$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft File: 969449FF3E24842B0CECC61AB398E88F83709FC1.mft (raw, json) Hash identifier: ic7QTPvo+E9f+R+knDBuqhB2WZunl+CYSBzMzRiKHew= Subject key identifier: 4A:CF:41:98:14:46:AB:A2:0A:72:73:C8:9F:BF:71:44:E8:9F:BB:CF Authority key identifier: 96:94:49:FF:3E:24:84:2B:0C:EC:C6:1A:B3:98:E8:8F:83:70:9F:C1 Certificate issuer: /CN=969449FF3E24842B0CECC61AB398E88F83709FC1 Certificate serial: 5F27AA7A7F2A508CD05DD6D2C2DE042DC78FD174 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft Manifest number: C3 Signing time: Wed 04 Jun 2025 14:01:50 +0000 Manifest this update: Wed 04 Jun 2025 13:56:50 +0000 Manifest next update: Sun 08 Jun 2025 00:26:50 +0000 Files and hashes: 1: 969449FF3E24842B0CECC61AB398E88F83709FC1.crl (hash: OUTNfTKTPM0kwVMwE4DL+7UiamufO24REz/56hWWJnM=) 2: 3135372e32302e3134352e302f32342d3234203d3e20313532343231.roa (hash: WH9oEmWb7QCWvMI7938Ik3XMbgOCFpaDBMXkH3Xj3ws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.crl rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 00:26:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:27:aa:7a:7f:2a:50:8c:d0:5d:d6:d2:c2:de:04:2d:c7:8f:d1:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969449FF3E24842B0CECC61AB398E88F83709FC1 Validity Not Before: Jun 4 13:56:50 2025 GMT Not After : Jun 8 00:26:50 2025 GMT Subject: CN=4ACF41981446ABA20A7273C89FBF7144E89FBBCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:80:0c:67:16:ba:eb:99:de:bf:de:70:a1:76: 02:14:29:7a:48:a4:c9:86:0f:5c:44:09:7c:20:f1: 60:6b:d4:5f:7c:2d:a1:b7:f2:f7:2d:dc:47:e6:81: ab:3d:00:42:f5:1a:8e:a9:bd:a7:b1:91:54:af:45: 38:8d:54:75:e6:ac:ad:94:2b:1b:b9:d2:56:bf:30: 6b:e8:4e:47:69:2a:46:ce:43:11:2b:21:3f:79:7c: 98:3c:1a:08:50:3f:fb:b8:99:c1:69:72:c1:11:4d: 16:31:c4:96:15:f3:61:95:5f:7f:cf:ae:94:68:a3: bc:ad:8a:41:28:20:fe:08:cb:1d:d5:f4:49:4c:0f: b6:c4:dc:bd:8c:79:e2:dc:62:cd:bb:b1:0c:47:12: 2c:53:3e:07:95:d4:4e:29:30:aa:aa:c5:2a:7c:62: 35:9f:1d:2f:ed:f5:06:61:96:ed:96:b7:7f:90:5b: 4c:4a:2e:5f:1e:12:ba:0f:72:fe:65:7e:4b:50:af: da:1c:c4:63:61:c1:98:f3:8e:5d:c6:cc:83:6d:27: 31:18:23:16:48:b3:36:af:67:30:7c:f3:85:fc:ce: 9c:2c:4f:5c:70:55:2b:38:34:c0:df:fa:f9:95:58: 82:e3:ee:14:d9:f3:97:06:c9:0e:62:1a:fb:a1:66: d3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CF:41:98:14:46:AB:A2:0A:72:73:C8:9F:BF:71:44:E8:9F:BB:CF X509v3 Authority Key Identifier: