$ rpki-client -vvf repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft File: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft (raw, json) Hash identifier: FoeZRuUljh2f1uwdBnLY3UNM8riKXydC88v4caOE1WU= Subject key identifier: 90:04:AE:6E:75:06:50:CB:CC:AB:0E:97:55:9A:0F:9C:29:14:B1:8B Authority key identifier: 69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 Certificate issuer: /CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Certificate serial: 560EBDF4825779A56B18E7F45A3D1A4898267652 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft Manifest number: 0208 Signing time: Fri 22 Aug 2025 05:51:17 +0000 Manifest this update: Fri 22 Aug 2025 05:46:17 +0000 Manifest next update: Mon 25 Aug 2025 09:41:17 +0000 Files and hashes: 1: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl (hash: cVjYP+bDgB2rHpkA43oyTI79eR58MZvsJHfo6NdrhKU=) 2: 3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa (hash: VeN/bGOYLWRy+rz86CsEUNPZS6zxON2N9UHaLIP5nig=) 3: 3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa (hash: mN0twBIDnpakC8HUHafkf1WXSP1Z0ySHIU0xGnkB28I=) 4: 3130332e3138392e3230362e302f32332d3233203d3e2039333431.roa (hash: VhmM6dwj6jhcWpHKGkB8nHv6O88nIuiPwR83QLa+WS8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 09:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:0e:bd:f4:82:57:79:a5:6b:18:e7:f4:5a:3d:1a:48:98:26:76:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Validity Not Before: Aug 22 05:46:17 2025 GMT Not After : Aug 25 09:41:17 2025 GMT Subject: CN=9004AE6E750650CBCCAB0E97559A0F9C2914B18B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fe:6d:07:6c:d5:30:0e:93:2b:e3:c6:2f:1c: 6c:e8:77:6f:50:a2:04:6c:3d:cc:e9:c3:ff:9c:30: c8:ff:5d:ea:9a:16:ad:0b:57:ac:25:f5:91:0d:38: c6:f3:38:0d:2e:1b:a9:3f:b8:64:1e:26:10:f6:96: 4a:b0:30:8c:73:fa:e6:36:2e:aa:12:39:30:f0:e6: b8:9f:f6:a3:28:c1:cf:08:17:c4:be:ee:07:9c:7a: b0:18:13:20:b5:99:b7:60:86:84:91:79:b6:2d:d8: b5:8b:fe:51:a5:67:b2:8d:02:c7:aa:0e:07:fd:31: a0:f5:99:56:93:e8:0c:5a:e7:bb:b4:c9:d9:40:79: c8:95:5d:29:a9:01:42:0b:5b:e2:20:f4:28:e9:ed: 07:13:56:45:3b:69:87:63:8a:23:14:ce:0d:15:36: 16:63:14:81:27:7b:bc:85:cf:8a:2c:25:66:f3:47: b1:49:fa:34:a5:e3:76:67:d9:f6:9e:90:a2:89:c5: 95:28:c1:12:42:f0:73:78:45:a3:83:1a:46:b9:99: 4b:a0:94:e1:82:9c:b3:e8:1d:e7:2c:40:80:f3:a2: ef:74:2e:fa:0f:2a:76:79:84:fa:19:d6:a5:05:24: 58:b9:61:93:f4:96:22:c0:d2:da:86:fe:6d:eb:ea: ed:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:04:AE:6E:75:06:50:CB:CC:AB:0E:97:55:9A:0F:9C:29:14:B1:8B X509v3 