$ rpki-client -vvf repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft File: 69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft (raw, json) Hash identifier: lVO+onu5/NckhL4bcYf8UNc2dRRZwqLTWsyrAX+GhgI= Subject key identifier: 72:11:7E:49:73:2F:A8:06:77:23:1E:D2:DC:FD:11:10:22:FD:50:33 Authority key identifier: 69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7 Certificate issuer: /CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7 Certificate serial: 43E61F20A23B873FA34B323AC0EA0353BD4C2B83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft Manifest number: 01E6 Signing time: Fri 22 Aug 2025 21:41:46 +0000 Manifest this update: Fri 22 Aug 2025 21:36:46 +0000 Manifest next update: Tue 26 Aug 2025 05:27:46 +0000 Files and hashes: 1: 69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl (hash: dC4DAj95dZdiVkJuMe3K4IZWbO9IYj7zqtcgm5OdG4M=) 2: 3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa (hash: ZuytWq4PWrbArnGlNtL3kdcVQRo24jWxli7Scbb4h7Y=) 3: 3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa (hash: k338Lmr2nBFKtOYrTW3s+aTUS4KKRTx1cKwMsZkav7w=) 4: 3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa (hash: heu4e8sIQY0GrzrCMXaxDxeM2U05OsH3YIXr+Hp2kfg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:e6:1f:20:a2:3b:87:3f:a3:4b:32:3a:c0:ea:03:53:bd:4c:2b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7 Validity Not Before: Aug 22 21:36:46 2025 GMT Not After : Aug 26 05:27:46 2025 GMT Subject: CN=72117E49732FA80677231ED2DCFD111022FD5033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8a:5b:4c:fb:51:32:1d:71:80:e5:45:75:55: 66:55:f4:fb:3d:50:8a:0b:2c:43:e6:47:c2:43:e8: d1:5f:b9:21:70:34:c8:ef:06:18:3f:e2:88:59:40: b2:dc:6d:70:36:41:fd:01:73:b2:77:05:4f:96:67: a9:ee:b2:c9:74:7d:a3:e3:01:55:07:c2:50:76:5b: 5e:18:26:4c:25:47:12:c8:84:a8:41:f5:e1:8e:21: 59:8f:c3:50:95:66:50:13:ae:35:f0:02:c0:41:3a: 52:8b:fd:e6:01:af:a1:35:cd:fc:d1:6a:ce:aa:13: 1b:9a:89:7c:27:d2:5d:b2:84:06:3f:7e:4c:fd:74: bc:1a:e4:1c:43:41:6d:80:0e:4f:ee:6f:28:da:2a: c4:19:88:5d:21:21:cf:63:82:c4:e1:96:1c:6e:bb: ca:db:d9:e6:f2:37:3f:fe:fd:89:1e:63:dc:52:d8: d3:3a:70:d1:d3:7d:f4:ae:bb:3d:b8:34:69:5e:d9: db:2d:99:b7:ad:9f:10:d2:23:97:b9:9c:34:f8:c1: 1c:e5:ef:b8:bb:1a:b1:21:54:be:ad:04:9b:e4:e4: 16:b1:18:56:ed:33:86:ec:af:80:a1:aa:d7:58:ff: 5f:87:64:9f:13:6c:df:f0:ec:cf:08:15:bd:8c:bb: 21:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:11:7E:49:73:2F:A8:06:77:23:1E:D2:DC:FD:11:10:22:FD:50:33 X509v3 Authority Key Identifier: