$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft File: 69FEA3D523BC4635AE385A6D91412834159FF34B.mft (raw, json) Hash identifier: vJY/JnsfW+rymaBk62r6sAC4Qa+jhQVhBslNfc2HRt4= Subject key identifier: CD:8F:B2:A2:90:A4:A0:C0:DD:45:77:14:79:1F:CA:FC:65:D9:3A:EA Authority key identifier: 69:FE:A3:D5:23:BC:46:35:AE:38:5A:6D:91:41:28:34:15:9F:F3:4B Certificate issuer: /CN=69FEA3D523BC4635AE385A6D91412834159FF34B Certificate serial: 4E3DF8E4EC98394764B50D5D92F246AA97D77AC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft Manifest number: 99 Signing time: Sun 29 Jun 2025 09:31:56 +0000 Manifest this update: Sun 29 Jun 2025 09:26:56 +0000 Manifest next update: Wed 02 Jul 2025 20:29:56 +0000 Files and hashes: 1: 3136302e32322e3231372e302f32342d3234203d3e20313532383431.roa (hash: 2H9ugvO1mqNF5HVzGPvvJyo9xLTxDYsuZlPEZxpIFQg=) 2: 69FEA3D523BC4635AE385A6D91412834159FF34B.crl (hash: 4LRfw2NCGnOb7syJjXNoNUAd5emqi+9AfJDwx9K5oUg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.crl rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 20:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:3d:f8:e4:ec:98:39:47:64:b5:0d:5d:92:f2:46:aa:97:d7:7a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69FEA3D523BC4635AE385A6D91412834159FF34B Validity Not Before: Jun 29 09:26:56 2025 GMT Not After : Jul 2 20:29:56 2025 GMT Subject: CN=CD8FB2A290A4A0C0DD457714791FCAFC65D93AEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:35:03:7a:a1:32:00:97:10:00:c8:62:94:6c: 01:1d:c1:54:c2:7c:c4:a6:2f:b7:82:14:69:99:13: 77:11:fe:58:4a:05:4e:9b:03:6b:1e:09:d3:76:f4: 92:f7:ed:50:fa:83:9d:7f:ef:dd:d2:72:c3:70:c0: 2c:f5:02:91:a3:ef:45:85:7b:33:65:74:da:6a:e4: 87:b5:91:19:5a:01:e8:53:a4:73:0e:82:58:de:a5: d6:9d:a2:8c:c8:8b:4b:c7:bf:6f:af:bf:18:2b:16: f2:a8:96:1a:a1:88:18:74:e2:55:35:2d:38:8d:1a: f2:8a:6b:5a:80:9c:35:1f:3a:48:c3:64:b6:e1:5f: 6f:fb:9d:e7:ef:6a:5d:31:33:d6:9b:b2:71:10:47: e4:02:f2:5b:fa:75:27:7a:fc:4f:74:42:0e:e5:2f: ee:13:96:37:5b:b0:71:fa:36:5f:60:a6:a9:6e:db: 99:9b:2a:7a:60:84:ef:50:20:b6:09:df:8f:c6:c9: cc:6f:05:9a:a1:08:8f:c7:92:87:a4:ad:9c:49:24: 1e:78:a3:f1:9e:8f:96:47:2b:8a:25:9f:f1:3f:ef: 51:ec:9c:59:5c:b1:ba:68:c4:55:04:19:3d:d4:c7: 91:16:52:18:aa:bd:4e:3d:09:58:3e:0e:18:9d:04: 67:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8F:B2:A2:90:A4:A0:C0:DD:45:77:14:79:1F:CA:FC:65:D9:3A:EA X509v3 Authority Key Identifier: keyid:69:FE:A3:D5:23:BC:46:35:AE:38:5A:6D:91:41:28:34:15:9F:F3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:68:df:ac:84:75:b2:62:69:93:5b:30:e6:7a:40:72:93:a3: c4:32:3c:fa:52:24:68:8b:50:d5:05:7e:6f:4d:9d:03:8d:c3: 25:96:bd:5f:5f:cf:30:ad:a3:0b:1f:00:9f:5f:63:59:ca:b4: e5:df:4e:24:46:7b:d9:f7:9d:83:f4:43:05:66:e0:70:9f:ca: b1:7f:dd:7c:c4:1f:a4:c7:07:79:35:51:06:1d:a7:ce:f0:cf: e7:84:f6:a4:59:18:70:09:e3:64:dc:c8:4c:01:43:5c:33:71: 51:b9:b4:99:1b:b2:54:02:93:55:d9:a4:8b:c9:b9:a3:39:22: 1f:aa:7d:5a:16:90:ce:29:25:c4:e4:49:12:c4:3b:7e:c4:ac: f3:5a:62:fd:06:f5:51:fc:a3:0f:27:30:03:ad:8c:04:14:7e: ec:4b:e0:4b:b5:ae:63:7e:50:53:7b:be:58:ae:b4:f8:d8:f0: b3:0b:c5:5b:3e:9f:b8:05:49:36:3a:ad:1b:34:57:be:cc:93: c7:90:79:05:1e:13:aa:88:f6:bf:34:68:5f:70:39:94:03:2e: 22:31:54:c5:62:d0:61:57:b7:c8:b0:98:cc:47:08:6d:36:ad: 62:7e:7e:9e:e3:3a:92:74:e5:7e:e6:93:ad:8d:4b:4c:1f:4a: 3c:cf:fa:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTj345OyYOUdktQ1dkvJGqpfXesgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4MzQx NTlGRjM0QjAeFw0yNTA2MjkwOTI2NTZaFw0yNTA3MDIyMDI5NTZaMDMxMTAvBgNV BAMTKENEOEZCMkEyOTBBNEEwQzBERDQ1NzcxNDc5MUZDQUZDNjVEOTNBRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkNQN6oTIAlxAAyGKUbAEdwVTC fMSmL7eCFGmZE3cR/lhKBU6bA2seCdN29JL37VD6g51/793ScsNwwCz1ApGj70WF ezNldNpq5Ie1kRlaAehTpHMOgljepdadoozIi0vHv2+vvxgrFvKolhqhiBh04lU1 LTiNGvKKa1qAnDUfOkjDZLbhX2/7nefval0xM9absnEQR+QC8lv6dSd6/E90Qg7l L+4TljdbsHH6Nl9gpqlu25mbKnpghO9QILYJ34/GycxvBZqhCI/HkoekrZxJJB54 o/Gej5ZHK4oln/E/71HsnFlcsbpoxFUEGT3Ux5EWUhiqvU49CVg+DhidBGenAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzY+yopCkoMDdRXcUeR/K/GXZOuowHwYDVR0j BBgwFoAUaf6j1SO8RjWuOFptkUEoNBWf80swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTdkNzM4ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMC82OUZFQTNENTIz QkM0NjM1QUUzODVBNkQ5MTQxMjgzNDE1OUZGMzRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4MzQxNTlG RjM0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzAvNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4 MzQxNTlGRjM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVo36yEdbJiaZNbMOZ6QHKTo8QyPPpSJGiL UNUFfm9NnQONwyWWvV9fzzCtowsfAJ9fY1nKtOXfTiRGe9n3nYP0QwVm4HCfyrF/ 3XzEH6THB3k1UQYdp87wz+eE9qRZGHAJ42TcyEwBQ1wzcVG5tJkbslQCk1XZpIvJ uaM5Ih+qfVoWkM4pJcTkSRLEO37ErPNaYv0G9VH8ow8nMAOtjAQUfuxL4Eu1rmN+ UFN7vliutPjY8LMLxVs+n7gFSTY6rRs0V77Mk8eQeQUeE6qI9r80aF9wOZQDLiIx VMVi0GFXt8iwmMxHCG02rWJ+fp7jOpJ05X7mk62NS0wfSjzP+tE= -----END CERTIFICATE-----Generated at Mon Jun 30 22:30:38 2025 by rpki-client