Authority Key Identifier: keyid:69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:7c:0f:fc:29:d7:ee:f6:3f:c8:f4:56:f8:fa:f7:45:62:7a: 11:c1:dd:2d:72:aa:1a:0f:4e:c9:9b:23:10:f2:8a:65:32:bb: 93:e9:d2:d3:1c:1f:13:c9:81:57:1b:d9:39:74:34:78:18:58: 29:99:0c:d0:d7:6e:a0:99:a5:21:a5:43:44:38:07:cf:7a:84: 2a:b6:67:75:2f:b8:7e:ec:2d:1b:57:2a:3c:ed:3c:16:83:1b: f2:4d:82:94:cd:69:38:b3:55:79:f2:cf:ef:0c:69:0c:5a:8f: 29:8f:94:c0:71:eb:11:9d:8f:29:61:ab:10:c8:d2:42:80:61: bd:ce:e1:7d:10:ad:46:02:1f:3f:37:43:65:78:9f:04:54:e3: 80:7e:74:51:ae:4e:6c:74:71:fa:1c:39:ef:42:e7:2d:59:ad: e1:53:86:07:20:d9:d9:e6:dd:ca:a3:b0:99:f4:81:e9:b4:b2: 77:f4:fe:40:6e:42:4c:0a:75:6e:e2:74:5f:d0:9b:41:c4:d3: f2:4a:c1:bb:91:64:f7:09:8d:54:85:f1:2a:96:cd:01:d9:dd: f0:07:69:f6:f0:ef:3e:ba:57:c8:4c:0e:dd:08:2e:56:d7:d9: cb:46:9c:d0:4c:25:aa:8e:0a:ab:07:1a:36:63:a0:c9:89:65: a4:1b:79:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVg699IJXeaVrGOf0Wj0aSJgmdlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1 REFFRTQyOTAeFw0yNTA4MjIwNTQ2MTdaFw0yNTA4MjUwOTQxMTdaMDMxMTAvBgNV BAMTKDkwMDRBRTZFNzUwNjUwQ0JDQ0FCMEU5NzU1OUEwRjlDMjkxNEIxOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi/m0HbNUwDpMr48YvHGzod29Q ogRsPczpw/+cMMj/XeqaFq0LV6wl9ZENOMbzOA0uG6k/uGQeJhD2lkqwMIxz+uY2 LqoSOTDw5rif9qMowc8IF8S+7gecerAYEyC1mbdghoSRebYt2LWL/lGlZ7KNAseq Dgf9MaD1mVaT6Axa57u0ydlAeciVXSmpAUILW+Ig9Cjp7QcTVkU7aYdjiiMUzg0V NhZjFIEne7yFz4osJWbzR7FJ+jSl43Zn2faekKKJxZUowRJC8HN4RaODGka5mUug lOGCnLPoHecsQIDzou90LvoPKnZ5hPoZ1qUFJFi5YZP0liLA0tqG/m3r6u3LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkASubnUGUMvMqw6XVZoPnCkUsYswHwYDVR0j BBgwFoAUaZRcOGmz5CnUsK7O35mZ6l2u5CkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODMxZWViNC1mMzU3LTQ1YTctOTI2NS00MjhiMDA3YTAyNzAvMC82OTk0NUMzODY5 QjNFNDI5RDRCMEFFQ0VERjk5OTlFQTVEQUVFNDI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1REFF RTQyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTgzMWVlYjQtZjM1Ny00NWE3LTky NjUtNDI4YjAwN2EwMjcwLzAvNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5 RUE1REFFRTQyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFp8D/wp1+72P8j0Vvj690ViehHB3S1yqhoP TsmbIxDyimUyu5Pp0tMcHxPJgVcb2Tl0NHgYWCmZDNDXbqCZpSGlQ0Q4B896hCq2 Z3UvuH7sLRtXKjztPBaDG/JNgpTNaTizVXnyz+8MaQxajymPlMBx6xGdjylhqxDI 0kKAYb3O4X0QrUYCHz83Q2V4nwRU44B+dFGuTmx0cfocOe9C5y1ZreFThgcg2dnm 3cqjsJn0gem0snf0/kBuQkwKdW7idF/Qm0HE0/JKwbuRZPcJjVSF8SqWzQHZ3fAH afbw7z66V8hMDt0ILlbX2ctGnNBMJaqOCqsHGjZjoMmJZaQbee0= -----END CERTIFICATE-----Generated at Sat Aug 23 13:42:08 2025 by rpki-client