keyid:69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:9d:39:3b:55:7d:c4:78:95:fb:5e:95:0c:a3:18:95:04:cb: 78:bf:41:93:eb:7f:96:ad:4a:0a:4c:4e:a7:b2:25:08:3c:c5: 97:f7:fd:9e:f0:78:d8:ba:d2:a7:f1:19:82:64:04:03:c7:f7: a4:2b:7a:fa:98:b5:8f:7b:64:ae:c1:97:a2:ee:2d:f4:86:84: d8:2b:82:f6:77:96:44:c5:41:9a:0f:87:01:56:12:9e:e7:3b: d4:99:ef:0c:eb:5b:f7:7a:d6:7f:70:88:e2:41:d2:d5:94:a9: 9e:4b:87:aa:3c:bd:40:f4:4b:45:c1:20:8b:da:76:f1:9a:c8: ca:9e:b0:4e:22:eb:d3:89:93:64:8e:fe:17:78:c2:31:95:e2: 4a:44:f2:93:c8:52:cf:76:60:5a:1f:fb:25:c8:d9:40:3e:35: d9:92:99:c7:4c:9e:aa:09:ad:fb:70:6a:d6:f4:08:a5:75:31: b9:9d:36:0a:ad:66:bc:9e:81:6c:81:33:6b:3f:3d:72:45:8a: c5:ff:6f:ff:a6:65:73:2d:ed:38:1d:1a:a2:50:6c:f6:df:6e: 58:09:e1:87:76:1a:ff:3d:08:14:4a:a0:00:e9:bd:19:0f:13: 10:7a:7b:4e:ae:2b:9f:b2:cf:c4:b7:7e:c7:ad:3f:9a:0a:cf: 6a:c6:5a:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ+YfIKI7hz+jSzI6wOoDU71MK4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFFNTE2 QTU5QjVFNzAeFw0yNTA4MjIyMTM2NDZaFw0yNTA4MjYwNTI3NDZaMDMxMTAvBgNV BAMTKDcyMTE3RTQ5NzMyRkE4MDY3NzIzMUVEMkRDRkQxMTEwMjJGRDUwMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJiltM+1EyHXGA5UV1VWZV9Ps9 UIoLLEPmR8JD6NFfuSFwNMjvBhg/4ohZQLLcbXA2Qf0Bc7J3BU+WZ6nussl0faPj AVUHwlB2W14YJkwlRxLIhKhB9eGOIVmPw1CVZlATrjXwAsBBOlKL/eYBr6E1zfzR as6qExuaiXwn0l2yhAY/fkz9dLwa5BxDQW2ADk/ubyjaKsQZiF0hIc9jgsThlhxu u8rb2ebyNz/+/YkeY9xS2NM6cNHTffSuuz24NGle2dstmbetnxDSI5e5nDT4wRzl 77i7GrEhVL6tBJvk5BaxGFbtM4bsr4ChqtdY/1+HZJ8TbN/w7M8IFb2MuyEHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUchF+SXMvqAZ3Ix7S3P0RECL9UDMwHwYDVR0j BBgwFoAUaf+a80ERzUY37YpstDUeUWpZtecwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjQwYWJlNi04ZGVlLTRiZDEtODE0Yy0yYWYzMWEzZDljZGYvMC82OUZGOUFGMzQx MTFDRDQ2MzdFRDhBNkNCNDM1MUU1MTZBNTlCNUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFFNTE2QTU5 QjVFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY0MGFiZTYtOGRlZS00YmQxLTgx NGMtMmFmMzFhM2Q5Y2RmLzAvNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFF NTE2QTU5QjVFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK+dOTtVfcR4lftelQyjGJUEy3i/QZPrf5at SgpMTqeyJQg8xZf3/Z7weNi60qfxGYJkBAPH96QrevqYtY97ZK7Bl6LuLfSGhNgr gvZ3lkTFQZoPhwFWEp7nO9SZ7wzrW/d61n9wiOJB0tWUqZ5Lh6o8vUD0S0XBIIva dvGayMqesE4i69OJk2SO/hd4wjGV4kpE8pPIUs92YFof+yXI2UA+NdmSmcdMnqoJ rftwatb0CKV1MbmdNgqtZryegWyBM2s/PXJFisX/b/+mZXMt7TgdGqJQbPbfblgJ 4Yd2Gv89CBRKoADpvRkPExB6e06uK5+yz8S3fsetP5oKz2rGWgc= -----END CERTIFICATE-----Generated at Sat Aug 23 11:56:36 2025 by rpki-client