$ rpki-client -vvf repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft File: 69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft (raw, json) Hash identifier: OoovosMijHpRCz7CqqELFAGNRg9ZQSbdcE9wBBPGvFo= Subject key identifier: FA:3A:0A:A0:20:16:C3:2A:68:52:EB:7C:3A:86:8D:5F:5C:F1:81:14 Authority key identifier: 69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7 Certificate issuer: /CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7 Certificate serial: 0CEC86323FF8F886A27DF987773EDFC36B5F19B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft Manifest number: 01CD Signing time: Fri 27 Jun 2025 13:21:43 +0000 Manifest this update: Fri 27 Jun 2025 13:16:43 +0000 Manifest next update: Tue 01 Jul 2025 00:09:43 +0000 Files and hashes: 1: 69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl (hash: 73X1kQABxkDl3Zi5YpEzDxd7ZgElIR1CrD8U5Qb3o+g=) 2: 3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa (hash: ZuytWq4PWrbArnGlNtL3kdcVQRo24jWxli7Scbb4h7Y=) 3: 3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa (hash: k338Lmr2nBFKtOYrTW3s+aTUS4KKRTx1cKwMsZkav7w=) 4: 3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa (hash: heu4e8sIQY0GrzrCMXaxDxeM2U05OsH3YIXr+Hp2kfg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 00:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ec:86:32:3f:f8:f8:86:a2:7d:f9:87:77:3e:df:c3:6b:5f:19:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7 Validity Not Before: Jun 27 13:16:43 2025 GMT Not After : Jul 1 00:09:43 2025 GMT Subject: CN=FA3A0AA02016C32A6852EB7C3A868D5F5CF18114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a7:5a:82:4f:ce:de:3c:7e:20:25:c2:4e:96: ca:a8:50:5d:c1:a8:95:d7:98:80:75:52:56:ac:d4: 67:a7:58:84:17:b1:3d:e6:b2:c5:23:66:2f:10:a2: 10:e8:6f:58:56:7f:9d:5b:1d:89:da:44:8c:c4:6e: 0f:a6:0e:e3:cc:a4:25:dc:01:37:3c:38:fb:0d:ee: ca:ca:aa:c7:94:80:2e:28:79:a3:18:08:a7:f4:40: 04:d5:97:48:72:33:af:54:6c:4b:91:d0:dc:79:78: 65:4c:45:50:34:da:ab:b1:7d:94:8a:26:d3:c2:35: 24:fd:fe:a1:46:9a:c1:02:54:cc:0c:56:35:05:d6: 10:40:ad:9e:85:d2:df:2a:9d:a8:d8:ef:af:60:4c: b5:ab:98:96:1d:96:ae:26:58:b1:73:96:bf:da:f4: 9a:2f:8c:9d:d9:7c:74:57:4b:9d:1c:1c:34:41:1a: 90:57:76:69:9c:44:58:e3:5a:51:54:cf:b5:ed:a4: 10:19:9d:97:b7:b0:38:ea:2e:e5:c1:22:98:0d:81: 01:d3:c6:24:a0:d8:00:d7:d7:9c:a3:db:6d:19:53: ac:6f:51:e2:18:a0:3f:42:ba:8e:1e:52:cd:ed:b2: 96:84:57:3e:94:1c:1c:f8:d6:ea:e9:6d:db:2f:31: 3b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3A:0A:A0:20:16:C3:2A:68:52:EB:7C:3A:86:8D:5F:5C:F1:81:14 X509v3 Authority