$ rpki-client -vvf repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft File: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft (raw, json) Hash identifier: pQsT179NHaExFU5nGafYbNDhPqPLXbcrxrdvp4O8QIo= Subject key identifier: 71:B4:79:30:F6:E6:C2:14:AD:13:79:B8:DF:14:48:8D:61:3F:CF:23 Authority key identifier: 69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 Certificate issuer: /CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Certificate serial: 13FB4437AD4F44FA5AAD72D5AE1662738AABD33D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft Manifest number: 01D9 Signing time: Wed 07 May 2025 16:41:16 +0000 Manifest this update: Wed 07 May 2025 16:36:16 +0000 Manifest next update: Sun 11 May 2025 03:49:16 +0000 Files and hashes: 1: 3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa (hash: VeN/bGOYLWRy+rz86CsEUNPZS6zxON2N9UHaLIP5nig=) 2: 3130332e3138392e3230362e302f32332d3233203d3e2039333431.roa (hash: VhmM6dwj6jhcWpHKGkB8nHv6O88nIuiPwR83QLa+WS8=) 3: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl (hash: Zc9TA33oliNoIutC54LOBVZKAwZbui1Frf+m4OASrHI=) 4: 3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa (hash: mN0twBIDnpakC8HUHafkf1WXSP1Z0ySHIU0xGnkB28I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 03:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:fb:44:37:ad:4f:44:fa:5a:ad:72:d5:ae:16:62:73:8a:ab:d3:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Validity Not Before: May 7 16:36:16 2025 GMT Not After : May 11 03:49:16 2025 GMT Subject: CN=71B47930F6E6C214AD1379B8DF14488D613FCF23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7b:26:5f:e5:20:85:3c:41:9f:41:a5:7f:ed: 3c:88:6c:96:4b:1f:c3:32:3b:a9:25:b2:b1:29:85: 8a:e6:e5:a6:d2:15:37:26:21:04:33:ec:34:7c:89: a8:3c:4c:a7:50:df:a9:da:ce:d3:ec:7e:17:a4:e1: ab:58:96:a0:eb:e2:bd:3f:b9:a6:3b:56:7a:1c:23: 1f:56:4d:28:41:55:5f:6b:58:08:9d:86:81:da:b3: e4:3e:d6:f7:8b:67:61:e0:cc:cf:ec:0b:a2:58:f2: 4d:7e:4a:e0:26:7f:8f:1c:72:c8:2f:6a:04:ea:2c: fb:c7:96:96:8a:2a:ec:e1:a3:7c:3c:03:2a:c4:c0: 14:0e:4a:84:61:15:d2:65:b4:15:46:19:26:92:ec: bd:4e:28:22:15:c9:24:83:f8:da:00:c5:60:63:05: 07:50:c1:02:3b:0d:a9:b5:d7:2c:e8:52:2b:f9:e6: e0:1b:fb:a6:4c:03:3c:40:68:4a:1a:2d:bd:c3:b4: 99:72:cd:a4:5e:6d:a8:b1:de:69:58:06:12:84:f6: 2d:e7:af:da:61:f6:79:b6:d5:23:08:e0:0b:02:22: 3f:2e:7c:be:01:de:61:8f:d4:4b:ee:de:77:ff:97: b2:31:ac:92:47:d8:54:bc:4b:4c:e5:f0:f4:03:43: d0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B4:79:30:F6:E6:C2:14:AD:13:79:B8:DF:14:48:8D:61:3F:CF:23 X509v3 Authority