl rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 11:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:c7:fa:4b:9e:17:c7:23:12:7b:c9:a2:37:32:9a:e8:8e:f0:b7:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=569E00BE70FA71DE5510B7D81700C2EB98DAD8C6 Validity Not Before: Sep 6 05:57:20 2025 GMT Not After : Sep 9 11:12:20 2025 GMT Subject: CN=7B5033E0C8855788162B5158F7A91E4506DCEEBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:33:eb:4d:d0:bb:f9:39:25:32:f5:a8:8f:b9: 37:a2:f2:d7:31:5f:92:55:39:a1:da:63:9a:56:45: 86:b4:ae:4f:11:0b:7b:27:2f:97:6e:07:9b:fb:34: f4:19:10:04:50:74:77:ed:06:13:59:46:17:69:03: 4b:f2:14:15:52:18:af:e4:88:b5:04:9b:d6:5c:b0: 2a:fb:1c:7a:32:88:f8:39:77:b5:bc:87:b5:b4:ba: 9c:25:92:24:a8:1f:8e:4f:5a:59:cd:32:29:1e:1a: 2c:7f:a1:8f:da:42:59:b5:c1:15:55:30:13:c0:ec: f3:1a:a0:ed:54:38:25:ef:a6:33:d7:57:b0:41:00: 79:cc:c6:d8:68:4c:9f:ef:f3:be:b5:47:39:30:bc: db:da:ca:fb:91:83:35:af:e2:8e:1e:33:5c:e3:fd: 79:6d:0b:9c:02:d9:f8:64:36:8a:1b:93:c4:a2:d6: 4e:3f:3d:02:4d:1b:7e:53:65:66:14:d4:99:2e:f7: f1:f4:9e:b9:38:45:03:cc:5f:e1:d6:ab:7e:f4:d5: d8:40:6d:f1:8a:f8:ab:19:91:ee:29:1b:2e:85:bc: 5b:b0:0f:d9:0a:89:a8:38:35:0e:af:72:9d:ba:c7: 79:f7:c3:c8:60:dc:42:01:08:9d:09:40:cb:01:3e: c6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:50:33:E0:C8:85:57:88:16:2B:51:58:F7:A9:1E:45:06:DC:EE:BF X509v3 Authority Key Identifier: keyid:56:9E:00:BE:70:FA:71:DE:55:10:B7:D8:17:00:C2:EB:98:DA:D8:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:af:8e:04:d6:2e:ba:f8:b9:3f:b9:f6:54:61:77:bc:f3:78: 25:ec:18:16:6d:02:3b:a6:4e:9d:19:08:8b:5c:22:28:34:9c: f5:bc:5e:41:51:29:62:97:8f:da:b9:be:32:18:c9:a2:73:cc: af:68:4e:40:3f:4c:5e:a4:b5:da:ef:2d:6e:f2:0e:d4:49:62: 3b:23:8a:ce:c8:2e:47:4d:f8:f0:bf:5b:9d:89:c2:82:91:4e: 86:b4:cf:8b:99:82:29:89:dc:fb:85:b4:cf:eb:03:df:a7:05: 7f:2c:ad:c3:0f:b0:d4:f5:3f:c6:df:22:85:2d:fc:40:4a:87: 55:c7:72:3e:f1:3d:69:03:c1:9d:18:cb:92:43:b6:a2:37:62: 61:55:2b:e7:2e:2e:a1:52:07:a6:e2:07:da:5a:7d:26:e2:66: 8d:ec:3f:3e:56:47:86:83:f3:81:8f:aa:53:d7:d8:2e:c9:57: b0:e0:3e:ce:e1:27:81:96:a6:5a:c0:20:f1:61:aa:8c:27:41: 47:28:2a:be:37:0d:36:57:5e:50:36:bf:29:6f:e1:bf:be:61: 0a:a5:12:31:a4:a8:17:f4:31:32:38:af:80:c6:9b:3a:9d:06: 84:db:f0:10:58:23:eb:69:5b:f1:55:fb:c2:b1:3b:bd:10:e4: cd:96:da:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKsf6S54XxyMSe8miNzKa6I7wt7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY5RTAwQkU3MEZBNzFERTU1MTBCN0Q4MTcwMEMyRUI5 OERBRDhDNjAeFw0yNTA5MDYwNTU3MjBaFw0yNTA5MDkxMTEyMjBaMDMxMTAvBgNV BAMTKDdCNTAzM0UwQzg4NTU3ODgxNjJCNTE1OEY3QTkxRTQ1MDZEQ0VFQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEM+tN0Lv5OSUy9aiPuTei8tcx X5JVOaHaY5pWRYa0rk8RC3snL5duB5v7NPQZEARQdHftBhNZRhdpA0vyFBVSGK/k iLUEm9ZcsCr7HHoyiPg5d7W8h7W0upwlkiSoH45PWlnNMikeGix/oY/aQlm1wRVV MBPA7PMaoO1UOCXvpjPXV7BBAHnMxthoTJ/v8761RzkwvNvayvuRgzWv4o4eM1zj /XltC5wC2fhkNoobk8Si1k4/PQJNG35TZWYU1Jku9/H0nrk4RQPMX+HWq3701dhA bfGK+KsZke4pGy6FvFuwD9kKiag4NQ6vcp26x3n3w8hg3EIBCJ0JQMsBPsZ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe1Az4MiFV4gWK1FY96keRQbc7r8wHwYDVR0j BBgwFoAUVp4AvnD6cd5VELfYFwDC65ja2MYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmJjYmZkOS01N2RmLTQ5MGMtODhmYy0wMGQzNjAwNzA2NTEvMC81NjlFMDBCRTcw RkE3MURFNTUxMEI3RDgxNzAwQzJFQjk4REFEOEM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTY5RTAwQkU3MEZBNzFERTU1MTBCN0Q4MTcwMEMyRUI5OERB RDhDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJiY2JmZDktNTdkZi00OTBjLTg4 ZmMtMDBkMzYwMDcwNjUxLzAvNTY5RTAwQkU3MEZBNzFERTU1MTBCN0Q4MTcwMEMy RUI5OERBRDhDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyvjgTWLrr4uT+59lRhd7zzeCXsGBZtAjum Tp0ZCItcIig0nPW8XkFRKWKXj9q5vjIYyaJzzK9oTkA/TF6ktdrvLW7yDtRJYjsj is7ILkdN+PC/W52JwoKRToa0z4uZgimJ3PuFtM/rA9+nBX8srcMPsNT1P8bfIoUt /EBKh1XHcj7xPWkDwZ0Yy5JDtqI3YmFVK+cuLqFSB6biB9pafSbiZo3sPz5WR4aD 84GPqlPX2C7JV7DgPs7hJ4GWplrAIPFhqownQUcoKr43DTZXXlA2vylv4b++YQql EjGkqBf0MTI4r4DGmzqdBoTb8BBYI+tpW/FV+8KxO70Q5M2W2kU= -----END CERTIFICATE-----Generated at Sun Sep 7 13:56:41 2025 by rpki-client