$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft File: 69FEA3D523BC4635AE385A6D91412834159FF34B.mft (raw, json) Hash identifier: Saj2xnC+sa3ni/+NSP6NziDzLCKJNcYzNvdKRE5uUpg= Subject key identifier: CB:59:07:85:C9:0E:56:22:E6:32:92:06:64:DF:4D:AC:41:50:2C:48 Authority key identifier: 69:FE:A3:D5:23:BC:46:35:AE:38:5A:6D:91:41:28:34:15:9F:F3:4B Certificate issuer: /CN=69FEA3D523BC4635AE385A6D91412834159FF34B Certificate serial: 28055A5451A7A6BB50A5004B7EA3E8674F387BB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft Manifest number: B1 Signing time: Sat 23 Aug 2025 02:22:02 +0000 Manifest this update: Sat 23 Aug 2025 02:17:02 +0000 Manifest next update: Tue 26 Aug 2025 14:21:02 +0000 Files and hashes: 1: 69FEA3D523BC4635AE385A6D91412834159FF34B.crl (hash: qjeoLO620DlfISFC783z/kK4OOwaAxgOVTY7Vogtvyc=) 2: 3136302e32322e3231372e302f32342d3234203d3e20313532383431.roa (hash: 2H9ugvO1mqNF5HVzGPvvJyo9xLTxDYsuZlPEZxpIFQg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.crl rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:05:5a:54:51:a7:a6:bb:50:a5:00:4b:7e:a3:e8:67:4f:38:7b:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69FEA3D523BC4635AE385A6D91412834159FF34B Validity Not Before: Aug 23 02:17:02 2025 GMT Not After : Aug 26 14:21:02 2025 GMT Subject: CN=CB590785C90E5622E632920664DF4DAC41502C48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7d:1f:de:ea:fd:14:21:93:be:88:74:ae:c5: 2f:0c:78:17:fd:f5:66:00:5f:8e:82:15:4a:2f:c2: c2:ff:f4:26:8b:e0:26:6f:19:b0:fe:89:ec:12:19: 18:9a:6e:31:58:e5:6e:4c:0a:a0:2f:f9:3a:52:2e: 78:ed:0e:a9:af:2f:1f:60:e4:db:09:58:22:dd:9d: 74:8b:d6:e7:8e:e1:b6:96:a9:31:b3:65:8c:f9:95: c1:a2:41:38:ae:2a:68:7d:c4:5e:ea:4c:f8:49:00: 00:54:20:09:24:72:57:38:d3:05:82:7a:3c:fa:e7: cd:9a:2a:8d:39:4c:72:9c:de:5b:fc:f6:9b:3a:57: 54:44:44:5b:32:4a:bd:b6:84:1c:87:cd:4f:f9:f2: 8b:63:73:78:96:06:b9:bd:18:5d:ce:5c:48:ba:74: 98:8a:f5:0f:d0:96:c0:48:72:76:80:32:da:6b:91: 43:2e:da:9c:c8:20:8d:df:6a:1d:ba:b2:d6:a5:99: e0:ca:cd:d3:c4:6c:0b:84:92:82:33:f5:b5:d5:fe: a5:b7:35:db:66:b9:f7:4c:87:b1:d4:d2:44:7a:aa: 59:c4:49:1a:0c:fe:db:ad:ee:81:59:0e:cc:18:cc: a5:f5:65:3c:3a:f5:67:2d:a1:33:41:db:18:4a:fb: 6b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:59:07:85:C9:0E:56:22:E6:32:92:06:64:DF:4D:AC:41:50:2C:48 X509v3 Authority Key Identifier: keyid:69:FE:A3:D5:23:BC:46:35:AE:38:5A:6D:91:41:28:34:15:9F:F3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:7a:7f:fb:64:f1:06:94:14:d4:57:4a:cd:c9:1d:7b:dd:6d: 