Key Identifier: keyid:69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:bf:bf:68:9b:12:c8:cc:db:c4:c2:2b:4d:4d:f0:f3:21:a6: 23:39:72:93:c8:46:57:e0:1e:58:0d:d0:2f:41:ef:13:9b:1a: 32:75:7e:99:f5:66:c2:18:54:2e:bf:49:a3:dd:83:bf:97:86: 69:8f:aa:5a:8b:8a:bf:ec:87:c7:9a:91:0e:01:38:ca:03:72: 55:0f:39:bd:98:ca:2c:0c:88:c9:1c:c3:72:2e:88:07:7a:b8: e6:1f:f1:7e:4c:df:72:21:21:cd:d8:5d:3d:e2:f0:57:b4:30: 14:af:77:3d:e1:c7:71:f2:e0:37:d3:08:cb:a8:b5:f0:bf:06: a4:56:41:b9:eb:58:36:a8:86:1c:97:60:bb:6a:cb:5d:7b:49: 6d:55:8b:0e:36:fa:fd:4a:80:49:b6:db:d8:b4:49:29:15:7c: fb:01:97:ed:8b:b4:c1:53:bc:e9:6e:c6:01:24:22:ef:c3:d5: 0d:b9:69:a5:22:fd:d2:25:7f:f2:f2:61:77:e2:1e:3d:01:37: 91:3c:70:32:1d:c4:c1:32:d3:93:29:7d:4b:9a:c6:ef:c5:0b: ea:c5:48:9d:89:bc:aa:76:ae:3a:d4:6a:8e:c1:a0:d4:02:05: a0:8d:f0:95:e8:10:0b:c6:68:64:69:22:e6:97:da:76:0c:a8: d2:30:b5:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDOyGMj/4+IaiffmHdz7fw2tfGbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFFNTE2 QTU5QjVFNzAeFw0yNTA2MjcxMzE2NDNaFw0yNTA3MDEwMDA5NDNaMDMxMTAvBgNV BAMTKEZBM0EwQUEwMjAxNkMzMkE2ODUyRUI3QzNBODY4RDVGNUNGMTgxMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcp1qCT87ePH4gJcJOlsqoUF3B qJXXmIB1Ulas1GenWIQXsT3mssUjZi8QohDob1hWf51bHYnaRIzEbg+mDuPMpCXc ATc8OPsN7srKqseUgC4oeaMYCKf0QATVl0hyM69UbEuR0Nx5eGVMRVA02quxfZSK JtPCNST9/qFGmsECVMwMVjUF1hBArZ6F0t8qnajY769gTLWrmJYdlq4mWLFzlr/a 9JovjJ3ZfHRXS50cHDRBGpBXdmmcRFjjWlFUz7XtpBAZnZe3sDjqLuXBIpgNgQHT xiSg2ADX15yj220ZU6xvUeIYoD9Cuo4eUs3tspaEVz6UHBz41urpbdsvMTspAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+joKoCAWwypoUut8OoaNX1zxgRQwHwYDVR0j BBgwFoAUaf+a80ERzUY37YpstDUeUWpZtecwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjQwYWJlNi04ZGVlLTRiZDEtODE0Yy0yYWYzMWEzZDljZGYvMC82OUZGOUFGMzQx MTFDRDQ2MzdFRDhBNkNCNDM1MUU1MTZBNTlCNUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFFNTE2QTU5 QjVFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY0MGFiZTYtOGRlZS00YmQxLTgx NGMtMmFmMzFhM2Q5Y2RmLzAvNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFF NTE2QTU5QjVFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGu/v2ibEsjM28TCK01N8PMhpiM5cpPIRlfg HlgN0C9B7xObGjJ1fpn1ZsIYVC6/SaPdg7+XhmmPqlqLir/sh8eakQ4BOMoDclUP Ob2YyiwMiMkcw3IuiAd6uOYf8X5M33IhIc3YXT3i8Fe0MBSvdz3hx3Hy4DfTCMuo tfC/BqRWQbnrWDaohhyXYLtqy117SW1Viw42+v1KgEm229i0SSkVfPsBl+2LtMFT vOluxgEkIu/D1Q25aaUi/dIlf/LyYXfiHj0BN5E8cDIdxMEy05MpfUuaxu/FC+rF SJ2JvKp2rjrUao7BoNQCBaCN8JXoEAvGaGRpIuaX2nYMqNIwtZA= -----END CERTIFICATE-----Generated at Sun Jun 29 18:07:49 2025 by rpki-client