Key Identifier: keyid:69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:d9:86:36:a3:64:c4:42:ac:67:f1:6f:e2:57:7d:77:b1:21: e9:d4:27:21:60:3a:e7:50:d5:6b:3b:4a:02:8c:88:dc:a1:47: 1d:3b:e2:ff:0b:d6:cc:26:58:d4:66:48:ab:bb:9c:c1:40:b2: 50:a4:e5:fa:04:4e:62:15:0f:a7:db:4c:62:17:65:44:96:6e: c9:c1:e1:42:09:ed:47:60:35:9c:98:d2:a9:bc:a8:78:07:de: 49:95:59:4c:9f:5b:69:37:28:56:11:7d:b0:85:1c:7e:48:11: 1a:06:85:ee:20:22:fb:5c:7a:45:9f:e5:a4:b3:d1:2a:61:10: b5:a3:03:9c:22:2b:b1:56:61:5f:8b:08:61:7f:94:b6:75:7e: 15:cc:97:9d:85:f9:58:bc:5f:54:14:6c:ac:84:eb:0d:a1:3e: a1:90:1a:dd:1d:5f:25:c8:97:a0:1f:44:18:fa:e3:62:fd:58: 74:5a:07:47:08:eb:fb:be:ef:5d:44:89:e2:b6:2c:e8:72:a1: d4:5b:ca:5c:aa:f9:a0:2b:0a:83:bc:e0:c6:fa:e8:5d:cd:bd: 15:63:1f:07:81:63:88:11:a1:7e:f9:fc:c5:af:27:76:88:0e: 91:e1:2f:e6:90:dc:d7:91:a4:6b:f3:49:46:0d:e7:9b:d9:ad: 58:da:db:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE/tEN61PRPparXLVrhZic4qr0z0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1 REFFRTQyOTAeFw0yNTA1MDcxNjM2MTZaFw0yNTA1MTEwMzQ5MTZaMDMxMTAvBgNV BAMTKDcxQjQ3OTMwRjZFNkMyMTRBRDEzNzlCOERGMTQ0ODhENjEzRkNGMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjeyZf5SCFPEGfQaV/7TyIbJZL H8MyO6klsrEphYrm5abSFTcmIQQz7DR8iag8TKdQ36naztPsfhek4atYlqDr4r0/ uaY7VnocIx9WTShBVV9rWAidhoHas+Q+1veLZ2HgzM/sC6JY8k1+SuAmf48ccsgv agTqLPvHlpaKKuzho3w8AyrEwBQOSoRhFdJltBVGGSaS7L1OKCIVySSD+NoAxWBj BQdQwQI7Dam11yzoUiv55uAb+6ZMAzxAaEoaLb3DtJlyzaRebaix3mlYBhKE9i3n r9ph9nm21SMI4AsCIj8ufL4B3mGP1Evu3nf/l7IxrJJH2FS8S0zl8PQDQ9C/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcbR5MPbmwhStE3m43xRIjWE/zyMwHwYDVR0j BBgwFoAUaZRcOGmz5CnUsK7O35mZ6l2u5CkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODMxZWViNC1mMzU3LTQ1YTctOTI2NS00MjhiMDA3YTAyNzAvMC82OTk0NUMzODY5 QjNFNDI5RDRCMEFFQ0VERjk5OTlFQTVEQUVFNDI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1REFF RTQyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTgzMWVlYjQtZjM1Ny00NWE3LTky NjUtNDI4YjAwN2EwMjcwLzAvNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5 RUE1REFFRTQyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALnZhjajZMRCrGfxb+JXfXexIenUJyFgOudQ 1Ws7SgKMiNyhRx074v8L1swmWNRmSKu7nMFAslCk5foETmIVD6fbTGIXZUSWbsnB 4UIJ7UdgNZyY0qm8qHgH3kmVWUyfW2k3KFYRfbCFHH5IERoGhe4gIvtcekWf5aSz 0SphELWjA5wiK7FWYV+LCGF/lLZ1fhXMl52F+Vi8X1QUbKyE6w2hPqGQGt0dXyXI l6AfRBj642L9WHRaB0cI6/u+711EieK2LOhyodRbylyq+aArCoO84Mb66F3NvRVj HweBY4gRoX75/MWvJ3aIDpHhL+aQ3NeRpGvzSUYN55vZrVja22Y= -----END CERTIFICATE-----Generated at Sat May 10 04:07:56 2025 by rpki-client