06:4f:85:c8:a6:ca:46:14:24:cd:65:60:49:1e:a7:73:07:a8: 2a:73:2b:b9:af:6e:41:e9:44:e9:ea:09:17:6c:6c:78:f3:fe: ef:2a:3d:81:56:c7:27:5f:c9:78:06:3d:c5:24:16:ca:15:89: 71:a4:c5:8b:33:c0:a3:5d:70:82:ab:5e:17:b0:05:df:e3:db: 67:19:9f:fb:c9:50:fd:ec:fa:e2:b3:53:e9:3e:c9:b3:e6:0e: 52:fe:dc:d7:5c:e0:f5:1c:8f:c4:72:30:99:ac:46:e8:f2:a6: 1e:f5:73:e3:d6:67:9a:c5:af:10:73:83:00:16:5a:5c:e3:0a: 2d:bd:3d:e6:d1:b7:57:97:6e:d0:d1:e3:f9:16:21:14:cc:ca: 95:34:80:02:7a:b5:c8:cb:8b:01:1d:1f:f4:87:9c:b2:69:57: 39:be:a1:c0:2f:a3:1a:81:96:d9:a4:b1:94:b8:41:08:77:cf: 7d:1a:ac:e1:32:c2:fd:d8:0d:85:17:3e:8b:ed:4f:c5:fd:1e: 76:af:ee:7a:48:55:06:45:f9:55:07:98:14:c3:07:cc:4d:f2: a8:1f:51:7b:f2:36:52:b8:ca:1a:34:c5:7b:41:b6:09:1a:ef: 93:20:3a:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKAVaVFGnprtQpQBLfqPoZ084e7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4MzQx NTlGRjM0QjAeFw0yNTA4MjMwMjE3MDJaFw0yNTA4MjYxNDIxMDJaMDMxMTAvBgNV BAMTKENCNTkwNzg1QzkwRTU2MjJFNjMyOTIwNjY0REY0REFDNDE1MDJDNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2fR/e6v0UIZO+iHSuxS8MeBf9 9WYAX46CFUovwsL/9CaL4CZvGbD+iewSGRiabjFY5W5MCqAv+TpSLnjtDqmvLx9g 5NsJWCLdnXSL1ueO4baWqTGzZYz5lcGiQTiuKmh9xF7qTPhJAABUIAkkclc40wWC ejz6582aKo05THKc3lv89ps6V1RERFsySr22hByHzU/58otjc3iWBrm9GF3OXEi6 dJiK9Q/QlsBIcnaAMtprkUMu2pzIII3fah26stalmeDKzdPEbAuEkoIz9bXV/qW3 NdtmufdMh7HU0kR6qlnESRoM/tut7oFZDswYzKX1ZTw69WctoTNB2xhK+2vPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy1kHhckOViLmMpIGZN9NrEFQLEgwHwYDVR0j BBgwFoAUaf6j1SO8RjWuOFptkUEoNBWf80swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTdkNzM4ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMC82OUZFQTNENTIz QkM0NjM1QUUzODVBNkQ5MTQxMjgzNDE1OUZGMzRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4MzQxNTlG RjM0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzAvNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4 MzQxNTlGRjM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACl6f/tk8QaUFNRXSs3JHXvdbQZPhcimykYU JM1lYEkep3MHqCpzK7mvbkHpROnqCRdsbHjz/u8qPYFWxydfyXgGPcUkFsoViXGk xYszwKNdcIKrXhewBd/j22cZn/vJUP3s+uKzU+k+ybPmDlL+3Ndc4PUcj8RyMJms Rujyph71c+PWZ5rFrxBzgwAWWlzjCi29PebRt1eXbtDR4/kWIRTMypU0gAJ6tcjL iwEdH/SHnLJpVzm+ocAvoxqBltmksZS4QQh3z30arOEywv3YDYUXPovtT8X9Hnav 7npIVQZF+VUHmBTDB8xN8qgfUXvyNlK4yho0xXtBtgka75MgOvw= -----END CERTIFICATE-----Generated at Sun Aug 24 05:41:01 2025 by rpki-client