keyid:96:94:49:FF:3E:24:84:2B:0C:EC:C6:1A:B3:98:E8:8F:83:70:9F:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:67:47:c0:7d:ef:fc:64:e2:53:d8:ee:d5:17:8c:55:e3:57: b7:fe:16:cc:2b:6f:4b:6e:eb:a0:51:e4:e3:f9:80:8a:08:82: 4f:7e:b4:9b:ab:25:6a:11:2f:d6:4e:5f:a4:c2:16:95:52:ee: b4:f2:a2:60:ab:0b:c7:81:73:69:4c:e5:be:d9:7f:a6:1a:5b: 8f:22:d5:06:53:0c:40:6a:c0:a1:03:3d:99:7b:1a:4d:e3:d1: d4:6c:00:e9:8f:fa:e7:b3:15:eb:32:d4:78:7b:a1:62:7c:64: 71:e7:74:19:e1:05:34:7e:aa:c9:d9:d0:5b:57:ed:2f:2e:62: 35:eb:29:ee:0f:da:d2:40:fa:a5:35:24:7e:97:ea:da:01:02: fd:1e:d5:de:ed:36:2e:78:5f:72:86:b2:03:d4:76:4e:dd:9f: 6b:95:b8:de:f0:4e:4d:f2:78:b6:bb:06:b3:ca:f2:2c:c3:d5: d4:f1:5c:2d:f9:c5:72:13:54:e8:b5:c5:db:60:a0:9f:e7:87: a8:f4:66:19:22:55:47:61:72:cb:bd:25:69:b5:d4:e7:8c:a1: 56:93:9d:ab:4d:47:f8:a9:82:63:77:95:a7:66:07:85:20:11: 0e:34:53:36:18:ef:95:e9:e4:24:10:d4:fa:f0:2f:33:ab:21: 2a:43:11:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXyeqen8qUIzQXdbSwt4ELceP0XQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4OEY4 MzcwOUZDMTAeFw0yNTA2MDQxMzU2NTBaFw0yNTA2MDgwMDI2NTBaMDMxMTAvBgNV BAMTKDRBQ0Y0MTk4MTQ0NkFCQTIwQTcyNzNDODlGQkY3MTQ0RTg5RkJCQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrgAxnFrrrmd6/3nChdgIUKXpI pMmGD1xECXwg8WBr1F98LaG38vct3Efmgas9AEL1Go6pvaexkVSvRTiNVHXmrK2U Kxu50la/MGvoTkdpKkbOQxErIT95fJg8GghQP/u4mcFpcsERTRYxxJYV82GVX3/P rpRoo7ytikEoIP4Iyx3V9ElMD7bE3L2MeeLcYs27sQxHEixTPgeV1E4pMKqqxSp8 YjWfHS/t9QZhlu2Wt3+QW0xKLl8eEroPcv5lfktQr9ocxGNhwZjzjl3GzINtJzEY IxZIszavZzB884X8zpwsT1xwVSs4NMDf+vmVWILj7hTZ85cGyQ5iGvuhZtMPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSs9BmBRGq6IKcnPIn79xROifu88wHwYDVR0j BBgwFoAUlpRJ/z4khCsM7MYas5joj4Nwn8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTRmNzkzNC1jZGM3LTQwODItODNmYi1kZjdkNGY4MjE5YWYvMC85Njk0NDlGRjNF MjQ4NDJCMENFQ0M2MUFCMzk4RTg4RjgzNzA5RkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4OEY4Mzcw OUZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzAvOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4 OEY4MzcwOUZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxnR8B97/xk4lPY7tUXjFXjV7f+Fswrb0tu 66BR5OP5gIoIgk9+tJurJWoRL9ZOX6TCFpVS7rTyomCrC8eBc2lM5b7Zf6YaW48i 1QZTDEBqwKEDPZl7Gk3j0dRsAOmP+uezFesy1Hh7oWJ8ZHHndBnhBTR+qsnZ0FtX 7S8uYjXrKe4P2tJA+qU1JH6X6toBAv0e1d7tNi54X3KGsgPUdk7dn2uVuN7wTk3y eLa7BrPK8izD1dTxXC35xXITVOi1xdtgoJ/nh6j0ZhkiVUdhcsu9JWm11OeMoVaT natNR/ipgmN3ladmB4UgEQ40UzYY75Xp5CQQ1PrwLzOrISpDEQ0= -----END CERTIFICATE-----Generated at Fri Jun 6 04:56:08 2025 by rpki-client